Non-profit security reports

D

Dobrovolná iniciativa Naše Malešice

malesice.eu

43

The website malesice.eu represents a small, local non-profit volunteer initiative called Naše Malešice, focused on community engagement and cultural preservation in the Malešice area of Prague 10. The site provides information about local events, historical archives, educational trails, and offers a newsletter subscription to keep residents informed. The target audience is primarily local residents and community members interested in cultural and environmental activities. The business model is community-driven without commercial intent, relying on partnerships with local organizations such as ČSOP Natura and Ekofest. Technically, the website uses standard web technologies including JavaScript, Facebook SDK, and Google Analytics for user engagement and tracking. The hosting is provided by a reputable Czech registrar, INTERNET CZ, a.s. The site shows moderate performance and basic mobile optimization but lacks advanced accessibility features. SEO optimization is basic with proper meta tags but no structured data like JSON-LD or Open Graph tags detected. From a security perspective, the site uses HTTPS and includes no visible exposed sensitive data. However, it lacks important security headers and does not publish privacy or cookie policies, which are critical for GDPR compliance. No incident response or security contact information is provided. The use of third-party scripts like Facebook and Google Analytics introduces moderate user tracking without clear privacy disclosures. Overall, the website is safe, trustworthy, and professional for a small community initiative but requires improvements in privacy compliance, security headers, and contact transparency to enhance trust and regulatory adherence.

Pražská Organizace Vozíčkářů is a Czech non-profit organization dedicated to supporting wheelchair users in Prague. The website serves as an informational portal providing news, events, membership details, and advisory services. It targets wheelchair users and their supporters, promoting accessibility and social inclusion. The organization has a long-standing presence since 2002, reflected in the domain age and content updates. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, offering a moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms such as privacy and cookie policies. No contact emails or phone numbers are explicitly provided on the main page, which may impact user trust and communication. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

N

Natura Praha - „Natura, quo vadis?“

natura-praha.org

54

Natura Praha - „Natura, quo vadis?“ is a small non-profit organization affiliated with the Český svaz ochránců přírody, focused on nature conservation, environmental education, and community initiatives in Prague 10 – Malešice. Founded in 1980, it operates various programs including youth nature protection groups and ecological centers. The website reflects a well-structured and professionally maintained digital presence, leveraging WordPress and modern web technologies to deliver content effectively to its audience. The site is optimized for mobile and includes GDPR-compliant cookie consent mechanisms, demonstrating awareness of privacy regulations. Security posture is solid with HTTPS and reCAPTCHA integration, though additional security headers and incident response documentation could enhance protection. The absence of WHOIS data limits domain trust verification but the organization's branding and contact transparency support legitimacy. Overall, the website is a reliable and professional platform for the organization's mission and community engagement.

ecomonitor.cz is a Czech environmental news and monitoring portal operated by the civic association BEZK since 1999. It aggregates and publishes news, articles, and press releases related to ecology, environmental protection, and sustainability, targeting Czech-speaking audiences interested in these topics. The website offers search functionality for its content and links to various reputable Czech media sources. Technically, the site uses basic HTML, CSS, and JavaScript with a custom CMS called Toolkit. The design and user experience are functional but basic, with limited mobile optimization and accessibility features. Security posture is weak due to lack of visible HTTPS enforcement, security headers, and privacy policies. The site uses third-party ad networks and tracking pixels without explicit consent mechanisms, indicating GDPR compliance gaps. Overall, the website is legitimate and consistent with its stated mission but requires improvements in security and privacy compliance to enhance trust and user protection.

Abortion Without Borders is a non-profit initiative launched in 2019 that collaborates with nine organizations across multiple countries to provide comprehensive abortion support services. These services include information dissemination, financial assistance, translation, accommodation, and emotional support primarily targeting people in Poland and displaced persons from Ukraine. The website serves as a central hub for accessing these services and connecting with partner organizations. Technically, the website is built on WordPress using the GeneratePress theme and Gravity Forms for contact and data collection, with FundraiseUp integrated for donations. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is adequate with HTTPS enabled and spam protection in forms, but lacks advanced security headers and explicit privacy or cookie policies, which are compliance gaps. Overall, the site is trustworthy and professional, with clear contact information and partner links, but would benefit from enhanced privacy compliance and security hardening.

W

Women Help Women International Foundation

womenhelp.org

56

Women Help Women International Foundation operates a multilingual website focused on providing access to abortion pills, contraceptives, and reproductive health information globally. The organization positions itself as a non-profit activist and service provider in reproductive rights, targeting individuals seeking reproductive health services and activists. The website offers consultation services, educational resources, and activism support, reflecting a clear mission and consistent branding. Technically, the site uses Zotonic CMS with Bootstrap and integrates Google Analytics and Tag Manager for tracking, demonstrating moderate digital maturity with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, and does not publish explicit security or incident response policies. Privacy compliance is partial, with no cookie policy or consent mechanism detected, though IP anonymization in analytics is a positive indicator. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve in security and privacy transparency.

Z

ZO ČSOP "Natura, quo vadis?"

nastezky.eu

31

The website 'Na stezky, pro všechny!' is a small-scale non-profit project focused on promoting and providing accessible educational nature trails in Prague. It aims to enhance environmental awareness and accessibility for all visitors, including seniors and wheelchair users. The project is supported by local government bodies and environmental organizations, positioning it as a trusted community initiative. The website content is primarily in Czech and provides detailed information about various trails, including maps and accessibility evaluations. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Modernizr. It integrates Google Analytics and Google Tag Manager for visitor tracking. The site is hosted by WEDOS Internet, a reputable Czech hosting provider. While the design and content quality are good, the site lacks HTTPS, which is a significant security concern. Mobile optimization and accessibility are basic but functional. From a security perspective, the absence of HTTPS and security headers reduces the site's security posture. No privacy policy or terms of service are published, which impacts GDPR compliance. The cookie consent banner is present, indicating some awareness of privacy requirements. No forms or sensitive data collection points were detected, reducing immediate risk exposure. Overall, the security maturity is low to moderate, with room for improvement. The overall risk is moderate given the non-commercial nature of the site and limited data collection. Strategic recommendations include implementing HTTPS, publishing privacy and security policies, adding security headers, and enhancing privacy compliance. These steps will improve user trust and regulatory adherence while reducing potential vulnerabilities.

A

Aborcyjny Dream Team

adt.pl

66

Aborcyjny Dream Team (ADT) is a well-established non-profit organization founded in 2013, focused on providing abortion support, legal aid, and education primarily in Poland. The organization operates as part of the largest abortion support network in Europe, assisting tens of thousands annually. Their website is professionally designed using modern static site generation technology (MkDocs) and integrates secure payment processing and privacy-respecting analytics. Contact information is clearly presented, including multiple emails and a phone number, alongside active social media channels. The content is comprehensive, targeting women and individuals seeking abortion-related support and information. Security posture is strong with HTTPS and no visible vulnerabilities, though cookie consent mechanisms and explicit security policies are absent, representing minor compliance gaps. WHOIS data confirms domain legitimacy and consistent registration history. Overall, ADT demonstrates a mature digital presence with high trustworthiness and user experience.

V

VIA Schankhalle Pfefferberg gGmbH

pfefferberg-theater.de

52

Pfefferberg Theater is a small, non-profit cultural institution based in Berlin, Germany, offering a diverse range of theatrical performances including contemporary circus, dance, family shows, and live literature readings. The organization emphasizes artistic quality and inclusivity, partnering with local gastronomy and cultural entities to enhance visitor experience. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience of arts and culture enthusiasts. Technically, the website employs modern web technologies including JavaScript libraries, CSS frameworks, and accessibility tools such as ReadSpeaker. It integrates third-party services like Vimeo for video content and Google Analytics for visitor tracking, while maintaining GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are not explicitly detected. From a security perspective, the site uses HTTPS and enforces cookie consent with granular user control, but lacks visible security policies or incident response information. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is partially consistent with the website's German location and business nature, with no suspicious patterns detected. Overall, the site presents a low-risk profile with good privacy compliance and a solid security posture. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

E

Elektrowin

recyklujteshasici.cz

49

The website 'Projekt RSH - Recyklujte s hasiči' is a Czech environmental initiative focused on promoting the recycling of electrical waste in cooperation with volunteer fire brigades across the Czech Republic. Established in 2011 and operated under the collective system Elektrowin, it has grown to include nearly 1800 fire corps, collecting tens of thousands of tons of electronic waste. The program incentivizes participation through financial rewards and community engagement, positioning itself as a leader in this niche environmental sector. Technically, the website employs modern web technologies including Bootstrap 5, jQuery, FontAwesome, and Google Maps API for interactive features such as the map of participating fire brigades. It is hosted on a Czech hosting provider and uses HTTPS with good SSL configuration. The site includes cookie consent mechanisms and integrates Google Analytics and Facebook Pixel for tracking and marketing purposes, reflecting a moderate level of digital maturity. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks explicit advanced security headers and a dedicated security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing a domain age appropriate for the program's history and no privacy protection, which is suitable for a public-facing non-profit initiative. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its target audience of volunteer fire brigades and environmentally conscious citizens. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure mechanism to further strengthen trust and security posture.

E

ELEKTROWIN a.s.

jsemzpet.cz

51

The website 'Jsem zpět' is a non-profit project managed by ELEKTROWIN a.s., focused on the reuse and redistribution of functional used electrical appliances to needy individuals and charitable organizations in the Czech Republic. The project supports environmental sustainability by extending the lifecycle of appliances through expert inspection, repair, and safe redistribution, while ensuring non-compliant devices are recycled responsibly. The site targets donors of used appliances, service partners, and beneficiaries such as social institutions. Technically, the website uses a custom stack with jQuery 2.1.4 and NetteForms, hosted on hosting-zdarma.net, with basic mobile optimization and moderate performance. Security measures include cookie consent and HTTPS usage, but lack explicit security headers and use an outdated jQuery version, which may pose risks. Privacy compliance is partial, with no explicit privacy policy or terms of service found, though cookie consent is implemented. The domain is legitimate, registered since 2015, consistent with the project timeline and business claims. Overall, the site is professional, trustworthy, and content-rich, but could improve in security and privacy transparency.

Hans-Böckler-Stiftung is a German non-profit foundation affiliated with the German Trade Union Confederation (DGB), focusing on labor participation, research funding, and scholarships. The website serves as an information portal for its institutes and services, targeting researchers, students, and labor organizations. The foundation maintains a solid market position within the non-profit sector in Germany, supported by multiple specialized research institutes. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, with integration of a consent management platform (Usercentrics) and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. Security posture is moderate, with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the website is professional and trustworthy, though it could improve transparency by publishing privacy policies, terms of service, and incident response contacts.

A

AFCEM

afce-monaco.org

57

AFCEM is a non-profit association based in Monaco dedicated to supporting women entrepreneurs. The organization focuses on enhancing visibility, fostering solidarity, promoting cultural understanding, and facilitating business development among women business leaders. The website serves as a professional platform to showcase the association's mission, events, and members, targeting women entrepreneurs primarily in Monaco but also connected globally through the FCEM network. Technically, the site is built on Squarespace, leveraging modern web technologies and providing a responsive, user-friendly experience. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the site is trustworthy and professional, though improvements in privacy and security documentation are recommended.

G

Greek Association of Women Entrepreneurs – SEGE

fcem2025.com

52

The website fcem2025.com serves as the official platform for the 2025 FCEM World Congress, an international event focused on women entrepreneurs and sustainable futures, hosted in Athens, Greece. The site targets women entrepreneurs globally, providing event information and promoting networking opportunities. The business model centers on event organization and promotion within the non-profit sector. The site content is professionally presented, multilingual, and well-structured, reflecting a good level of digital maturity. Technically, the site is built on WordPress with WooCommerce and WPBakery Page Builder, leveraging Google Tag Manager for analytics. The hosting provider is Hosting Concepts B.V., and the domain is very recently registered, consistent with event-specific domains. Security posture is moderate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security measures.

W

weconnectinternational.org

weconnectinternational.org

67

WEConnect International is a well-established non-profit organization founded in 2008, dedicated to empowering women-owned businesses globally by providing certification, membership, and networking opportunities. The organization positions itself as a global leader in facilitating connections between women entrepreneurs and buyer members, supported by a professional website with clear branding and relevant content. The technical infrastructure is based on WordPress with modern enhancements including Alpine.js and integration with HubSpot marketing and analytics tools, complemented by a chatbot powered by Botpress. The website demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections in place, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is strong with a visible cookie consent mechanism and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and aligned with the organization's mission and business model.

K

Käte Ahlmann Stiftung

kaete-ahlmann-stiftung.de

46

The Käte Ahlmann Stiftung is a German non-profit organization focused on mentoring success-oriented women entrepreneurs through its #TWINmentoring program. The website presents a professional and well-structured platform offering a year-long mentoring experience with experienced businesswomen, fostering personal and business growth. The target audience is women entrepreneurs seeking guidance and networking opportunities. Technically, the site is built on WordPress using common frameworks and plugins, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CAPTCHA protections, though lacking advanced security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible with clear contact information and partner affiliations.

F

FidAR e.V.

fidar.de

44

FidAR e.V. is a German non-profit organization dedicated to increasing the representation of women in supervisory boards and leadership roles within the economy. The website serves as a comprehensive platform offering research indices, advocacy, educational programs, and partnership information to support gender diversity in corporate governance. The organization targets women professionals, policymakers, and corporate stakeholders interested in gender equality. Technically, the site is built on TYPO3 CMS, uses standard JavaScript libraries like jQuery and Owl Carousel, and is hosted on German servers with secure HTTPS and cookie consent mechanisms in place. Security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. The site is professional, well-branded, and trustworthy with clear contact details and social media presence. No critical vulnerabilities or suspicious content were detected.

F

FCEM Femmes Chefs d'Entreprises Mondiales

fcem.org

52

FCEM (Femmes Chefs d'Entreprises Mondiales) is a well-established global non-profit association founded in 1945, dedicated to connecting women entrepreneurs worldwide. The organization operates as a membership network with over 120 countries and millions of businesses represented. It holds consultative status with major international bodies such as the United Nations and the Council of Europe, reinforcing its credibility and influence. The website serves as a hub for information on events, awards, and educational resources, targeting women business leaders and national associations globally. Technically, the site is built on WordPress with a modern theme and includes standard plugins for analytics and cookie consent, hosted by OVH sas. Security posture is good with HTTPS and domain protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission.

B

Business and Professional Women (BPW) Germany e.V.

equalpayday.de

50

The website www.equalpayday.de represents the Equal Pay Day campaign managed by Business and Professional Women (BPW) Germany e.V., a non-profit organization advocating for gender pay equality and pay transparency in Germany. The site provides campaign information, educational resources, event details, and engages a broad audience including employees, employers, and policymakers. It holds a solid market position as an established awareness campaign with governmental and societal support. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by plugins like JetEngine and Borlabs Cookie for cookie management. The site is HTTPS secured, mobile optimized, and employs structured data for SEO and social media integration. Performance is moderate with good design and navigation clarity. From a security perspective, the site uses HTTPS and includes sanitization libraries like DOMPurify, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or suspicious content were detected. Privacy compliance is partial, with cookie consent implemented but no explicit privacy policy page found. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements include publishing comprehensive privacy and security policies, implementing security headers, and adding vulnerability disclosure information to enhance trust and compliance.

E

EMA e.V.

ema-germany.org

41

EMA e.V. is a well-established non-profit association based in Germany, dedicated to fostering economic and cultural cooperation between Europe and the Mediterranean Arab region. The organization offers a range of services including workforce recruitment, market studies, international cooperation projects, and organizes various events such as business delegations and expert roundtables. The website reflects an active and professional presence with multilingual support and detailed content tailored to businesses and professionals interested in Euro-Mediterranean-Arab relations. Technically, the site is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and clientTransferProhibited domain status, though improvements like DNSSEC and explicit security policies could enhance trust further. Overall, EMA e.V. presents a credible and trustworthy digital presence aligned with its business mission.

B

Berliner Erklärung

berlinererklaerung.de

58

The Berliner Erklärung website represents a well-established non-profit coalition of 23 women's organizations in Germany advocating for gender equality across political, economic, and social spheres. The organization actively engages in political dialogue, public campaigns, and coalition building to influence legislation and promote equal participation of women. The website content is professionally presented in German, targeting politically engaged citizens and equality advocates. The business model is focused on advocacy and policy influence rather than commercial activities. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies such as jQuery and Slick Carousel. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. No major technical debts or vulnerabilities are evident from the provided data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No incident response or vulnerability disclosure policies are publicly available, indicating room for improvement in security transparency. Overall, the website is trustworthy and professional, with a strong alignment between domain registration data and business claims. The absence of tracking scripts and minimal user data collection reflects a privacy-conscious approach. Strategic recommendations include implementing cookie consent, adding security headers, and publishing security policies to strengthen compliance and trust.

G

Gewerkschaft Nahrung-Genuss-Gaststätten (NGG)

ngg.net

59

The website www.ngg.net represents the Gewerkschaft Nahrung-Genuss-Gaststätten (NGG), a large German trade union focused on workers in the food industry, food crafts, and hospitality sectors. The site provides comprehensive information about the union's activities, member services, labor rights advocacy, and sector-specific hotlines. It targets employees and workers in these industries, offering resources such as legal protection, education, and collective bargaining updates. The website is professionally designed, well-structured, and fully accessible, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with Bootstrap and modern frontend tools like Vite and Leaflet for mapping features. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and secure forms, though some advanced security headers could be added. Privacy compliance is robust with clear privacy and cookie policies aligned with GDPR requirements. Contact information is primarily via web forms, with no direct emails or phone numbers exposed. The WHOIS data for the domain is unavailable, showing no registration match, which is unusual but may be due to privacy protection or recent registration. Despite this, the website's professional quality and content indicate legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site scores well on content quality, technical implementation, security, and privacy compliance, with minor deductions due to WHOIS transparency and lack of explicit security policies. Strategic recommendations include enhancing security headers, publishing an incident response policy, and improving transparency around analytics and tracking. These steps would further strengthen trust and security posture.

B

BPM

bpm.de

44

BPM (Bundesverband der Personalmanager) is a leading non-profit professional association in Germany serving approximately 5,000 HR professionals. The organization focuses on networking, professional development, and knowledge exchange through numerous events and specialist groups. The website is well-branded, professionally designed, and targets HR professionals in Germany. Technically, the site is built on WordPress with modern plugins and frameworks such as Bootstrap and jQuery, and it employs consent management and captcha solutions to enhance privacy and security. Security posture is good with HTTPS and consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence.

O

Oranto GmbH

gutes-aufwachsen-mit-medien.de

48

Gutes Aufwachsen mit Medien is a German non-profit initiative focused on promoting positive and responsible media use among children, youth, parents, and educators. The website serves as a central hub offering practical guides, advice, local network connections, online conferences, and newsletters to support media education and youth media protection. Supported by the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth, it holds a credible position in the national educational landscape. Technically, the website is built on TYPO3 CMS, employs Bootstrap for responsive design, and uses Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized, accessible, and SEO-friendly, with good content quality and consistent branding. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics but lacks explicit security headers and a formal security or incident response policy. No cookie consent mechanism was detected, which is a minor compliance gap. The domain registration data is consistent and transparent, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its educational mission, with recommendations to enhance privacy compliance and security posture for improved user trust and regulatory alignment.

S

Stiftung Digitale Chancen

digitale-chancen.de

69

Stiftung Digitale Chancen is a German non-profit foundation dedicated to researching the societal impacts of digitalization and promoting equal internet access for all. Established in 2002 and based in Berlin, the foundation operates various national and international projects focused on digital inclusion, media literacy, and social empowerment, targeting diverse groups including seniors and LGBTQ+ youth. The organization collaborates with partners such as O₂ Telefónica to enhance digital mobility and resilience. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, offering a responsive, accessible, and well-structured user experience. Privacy is respected through clear cookie consent mechanisms and the use of Matomo analytics with IP anonymization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website reflects a professional, trustworthy, and mission-driven organization with strong digital maturity and compliance practices.

S

STEM Ústav empirických výzkumů, z.ú.

stem.cz

49

STEM Ústav empirických výzkumů, z.ú. is a Czech non-profit analytical institute established in 1990, specializing in empirical research and analysis of societal trends, attitudes, and public opinion in the Czech Republic. The organization aims to provide high-quality feedback to support democratic development and evidence-based public policy. The website reflects a professional and consistent brand presence with a focus on research dissemination and public engagement. Technically, the website is built on WordPress using the Elementor page builder, enhanced with modern web technologies such as Google Fonts, Font Awesome, and SiteGround Optimizer for performance. The site is mobile-optimized and includes SEO best practices, although accessibility features could be improved. Google Analytics is used for visitor tracking, and a cookie consent mechanism is implemented to comply with privacy regulations. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, but lacks advanced security headers and visible security policies or incident response information. No vulnerabilities or suspicious elements were detected in the content or linked domains. The absence of WHOIS data due to privacy protection is common for non-profit entities and does not detract from the site's legitimacy. Overall, STEM's website presents a trustworthy and professional digital presence suitable for its research and public policy mission. Strategic improvements in security headers, accessibility, and transparency of privacy and security policies would further enhance its posture.

J

Joachim Herz Stiftung

joachim-herz-stiftung.de

65

The Joachim Herz Stiftung website represents a well-established non-profit foundation focused on promoting innovative solutions in research, education, and climate protection. The organization supports transfer-oriented research, entrepreneurial talent development, and digital transformation in vocational education. The website is professionally designed, built on TYPO3 CMS, and employs privacy-conscious analytics via Matomo with anonymized IP tracking and no cookies. Cookie consent is managed via Cookiebot with a clear consent mechanism. However, explicit privacy policy and terms of service pages were not found in the provided content, which is a compliance gap. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. WHOIS data is minimal, lacking registrant details, which slightly reduces trust but does not contradict the professional nature of the site. Security posture is good with HTTPS and consent management but could be improved by adding security headers and explicit security policies. Overall, the site is trustworthy, privacy-aware, and professionally maintained, serving a medium-sized non-profit audience in Germany.

L

Laxus z.ú.

laxus.cz

46

Laxus z.ú. is a Czech non-profit organization specializing in addiction-related services including counseling, therapy, harm reduction, and prevention programs across five regions. The website demonstrates a mature digital presence with a WordPress CMS using the Divi theme, integrated social media feeds, and Google Analytics for user tracking. While the site is well-structured and content-rich, it lacks explicit privacy and cookie policies, which impacts privacy compliance scores. Security posture is adequate with HTTPS but could be improved by implementing additional security headers and publishing a security.txt file. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for non-profits. Overall, the website is professional, trustworthy, and serves its target audience effectively.

Nadace LANDEK Ostrava is a Czech non-profit foundation dedicated to preserving mining heritage and cultural traditions primarily in the Ostrava-Karviná and Moravian-Silesian regions. The foundation operates a grant program supporting projects related to mining monuments, cultural preservation, and education about mining history. The website reflects a small, regionally focused organization with a history dating back to 2007 and supported by regional government grants. Technically, the website is built with basic HTML, CSS, and JavaScript, hosted on Forpsi servers. It lacks advanced CMS or frameworks and shows basic mobile and accessibility features. There are no detected analytics or tracking technologies, indicating minimal user tracking. From a security perspective, the site uses HTTPS (assumed from domain but not explicitly confirmed in content), but lacks security headers and published security or privacy policies. No contact information or incident response channels are provided, which limits transparency and user trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is functional and serves its informational purpose but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and compliance with modern standards.

Č

Český svaz aerobiku a fitness FISAF.cz

ceskosehybe.cz

49

Česko se hýbe is a Czech non-profit initiative operated by the Czech Aerobics and Fitness Association FISAF.cz, dedicated to promoting healthy lifestyles and physical activity among children, youth, and the general population. The website serves as an official portal for their projects, including competitions and educational programs aimed at schools and sports clubs. The organization has a strong presence in the Czech Republic with numerous partners and active participants. Technically, the website is built on WordPress, utilizing jQuery and Google Fonts, hosted by WEDOS. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security-wise, HTTPS is enforced, and a cookie consent mechanism is implemented, but there is a lack of security headers and formal privacy or security policies published. Overall, the security posture is adequate for a non-profit informational site but could be improved by adding privacy policies, terms of service, and security headers. No critical vulnerabilities or suspicious activities were detected. The domain registration is consistent with the organization's history and location, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving technical security measures to strengthen trust and compliance with regulations.

O

Orel

orel.cz

53

Orel.cz represents a well-established Christian non-profit sports organization in the Czech Republic, focusing on promoting sports activities such as florbal, futsal, and running leagues with an emphasis on fair-play and community engagement. The organization operates multiple projects and events, supported by various regional and national partners, and maintains an active presence through event updates and social media. The domain age and WHOIS data confirm the legitimacy and long-term presence of the organization. Technically, the website relies on older JavaScript libraries like jQuery 1.4.x and plugins such as s3Slider and Thickbox, indicating a legacy codebase with moderate performance and basic mobile optimization. The site lacks modern CMS indicators and does not appear to use advanced analytics or tracking tools, reflecting a minimalistic approach to user data collection. From a security perspective, the site shows weaknesses including outdated libraries with known vulnerabilities, absence of visible security headers, and no explicit HTTPS enforcement information. Additionally, the lack of privacy and cookie policies indicates non-compliance with GDPR and related privacy regulations. Contact information is clearly provided, but no dedicated security or incident response policies are found. Overall, while the website effectively serves its community and business purpose, it requires significant improvements in security posture, privacy compliance, and technical modernization to reduce risks and enhance trustworthiness.

V

Verein Lübzer Land e. V.

luebzerland.de

47

Verein Lübzer Land e. V. operates a regional cultural and informational website focused on the Lübzer Land area in Mecklenburg, Germany. The site provides visitors and locals with information about local attractions such as the planetarium, museum, library, and events, aiming to promote the region and attract new members to the non-profit association. The business model is community and culture-oriented, targeting tourists and residents interested in regional heritage and activities. Technically, the website is built on WordPress 4.9.8 with common plugins like Contact Form 7 and a cookie consent plugin. The hosting appears to be with 1&1 IONOS based on nameservers. The site is moderately optimized for performance and mobile devices but uses outdated software versions, which could pose security risks. SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS and implements cookie consent consistent with GDPR. However, it lacks advanced security headers and runs outdated WordPress and jQuery versions, which could expose it to vulnerabilities. No explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are published, indicating a low maturity in security governance. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content. The main risks relate to technical security due to outdated software. Strategic improvements in software updates, security headers, and published security policies would enhance the site's security posture and compliance.

D

Deutscher Verband für Archäologie e.V.

dvarch.de

51

The Deutscher Verband für Archäologie e.V. (DVA) operates as a non-profit umbrella organization representing archaeological associations and related disciplines in Germany. It serves as a platform for collaboration, advocacy, and dissemination of archaeological knowledge, offering services such as coordinating funding programs, organizing professional committees, and publishing the 'Blickpunkt Archäologie' journal. The website reflects a well-structured, professional presence targeting archaeologists, researchers, and cultural heritage stakeholders. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, delivering a responsive and accessible user experience. The site is hosted securely with HTTPS and includes standard meta tags for SEO and social sharing. However, there is room for improvement in security headers and privacy compliance, notably the absence of a cookie consent mechanism and formal security policies. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The lack of a published security policy, incident response contacts, or vulnerability disclosure reduces transparency but does not indicate immediate risk. The WHOIS data is minimal but consistent with the organization's German identity, supporting legitimacy. Overall, the website is a credible, professional resource for the archaeology community with solid technical foundations and a good security posture. Enhancements in privacy compliance and formal security documentation would further strengthen trust and regulatory adherence.

L

Literaturzentrum Neubrandenburg e.V.

literaturzentrum-nb.de

47

Literaturzentrum Neubrandenburg e.V. is a well-established cultural non-profit organization founded in 1971, dedicated to promoting literature and reading culture in Neubrandenburg and its region. It operates the Brigitte-Reimann-Literaturhaus, offering literary programs, archival resources, and exhibitions. The organization enjoys regional, national, and international recognition, supported by local government and cultural ministries. The website reflects this mission with clear content and a professional presentation. Technically, the website is built on Joomla CMS with Bootstrap 5 and jQuery, ensuring a modern and responsive design. Hosting is managed via kasserver.com, and the site employs HTTPS with a cookie consent mechanism, indicating awareness of privacy compliance. However, some security headers and advanced security policies are not evident, suggesting room for improvement. Security posture is moderate with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a privacy policy and cookie consent present. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust. Overall, the website is trustworthy, professionally maintained, and suitable for its cultural non-profit purpose. Strategic recommendations include enhancing security headers, adding explicit security and incident response policies, and possibly integrating analytics with privacy considerations.

P

Projekt Doma

projektdoma.cz

54

Projekt Doma is a Czech charitable initiative focused on raising funds through the sale of a photographic calendar featuring intimate portraits of famous personalities in their homes. The proceeds support nonprofit organizations Cesta domů and Arkadie, which provide hospice and disability care services. The website is well-branded, professionally designed, and targets a general Czech audience interested in charity and cultural projects. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, and it uses Google reCAPTCHA for form security. Hosting and domain registration are consistent with the Czech Republic location and the project's founding date in 2021. Security posture is good with HTTPS and reCAPTCHA, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

Deutschland summt! is a German non-profit initiative operated by the Stiftung für Mensch und Umwelt, dedicated to bee protection and environmental education. The organization mobilizes citizens, municipalities, and schools across Germany through educational materials, events, and community engagement programs such as planting competitions and wild bee sponsorships. The website serves as a comprehensive platform offering resources, event information, and opportunities for public participation in bee conservation efforts. Technically, the site is built on the Contao CMS platform, leveraging modern web technologies including jQuery, Bootstrap, and Swiper.js for a responsive and user-friendly experience. The site is well-optimized for SEO and accessibility, with clear navigation and mobile responsiveness. Security posture is strong with HTTPS enforced, CSRF protection, and cookie consent mechanisms in place, though some security headers could be enhanced. Privacy compliance is robust, with a detailed privacy policy and GDPR-aligned cookie management. WHOIS data confirms domain legitimacy and consistency with the organization's mission. Overall, the website reflects a professional, trustworthy, and well-maintained digital presence for a medium-sized environmental non-profit.

B

Biosphärengebiet Schwäbische Alb e.V.

biosphaerengebiet-alb.de

50

The website www.biosphaerengebiet-alb.de serves as the official information portal for the UNESCO Biosphere Reserve Schwäbische Alb, operated by the non-profit organization Biosphärengebiet Schwäbische Alb e.V. It provides comprehensive regional information, educational content, event announcements, and promotes sustainable tourism and environmental conservation. The site targets a broad audience including tourists, local residents, and environmental enthusiasts. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates privacy-compliant cookie consent mechanisms and Matomo analytics for user tracking. Security posture is good with HTTPS enforced and basic security best practices observed, though additional security headers and explicit security policies could enhance protection. The domain WHOIS data is limited but shows no suspicious patterns, supporting the site's legitimacy. Overall, the website is professional, trustworthy, and well-optimized for accessibility and SEO.

A

aut. architektur und tirol

aut.cc

52

aut. architektur und tirol is a non-profit cultural institution based in Innsbruck, Austria, dedicated to promoting architecture and building culture in the Tirol region. The organization offers exhibitions, events, publications, and architectural tours, targeting architecture enthusiasts, professionals, and the local community. The website reflects a well-structured and content-rich platform supporting these activities. Technically, the site is built on the Plone CMS platform, utilizing modern web technologies and frameworks such as Patternslib and Slick Slider, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of explicit privacy and cookie policies indicates room for improvement in compliance. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.

I

International Committee for Animal Recording (ICAR)

icar.org

60

The International Committee for Animal Recording (ICAR) operates as a global non-profit organization dedicated to establishing standards and certifications for livestock data management. Their website serves as a comprehensive platform offering certifications for animal identification devices, milk meters, DNA laboratories, and proficiency tests for milk laboratories and bull semen. ICAR maintains a global membership network and organizes conferences to foster collaboration and knowledge exchange in the livestock sector. The site is professionally designed using WordPress and Elementor, reflecting a mature digital presence with good mobile optimization and accessibility. Security measures such as HTTPS and security headers are properly implemented, and privacy compliance is evidenced by a comprehensive privacy policy and cookie consent mechanism. However, explicit contact information and security incident response details are not readily available on the site, which could be improved to enhance trust and transparency.

S

Svaz chovatelů ovcí a koz z.s.

schok.cz

60

Svaz chovatelů ovcí a koz z.s. is a Czech non-profit association dedicated to supporting sheep and goat breeders. Established in 2000, it provides legislative information, event calendars, breeding support, and news updates to its members and the broader agricultural community. The website serves as an information hub with clear navigation and relevant content tailored to its niche audience. Technically, the site employs a custom CMS by Intelligent Webs and integrates multiple modern JavaScript libraries and APIs, including Google Maps and analytics tools, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security headers and published incident response policies, indicating room for improvement. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though enhancements in security and accessibility would strengthen its position.

B

BuGG e.V.

gebaeudegruen.info

51

BuGG e.V. is a German non-profit association focused on promoting building greening and sustainable building practices. The website is professionally designed using WordPress and the Divi theme, targeting German-speaking professionals and stakeholders interested in environmental sustainability in construction. The site includes event listings and informational content relevant to its niche audience. Technically, the website employs modern web technologies and is mobile-optimized, though performance is moderate. Security posture is limited by the absence of visible security headers and privacy policies, and the WHOIS data is malformed, reducing domain trustworthiness. Overall, the site appears legitimate but would benefit from enhanced transparency and compliance features.

S

Suomen Punainen Risti

punaisenristinkauppa.fi

62

Suomen Punainen Risti operates the official Finnish Red Cross online store, offering a variety of products including preparedness items, reflective gear, first aid supplies, and gift products. The website serves the Finnish public and supports the organization's humanitarian activities through e-commerce. The domain is well-established since 2011, reflecting a mature online presence. Technically, the site is built on Magento with modern JavaScript frameworks and integrates analytics and monitoring tools such as Google Tag Manager and New Relic, indicating a robust digital infrastructure. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though DNSSEC and additional security headers could enhance protection. Privacy compliance is strong with clear policies and consent mechanisms in place. Overall, the website demonstrates high business credibility and trustworthiness, aligned with the organization's non-profit mission.

S

Suomen Punainen Risti/Ensiapu OY

ensiapukoulutus.fi

68

The website ensiapukoulutus.fi represents the Finnish Red Cross's certified first aid training services across Finland. It offers a wide range of first aid courses including online, in-person, and hybrid formats targeting individuals, companies, and organizations. The site is well-branded, professionally designed, and provides comprehensive course information and registration capabilities. The business is well-established with a domain age of over 20 years, aligning with the Finnish Red Cross's reputation and operations. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good SEO, mobile responsiveness, and user accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No blocking or WAF challenges were detected, allowing full content access. Privacy compliance is strong, with clear privacy and cookie policies adhering to GDPR requirements. Contact information is available via dedicated pages, though no direct emails or phone numbers were found in the main HTML. The site integrates marketing and analytics tools responsibly, maintaining user privacy. Overall, the website demonstrates a high level of professionalism, trustworthiness, and operational maturity. It effectively serves its target audience with clear navigation, rich content, and secure user interactions.

F

Finnish Red Cross

redcross.fi

67

The Finnish Red Cross website represents a well-established humanitarian non-profit organization focused on providing aid during accidents and crises both domestically and internationally. The site emphasizes volunteerism, donations, and support services, positioning itself as a leading humanitarian entity in Finland with a strong community and international presence. The content is professionally curated, targeting a general audience interested in humanitarian aid and community support. Technically, the website employs a modern technology stack including Microsoft Azure hosting, Episerver CMS, Bootstrap framework, and advanced analytics tools such as Google Analytics and Microsoft Application Insights. The site is optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure suitable for a large non-profit organization. From a security perspective, the website enforces HTTPS and integrates monitoring tools but lacks explicit public security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. The absence of a vulnerability disclosure policy and security.txt file suggests room for improvement in transparency and security culture. Overall, the website scores highly on content quality, technical implementation, security posture, privacy compliance, and business credibility, indicating a trustworthy and professional online presence. Strategic recommendations include enhancing security header implementation, publishing a formal security policy, and establishing a vulnerability disclosure channel to further strengthen trust and security posture.

F

Finlands Röda Kors

rodakorset.fi

69

Finlands Röda Kors is a large, well-established non-profit humanitarian organization operating primarily in Finland with international outreach. The website serves as a platform for public information, volunteer recruitment, donation facilitation, and crisis support communication. It is professionally designed, mobile-optimized, and content-rich, targeting Swedish-speaking audiences in Finland. The organization maintains a strong market position as a trusted humanitarian entity with clear calls to action and social media presence. Technically, the site uses modern web technologies including Microsoft Application Insights and Google Tag Manager for analytics and monitoring, hosted on Microsoft Azure infrastructure. The CMS is Episerver (Optimizely), supporting a structured and accessible content delivery. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some recommended security headers are not explicitly detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects high business credibility and trustworthiness.

S

Suomen Punainen Risti

sprkontti.fi

65

SPR Kontti operates as a secondhand retail chain and online shop affiliated with the Finnish Red Cross, offering consumers an opportunity to recycle and donate various household items while supporting humanitarian work domestically and internationally. The website reflects a well-established non-profit business model with a clear mission and strong brand identity. The digital infrastructure is built on Shopify, leveraging modern e-commerce technologies and integrations such as Judge.me for customer reviews and Google Analytics for performance monitoring. Security posture is robust, with HTTPS enforced, hCaptcha protecting forms, and standard security headers implemented. Privacy compliance is well addressed with visible policies and consent mechanisms. Overall, the site presents a trustworthy and professional online presence aligned with its charitable objectives.

S

Suomen Punainen Risti

punainenristi.fi

66

Suomen Punainen Risti is a leading humanitarian non-profit organization in Finland dedicated to disaster relief, first aid, volunteer coordination, and international humanitarian aid. The website clearly communicates its mission to assist people in crises both domestically and globally, encouraging public participation through volunteering, membership, and donations. It maintains a strong market position as the Finnish Red Cross with consistent branding and trust signals. Technically, the website is built on a modern stack including Episerver CMS, Microsoft Azure hosting, and uses advanced analytics tools like Google Tag Manager and Microsoft Application Insights. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and transparent in its operations.

A

Aspen Institute Central Europe

aspeninstitutece.org

54

Aspen Institute Central Europe is a well-established non-profit organization founded in 2012, serving as a regional platform for policy innovation, leadership development, and inclusive dialogue primarily in the Czech Republic, Hungary, Poland, and Slovakia. The organization is affiliated with the global Aspen network, enhancing its credibility and reach. Their website reflects a professional and comprehensive digital presence, offering detailed information about programs, events, and publications aimed at fostering societal improvement and values-based leadership. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and GDPR compliance, ensuring a robust and user-friendly experience. The site is mobile-optimized, fast-loading, and accessible, with clear navigation and rich content. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved and explicit security policies are absent. Overall, the website demonstrates a strong commitment to privacy and compliance, with comprehensive privacy and cookie policies. However, the absence of WHOIS data and direct contact emails or phone numbers slightly reduces transparency. No signs of blocking or WAF interference were detected, allowing full content accessibility and analysis.

S

Suomalainen työ

suomalainentyo.fi

52

Suomalainen työ ry is a well-established non-profit organization dedicated to promoting Finnish work and products. With a history spanning over 100 years, it serves a broad membership base ranging from small workshops to international corporations. The organization offers certification marks such as Avainlippu, Design from Finland, and Yhteiskunnallinen Yritys, alongside events, training, and research to support its mission. The website reflects a professional and consistent brand image, targeting Finnish consumers and businesses interested in domestic products and services. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance. It employs Google Tag Manager, Facebook Pixel, and Hotjar for marketing and user behavior tracking, all integrated with a cookie consent mechanism. The site is mobile-optimized, accessible, and performs moderately well, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent for privacy compliance. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. The WHOIS data is transparent and consistent with the organization's identity, enhancing trustworthiness. Overall, Suomalainen työ ry's website demonstrates a strong security posture, good privacy compliance, and a professional online presence. It effectively supports the organization's mission and stakeholder engagement.

S

SANANIM z.ú.

drogy.net

44

The website www.drogy.net is an informational portal focused on legal and illegal drugs, addiction, and prevention, operated by the non-profit organization SANANIM z.ú. It provides news, research, statistics, opinions, and recommendations primarily targeting the general public and professionals interested in drug-related topics in the Czech Republic. The site is well-structured with consistent branding and good content quality, offering valuable resources and external references to reputable news and research organizations. Technically, the site uses a custom CMS with multiple CSS and JavaScript assets, including Google Analytics and Google Tag Manager for user tracking. Hosting is provided by SmartWEB.CZ. The site demonstrates moderate performance and basic mobile optimization. SEO practices are good, but accessibility and privacy compliance need improvement. From a security perspective, HTTPS is implied but no explicit security headers or policies are detected. There is no visible sensitive data exposure or vulnerable libraries. However, the absence of privacy and cookie policies and lack of incident response information are notable gaps. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency despite the website's active status and association with a known non-profit. Overall, the website is a credible and useful resource with moderate security posture and technical maturity. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and compliance.