Non-profit security reports

D

DECO – Associação Portuguesa para a Defesa do Consumidor

deco.pt

51

DECO is a prominent Portuguese non-profit association dedicated to consumer protection, advocacy, and education. The website reflects a mature digital presence with comprehensive content targeting Portuguese consumers and stakeholders interested in consumer rights, energy, and financial protection. The organization maintains a strong market position as a trusted authority in consumer defense, supported by clear branding and consistent messaging. Technically, the site is built on WordPress with a modern plugin ecosystem, including event management and user engagement tools, and integrates Google Analytics and Site Kit for performance monitoring. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and user interaction safeguards such as reCAPTCHA and exit notifications. No critical vulnerabilities or compliance gaps were detected, indicating a well-maintained and secure platform. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and related privacy regulations.

E

Ecoteca

ecoteca.pt

48

Ecoteca.pt is a Portuguese online directory dedicated to environmental education initiatives, providing a platform for public access to various projects developed by multiple entities. The website targets a general audience interested in environmental sustainability and education, offering categorized filtering by thematic areas, entities, content types, sustainable development goals, and geographic scope. The business operates in the non-profit sector with a focus on environmental education in Portugal. Technically, the website employs modern front-end technologies including HTML5, CSS3, JavaScript, and Swiper.js for interactive elements, along with Google Fonts for typography. The site is mobile optimized and presents a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure; however, it lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. No contact information or incident response channels are explicitly provided, which may impact user trust and compliance. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices to improve trust and compliance.

A

Associação Empresarial da Póvoa de Varzim

aepvz.pt

45

Associação Empresarial da Póvoa de Varzim is a historic regional business association in Portugal, founded in 1893, providing support, training, events, and partnership services to local businesses and entrepreneurs. The website reflects a well-structured, content-rich platform targeting the regional business community with clear contact information and social media presence. Technically, the site uses a modern but straightforward tech stack including jQuery, Bootstrap, and various UI components, integrated with a membership management platform (Liga-te.org). Security posture is solid with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site is trustworthy, professional, and compliant with privacy regulations, supporting its legitimacy and business credibility.

A

Associação Empresarial de Felgueiras

aef.pt

44

Associação Empresarial de Felgueiras (AEF) is a regional non-profit business association based in Portugal, focused on supporting local businesses through a variety of services including administrative, fiscal, legal, training, and internationalization support. The organization actively manages multiple projects and provides a platform for business networking and development. The website reflects a mature digital presence built on WordPress with modern plugins and design elements, targeting local entrepreneurs and companies. The site is well-structured, mobile-optimized, and provides clear contact information and policy disclosures, although some compliance mechanisms like cookie consent are not fully implemented. Security posture is adequate with HTTPS and modern libraries, but lacks explicit security headers and incident response policies. Overall, the domain registration and website content are consistent and trustworthy, indicating a legitimate and established business association.

A

ACRAL - Associação do Comércio e Serviços da Região do Algarve

acral.pt

52

ACRAL is a regional non-profit association representing commerce and services in the Algarve region of Portugal. The organization provides a variety of services including member advantages, training, project support, events, and advocacy for local businesses. The website reflects a well-established regional presence with consistent branding and clear communication targeted at retailers and service providers in the Algarve. Technically, the site is built on Joomla CMS with a modern tech stack including jQuery, Bootstrap, and various UI libraries, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and email cloaking, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is addressed with visible privacy and cookie policies and a consent mechanism. Overall, the site is professional, trustworthy, and suitable for its audience.

C

Cáritas Portuguesa

caritas.pt

38

Cáritas Portuguesa is a well-established non-profit organization in Portugal focused on social intervention, institutional development, international projects, and community support. The website serves as a platform to communicate their mission, programs, and opportunities for collaboration such as volunteering and donations. The organization maintains a consistent brand presence with active social media links and a professional website design. Technically, the site is built on WordPress with popular plugins like WooCommerce and BuddyPress, indicating a mature digital infrastructure. The site is mobile optimized and includes SEO best practices via Yoast SEO. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. No critical vulnerabilities or blocking mechanisms were detected, and the site content is safe for general audiences. Overall, the website reflects a credible and professional non-profit entity with moderate to good technical and security maturity.

Český červený kříž is a well-established national non-profit humanitarian organization in the Czech Republic focused on providing first aid training, blood donation services, social activities, and humanitarian aid. The website serves as an official portal offering comprehensive information, news, event planning, and educational resources targeted at the general public, donors, volunteers, and partner institutions. The organization maintains a strong market position as a trusted entity in the humanitarian sector with a large operational scale. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and integrates Google Analytics and Facebook Pixel for user tracking and marketing. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are lacking and no explicit security or incident response policies are published. WHOIS data is not publicly available due to EURid privacy policies, but the website content and branding strongly support legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Beira Amiga is a small non-profit association based in Portugal focused on consumer defense and legal support. The organization collaborates with local government and legal entities to promote consumer rights and awareness. Their website serves as an informational and community engagement platform, primarily targeting consumers and legal professionals in the Viseu region. The site is built on WordPress and uses common JavaScript libraries such as jQuery and bxSlider for UI elements. While the site is functional and provides clear contact information, it lacks key compliance documents such as privacy and cookie policies, which are critical for GDPR compliance. Security posture is basic with no advanced security headers or DNSSEC enabled, though HTTPS is used throughout. No signs of tracking or advertising scripts were found, indicating minimal user tracking.

UGC - União Geral de Consumidores is a Portuguese non-profit organization dedicated to consumer rights advocacy, debt counseling, and education on essential public services. The website provides informational content including podcasts, news, and downloadable brochures aimed at Portuguese consumers. The organization holds public utility status and collaborates with governmental consumer protection entities, reinforcing its legitimacy and trustworthiness. Technically, the website uses legacy JavaScript libraries and a custom PHP-based CMS, with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but mixed content risks and outdated libraries present. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but could improve technical and privacy aspects.

K

Kárpátok Alapítvány - Magyarország

karpatokalapitvany.hu

53

Kárpátok Alapítvány - Magyarország is a small-sized non-profit foundation focused on community development, social inclusion, and education in the Carpathian region spanning five countries. The organization operates primarily through donations, grants, and partnerships, targeting disadvantaged communities and civil organizations. The website is professionally designed using Drupal 8 CMS, with good mobile optimization and clear navigation. It provides comprehensive information about its programs, strategic goals, and partners, enhancing its credibility and trustworthiness. However, the site lacks published privacy and cookie policies, which impacts GDPR compliance and privacy posture. Security-wise, HTTPS is enabled, but no explicit security headers were detected, and no incident response or vulnerability disclosure information is available. The domain registration data aligns well with the organization's claims, indicating legitimacy. Overall, the website is a reliable and professional platform for the foundation's mission but should improve privacy and security disclosures to enhance compliance and user trust.

A

Autonómia Alapítvány

autonomia.hu

41

Autonómia Alapítvány is a well-established Hungarian non-profit organization focused on strengthening civil society and supporting marginalized groups, particularly Roma integration. Operating since 1990, it delivers community development programs, advocacy, and international cooperation. The website reflects a professional and consistent brand presence with clear contact information and social media integration. Technically, the site is built on WordPress with modern libraries such as jQuery and Bootstrap, and integrates Google Maps and analytics tools. Security posture is adequate with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and serves its audience effectively.

Közösségfejlesztők Egyesülete is a Hungarian non-profit organization dedicated to community development, social programs, and professional support within civil society and local development sectors. The website serves as an informational and resource platform for community developers and related stakeholders, offering training, publications, and event information. The organization has an established presence since 2014, reflected in the domain age and content maturity. Technically, the website is built on WordPress with a modern tech stack including jQuery and standard JavaScript libraries. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with privacy and cookie policies present, though a cookie consent mechanism is missing. Overall, the website is professional and trustworthy, serving its niche audience effectively.

H

Hrdí na rodinu

hrdinarodinu.sk

43

Hrdí na rodinu is a Slovak non-profit organization focused on promoting traditional family values through events such as the National March 'Hrdí na rodinu'. The website serves as an informational and promotional platform for their annual event, providing program details, partner information, and ways to get involved. The organization targets individuals and families who support the traditional family model in Slovakia. Technically, the website is built on WordPress using Elementor, with standard web technologies and moderate performance. Security posture is adequate with HTTPS and some security plugin presence, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

O

Objectivos Desenvolvimento Sustentável

ods.pt

52

The website ods.pt is a Portuguese non-profit platform dedicated to promoting the United Nations Sustainable Development Goals (ODS) and the 2030 Agenda. It serves as an educational and advocacy resource primarily targeting Portuguese-speaking businesses and organizations interested in sustainability. The site is affiliated with BCSD Portugal and offers masterclasses, case studies, and resources to integrate sustainability into corporate strategies. The market position is niche, focusing on sustainability awareness and corporate engagement within Portugal. Technically, the website is built on WordPress using the Elementor page builder, enhanced with SEO plugins like Rank Math and tracking via Google Analytics. The site demonstrates moderate performance and good mobile optimization, with a clean and professional design. However, some accessibility features are basic, and there is room for improvement in SEO and security headers. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data or vulnerable libraries. However, it lacks important security headers and does not provide a security.txt or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Business credibility is strong with clear organizational information and trust signals such as official UN imagery and structured data. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security practices to improve its risk posture and user trust.

S

Sustainable Development Solutions Network

unsdsn.org

63

The Sustainable Development Solutions Network (SDSN) is a globally recognized non-profit organization operating under the auspices of the United Nations Secretary-General. It mobilizes a vast network of over 2,000 universities, think tanks, and research institutions worldwide to promote and implement solutions aligned with the Sustainable Development Goals (SDGs) and the Paris Agreement. The organization focuses on education, research, policy analysis, and fostering global cooperation to address critical sustainable development challenges. Its market position is strong, supported by a large membership base and clear UN affiliation. Technically, the SDSN website is built using modern technologies such as Astro and is hosted on Cloudflare Pages, ensuring fast performance and excellent mobile optimization. The site employs Google Tag Manager and Google Analytics for tracking and marketing purposes, reflecting a mature digital infrastructure. The website is well-designed, accessible, and SEO optimized, providing a professional user experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and shows no signs of vulnerabilities or exposed sensitive data. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are areas for improvement. The WHOIS data is unavailable due to privacy protection, which is justified given the organization's nature. Overall, the security posture is strong but could benefit from enhanced privacy compliance features. The overall risk assessment is low, with the website demonstrating high professionalism, trustworthiness, and compliance with best practices. Strategic recommendations include implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further enhance trust and compliance.

Fundação "la Caixa" is a well-established non-profit foundation based in Portugal with over a century of history dedicated to social and cultural initiatives. The website reflects a professional and consistent brand presence, targeting a general audience interested in social welfare and cultural projects. The foundation operates with a large organizational size and maintains a reputable market position within the non-profit sector. Technically, the website is built on the Liferay CMS platform using modern technologies such as React and integrates widely used analytics and marketing tools like Google Analytics and Google Tag Manager. The site is mobile optimized and demonstrates good SEO and accessibility practices, although accessibility could be further improved. Security-wise, the website enforces HTTPS, uses security headers, and implements a cookie consent mechanism, indicating a good security posture. However, it lacks explicit privacy policies, terms of service, and incident response information, which are recommended for compliance and transparency. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

H

Heidelberg Materials

quarrylifeaward.cz

64

Quarry Life Award is a scientific and educational competition organized by Heidelberg Materials to promote biodiversity awareness in mining sites. The website is professionally designed using Drupal CMS and modern frontend technologies, providing rich content primarily in Czech. Contact information and privacy policies are clearly presented, supporting GDPR compliance. Security posture is good with HTTPS enforced, though some security headers are missing and no incident response info is provided. The absence of WHOIS data raises questions about domain registration legitimacy, but the strong branding and partner associations mitigate concerns. Overall, the site is trustworthy and well-maintained for its educational purpose.

T

The Sigrid Rausing Trust

sigrid-rausing-trust.org

62

The Sigrid Rausing Trust is a well-established philanthropic grant-making foundation based in London, founded in 1995. It focuses on supporting human rights, open societies, and environmental causes globally. The website reflects a professional and consistent brand image, targeting non-profit organizations and social causes. The Trust operates with a significant endowment and a clear mission to fund impactful programs. Technically, the website is built on WordPress with modern web technologies including jQuery, Google Tag Manager, and cookie consent tools, ensuring a good user experience and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit incident response policies are absent. WHOIS data is privacy protected, which is typical and justified for this type of organization. Overall, the website is trustworthy, compliant with privacy regulations, and professionally maintained.

P

Porticus Amsterdam C.V.

porticus.com

66

Porticus Amsterdam C.V. is a well-established philanthropic organization founded in 1996, focused on creating a just and sustainable future where human dignity flourishes. The organization operates globally with a network of offices and partners, emphasizing social and environmental impact through grant-making and community resilience programs. Their website reflects a mature digital presence with comprehensive content, professional design, and clear navigation aimed at partners, NGOs, and the public interested in social change. Technically, the website is built on modern frameworks such as Next.js and React, with Umbraco CMS managing content. It employs Matomo analytics, indicating a privacy-conscious approach to user tracking. The site is mobile-optimized and accessible, with good SEO practices and performance. From a security perspective, the site enforces HTTPS, includes standard security headers, and has a domain registration consistent with the organization's profile. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. Overall, the website presents a low-risk profile with strong privacy compliance and business credibility. Strategic improvements could include publishing security policies and enabling DNSSEC to further strengthen security posture.

N

Norvég Civil Támogatási Alap

norvegcivilalap.hu

51

The website norvegcivilalap.hu represents the Norwegian Civil Support Fund, a non-profit organization supporting civil society projects in Hungary since 2008. The site provides information about grant programs, supported projects, news, and events, targeting Hungarian NGOs and civil society stakeholders. The business model is focused on grant-making and community support, positioning itself as a key player in the Hungarian non-profit sector with a consistent brand presence and historical content.

Ö

Ökotárs Alapítvány

civiljogok.hu

42

The Civil Jogok website is operated by the Ökotárs Foundation, a Hungarian non-profit organization dedicated to improving the legal framework and operational environment for civil society organizations. The site provides legal research, advocacy materials, and practical guidance aimed at civil organizations and policymakers. It has a clear focus on transparency, cooperation, and reform within the civil sector. Technically, the site is built on Drupal CMS with standard web technologies including jQuery and Google Tag Manager for analytics. While the site is functional and content-rich, it lacks some modern security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. The contact information is clearly presented, and the domain age and WHOIS data support the legitimacy of the organization.

R

Reclaim Our Civil Space

civilspace.eu

48

The website 'Reclaim Our Civil Space' is a non-profit advocacy platform focused on empowering and supporting civil society organizations in Central and South-eastern Europe. It operates as a regional network addressing democratic backsliding and shrinking civic space, collaborating with partners across multiple countries. The site is built on Drupal 9 and employs Google Tag Manager for analytics, indicating a moderate level of digital maturity. The content is well-structured, mobile-optimized, and accessible, targeting NGOs, activists, and the general public interested in civil rights and democracy. However, the absence of explicit privacy, cookie, and security policies, as well as lack of direct contact information, limits its compliance and trustworthiness aspects. Security headers and incident response details are also missing, which could expose the site to risks. Overall, the site is functional and professional but requires improvements in privacy compliance and security posture to enhance trust and resilience.

K

Közös Értékeink Program

kozosertekeink.hu

49

The Közös Értékeink Program website serves as an informational and support platform for a Hungarian non-profit initiative funded by the European Union. It focuses on supporting civil organizations that promote fundamental rights and values within the EU framework. The site is built on Drupal 10, employs modern web technologies, and provides a good user experience with mobile optimization and accessibility features. While the site lacks direct contact information and dedicated security or terms pages, it maintains a moderate security posture with HTTPS and cookie consent mechanisms. The domain registration aligns well with the program's recent launch, and partner organizations add credibility. Overall, the website is professional, trustworthy, and serves its target audience effectively.

Ž

Židovská obec v Praze

kehilaprag.cz

59

Židovská obec v Praze (ŽOP) is a well-established non-profit organization serving the Jewish community in Prague. It focuses on religious, cultural, social, and health services for its members and the wider community. The website reflects a community-oriented mission with detailed information about departments, events, partners, and services. The organization maintains partnerships with reputable international and local entities, enhancing its credibility and outreach. Technically, the website uses a moderate modern tech stack including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA for security on forms. The site is mobile-optimized with good navigation and content quality. However, there is room for improvement in accessibility and SEO optimization. The absence of a CMS identification suggests a custom or less common platform. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks visible security headers and explicit security or incident response policies. Privacy compliance is partial, with a cookie consent banner but no clear privacy policy or terms of service pages. WHOIS data is missing, which reduces domain trust assessment but the website content and contact information appear legitimate. Overall, the site is a credible digital presence for a community organization but should enhance transparency and security practices to improve trust and compliance.

Federace židovských obcí v ČR operates as a non-profit organization dedicated to supporting the Jewish community in the Czech Republic through cultural preservation, education, and social services. The website serves as a central hub for news, reports, and community events, reflecting a well-established presence in its sector. Technically, the site is built on WordPress with common plugins and libraries, offering moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit incident response information. WHOIS data is unavailable, likely due to privacy protection, which is reasonable for this type of organization. Overall, the site is trustworthy and professional, though improvements in privacy policy transparency and security practices are recommended.

B

B''NAI B''RITH EUROPE

jewisheritage.org

53

The European Jewish Heritage website, operated by B''NAI B''RITH EUROPE, is a well-established non-profit platform dedicated to preserving and promoting Jewish culture and heritage across Europe. The organization has been active since 2001 and offers key services such as the European Days of Jewish Culture and the European Routes of Jewish Heritage. The website targets European citizens, municipalities, and cultural organizations interested in Jewish heritage and intercultural dialogue. The content is professionally presented, with a consistent brand and clear navigation. Technically, the website is built on WordPress with a modern tech stack including popular plugins for SEO, events management, and accessibility. It uses HTTPS and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Performance and mobile optimization are good, and accessibility features are implemented. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and published security policies or incident response contacts. No critical vulnerabilities were detected, but improvements are recommended in publishing privacy and security policies and enabling DNSSEC. Overall, the website is trustworthy and professional, with a strong business credibility score. Strategic recommendations include enhancing privacy compliance, publishing security and incident response policies, and improving DNS security to further strengthen the security posture.

Ö

Ökotárs Alapítvány

okotars.hu

46

Ökotárs Alapítvány is a well-established Hungarian non-profit organization founded in 1999, dedicated to supporting citizen self-organizations to foster a democratic, sustainable, and just society. The foundation focuses on environmental protection, civil society development, and sustainability programs, offering grants, training, and advocacy. Their website reflects a mature digital presence built on Drupal 7, integrating Google Analytics and Tag Manager for user insights. The content is rich, professionally presented, and targets civil society actors, students, and environmentally conscious communities. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements are needed in security headers and updating legacy libraries. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.

M

Mezinárodní vězeňské společenství z.s.

mvs.cz

61

Mezinárodní vězeňské společenství z.s. is a Czech non-profit organization established in 1998, dedicated to providing social support to victims of crime, prisoners, their families, and released individuals. The organization operates a professional website with a clear mission, active content updates, and multiple programs targeting various affected groups. The website is built on WordPress with modern plugins for SEO, events, and social media integration, hosted by Websupport. Security posture is good with HTTPS enabled and GDPR compliance evident through cookie consent mechanisms and privacy policies. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission.

L

Likvidace lepry

likvidacelepry.cz

46

Likvidace lepry is a Czech Republic-based non-profit organization dedicated to combating leprosy and related diseases through humanitarian aid and support in multiple countries. The website serves as an official platform to inform donors, volunteers, and the public about their activities, news, and ways to contribute. The organization maintains a clear presence with regular updates, donation information, and social media engagement. Technically, the website uses a traditional web stack with jQuery, Google Fonts, and a custom CMS (WebRedakce). It is mobile responsive and includes cookie consent mechanisms, though it lacks explicit privacy and terms of service pages. Security posture is moderate with no visible security headers and unknown SSL configuration. WHOIS data is unavailable, likely privacy protected, which is common for non-profits but limits domain trust verification. Overall, the site is professional, trustworthy, and focused on its humanitarian mission.

Signály.cz is a Czech non-profit ecumenical community platform providing spiritual content, blogs, videos, and event information to a broad audience interested in Christian dialogue and education. The website offers user registration, community forums, and multimedia content, positioning itself as a well-established community hub since 2007. Technically, the site uses modern web technologies including jQuery, Bootstrap, and OAuth integrations for login, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and secure login forms, though the absence of security headers and cookie consent mechanisms indicate areas for improvement. The lack of WHOIS data reduces domain trustworthiness, but the active social media presence and comprehensive privacy policies support legitimacy. Overall, the site is professional, content-rich, and safe for general audiences.

M

Mateřské centrum Veselý Paleček, z.s.

veselypalecek.cz

53

Mateřské centrum Veselý Paleček, z.s. is a Czech non-profit community center focused on providing educational and recreational activities for parents, especially mothers on maternity leave, and their children. The organization operates locally in the Blansko and Boskovice regions, offering services such as children's creative workshops, Montessori educational approaches, parent-child exercise classes, and social/legal counseling. The website reflects a small-sized, community-oriented entity with a clear mission to support families and children. Technically, the website is built on WordPress using the Mesmerize theme and several plugins including Yoast SEO, Contact Form 7, and Cookie Law Info. It integrates Google Analytics and Google Maps API for tracking and location services. The site demonstrates moderate performance and good mobile optimization, with basic accessibility features and good SEO practices. Hosting and domain registration are consistent with the Czech location, provided by Wedos. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers in the HTML source. Cookie consent mechanisms are implemented, supporting GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the Google Analytics plugin is not fully configured, and security headers like Content-Security-Policy and X-Frame-Options are not explicitly present, which could be improved. Overall, the website presents a trustworthy and professional online presence for a local non-profit organization. The risk profile is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, completing analytics configuration, and maintaining regular security updates to strengthen the security posture further.

U

Ulita Blansko, z.s.

ulitablansko.cz

41

Ulita Blansko, z.s. is a small non-profit community organization based in Blansko, Czech Republic, focused on providing cultural, social, and recreational activities through clubs, a tea house, and volunteer engagement. The website serves as an information hub for events, club activities, and contact details, targeting local community members interested in cultural enrichment and social interaction. The organization is supported by local government entities, enhancing its community trust and legitimacy. Technically, the website is built on CMS Made Simple with a modern but basic tech stack including jQuery, Foundation CSS, and FontAwesome. It integrates Google Analytics and Facebook Pixel for user tracking and marketing purposes. The site is mobile responsive and offers a good user experience with clear navigation and relevant content. Security posture is moderate; HTTPS is used but no explicit security headers or incident response information are present. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent banner is implemented. Overall, the website is functional, trustworthy, and safe for general audiences but would benefit from enhanced security and compliance documentation.

N

Nadace Partnerství

aukceproprirodu.cz

49

The website 'Aukce pro přírodu - Nadace Partnerství' is a Czech language platform dedicated to a charitable auction event organized by Nadace Partnerství, a non-profit foundation. The event aims to raise funds to plant 10 million trees in the Czech Republic, targeting environmentally conscious individuals and supporters of ecological causes. The site presents a professional and consistent brand image aligned with its charitable mission. Technically, the website employs modern frontend technologies including Bootstrap and Vue.js frameworks, integrates tracking tools such as Google Tag Manager and Facebook Pixel, and uses Mapy.cz API for mapping features. However, the site lacks visible privacy and cookie policies, security headers, and WHOIS registration transparency, which impacts its overall security posture and privacy compliance. The absence of explicit contact information and security policies suggests room for improvement in trust and compliance aspects. Overall, the site is functional and well-designed for its purpose but requires enhancements in security and privacy transparency to strengthen user trust and regulatory compliance.

N

Nadace Partnerství

lifetreecheck.eu

58

LIFE Tree Check is a non-profit environmental project coordinated by Nadace Partnerství, focused on helping Central European cities adapt to climate change by strengthening green infrastructure. The website serves as an educational and resource platform offering applications, publications, and inspirational content to municipalities and the public. The project is supported by the EU LIFE program and partners across multiple countries, positioning it as a reputable initiative in the climate adaptation sector. Technically, the site is built on Kentico CMS with ASP.NET WebForms, leveraging modern web technologies like jQuery and Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and provides clear navigation and rich content in Czech. Security posture is moderate with cookie consent implemented but lacks visible security headers and explicit incident response information. WHOIS data is unavailable due to EURid privacy policies, but the site’s legitimacy is supported by its association with a known non-profit and EU funding. Overall, the site is professional, trustworthy, and serves its target audience effectively.

N

Nadace Partnerství

otevrenazahrada.cz

58

Otevřená zahrada is a non-profit initiative managed by Nadace Partnerství, offering a unique blend of nature, education, and community experiences in the heart of Brno, Czech Republic. The website targets children, schools, companies, and the general public, providing educational programs, event spaces, and recreational opportunities. The project is positioned as a local community and environmental hub with a strong focus on sustainability and learning. Technically, the website is built on ASP.NET WebForms with Kentico CMS elements, utilizing modern libraries such as Bootstrap, jQuery, and Tippy.js for UI enhancements. It integrates Google Tag Manager and Microsoft Clarity for analytics and tracking, and implements a cookie consent mechanism aligned with GDPR requirements. The site demonstrates good mobile optimization and SEO practices, though some accessibility improvements are possible. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers in the provided data. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain trust assessment, but the association with a reputable foundation and clear contact information enhance credibility. Overall, the website is professional, content-rich, and trustworthy, with recommendations to enhance security headers and improve domain transparency through WHOIS data availability.

F

Federace židovských obcí v České republice

10hvezd.cz

40

The website 'Deset hvězd' is a cultural heritage project managed by the Federation of Jewish Communities in the Czech Republic. It focuses on preserving and promoting Jewish cultural heritage through a network of regional cultural and educational centers located in restored synagogues. The project is part of the European Route of Jewish Heritage, certified by the Council of Europe, and offers exhibitions, cultural programs, and concerts. The target audience is the general public interested in cultural history and education. The business model is non-profit, emphasizing cultural preservation and education. Technically, the website uses a traditional tech stack including jQuery, Owl Carousel, Fancybox, and Google Analytics for tracking. It is built on the Nette Framework, a PHP-based CMS. The site shows moderate performance and basic mobile optimization but uses outdated JavaScript libraries that may pose security risks. SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS and includes Google Analytics scripts but lacks visible security headers and uses outdated libraries. There are no forms collecting sensitive data, reducing immediate risk, but the absence of privacy and cookie policies indicates compliance gaps. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy and professionally presented but would benefit from updating its technical stack, implementing security best practices, and adding privacy and cookie policies to improve compliance and user trust.

S

Sdružení knihoven ČR

sdruk.cz

52

Sdružení knihoven ČR is a well-established non-profit association founded in 2002, dedicated to supporting libraries and promoting access to cultural and informational resources in the Czech Republic. The organization holds a strong position as a key partner in the Czech library sector, offering services such as event organization, project support, publishing, and professional networking. Their website reflects a professional and consistent brand image, targeting librarians, cultural institutions, and the general public interested in library services. Technically, the site is built on WordPress with Elementor, integrating standard analytics and social media tools, and demonstrates good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data, though it lacks explicit security policies or incident response information. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility as a reputable non-profit entity.

C

Charita Česká republika

daranek.cz

54

Daránek dětem is a charitable initiative managed by Charita Česká republika, focused on supporting children in vulnerable situations through fundraising and social support. The website serves as a platform for donations, awareness, and partnership engagement, positioning itself as a trusted national charity. Technically, the site employs modern web technologies including Google reCAPTCHA for form security, Facebook Pixel and Google Analytics for tracking, and a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized with good design and navigation, though some security headers are not explicitly detected. The absence of WHOIS data for the domain is a notable concern for domain legitimacy verification, but the presence of official charity information and partner references supports trustworthiness. Overall, the site demonstrates a solid security posture with room for improvement in explicit security header implementation and transparency around incident response.

C

Charita Česká republika

trikralovasbirka.cz

51

The website trikralovasbirka.cz represents the Tříkrálová sbírka, the largest charitable fundraising event in the Czech Republic organized by Charita Česká republika. It provides an online platform for donations, volunteer information, and event updates, targeting the general public interested in charitable giving. The site is professionally designed with consistent branding and clear navigation, supporting a large-scale non-profit operation. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA v3 for security. It is built on the Vizus CMS platform and demonstrates good mobile optimization and SEO practices. The site uses HTTPS and includes a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses reCAPTCHA to protect forms, and provides cookie consent controls. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, indicating a solid security posture for a non-profit website. Overall, the website is trustworthy and safe, with no adult or questionable content. The absence of WHOIS data limits domain legitimacy verification, but the professional presentation and partner endorsements support its credibility. Strategic improvements include adding security headers and publishing security policies to enhance transparency and trust.

M

Mikroazyl Vlčáry z.s.

vlcary.cz

40

Mikroazyl Vlčáry z.s. is a small non-profit organization based in the Czech Republic specializing in providing shelter and rehoming services for large and giant breed dogs, particularly those with behavioral challenges. The organization is led by Rudolf Desenský, a practitioner in dog psychology, offering specialized behavioral re-education and socialization services. The website serves as an informational platform showcasing the dogs currently in care, their status, and adoption possibilities. The business model focuses on animal welfare and rehoming rather than commercial activities. Technically, the website is built using Incomedia WebSite X5 Pro CMS with jQuery, hosted by WEDOS, a Czech hosting provider. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. However, it lacks advanced technical security measures such as security headers and HTTPS enforcement details are not visible in the provided data. From a security perspective, the site does not implement visible security headers or privacy and cookie policies, which are important for GDPR compliance given the EU jurisdiction. No forms or data collection mechanisms were detected, reducing immediate privacy risks but also limiting user engagement options. The absence of contact information and incident response details limits transparency and user trust. Overall, the website is functional and informative with a clear business focus but requires improvements in privacy compliance, security posture, and contact transparency to enhance trustworthiness and regulatory adherence.

Česká alzheimerovská společnost, o.p.s. (ČALS) is a Czech non-profit organization established in 1997 dedicated to supporting people with dementia and their caregivers. The organization offers educational programs, certification, publications, and events to raise awareness and provide assistance. The website reflects a professional and consistent brand presence targeting patients, families, healthcare professionals, and donors. Technically, the site is built on Vizus CMS, uses Google Analytics for traffic measurement, and implements a cookie consent mechanism with granular controls. However, the absence of a privacy policy and terms of service pages, as well as missing WHOIS data, slightly reduce trustworthiness from a compliance and domain legitimacy perspective. Security posture is moderate with HTTPS enabled but lacking security headers and incident response information. Overall, the site is well-designed, accessible, and content-rich, serving its non-profit mission effectively.

Česká asociace pečovatelské služby (ČAPS) is a Czech non-profit association representing over 200 organizations providing home-based social and health care services. The association offers advocacy, coordination, public information, communication platforms, and professional education to its members. It is well-established with a founding date in 1999 and a stable leadership. The website is professionally designed, targeting organizations and individuals involved in social care within the Czech Republic. Technical infrastructure includes common JavaScript libraries and Google Analytics for tracking, with moderate performance and good mobile optimization. Security posture is adequate but could be improved by adding security headers and updating outdated libraries. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and serves its audience effectively, though domain registration data is missing, which slightly impacts trustworthiness.

S

Sdružení Krajina

stopavkrajine.cz

45

Sdružení Krajina is a Czech non-profit organization dedicated to nature conservation and landscape management. Their website showcases various projects such as mowing wet meadows, restoring natural watercourses, and educational initiatives. The organization engages volunteers and local communities to preserve natural habitats. Technically, the website uses modern web technologies including Google Tag Manager, reCAPTCHA v3, Leaflet maps, and is likely powered by Perch CMS. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is used and reCAPTCHA protects forms, but explicit security headers and privacy policies are missing, indicating room for improvement. WHOIS data is unavailable, likely due to privacy protection, which is common for non-profits. Overall, the website is legitimate, informative, and safe, but could enhance compliance and security transparency.

C

Charita Česká republika

caritas.cz

56

Charita Česká republika is a well-established non-profit organization operating in the Czech Republic, providing the largest network of non-governmental social and health services in the country. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. It serves a broad audience including beneficiaries, donors, volunteers, and partners. The organization emphasizes humanitarian aid, social services, and advocacy, positioning itself as a key player in the Czech non-profit sector. Technically, the website employs modern web technologies including JavaScript frameworks, Google Fonts, and a consent management platform to ensure compliance with privacy regulations. Analytics tools such as Google Analytics and Facebook Pixel are used for user tracking and marketing insights. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and implements several security headers, indicating a good baseline security posture. However, the absence of a public security policy and incident response contact information suggests room for improvement in transparency and readiness. The lack of WHOIS data reduces trust slightly but is mitigated by the professional presentation and partner affiliations. Overall, the website is trustworthy, professional, and compliant with privacy standards, with recommendations to enhance security transparency and domain registration visibility.

The website www.petpieta.cz represents a small Czech non-profit organization named Občanské sdružení přátel pietního parku Draháň, dedicated to the care and maintenance of a pet cemetery in Prague Bohnice. The organization relies on membership fees and donations to sustain the upkeep of the cemetery and provides information and support to its members and the public. The website content is primarily informational, targeting pet owners and local community members interested in the memorial park. Technically, the site is built on the eStránky.cz CMS platform and uses legacy JavaScript libraries such as jQuery 1.12.4 and jQuery UI 1.12.1. The design and navigation are basic but functional, with moderate mobile optimization and accessibility features.

D

Divadlo Líšeň z.s.

divadlolisen.cz

57

Divadlo Líšeň z.s. is an independent experimental theater company based in Brno, Czech Republic, specializing in puppet and mask theater, workshops, and educational programs. The organization has a strong community focus, including outreach to disadvantaged audiences and collaboration with Roma artists. It enjoys regional and international recognition, supported by local government and international funds such as the Visegrad Fund. The website reflects a mature digital presence with rich content, active social media integration, and a professional design. Technically, the site is built on WordPress with modern libraries and frameworks, providing a responsive and accessible user experience. Security posture is good with HTTPS and spam protection, though some security headers could be improved. Privacy compliance is well addressed with GDPR documentation and cookie consent mechanisms. WHOIS data is unavailable, which slightly impacts trust but is mitigated by transparent business information and official documentation. Overall, the site represents a credible and professionally managed non-profit cultural entity.

P

Pet Heroes

petheroes.cz

59

Pet Heroes is a Czech non-profit organization dedicated to helping dogs and cats in need through direct care and systemic changes. The organization has been operating since 2016 and maintains a professional web presence using WordPress with the Divi theme. The website is well-structured, mobile-optimized, and includes SEO enhancements via Yoast SEO. Technical infrastructure includes integration with Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Security posture is adequate with HTTPS enabled and GDPR cookie consent implemented, though the absence of privacy policy and security headers indicates room for improvement. Overall, the website reflects a trustworthy and credible non-profit entity with a focus on animal welfare.

ZmapujTo.cz is a Czech Republic-based non-profit environmental project originally launched in 2012 by Miroslav Kubásek. It provided a mobile and web platform for citizens to report illegal waste dumps and environmental issues, helping map and remove tens of thousands of such sites. The project has since been integrated into the Munipolis municipal communication platform, continuing its mission through partner projects and associations like Ukliďme Česko. The website serves as an informational hub linking to related environmental initiatives and apps. Technically, the website uses standard web technologies including Bootstrap, jQuery, OwlCarousel, and Font Awesome, with a responsive design suitable for mobile devices. However, it lacks advanced security headers and privacy policies, and no WHOIS data is available to verify domain registration details. The site does not appear to use analytics or tracking scripts, indicating a minimal data collection approach. From a security perspective, the absence of HTTPS verification in the provided data and missing security headers reduce the security posture. No contact or incident response information is provided, limiting transparency for security issues. The lack of privacy and cookie policies also impacts compliance with GDPR and related regulations. Overall, ZmapujTo.cz is a legitimate, small-scale non-profit environmental project with good content quality and moderate technical implementation but with notable gaps in security and privacy compliance. Strategic improvements in security headers, HTTPS enforcement, and privacy documentation are recommended to enhance trust and compliance.

D

Dogpoint o.p.s.

dog-point.cz

61

Dogpoint o.p.s. is a Czech Republic based non-profit animal shelter dedicated to rescuing, caring for, and rehoming abandoned and abused dogs. The organization has been operating for over 12 years and has facilitated more than 1350 successful adoptions. Their services include dog adoption, dog walking, training, accommodation, and various support and fundraising activities. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to their mission and audience. Contact information and social media presence are well established, enhancing trust and engagement. Technically, the website is built on the Solidpixels CMS platform, utilizing modern web technologies including JavaScript, jQuery, and Google Tag Manager for analytics and marketing. The site enforces HTTPS, includes cookie consent mechanisms compliant with GDPR, and implements privacy policies. However, there is room for improvement in security headers and explicit incident response policies. From a security perspective, the site demonstrates good practices such as encrypted connections and data protection consent, but lacks visible security headers and documented incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact details support legitimacy. Overall, Dogpoint's website presents a trustworthy, well-maintained digital presence for a small non-profit organization. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining regular audits of third-party scripts to strengthen security posture and compliance.

K

Kočičí přání z.s.

kociciprani.cz

58

Kočičí přání is a Czech non-profit organization dedicated to supporting abandoned cats in shelters through fundraising and awareness campaigns. The website showcases multiple active and completed projects, providing transparency on donations and their impact. The platform targets cat lovers and animal welfare supporters primarily in the Czech Republic. Technically, the website uses modern web technologies including asynchronous loading of Facebook Pixel, Google Tag Manager, and Adobe Typekit fonts, ensuring a good user experience and mobile optimization. Security posture is decent with HTTPS enforced, but lacks some security headers and formal privacy and cookie policies. Overall, the site is trustworthy and professional, though improvements in privacy compliance and security policies are recommended.