Non-profit security reports

B

Běhejme a pomáhejme útulkům

behproutulky.cz

10

Běhejme a pomáhejme útulkům is a Czech non-profit charitable organization dedicated to supporting abandoned and abused animals across the Czech Republic since 2014. The organization operates through fundraising, charity runs, and an e-shop that donates 100% of proceeds to animal shelters. Their website reflects a well-structured and professionally designed platform with clear messaging and social media integration, targeting the general public interested in animal welfare. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating popular plugins such as Contact Form 7 and FontAwesome icons. It employs modern web technologies and integrates Google Tag Manager and Facebook SDK for analytics and marketing purposes. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and asynchronous loading of third-party scripts. However, it lacks visible security headers and formal security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a trustworthy and professional image consistent with a small non-profit organization. The absence of WHOIS data limits domain trust verification, but the content and technical indicators support legitimacy. Strategic recommendations include publishing privacy and security policies, implementing security headers, and providing clearer contact information to enhance trust and compliance.

P

PESWEB

pesweb.cz

9

PESWEB is a Czech non-profit portal dedicated to providing comprehensive information about dogs and cats, with a strong focus on shelter animals and adoption. The website offers a variety of services including adoption listings, lost and found databases, educational articles, event calendars, and fundraising campaigns. It targets animal lovers, potential adopters, and supporters of animal welfare. The portal maintains a consistent brand presence and partners with relevant organizations to enhance its outreach. Technically, the website is built on the Topinfo CMS platform and utilizes several JavaScript libraries such as jQuery, Fancybox, and Chosen. It integrates Google Analytics and Smartlook for user tracking and Google Adsense and Sklik for advertising. While the site is functional and moderately optimized, it uses somewhat outdated libraries and has basic mobile and accessibility support. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy/cookie policies, which are important for compliance and user trust. No WHOIS data was retrievable, which raises concerns about domain registration transparency. No critical vulnerabilities or adult content were detected, but improvements in privacy compliance and security best practices are recommended. Overall, PESWEB appears to be a legitimate and valuable resource in the Czech animal welfare community, but it should address privacy and security gaps to enhance trust and compliance.

PsíPřání.cz is a Czech Republic based non-profit platform dedicated to fulfilling the wishes of shelter dogs by facilitating donations and supporting animal shelters. The website is operated by the Nadační fond PES V NOUZI foundation and targets animal lovers and donors interested in animal welfare. It provides project updates, donation options, and information on how to contribute. The platform holds a niche position in the Czech animal welfare sector with a clear focus on transparency and community engagement. Technically, the website is built on WordPress with common plugins such as Responsive Lightbox and SlickNav for mobile navigation, and uses Bootstrap for responsive design. It integrates Google Analytics and Facebook Pixel for tracking and marketing purposes. The site enforces HTTPS and loads scripts asynchronously, contributing to moderate performance and good mobile optimization. However, it lacks advanced security headers and cookie consent mechanisms, which are areas for improvement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. It uses tracking pixels responsibly but does not implement key security headers like Content-Security-Policy or HSTS. No vulnerability disclosure or incident response policies are publicly available, and no direct contact emails or phone numbers are listed, which may impact user trust and compliance. The privacy policy is present and GDPR compliant, but cookie consent is missing. Overall, PsíPřání.cz presents a trustworthy and professionally maintained non-profit website with good content quality and user experience. To enhance security posture and privacy compliance, it should implement security headers, cookie consent, and provide clearer contact information. These improvements will strengthen donor confidence and regulatory adherence.

N

Nadační Fond PES V NOUZI

pesvnouzi.cz

10

Nadační Fond PES V NOUZI is a Czech non-profit organization dedicated to helping lost and found dogs, supporting dog adoption from shelters, providing veterinary care, and improving shelter conditions. The organization operates without state subsidies and relies on donations, fundraising, and an e-commerce platform to finance its activities. The website is well-structured, professionally designed, and provides clear information about ongoing projects, donation methods, and partners. Technically, the site is built on WordPress with WooCommerce and uses Bootstrap 3.3.6, jQuery, and Google Analytics for tracking. Security is adequate with HTTPS and reCAPTCHA, but lacks some modern security headers and uses an outdated Bootstrap version, which could pose risks. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

A

Asociace nestátních neziskových organizací Jihomoravského kraje, z. s.

annojmk.cz

48

Asociace nestátních neziskových organizací Jihomoravského kraje, z.s. (ANNO JMK) is a regional non-profit association representing non-governmental organizations in the South Moravian region of the Czech Republic. The organization provides advisory services including legal, grant, tax, and specialized support for seniors and vulnerable populations. It also manages projects and facilitates membership and cooperation among non-profit entities. The website reflects a well-structured digital presence built on WordPress with Elementor and Yoast SEO, indicating a moderate level of digital maturity. The site is secured with HTTPS and integrates Google Analytics with user opt-out capabilities, showing awareness of privacy and tracking concerns. However, the absence of a published privacy policy, terms of service, and explicit security or incident response policies indicates areas for compliance and security improvement. Overall, the website is professional, trustworthy, and serves its target audience effectively, but could enhance transparency and security posture.

C

Centrum Psí ostrov z. s.

docasky.cz

44

Centrum Psí ostrov z. s. is a Czech non-profit organization dedicated to providing temporary care and adoption services for abandoned dogs. The organization actively engages in public awareness and fundraising activities, leveraging social media and donation platforms to support its mission. The website serves as a portal for adoption listings, virtual adoptions, and information about becoming a temporary caregiver. Technically, the site is built on Joomla! CMS with modern JavaScript libraries such as jQuery, Bootstrap, and UIkit, and integrates Google Analytics and Facebook SDK for analytics and social engagement. Security posture is solid with HTTPS and bot protection via reCAPTCHA, though it lacks some security headers and formal privacy/cookie policies. Overall, the domain registration data aligns well with the organization's profile, indicating legitimacy and transparency.

Ami.e.s des Parcs naturels de Wallonie is a small community or non-profit organization dedicated to promoting and supporting natural parks in the Wallonia region of Belgium. The website serves as an informational platform targeting local nature enthusiasts and environmental supporters. The business model appears to focus on community engagement and environmental awareness without commercial activities. Technically, the website is built using One.com Web Editor and hosted by One.com A/S, featuring basic HTML, CSS, and JavaScript with moderate performance and basic mobile optimization. Security posture is moderate with HTTPS enabled but lacking important security headers and privacy compliance mechanisms such as privacy and cookie policies. No contact information or incident response details are published, which limits user trust and compliance. Overall, the site is functional but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

K

Kolpingovo dílo ČR z.s.

kolping.cz

46

Kolpingovo dílo ČR z.s. is a Czech non-profit organization dedicated to addressing social needs and supporting individuals through various community and social services. The organization is inspired by Adolph Kolping's philosophy and operates multiple facilities and programs including family centers, addiction counseling, prevention centers, and therapeutic communities. The website reflects an established presence with EU project backing and a focus on community engagement. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS enforced and privacy plugins in use, though additional HTTP security headers could enhance protection. The absence of WHOIS data limits domain trust assessment, but the website's transparency and contact information support legitimacy. Overall, the site is professional, trustworthy, and serves a broad general audience with safe content.

C

CAWaB asbl

cawab.be

53

CAWaB asbl is a Belgian non-profit organization dedicated to advocating for accessibility for persons with reduced mobility in the Wallonia and Brussels regions. The website serves as a platform to promote their 2024 election priorities focused on inclusive society measures, including accessible transport, buildings, and communication. The organization targets both the general public and policymakers to foster legislative and social change. Technically, the website is built on the SPIP CMS with Bootstrap and includes social media integrations such as Facebook SDK and YouTube embeds. The site is hosted by OVH and demonstrates good mobile optimization and accessibility features, aligning with its mission. Security posture is moderate with HTTPS enabled but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

J

Jihlavský plavecký klub, z.s.

jpkcz.cz

45

Jihlavský plavecký klub, z.s. is a small, community-focused swimming club based in Jihlava, Czech Republic. The organization provides swimming training, organizes competitions, and engages with local members and supporters. The website serves as an information hub for news, events, membership, and contact details, targeting local swimmers and their families. The club maintains an active presence on Facebook and provides clear contact channels including email, phone, and a contact form. The domain is newly registered in late 2023, consistent with the club's recent establishment or digital presence launch. Technically, the website is built on WordPress using popular plugins such as Elementor for design, Yoast SEO for optimization, and Complianz for GDPR compliance. The site is hosted likely by Wedos, a Czech hosting provider, and uses HTTPS with a valid SSL certificate. Performance and mobile optimization are good, with basic accessibility features. SEO is well implemented with meta tags and structured data. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent and legitimate, with no privacy protection or suspicious patterns. Overall, the security posture is solid but could be improved by adding security headers and formal policies. The website content is safe for general audiences, with no adult or questionable content. Privacy compliance is good with accessible privacy and cookie policies. Business credibility is supported by clear contact information and trust signals such as social media presence and structured data. The overall risk is low, but strategic improvements in security policies and headers are recommended to enhance trust and protection.

Z

Zoologická zahrada Jihlava, příspěvková organizace

zoojihlava.cz

57

Zoo Jihlava is a well-established zoological garden in the Czech Republic, operating since 2001. The organization provides animal exhibitions, educational programs, and various visitor services including events and guided tours. The website reflects a non-profit business model focused on community engagement and education, targeting families, children, and tourists. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the website is built on WordPress with modern libraries such as jQuery and Google Maps API integration. It uses HTTPS with a valid SSL certificate and implements cookie consent mechanisms compliant with GDPR. The site shows moderate performance and good mobile optimization, although accessibility features are basic. SEO is supported by the Yoast SEO plugin, enhancing search visibility. From a security perspective, the site enforces HTTPS and uses nonce tokens for AJAX calls, but lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner. Business credibility is supported by clear contact information, social media presence, and trust indicators such as organizational memberships. Overall, Zoo Jihlava's website demonstrates a solid digital presence with good security and privacy practices. Strategic improvements could include adding security headers, publishing a security policy, and enhancing accessibility. These steps would further strengthen the site's security posture and user trust.

A

Association of Learned and Professional Society Publishers

alpsp.org

63

The Association of Learned and Professional Society Publishers (ALPSP) is an international trade association supporting not-for-profit organizations and institutions involved in scholarly and professional publishing. The website presents a professional and comprehensive platform offering training, events, membership services, and publications tailored to the scholarly publishing community. The organization positions itself as a key player in the non-profit publishing sector with a strong focus on education and community engagement. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager for analytics and marketing. The site is well-structured, mobile-optimized, and provides clear navigation and rich content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR, but lacks explicit security headers and published security policies. The absence of WHOIS registration details limits domain trust verification, though the website's professional presentation supports its legitimacy. Overall, the site demonstrates a mature digital presence with room for improvement in security transparency and domain registration clarity.

J

Jo sóc donant ambiental

donantambiental.cat

61

Jo sóc donant ambiental is a small non-profit environmental initiative based in Catalonia, Spain, focused on supporting conservation projects through donations. The website serves as a platform to promote various environmental projects and facilitate donations via WooCommerce. The organization targets environmentally conscious individuals and groups interested in supporting nature conservation locally. Technically, the website is built on WordPress with WooCommerce and uses modern web technologies including Google Fonts, Facebook Pixel, Google Analytics, and reCAPTCHA v3 for security. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and anti-bot measures, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is well addressed with visible cookie consent and privacy policy pages in Catalan, aligned with GDPR requirements. Overall, the domain registration is privacy protected but consistent with the organization's profile and age. No critical security issues or suspicious content were detected, and the site is safe for general audiences.

F

Fundación Teaming

teaming.net

67

Teaming is a Spanish non-profit foundation providing a micro-donation platform enabling individuals, NGOs, companies, and educational institutions to raise funds for social causes with a simple 1€/month donation model. The platform is well-established with a large user base and significant funds raised, supported by corporate sponsors and pro bono services. Technically, the website uses modern frameworks like Bootstrap and jQuery, is hosted on Amazon Cloudfront CDN, and integrates Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. The WHOIS data is missing or unavailable, which slightly reduces trust but the professional site and social proof mitigate concerns. Overall, Teaming presents a trustworthy, well-maintained platform for social fundraising.

A

Associació de Naturalistes de Girona (ANG)

sospeix.org

46

SOSpeix is a non-profit environmental campaign focused on promoting responsible consumption of fish and seafood in the Girona and Empordà regions of Spain. The campaign is organized by the Associació de Naturalistes de Girona (ANG) and IAEDEN – Salvem Empordà, collaborating with local fishermen, scientists, restaurants, schools, and supermarkets to raise awareness about overfishing and marine protection. The website serves as an educational platform providing guides, news, recipes, and recommendations to encourage sustainable seafood consumption. Technically, the website uses a modest technology stack including jQuery 1.9.1, Google Tag Manager, Google Translate widget, and Google Fonts. The site is mobile optimized with a responsive design and good SEO practices. However, some technologies are outdated, and security headers are not detected, indicating room for improvement in security hardening. Cookie consent mechanisms and privacy policies are implemented, showing compliance with GDPR requirements. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and explicit incident response or vulnerability disclosure policies. The WHOIS data is unavailable due to a malformed query response, which reduces domain trustworthiness. Nevertheless, the website content, contact information, and partnerships indicate a legitimate and trustworthy non-profit organization. Overall, the site presents a good balance of content quality, technical implementation, and privacy compliance, with moderate security posture. Strategic improvements in security headers, updated libraries, and enhanced transparency on security policies would strengthen the site’s security and trust profile.

A

Associacio de Naturalistes de Girona

itinerarisnaturalistes.org

60

The website itinerarisnaturalistes.org is a non-profit project managed by the Associacio de Naturalistes de Girona, focused on providing detailed natural itineraries and promoting protected natural spaces in the Girona province of Spain. The site targets nature enthusiasts and hikers interested in exploring regional natural heritage. The business model is informational and community-oriented, leveraging digital tools like the Wikiloc app for route discovery. The domain registration data is consistent with the organization's identity and location, supporting legitimacy. Technically, the website is built on WordPress using Elementor and JetEngine plugins, with Yoast SEO for optimization. The site is hosted likely by web24.cat, uses HTTPS, and includes a GDPR cookie compliance plugin, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, HTTPS is properly configured, but no advanced security headers were detected, and DNSSEC is not enabled. There is no published privacy policy or security policy, and no vulnerability disclosure or security.txt file is present. Cookie consent mechanisms are implemented, but contact information and incident response channels are not explicitly provided. Overall, the website is trustworthy and professional for its niche, but improvements in privacy compliance, security headers, and transparency about incident response would enhance its security posture and user trust.

A

Associació de Naturalistes de Girona

naturalistesgirona.org

45

Associació de Naturalistes de Girona (ANG) is a small non-profit environmental organization based in Girona, Spain, focused on promoting environmental protection, ecological education, biodiversity conservation, and social justice related to the environment. The website presents a clear mission statement, multiple projects, and active community engagement through volunteering, membership, and donations. Their market position is local/regional with a strong focus on Catalonia. The organization maintains an active presence on major social media platforms and partners with related environmental projects and initiatives. Technically, the website uses a traditional web stack with jQuery, Swiper.js for galleries, Google Fonts, and Font Awesome icons. The site is mobile-optimized with responsive design and good navigation clarity. However, some technologies like jQuery are outdated, and no advanced CMS or hosting details are evident. Performance is moderate, and SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating basic privacy compliance. However, no explicit security headers were detected, and the WHOIS data is unavailable, which reduces domain trustworthiness. There is no visible incident response or security policy documentation. The site appears safe with no adult or questionable content. Overall, ANG's website is professional, content-rich, and trustworthy from a business perspective but could improve its technical security posture and domain transparency. Strategic recommendations include updating libraries, adding security headers, publishing security policies, and improving WHOIS data visibility.

S

Spark of Hope Foundation

sparkofhopefoundation.org

56

Spark of Hope Foundation is a small non-profit organization focused on alleviating poverty in Tijuana, Mexico through building homes, supporting orphanages, and empowering women via a dedicated women's center. The organization operates service trips for volunteers and relies heavily on donations, including monthly giving programs. The website reflects a well-established charity with over two decades of service, presenting a clear mission and multiple trust signals such as volunteer testimonials and 501(c)(3) status. Technically, the website is built on Webflow with modern web technologies and integrates FoxyCart for ecommerce donations. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is generally good with HTTPS and secure forms, but lacks explicit security headers and privacy/cookie policies, which are important for compliance and trust. No WHOIS data was available due to privacy protection, which is common and justified for non-profits. Overall, the website is trustworthy and professional but could improve privacy compliance and security transparency.

F

Fundació ENT

elvalordelsaliments.cat

42

Fundació ENT operates the website elvalordelsaliments.cat as a non-profit platform dedicated to raising awareness and providing educational resources on food waste and its environmental, cultural, and economic impacts. The organization targets the general public, particularly those interested in sustainability and responsible consumption. The website offers tools such as a food value calculator, culinary recipes, and campaign materials to support its mission. Technically, the site is built on WordPress using the Salient theme and integrates common plugins like Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. The site is mobile optimized and provides a generally good user experience with clear content and navigation. Security-wise, the site uses HTTPS and a cookie consent banner but lacks advanced security headers and a visible security policy or incident response contact. The absence of WHOIS registration data for the domain raises some concerns about domain legitimacy, although the website content and contact information align with a known foundation in Spain. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer privacy documentation.

O

orchIDEAS s.r.o.

dobromat.sk

57

Dobromat.sk is a Slovak non-profit platform established in 2016 by orchIDEAS s.r.o. that enables users to support charitable organizations through their online shopping activities. The website facilitates donations by redirecting users to partner shops and allocating a percentage of the purchase to a selected non-profit. The platform enjoys a solid market position with over a thousand partner shops and thousands of supported organizations, supported by user testimonials and active social media presence. Technically, the site uses modern web technologies including Google Analytics, Facebook Pixel, and affiliate tracking tools, with a custom CMS backend. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are missing. Overall, the domain registration and business information are consistent and legitimate, supporting a trustworthy online presence.

D

Design Museum

designmuseum.org

60

The Design Museum is a well-established non-profit institution based in London, dedicated to contemporary design. It offers a wide range of exhibitions, educational programs, events, and retail services, positioning itself as a world-leading museum in its sector. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding. Technically, the site employs multiple modern analytics and marketing tools, uses HTTPS, and maintains domain security through registrar locks, though DNSSEC is not enabled. Security policies and incident response information are not publicly detailed, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with privacy regulations, including GDPR.

L

Landseer Klub

landseerklub.eu

57

Landseer Klub Slovakia is a non-profit organization dedicated to the Landseer dog breed, focusing on breeding standards, education, and organizing related events. The website serves as an official platform for club members and enthusiasts, providing information on breeding, competitions, and club activities. Technically, the site is built on WordPress with Elementor and WPML, supporting multilingual content and a moderate performance profile. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. The absence of public WHOIS data is due to privacy protection by EURid, which is justified for this type of non-profit entity. Overall, the site is legitimate, well-branded, and serves its community effectively, though improvements in privacy compliance and security best practices are recommended.

A

ASV Hiltenfingen

asvhiltenfingen.de

42

ASV Hiltenfingen is a local non-profit sports club based in Germany, offering a variety of sports activities including football, gymnastics, and youth programs. The website serves as an information hub for members and the local community, providing event details, hall occupancy plans, and galleries. The club maintains an active social media presence on Facebook and Instagram, enhancing community engagement. Technically, the website is built on WordPress using modern plugins and page builders, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, suitable for its community-oriented purpose.

V

Volleyball Foundation

volleyballfoundation.com

63

The Volleyball Foundation is a non-profit initiative established in 2024 by the FIVB to leverage volleyball's global reach for community upliftment through impactful projects. The foundation operates globally, targeting communities, donors, and the social impact sector with services including project support, fundraising, advocacy, and partnerships. The website is professionally built on WordPress using Elementor and GiveWP for donations, with integrated Google Analytics and Stripe payment processing. While the technical infrastructure is modern and secure with HTTPS and Cloudflare DNS, there are gaps in privacy compliance such as missing privacy and cookie policies and no GDPR consent mechanism. Security posture is good but could be enhanced by enabling DNSSEC and adding security headers. Overall, the site presents a credible and trustworthy image but should improve transparency and compliance documentation.

C

Centrum pre filantropiu n.o.

eprojekty.sk

61

The website eprojekty.sk is an online platform operated by Centrum pre filantropiu n.o., focused on managing foundations and their public benefit projects in Slovakia. It provides a streamlined process for submitting, managing, and evaluating grant applications, targeting organizations and individuals seeking financial support for public benefit activities. The platform collaborates with multiple well-known Slovak foundations, enhancing its credibility and market position within the non-profit sector. Technically, the site uses a modern React-based frontend with modular JavaScript and CSS, ensuring good mobile optimization and a professional user experience. The site is accessible without WAF or blocking mechanisms, though some standard security headers are not visibly present. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. However, no cookie consent mechanism was found despite GDPR applicability. From a security perspective, the platform enforces HTTPS and avoids exposing sensitive data. There is no published security policy or incident response information, and no vulnerability disclosure mechanism is evident. The domain registration uses privacy protection, which is justified for this non-profit entity. Overall, the security posture is moderate but could be improved with additional headers and transparency. The overall risk is low given the nature of the platform and its audience, but strategic improvements in security policies, cookie consent, and incident response transparency are recommended to enhance trust and compliance.

Nadácia Orange is a Slovak non-profit foundation focused on education, community development, philanthropy, and charity, operating under the auspices of Orange Slovensko. The website presents a professional and well-structured digital presence, targeting general audiences interested in social impact and grant programs. The foundation leverages modern web technologies including WordPress and Elementor, ensuring a responsive and user-friendly experience. While the site integrates standard tracking and advertising tools such as Google Analytics and Adform, it lacks a formal cookie consent mechanism, which is a notable privacy compliance gap. Security posture is generally good with HTTPS enforced, but the absence of key security headers suggests room for improvement. Overall, the domain registration and business information are consistent and trustworthy, supporting the foundation's legitimacy.

B

BARANI – Hokejová škola Michala Handzuša o.z.

barani.sk

57

BARANI is a Slovak non-profit youth hockey school founded in 2020, dedicated to nurturing children's passion and skills in hockey. The organization focuses on community engagement, youth development, and fostering teamwork and sportsmanship. The website reflects a well-structured digital presence with clear branding, partner collaborations, and active social media channels. Technically, the site is built on WordPress using modern themes and plugins, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, DNSSEC, and reCAPTCHA, though additional security headers and policies could enhance protection. Privacy compliance is addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site demonstrates a trustworthy and professional online presence suitable for its target audience.

V

Verbraucherzentrale Bundesverband

was-alle-staerkt.de

53

The Verbraucherzentrale Bundesverband (vzbv) is a leading non-profit consumer protection organization in Germany, acting as an umbrella for 16 consumer centers and multiple advocacy groups. The website focuses on consumer rights, political advocacy, and public information, particularly around the 2025 Bundestag election. The organization provides services such as consumer advice, collective lawsuits, publications, and events. The site is well-structured, professionally designed, and targets German consumers and stakeholders interested in consumer policy. Technically, the site is built on Drupal 10, uses modern libraries like Font Awesome, and integrates Matomo for analytics. Security posture is good with HTTPS and secure forms, though explicit security policies and vulnerability disclosures are absent. Contact information is clear and professional, including email and phone contacts for press and general inquiries. Overall, the site is trustworthy, content-rich, and compliant with GDPR and privacy standards.

V

Verbraucherzentrale

lebensmittel-forum.de

58

The Lebensmittel-Forum website is an interactive consumer advisory platform operated by the Verbraucherzentrale, focusing on food and nutrition topics. It provides a free question-and-answer forum where consumers can ask questions related to food safety, nutrition, labeling, and other related topics. The platform publishes selected answers while respecting data privacy. The target audience is primarily German-speaking consumers interested in food and nutrition information. The website is positioned as a trusted non-profit resource in the consumer protection sector in Germany. Technically, the site is built on Drupal 10 CMS, leveraging modern web technologies such as jQuery, lazy loading for images, and Matomo for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with good navigation and content structure. Hosting details are not explicitly disclosed but DNS records indicate professional domain management via domaincontrol.com. From a security perspective, the site uses HTTPS and follows basic security best practices, though it lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. No incident response or vulnerability disclosure information is published. Overall, the website is professionally maintained, trustworthy, and safe for general audiences. Strategic improvements include implementing cookie consent, enhancing security headers, and publishing security and incident response policies to strengthen compliance and trust.

D

Deutsche Stiftung Verbraucherschutz

verbraucherstiftung.de

56

The Deutsche Stiftung Verbraucherschutz is a German non-profit foundation dedicated to strengthening consumer protection by promoting consumer education. Founded by the Verbraucherzentrale Bundesverband and its member organizations, it focuses on empowering especially young people to make informed and sustainable consumption decisions. The website reflects a professional and comprehensive digital presence, built on Drupal 10, with modern analytics and privacy mechanisms in place. The organization maintains a strong market position within the consumer protection sector in Germany, supported by partnerships and testimonials from reputable entities. Security posture is solid with HTTPS and cookie consent implemented, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-branded, and provides clear contact information and legal disclosures.

V

Verbraucherzentrale Schleswig-Holstein

vzsh.de

61

Verbraucherzentrale Schleswig-Holstein is a well-established non-profit consumer advice and advocacy organization serving the Schleswig-Holstein region in Germany. The website provides comprehensive information, consultation services, educational resources, and political advocacy to protect and empower consumers. It targets a broad audience including consumers, educators, refugees, and vulnerable groups. The organization maintains a strong digital presence with multiple social media channels and external project partnerships. Technically, the website is built on Drupal 10 with modern JavaScript libraries and includes features such as lazy loading images, sliders, and integrated analytics via Matomo. The site is mobile-optimized and accessible, with clear navigation and professional design. However, some security headers are not explicitly detected, and cookie consent mechanisms appear to be missing, which could be improved for compliance. Security posture is moderate with HTTPS implied but no explicit security headers found in the provided data. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable or malformed, which slightly reduces trust but is not uncommon for privacy reasons. Overall, the site is trustworthy and professional, serving an important public interest role. Recommendations include enhancing security headers, implementing explicit cookie consent, and publishing incident response or security policies to improve transparency and compliance.

V

Verbraucherzentrale Sachsen-Anhalt

vzsa.de

57

Verbraucherzentrale Sachsen-Anhalt is a regional non-profit consumer protection organization providing advisory, educational, and advocacy services primarily in the German state of Sachsen-Anhalt. Their offerings cover a broad range of consumer topics including energy, finance, health, digital issues, environment, and contracts. The website is well-structured, professionally designed, and targets a wide audience including students, seniors, caregivers, and general consumers. It serves as a trusted resource for consumer rights and information. Technically, the website is built on Drupal 10 with modern JavaScript libraries and analytics tools such as Matomo. The site demonstrates good mobile optimization, accessibility, and SEO practices. However, some security best practices like explicit security headers and cookie consent mechanisms could be improved. The domain registration data aligns well with the website's claims, supporting its legitimacy. Security posture is moderate with HTTPS usage and no visible vulnerabilities, but lacks published security policies or incident response contacts. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, though cookie consent is not explicitly implemented. Overall, the site is trustworthy, professional, and serves its mission effectively.

V

Verbraucherzentrale Saarland

vz-saar.de

57

Verbraucherzentrale Saarland is a regional consumer protection organization in Germany providing comprehensive advice, education, and advocacy services to consumers in Saarland. The website is well-structured, professionally designed, and offers a wide range of consumer-related information and services including energy consulting, debt counseling, and legal support. The organization targets a broad audience including vulnerable groups such as refugees, seniors, and students. Technically, the site is built on Drupal 10 with modern web technologies and integrates Matomo analytics for user tracking. Security posture is moderate with room for improvement in security headers and explicit cookie consent mechanisms. Overall, the site is trustworthy and aligns with GDPR compliance through a comprehensive privacy policy.

V

Verbraucherzentrale Nordrhein-Westfalen

verbraucherzentrale.nrw

64

Verbraucherzentrale Nordrhein-Westfalen is a prominent non-profit consumer protection organization serving the German state of North Rhine-Westphalia. The website offers extensive consumer advice, educational resources, legal support, and various projects focused on energy, environment, digital world, and health. It maintains a strong market position as a trusted regional consumer advocate with a large network of local advisory offices and online services. Technically, the site is built on Drupal 10 with modern web technologies, optimized for mobile and accessibility, and integrates analytics and marketing tools such as Matomo and Newsletter2Go. Security posture is adequate with HTTPS usage and no visible sensitive data exposure, though security headers and explicit cookie consent mechanisms could be improved. WHOIS data is privacy protected, which is typical and justified for such an organization. Overall, the website is professional, trustworthy, and well-maintained, serving a broad audience including consumers, educators, and vulnerable groups.

V

Verbraucherzentrale Hessen

verbraucher.de

58

Verbraucherzentrale Hessen is a regional consumer protection organization in Germany providing comprehensive advisory, educational, and advocacy services to consumers in Hessen. The website is professionally designed, content-rich, and well-structured, targeting a broad audience including special groups such as students, parents, and seniors. Technically, the site is built on Drupal 10 with modern libraries and analytics tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security headers and incident response information are absent. Privacy compliance is good with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and authoritative in its domain.

M

Mercy Chefs

mercychefs.com

62

Mercy Chefs is a well-established non-profit organization founded in 2006, dedicated to providing hot, chef-prepared meals to individuals facing disaster recovery and daily hardships. The organization has a clear market position as a trusted provider of food aid and disaster relief services. Their website reflects a professional and consistent brand image, targeting a general audience in need of humanitarian assistance. Technically, the website is built on WordPress with popular plugins such as WooCommerce, Elementor, and Gravity Forms, supported by Google Tag Manager and Facebook Pixel for analytics and marketing. The hosting is likely provided by GoDaddy, consistent with the WHOIS data. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is functional, trustworthy, and professionally maintained, with room for enhancements in security and privacy compliance.

C

camindu GmbH

aktion-barrierefrei.de

48

Aktion Barrierefrei, operated by camindu GmbH, is a German initiative focused on promoting accessibility. The website analyzed is a placeholder page indicating a move to a new domain (aktion-barrierefrei.org), which hosts the main content and services. The business targets organizations and individuals interested in accessibility solutions, offering consulting and informational services. The company is small-sized and operates primarily within the non-profit sector in Germany. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and slider libraries, with good mobile optimization and basic SEO. Security posture is moderate with HTTPS enforced but lacks explicit security headers and formal security policies. Privacy compliance is strong with clear privacy and cookie policies, and GDPR adherence is indicated. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, professional, and trustworthy but limited in content on this domain due to redirection.

Záhrada CNK is a well-established cultural and community center based in Slovakia, focusing on hosting diverse cultural events such as performances, workshops, and festivals. The website reflects a strong local presence with clear event information and community engagement. Technically, the site is built on WordPress using Elementor, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and DNSSEC enabled, though there is room for improvement in security headers and vulnerability disclosure. Privacy compliance is partial, with privacy policy documents available but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and serves its community effectively.

K

Kreisjugendring Lichtenfels

kjr-lichtenfels.de

50

Kreisjugendring Lichtenfels is a regional non-profit organization operating as part of the Bavarian Youth Ring, serving as a central hub for youth organizations in the Lichtenfels district of Germany. The organization provides youth programs, event coordination, equipment lending, and support services to local youth groups and associations. Their website reflects a professional and community-focused approach, with clear navigation and relevant content tailored to their audience. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries, ensuring a stable and maintainable infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Privacy compliance is addressed with a privacy policy and cookie consent, but no explicit terms of service or incident response policies are visible. Overall, the site is trustworthy, well-maintained, and serves its community effectively.

H

Historischer Verein Neuburg an der Donau e.V.

stadtmuseum-neuburg.de

55

The Stadtmuseum Neuburg an der Donau is a small non-profit cultural institution operated by the Historischer Verein Neuburg an der Donau e.V. The museum offers permanent and special exhibitions focused on the local history and culture of Neuburg an der Donau, targeting general public and cultural enthusiasts. The website is well-structured, content-rich, and provides comprehensive information about exhibitions, history, and visitor information. Technically, the site uses a legacy CMS (RoSys® Truevision) with Bootstrap and jQuery 1.9.1, which is outdated and poses some security risks. The site implements GDPR-compliant cookie consent with Matomo Analytics using IP anonymization, reflecting good privacy practices. However, no explicit security or incident response policies are published, and some security headers appear missing. Overall, the site is trustworthy and professional but would benefit from technical updates and enhanced security measures.

I

Inclusion Canada

inclusioncanada.ca

61

Inclusion Canada is a Canadian national federation dedicated to advancing the full inclusion and human rights of people with intellectual disabilities and their families. Established in 2012, it operates as a medium-sized non-profit organization with a strong market position as a leading advocate in the disability rights sector. The organization provides advocacy, community transformation, and resource services, targeting individuals with intellectual disabilities, their families, and stakeholders in Canada. The website reflects a professional and consistent brand with clear messaging and a focus on inclusion and rights advocacy. Technically, the website is built on WordPress with modern plugins and technologies such as jQuery, FontAwesome, and multilingual support via WPML. It employs Google Analytics for tracking and CleanTalk for anti-spam protection. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting details are limited but the domain is registered with DomainPeople, Inc., a reputable registrar. From a security perspective, the site uses HTTPS with a good SSL configuration and employs anti-spam and captcha protections on forms. However, DNSSEC is not enabled, and no explicit security headers were detected, indicating room for improvement. Privacy compliance is partial, with a privacy policy present but no clear cookie consent mechanism. No incident response or security policy pages were found. Overall, the website is trustworthy and professional, with a strong business credibility score. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent mechanisms, and enhancing privacy compliance to align with GDPR standards. These improvements would strengthen the security posture and user trust further.

K

Klima-Bündnis e.V.

klimabuendnis.org

53

Klima-Bündnis e.V. is a well-established European non-profit network of municipalities partnering with indigenous peoples to address the global climate crisis. With over 2,000 members across more than 25 countries, it holds a leading position in facilitating local climate action aligned with global responsibility. The website reflects a professional and consistent brand presence, offering multilingual content and clear calls to action for membership and engagement. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and employs self-hosted Matomo analytics respecting user privacy. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the site is trustworthy, informative, and well-maintained.

F

Fürstlich und Gräflich Fuggersche Stiftungs-Administration

fuggerei-next500.de

47

The website www.fuggerei-next500.de represents the Fürstlich und Gräflich Fuggersche Stiftungs-Administration, a historic non-profit foundation providing social housing and social engagement initiatives rooted in the Fuggerei community in Augsburg, Germany. The site commemorates the 500-year legacy of the Fuggerei and promotes the global applicability of its core social ideas under the 'Fuggerei NEXT500' initiative. The foundation is positioned as a socially significant entity with a medium organizational size and a strong cultural heritage. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and SVG graphics, hosted on Schlundtech infrastructure. It integrates Matomo Analytics with privacy-conscious settings and provides a cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. However, formal security policies and incident response contacts are absent, suggesting room for improvement in transparency and security governance. Overall, the website is professional, trustworthy, and aligned with its non-profit mission, with recommendations to enhance security documentation and incident response readiness.

S

Schwazer Frauen

schwazerfrauen.at

44

Schwazer Frauen is a local non-profit advocacy group based in Schwaz, Austria, focused on promoting gender equality and combating violence against women and children. The organization collaborates with the city government and local experts to organize awareness campaigns, educational courses, and community support initiatives such as the Frauen-Nacht-Taxi for safe transportation. The website serves as an informational and promotional platform for these activities, targeting women and girls in the local community. Technically, the website is built on WordPress using the Avada theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is mobile-optimized and includes multimedia content such as images and videos to engage visitors. Hosting appears to be managed through a local Austrian registrar and hosting provider, with HTTPS enabled for secure communications. From a security perspective, the site benefits from HTTPS but lacks several security headers that could enhance protection. No privacy or cookie policies are present, which represents a compliance gap with GDPR and related regulations. No explicit contact information or incident response channels are published, limiting transparency in security and privacy matters. Overall, the website is trustworthy and professional in its presentation and content but would benefit from improved privacy compliance and enhanced security practices to better protect users and demonstrate regulatory adherence.

I

Inclusion Winnipeg

inclusionwinnipeg.org

53

Inclusion Winnipeg is a Canadian non-profit organization dedicated to advocating for the inclusion and equal citizenship of people with disabilities in Winnipeg and surrounding areas. It is part of a larger national and international federation, Inclusion Canada and Inclusion International, respectively. The website provides information about membership, advocacy services, events, and volunteer opportunities, positioning the organization as a regional leader in disability inclusion advocacy. The site is professionally designed, mobile-optimized, and uses modern WordPress technologies and plugins to deliver content effectively. Technically, the website is built on WordPress with Oxygen Builder and optimized using WP Rocket. It integrates accessibility tools such as the ACSB app and uses Font Awesome for icons. Performance is moderate with good mobile responsiveness and SEO optimization. Analytics are handled via Fathom Analytics, indicating a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS and uses performance plugins that may enhance security. However, it lacks published privacy and cookie policies, security headers, and incident response information, which are areas for improvement. The domain registration is privacy-protected but consistent with the organization's profile and age, indicating legitimacy. Overall, Inclusion Winnipeg's website is a trustworthy and professional platform for its advocacy mission but should enhance privacy compliance and security transparency to improve user trust and regulatory adherence.

B

Bundesverband Soziokultur e.V.

utopolis.online

47

Utopolis.online is a German non-profit cultural initiative operated by Bundesverband Soziokultur e.V., focusing on promoting socio-cultural activities in urban neighborhoods through artistic and community engagement projects. The website serves as an information hub for the UTOPOLIS program, showcasing project results, providing a toolbox of methods, and sharing news and events. The platform targets cultural practitioners, local communities, and stakeholders interested in neighborhood development through culture. Technically, the site is built on WordPress with modern plugins and frameworks, including Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and integrates cookie consent mechanisms, reflecting good privacy compliance. Security posture is adequate with HTTPS and domain transfer protection, though DNSSEC is not enabled and security headers are missing, representing areas for improvement. No contact emails or phone numbers are explicitly provided, which may limit direct communication. Overall, the site is trustworthy, professionally maintained, and aligned with its non-profit mission.

B

Bundesverband Soziokultur e.V.

soziokultur.de

45

Bundesverband Soziokultur e.V. is a German non-profit umbrella organization supporting socio-cultural institutions with programs, advocacy, and resources focused on sustainability, democracy, and cultural participation. The website is built on WordPress with a modern tech stack including Leaflet maps, Slick carousel, and Matomo analytics, reflecting a mature digital presence. Security posture is solid with HTTPS and cookie consent, though security headers and explicit incident response policies are absent. Overall, the site is professional, content-rich, and trustworthy, serving a specialized cultural audience effectively.

The Freunde und Förderer der Mediothek Krefeld e.V. is a small non-profit association dedicated to supporting and promoting the Mediothek Krefeld library through cultural and literary activities. The website serves as a hub for event announcements, book recommendations, and community engagement, targeting readers and local supporters. The organization maintains a consistent and professional online presence with clear contact information and social media integration. Technically, the site is built on the Jimdo Creator CMS platform, leveraging Jimdo's hosting and standard JavaScript libraries, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and explicit incident response policies. Privacy compliance is addressed with accessible privacy and cookie policies, aligning with GDPR requirements. Overall, the site is trustworthy, content-rich, and well-maintained, suitable for its community-focused mission.

F

Fugger

fugger.de

48

The Fugger website represents a well-established non-profit cultural foundation dedicated to preserving and promoting the history and heritage of the Fugger family, particularly through the Fuggerei and related museums and archives. The site offers rich content in German with English support, targeting tourists, historians, and cultural enthusiasts. It provides key services such as ticket sales, guided tours, museum information, and foundation administration. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses modern web standards including HTML5, CSS3, and JavaScript, with Matomo Analytics implemented in a privacy-conscious manner. The site is served over HTTPS, ensuring secure communications. While no explicit CMS or hosting provider is identified, the site performance is moderate with good SEO and accessibility features. The cookie consent mechanism is comprehensive, offering granular control over analytics, video, maps, newsletter, and donation scripts. From a security perspective, the site enforces HTTPS and respects user privacy with DoNotTrack enabled and cookies disabled by default in analytics. However, it lacks visible security headers and formal security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with a legitimate domain registration, supporting the site's credibility. Overall, the Fugger website demonstrates a strong cultural and business credibility with good technical and privacy compliance. Strategic improvements could focus on enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.