Security Directory

I

Investigative Reporting Workshop

investigativereportingworkshop.org

54

Investigative Reporting Workshop is a non-profit organization dedicated to training student and early-career journalists through hands-on investigative journalism projects. It collaborates with major national newsrooms and nonprofits to produce impactful journalism on topics such as environment, health, and politics. The website is built on WordPress with a modern tech stack including jQuery and Genesis Blocks, hosted on AWS infrastructure. The site is professionally designed with good navigation and mobile optimization, though it lacks explicit privacy and cookie policies. Security posture is solid with HTTPS and domain transfer protections, but DNSSEC is not enabled and security headers are missing. No contact emails or phone numbers are provided, which limits direct communication channels. Social media presence is strong, enhancing trust and outreach.

T

The Reva and David Logan Foundation

loganfdn.org

58

The Reva and David Logan Foundation is a well-established non-profit organization founded in 2003, focused on supporting community initiatives in arts, journalism, education, and social services through grant funding. The website reflects a professional and consistent brand presence with a clear mission to support diverse community projects. Technically, the site is built on WordPress with common plugins and libraries, hosted on a provider associated with the Loopia Group. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Social media integration is strong, enhancing trust and outreach. Overall, the site is credible and functional but would benefit from enhanced privacy and security practices.

B

Bangor Daily News

bangordailynews.com

60

Bangor Daily News is a prominent local news media organization serving the state of Maine, providing comprehensive coverage of news, sports, politics, and obituaries. The website operates a subscription-based business model, leveraging a paywall to monetize its content. It targets residents of Maine and those interested in regional news, positioning itself as a leading news source within its market. The company appears to have been founded in 2011 and maintains a consistent brand presence across its digital platforms. Technically, the website is built on WordPress and integrates a variety of modern technologies including Google Analytics, Google Tag Manager, Pelcro SDK for subscription management, and multiple advertising networks such as PubMatic and Amazon APS. The site is mobile-optimized and employs HTTPS for secure communications. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and uses several tracking and advertising scripts, but lacks explicit security headers and published security policies. No critical vulnerabilities were detected in the analyzed content. However, the absence of privacy and cookie policies and the lack of WHOIS registration data for the domain raise concerns about compliance and domain legitimacy. Overall, while the website demonstrates a mature digital presence and business model, it should improve its privacy compliance and clarify domain registration details to enhance trustworthiness and regulatory adherence.

I

Intellihealth

intellihealth.co

68

FlyteHealth, operating under the legal name Intellihealth, is a healthcare company specializing in obesity care and chronic condition management. Their services combine medical care, coaching, and pharmacotherapy to empower individuals and businesses to achieve better health outcomes. The company targets employers, payers, PBMs, and individual patients, positioning itself as a clinically proven and cost-effective solution in the healthcare market. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the website is built on WordPress using Elementor and integrates several modern tools including Yoast SEO, CleanTalk anti-spam, Pardot marketing automation, Hotjar analytics, and Google Analytics. The site demonstrates good SEO and accessibility practices, with a cookie consent mechanism compliant with GDPR and CCPA. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses anti-spam measures and cookie consent banners. However, explicit security headers are missing, and no dedicated security or incident response policies are published. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and transparency, which impacts trustworthiness despite the professional appearance. Overall, FlyteHealth presents a credible healthcare service with strong business and technical foundations but should improve transparency around domain registration and enhance security policies to strengthen trust and compliance.

S

San Diego Documenters

sandiegodocumenters.org

54

San Diego Documenters is a community journalism initiative operated under the parent organization inewsource, focusing on gathering and reporting information from local governments in the San Diego area. The platform engages community members to attend public meetings and produce detailed notes and reports, leveraging AI tools like DocBot to synthesize content. The website is positioned as a trusted local media source with a clear mission to enhance government transparency. Technically, the website is built on WordPress with modern plugins for SEO, performance, and analytics. It uses Google Analytics and Parsely for tracking and integrates social media channels extensively. The site is mobile-optimized and uses HTTPS, but lacks DNSSEC and some security headers, indicating room for security improvements. Security posture is moderate with domain registration privacy protection and domain locks in place, but no explicit security or incident response policies are published. Privacy compliance is weak due to the absence of privacy and cookie policies. Business credibility is strong given the professional content, clear parent organization, and active social presence. Overall, the site is a well-maintained community media platform with good technical infrastructure but needs to improve privacy compliance and security hardening to enhance trust and regulatory adherence.

E

Excelsior Rotterdam

sbvexcelsior.nl

68

Excelsior Rotterdam is a professional football club based in the Netherlands with a well-established online presence. The website serves as a comprehensive platform for fans, business partners, and the community, offering news, team details, match schedules, and merchandising through an integrated WooCommerce store. The club maintains active engagement with supporters via multiple social media channels and provides clear contact information and policies, reflecting a mature digital footprint. Technically, the website is built on WordPress with WooCommerce, enhanced by modern analytics and marketing tools such as Google Tag Manager, Google Analytics, and Quantcast. The presence of DNSSEC and HTTPS with strong SSL configuration indicates a secure hosting environment managed by team.blue nl B.V. The site is mobile-optimized and SEO-friendly, leveraging Yoast SEO for metadata and structured data. From a security perspective, the site demonstrates good practices including cookie consent mechanisms and no visible vulnerabilities or exposed sensitive data. However, there is room for improvement in implementing additional HTTP security headers and publishing explicit security policies or incident response contacts. Privacy compliance is strong with comprehensive privacy and cookie policies in Dutch, aligned with GDPR requirements. Overall, the website presents a low-risk profile with a solid business credibility and technical foundation. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and resilience.

HelloMe is a creative studio based in Germany, established in 2015, specializing in various design disciplines including art direction, digital, exhibition, identity, publication, product, spatial, and typeface design. The website serves primarily as a portfolio showcasing selected works, targeting creative professionals and potential clients seeking high-quality design services. The business model is service-oriented, focusing on creative project delivery and brand presentation. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery, Flickity, and Tippy.js for enhanced user interface and experience. The site demonstrates good mobile optimization and a consistent branding approach, although SEO and accessibility features are basic. Hosting and domain registration are stable and consistent with the business profile. From a security perspective, the site uses HTTPS with a valid SSL configuration and has domain transfer protections in place. However, it lacks DNSSEC and important security headers, which could be improved to enhance security posture. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is weak due to the absence of privacy and cookie policies, and no explicit contact information or incident response channels are provided. Overall, the website presents a professional and trustworthy image for a small creative studio but would benefit from improved privacy compliance, security headers, and clearer contact information to strengthen trust and regulatory adherence.

N

News Is Out

newsisout.com

61

News Is Out is a national collaborative media platform focused on delivering LGBTQ+ news through local queer-owned publishers. The website offers news articles, opinion pieces, and newsletters targeting the LGBTQ+ community and allies. It operates on a WordPress CMS with a modern tech stack including Yoast SEO, WooCommerce for donations, and Google Analytics for tracking. The site is hosted on WordPress.com infrastructure and integrates advertising via Google AdSense. Security posture is adequate with HTTPS and domain protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professionally designed with good content quality and user experience but should improve privacy and security practices.

W

Word In Black

wordinblack.com

62

Word In Black is a specialized digital media platform dedicated to providing news, insights, and research focused on Black America. Established in 2020, it offers a variety of content categories including health, education, politics, and culture, targeting the Black American community and those interested in related issues. The platform operates primarily through digital publishing, newsletter subscriptions, and donation support, positioning itself as a trusted niche media source. Technically, the website is built on WordPress with modern SEO and analytics tools, including Yoast SEO Premium, Google Analytics, and Google Tag Manager, ensuring good digital maturity and performance. Security-wise, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks visible security policies and DNSSEC, indicating room for improvement in security posture. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is professional and trustworthy with moderate risk, suitable for its audience and business model.

N

NewsFuel from Local Media Association

newsfuel.org

60

NewsFuel is a specialized platform developed by the Local Media Association to connect local journalism projects with funding opportunities, primarily targeting North American journalists and news organizations. The platform is supported by startup funding from the Google News Initiative Innovation Challenge, positioning it as a niche but credible resource in the media philanthropy space. The website provides search functionality for funders and opportunities, along with news updates related to journalism funded by philanthropy. Technically, the site is built on WordPress using common plugins such as Yoast SEO and Jetpack, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and uses HTTPS, but lacks advanced security headers and cookie consent mechanisms. From a security perspective, the site shows good basic practices but could improve by enabling DNSSEC and publishing formal security policies. Overall, the domain registration is privacy-protected but consistent with the business profile, and the site presents a professional and trustworthy front for its intended audience.

V

Vizion Interactive

vizion.com

60

Vizion Interactive is a well-established full-service digital marketing agency based in the United States, specializing in SEO, PPC, LLM, Amazon advertising, web design, and enterprise reporting. The company targets businesses seeking comprehensive digital marketing solutions and maintains a strong market position supported by a professional website, client testimonials, and case studies. The technical infrastructure is built on WordPress with modern plugins and analytics tools, demonstrating a mature digital presence with good SEO and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is addressed with clear policies and consent mechanisms. The absence of WHOIS data is a notable gap affecting domain trustworthiness but does not detract from the overall professionalism of the site.

I

Investigative Newsource

inewsource.org

63

inewsource is a well-established nonprofit investigative newsroom focused on delivering impactful, data-driven journalism for the San Diego and Imperial counties region. The organization holds a strong market position as a 2025 Pulitzer Prize finalist and maintains a consistent brand presence with comprehensive coverage areas and community engagement initiatives. Their business model relies on donations and community support, reflected in dedicated donation subdomains and partnership links. Technically, the website is built on WordPress with modern plugins and analytics tools, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS enforcement and client transfer protection on the domain, though improvements can be made by enabling DNSSEC and adding explicit security headers and cookie consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy policies, making it a credible source of investigative journalism.

L

LINK nky

linknky.com

58

LINK nky is a regional news organization serving Northern Kentucky, providing comprehensive coverage of local news, sports, business, arts, and culture. Established in 2021, it positions itself as the largest newspaper in the region, targeting residents and stakeholders interested in community affairs. The website leverages WordPress with the Newspack theme, integrating modern web technologies and advertising platforms to support its business model. Technically, the site is well-structured with good SEO practices and moderate performance, optimized for mobile users. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking a dedicated cookie policy page. Overall, the site demonstrates a professional and trustworthy presence with room for enhanced security and privacy measures.

I

Illinois Answers Project

illinoisanswers.org

62

Illinois Answers Project is a nonprofit investigative and solutions journalism organization focused on Illinois state issues. It operates under the parent organization Better Government Association and targets Illinois residents, civic leaders, and public officials. The website offers investigative reports, newsletters, podcasts, and databases to inform and engage its audience. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO Premium, Google Analytics, and social media integrations. The site is mobile-optimized and has a professional design with clear navigation. Security posture is good with HTTPS enabled and use of security plugins, but lacks DNSSEC and some security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. No explicit incident response or vulnerability disclosure information is available. Overall, the site is trustworthy and professionally maintained but could improve privacy and security transparency.

N

Newspack

newspackstaging.com

67

Newspack is a specialized platform designed to empower news organizations with tools for publishing, audience engagement, and revenue generation. Supported by WordPress.com and major industry partners such as Google News Initiative, Knight Foundation, and The Lenfest Institute, it offers a comprehensive and affordable solution tailored for the media sector. The website reflects a mature and professional business with a clear market position focused on news publishers. Technically, the site is built on WordPress with modern plugins and analytics integrations, hosted on Automattic infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA in place, though some security headers and explicit policies could enhance trust further. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism and trustworthiness with no critical security issues detected.

E

EL CENTRAL Hispanic News

elcentralmedia.com

55

EL CENTRAL Hispanic News is a bilingual media publication serving Michigan's Hispanic community with local business features, national news, and community stories. Established in 2022, it positions itself as Michigan's oldest bilingual Hispanic newspaper, targeting bilingual readers interested in Hispanic culture and community news. The website uses WordPress with Elementor and the jNews theme, supported by Google Tag Manager and Mailchimp for analytics and marketing. Hosting and domain registration are managed via Squarespace Domains and Google Cloud DNS. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact is available via a web form, and social media presence is active on Facebook, Twitter, and Instagram. Overall, the site is professionally designed with good content quality and SEO, but should improve privacy and security disclosures to enhance trust and compliance.

S

Signal Cincinnati

signalcincinnati.org

59

Signal Cincinnati is a nonprofit, community-focused newsroom dedicated to providing Cincinnati residents with actionable local news, particularly through training and paying community members to document government meetings. The organization is part of a broader Ohio news initiative and aims to offer free, accessible journalism funded by donations. Technically, the website is built on WordPress with modern plugins and integrations for SEO, analytics, and fundraising. While HTTPS is properly configured and domain management is secure, the site lacks explicit privacy and cookie policies, which are important for compliance. Social media presence and donation mechanisms support community engagement and sustainability.

S

Signal Akron

signalakron.org

62

Signal Akron is a nonprofit newsroom dedicated to providing local news for the Akron, Ohio community. Founded in 2023, it operates as part of a network of Signal Newsrooms, focusing on community engagement, local government, public safety, and cultural reporting. The organization relies on donations and reader support, offering newsletter subscriptions and opportunities for community members to contribute as documenters. Technically, the website is built on WordPress with integrations including Gravity Forms, HubSpot, Fundraise Up, and Google Analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized and employs modern SEO practices but lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is adequate with HTTPS enabled and domain registration protected by privacy services, though DNSSEC is not enabled and security headers are absent. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

S

Local news and resources for Ohioans by Ohioans

signalohio.org

59

SignalOhio.org is a local news and resource platform dedicated to serving Ohio residents with community-focused content. The website operates on a WordPress CMS and integrates marketing and analytics tools such as HubSpot and Fundraise Up. The domain is relatively new, registered in late 2022, and uses privacy protection services common for small or new websites. The site demonstrates basic content quality and design, with moderate SEO and mobile optimization. However, it lacks critical privacy and cookie policies, security headers, and explicit contact information, which impacts its overall trustworthiness and compliance posture.

L

Lenfest Institute

lenfestinstitute.org

65

The Lenfest Institute for Journalism is a non-profit organization dedicated to supporting and sustaining local journalism through grant funding, advisory services, and community-building initiatives. Positioned as a key player in the media sector, it serves journalism professionals, local news organizations, and donors with resources aimed at fostering sustainable news ecosystems. The website reflects a mature digital presence with professional design, clear navigation, and active engagement channels including social media and newsletters. Technically, the site is built on WordPress with modern analytics and monitoring tools, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site demonstrates high business credibility and trustworthiness, though the absence of WHOIS data limits domain registration transparency.

G

Gates Family Foundation

gatesfamilyfoundation.org

58

The Gates Family Foundation is a well-established philanthropic organization focused on improving quality of life in Colorado through strategic philanthropy and mission-forward investing. Their website clearly communicates their strategic priorities including education, natural resources, community development, and informed communities. The foundation operates primarily as a non-profit entity, providing capital and strategic grants, impact investments, and fellowship programs. Their market position is strong within the Colorado philanthropic sector, supported by a domain registered since 2002 and consistent branding and messaging. Technically, the website is built on WordPress using the Divi theme, enhanced with modern tools such as FontAwesome Pro, HubSpot analytics, Google Tag Manager, and Facebook Pixel for marketing and tracking. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. Performance is moderate, with caching and optimization plugins like WP Rocket in use. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no visible security policy or incident response contact information, which could be improved. Privacy compliance is limited as no privacy or cookie policies were found, and no consent mechanisms are evident. Overall, the website is professional, trustworthy, and credible, with minor gaps in privacy compliance and security best practices. The domain WHOIS data aligns well with the organization's identity, reinforcing legitimacy. No WAF or blocking mechanisms interfere with content access, allowing full analysis.

F

FJC

fjc.org

72

FJC is a well-established non-profit organization based in New York, specializing in philanthropic fund management including donor advised funds, fiscal sponsorships, and innovative investment solutions. The organization targets donors, nonprofits, and wealth advisors, providing flexible and personalized philanthropic services. The website reflects a mature digital presence with a professional design, clear navigation, and rich content that supports its mission and services. Technically, the site is built on WordPress with modern libraries and tools, ensuring good performance and accessibility. Security posture is solid with HTTPS and domain transfer protections, though improvements are needed in DNSSEC and security headers. Privacy compliance is a notable gap, with no visible privacy or cookie policies or consent mechanisms. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

T

The Colorado Trust

coloradotrust.org

59

The Colorado Trust is a well-established non-profit organization dedicated to promoting health equity and positive social change across Colorado. With over 40 years of experience, it partners with various organizations to provide funding, resources, and support for initiatives focused on food security, housing, mental and behavioral health, and community resilience. The website reflects a mature and professional presence with comprehensive content, clear navigation, and strong branding consistency. The organization targets community groups, nonprofits, and stakeholders interested in health equity and social justice within Colorado. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. It employs reCAPTCHA for form security and demonstrates good mobile optimization and accessibility. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site uses HTTPS with a strong SSL configuration and secure form handling. However, it lacks explicit security headers like Content-Security-Policy and does not display a cookie consent banner, which may affect privacy compliance. WHOIS data is unavailable due to privacy protection or query issues, which slightly reduces trust but is common for non-profits. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and credible digital presence for The Colorado Trust, with recommendations to enhance privacy compliance and security headers to further strengthen its posture and user trust.

C

Colorado Community Media

coloradocommunitymedia.com

60

Colorado Community Media is a well-established regional media company founded in 2012, providing comprehensive local news coverage across multiple Colorado communities. The website serves as a digital hub for news, sports, arts, and community events, targeting residents within its service areas. The business model relies on advertising, sponsored content, and newsletter subscriptions, positioning itself as a trusted local news source with a consistent brand presence and partnership with the National Trust for Local News. Technically, the website is built on WordPress using the Newspack theme, optimized for news media with moderate performance and good mobile responsiveness. The infrastructure includes modern analytics and advertising technologies such as Google Analytics, Broadstreet Ads, and Jetpack. Hosting and domain registration are managed via GoDaddy, with standard domain protections but lacking DNSSEC. From a security perspective, the site uses HTTPS with good SSL configuration and domain-level EPP protections. However, it lacks advanced security headers and a formal vulnerability disclosure policy. Privacy compliance is partial, with a comprehensive privacy policy present but no cookie consent mechanism detected, which may affect GDPR compliance. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would strengthen trust and regulatory adherence while maintaining its role as a key local news provider.

A

American Journalism Project

theajp.org

50

The American Journalism Project is a non-profit organization dedicated to revitalizing and sustaining local journalism across communities. Their business model centers on grantmaking, local philanthropy partnerships, startup incubation, and product development including AI initiatives. The organization positions itself as a key player in the media non-profit sector, targeting philanthropists, local news organizations, and community stakeholders. The website reflects a professional and consistent brand with excellent content quality and clear navigation. Technically, the site is built on WordPress and leverages modern JavaScript libraries such as GSAP, Lottie Player, and D3.js for interactive and dynamic content. Google Analytics is used for user tracking, and the site is optimized for mobile with good accessibility and SEO practices. Performance is moderate, with room for improvement in security headers and explicit privacy compliance features. Security posture is solid with HTTPS enabled and no visible sensitive data exposure. However, the absence of security headers, vulnerability disclosure, and incident response information indicates areas for enhancement. Privacy compliance is limited due to missing explicit privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but would benefit from improved transparency in privacy and security policies to enhance user trust and compliance with regulations.

V

VTDigger Jobs

vtdiggerjobs.org

62

VTDigger Jobs is a specialized online job board serving Vermont and nearby regions, operated by Vermont Journalism Trust, Ltd. The platform offers job seekers and employers a focused marketplace for remote, hybrid, and on-site employment opportunities. It leverages a modern WordPress-based infrastructure with WooCommerce and HivePress plugins to manage listings and transactions. The site is well-branded, professionally designed, and provides relevant content including company profiles and testimonials, positioning itself as a trusted regional employment resource. Technically, the site uses standard web technologies and integrates Google services for analytics and spam protection. Security posture is adequate with HTTPS and reCAPTCHA, but lacks some advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism detected. Overall, the site is credible and functional with room for security and privacy improvements.

D

Dotypay

dotypay.com

54

Dotypay is a Czech Republic based company specializing in modern payment terminal devices with extensive connectivity and multifunctional capabilities. Founded in 2018, the company targets businesses requiring advanced payment solutions, offering both sales and rental models. Their website is professionally designed using WordPress with Elementor and Astra theme, featuring comprehensive content about their products and services. The company maintains active social media presence on Facebook and LinkedIn, enhancing their market visibility. Technically, the website employs modern technologies including Google Analytics, Facebook Pixel, and Google Tag Manager for marketing and analytics purposes. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Overall, Dotypay presents a trustworthy and professional online presence with room for enhanced security policies and incident response transparency.

K

Knock Knock WHOIS Not There, LLC

kjtz.co

59

The website jungespublikum.blog is a German-language cultural blog dedicated to performing arts and young audiences, providing networking, event information, funding, and research dissemination. It is hosted on WordPress.com and registered via Automattic Inc., with domain registration dating from 2023, consistent with the site's recent content. The platform targets professionals and stakeholders in the cultural and performing arts sectors, operating as a small non-profit media entity. Technically, the site uses WordPress with Jetpack and Gutenberg, delivering a modern and moderately performant user experience with good mobile optimization and basic accessibility. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and explicit security headers are not visible. Privacy compliance is weak, lacking visible privacy or cookie policies and consent mechanisms. Contact is primarily via a blog subscription form, with no direct emails or phone numbers published. Social media presence is established across major platforms. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security hardening.

K

key | communication

keycommunication.lt

38

key | communication is a Lithuanian digital marketing agency specializing in planning and executing digital advertising campaigns for both B2C and B2B clients domestically and internationally. The company also has expertise in traditional media planning dating back to 2005, providing a broad market perspective. Their services include campaign management, interactive reporting, and daily campaign monitoring, with occasional 24/7 support for specific cases. The website is built on WordPress using WPBakery Page Builder and integrates Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear business messaging in Lithuanian. However, it lacks explicit privacy, cookie, and terms of service policies, as well as visible contact emails or phone numbers.

Q

QUORiON Data Systems GmbH

quorion.de

51

QUORiON Data Systems GmbH is a German-based manufacturer specializing in Android-based cash register systems and POS software, serving over 650,000 businesses worldwide across retail and hospitality sectors. The company positions itself as a leading provider with a strong focus on customization, scalability, and compliance with fiscal regulations. Their website reflects a mature digital presence with comprehensive product information, dealer support, and customer testimonials. Technically, the site is built on WordPress with modern optimization tools like WP Rocket and integrates Google Analytics 4 for tracking. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates professionalism, good privacy compliance, and a trustworthy business image.

E

Excelsior Rotterdam

excelsiorrotterdam.nl

68

Excelsior Rotterdam is a professional football club based in the Netherlands, operating a comprehensive website that serves fans, business partners, and the local community. The site offers detailed team information, match schedules, news updates, and e-commerce functionality through its fanshop. The club maintains a strong market position within Dutch football, supported by active business partnerships and community engagement. Technically, the website is built on WordPress with WooCommerce, enhanced by modern analytics and marketing tools such as Google Tag Manager and Quantcast. The site demonstrates good digital maturity with mobile optimization and SEO best practices. Security posture is solid, featuring HTTPS, DNSSEC, and cookie consent mechanisms, though additional security headers could further enhance protection. Privacy compliance is well addressed with clear policies and consent management. Overall, the website reflects a professional and trustworthy digital presence aligned with the club's brand and business objectives.

The Washington Monthly is a well-established independent media organization focused on political and educational journalism, with a strong emphasis on government accountability and policy analysis. The website serves a target audience interested in in-depth political commentary, education issues, and public affairs, supported by subscription and donations. Technically, the site is built on WordPress with modern SEO and analytics tools, delivering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit cookie consent mechanism is present. Overall, the site demonstrates high professionalism and trustworthiness with a long domain history and consistent WHOIS data.

M

Montana Free Press

montanafreepress.org

65

Montana Free Press is an independent nonprofit digital newsroom providing fact-based statewide news coverage focused on Montana. It operates with a reader-supported business model emphasizing transparency, ethics, and community engagement. The organization is positioned as a leading source of independent journalism in Montana, offering news, newsletters, special projects, and events. The website is professionally designed with excellent content quality and clear navigation targeting Montana residents and stakeholders interested in local affairs. Technically, the site is built on WordPress with a modern tech stack including WooCommerce for e-commerce, Fundraise Up for donations, and Google Analytics for tracking. Hosting is via WordPress.com nameservers, ensuring reliable infrastructure. The site is mobile-optimized, fast loading, and accessible with good SEO practices. Security posture is strong with HTTPS, multiple security headers, and use of Google reCAPTCHA on forms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy and GDPR considerations, though cookie consent mechanisms and terms of service are missing. Contact information is available primarily via email and contact forms. Overall, the website presents a trustworthy, professional, and secure platform for nonprofit journalism. Strategic recommendations include implementing cookie consent banners, publishing terms of service, and adding vulnerability disclosure and incident response information to enhance transparency and compliance.

V

VTDigger

vtdigger.org

63

VTDigger is a well-established, member-supported news organization focused on Vermont, providing comprehensive coverage of business, politics, environment, and public policy since 2009. The website demonstrates a strong market position as Vermont's largest newsroom, with a professional and consistent brand presence. Technically, the site is built on WordPress with modern plugins and integrations such as Gravity Forms, WooCommerce, and Google Analytics, hosted with reputable providers and using Cloudflare DNS. The site is mobile-optimized and SEO-friendly, offering a good user experience. Security posture is solid with HTTPS and domain protections, though it lacks some advanced security headers and explicit security policies. Privacy compliance is limited by the absence of visible privacy and cookie policies, which should be addressed to improve trust and regulatory adherence. Overall, the site is credible and trustworthy with room for improvement in privacy and security transparency.

Mirror Indy is a small nonprofit media organization dedicated to community-oriented news reporting in Indianapolis. The website serves as a platform to engage local residents with relevant news, events, and community stories. The organization relies on donations and subscriptions to support its mission. Technically, the site is built on WordPress using the Newspack theme, integrating modern analytics and advertising tools such as Google Analytics, Google Tag Manager, and DoubleClick. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks DNSSEC and some recommended security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is consistent with nonprofit use, employing privacy protection appropriately. The site is trustworthy and professionally maintained, with room for security and privacy enhancements.

The Center for Public Integrity is a well-established nonprofit investigative journalism organization founded in 1997, focused on exposing inequality and holding powerful interests accountable. It operates a professional, content-rich website with a strong emphasis on investigative reports, podcasts, and data tools. The organization targets a broad audience interested in social justice, democracy, and accountability. Technically, the website is built on WordPress, leveraging modern SEO and performance optimizations, hosted behind Cloudflare for DNS and CDN services. Security posture is strong with HTTPS enforced and domain transfer protections, though some security headers and explicit incident response policies are absent. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity.

Capital B News is a nonprofit news organization dedicated to reporting on stories about Black Americans at local and national levels. Founded in 2020, it operates with regional branches such as Capital B Atlanta and Capital B Gary, focusing on investigative journalism and accessible news content. The organization relies on donations and memberships to sustain its operations, emphasizing free access to important information. Technically, the website is built on WordPress using the Newspack theme and plugins, optimized for SEO and performance with integrations like Google Analytics and Google Tag Manager. Security posture is solid with HTTPS enabled and use of reCAPTCHA on forms, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site presents a professional and trustworthy image but would benefit from enhanced privacy and security disclosures.

S

Signal Cleveland

signalcleveland.org

61

Signal Cleveland is a nonprofit newsroom dedicated to serving the Greater Cleveland community with local news and resources. Founded recently in 2022, it operates with a mission to provide accessible, community-focused journalism covering government, housing, education, and public safety. The organization relies on donations and community support, as evidenced by donation appeals and fundraising campaigns on the website. The site is well-branded and maintains consistent messaging aligned with its nonprofit media identity. Technically, the website is built on WordPress using the Newspack theme, leveraging modern tools such as Gravity Forms for data collection, Yoast SEO for search optimization, and integrations with HubSpot, Fundraise Up, and Parsely for marketing and analytics. Hosting is provided by Automattic Inc., consistent with WordPress.com infrastructure. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers such as CSP or HSTS. No privacy or cookie policies were found, indicating gaps in compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is published. Tracking and advertising scripts are present, including Google Analytics and Facebook Pixel, with moderate user tracking. Overall, Signal Cleveland presents a credible and professional nonprofit media presence with solid technical foundations but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

L

Lookout Santa Cruz

lookout.co

55

Lookout Santa Cruz is a well-established local news media organization founded in 2010, serving Santa Cruz County with daily news, opinion, and community resources. The website is professionally designed using WordPress CMS and integrates modern technologies such as WooCommerce, Google Tag Manager, and Broadstreet Ads for monetization and analytics. The site demonstrates good content quality and user experience, targeting local residents and community members. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and published security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is trustworthy and credible with room for improvement in privacy and security transparency.

T

The Black Wall Street Times

theblackwallsttimes.com

64

The Black Wall Street Times is a small, niche national news publication focused on delivering news from Black perspectives, headquartered in Tulsa's historic Greenwood District. The website is built on WordPress and leverages a modern technology stack including Yoast SEO, WooCommerce, Jetpack, and various advertising and analytics tools. The site demonstrates good content quality, consistent branding, and a professional design optimized for both desktop and mobile users. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as enabling DNSSEC and implementing security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures to improve user trust and regulatory compliance.

T

The Haitian Times

haitiantimes.com

59

The Haitian Times is a well-established online news media outlet focused on delivering news and information about Haiti and the Haitian diaspora globally. Founded in 1998, it serves as an authoritative voice for the Haitian community with a broad range of content including news articles, videos, and special reports. The website targets the Haitian diaspora and those interested in Haitian affairs, operating primarily as an advertising-supported media platform with subscription and donation options. The brand is consistent and professional, with a strong social media presence and a clear market position within its niche. Technically, the site is built on WordPress using the Newspack theme and associated plugins, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and OneSignal for push notifications. The site is hosted with Cloudflare DNS and uses HTTPS with good SSL configuration, ensuring secure communications. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented through Yoast SEO and structured data. From a security perspective, the site follows best practices such as HTTPS enforcement and domain transfer protection. However, DNSSEC is not enabled, and there is a lack of published security policies or incident response information. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms, which could expose the site to regulatory risks. Overall, The Haitian Times presents a credible and professional online presence with solid technical infrastructure but should improve privacy compliance and DNS security to enhance trust and regulatory adherence.

B

Bridge Detroit

bridgedetroit.com

57

BridgeDetroit is a nonprofit news media organization dedicated to providing original, community-driven reporting focused on Detroit's local issues including health, education, jobs, and neighborhoods. The website serves Detroit residents and stakeholders by delivering relevant news, analysis, and community engagement through multiple channels such as newsletters and podcasts. The organization is grant-funded by reputable foundations, emphasizing its nonprofit and community-oriented mission. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and AMP partial implementation, ensuring good performance, mobile optimization, and SEO effectiveness. Security posture is strong with HTTPS, security headers, and secure forms using reCAPTCHA, though privacy compliance could be improved by adding a cookie consent mechanism and publishing more explicit security policies. The absence of public WHOIS data slightly reduces trust but the professional content and transparency in business information mitigate this concern. Overall, BridgeDetroit presents a trustworthy, well-maintained digital presence aligned with its nonprofit mission.

T

The Center for Investigative Reporting

revealnews.org

64

Reveal from The Center for Investigative Reporting is a well-established nonprofit investigative journalism organization founded in 2014. It provides high-quality investigative news content, podcasts, and multimedia storytelling aimed at engaging and empowering the public on critical social issues. The organization maintains a strong market position within nonprofit media, supported by a professional website and active social media presence. Technically, the website is built on WordPress with modern plugins and integrations such as Yoast SEO, Google Analytics, and reCAPTCHA, hosted on WordPress.com infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS and secure forms, but could be enhanced by enabling DNSSEC and adding security headers. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the website is professional, trustworthy, and credible, with room for improvement in privacy and security transparency.

F

Flint Beat

flintbeat.com

62

Flint Beat is a small, community-focused non-profit media organization dedicated to providing rigorous, evidence-based local news coverage for Flint, Michigan. The website serves as a platform for community engagement, local news dissemination, and fundraising through donations and newsletter subscriptions. Technically, the site is built on WordPress using the Newspack theme and plugins, leveraging modern web technologies and integrations such as Google Analytics, Facebook Pixel, and Broadstreet Ads for monetization and audience insights. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA on forms, but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is professional, well-branded, and trustworthy, with room for improvement in privacy and security best practices.

B

Black Voice News

blackvoicenews.com

62

Black Voice News is a niche media organization focused on serving the Black community in California through advocacy and data-driven journalism. The website offers news content, community engagement via newsletters, and donation-based funding. Technically, the site is built on WordPress with a modern plugin ecosystem supporting e-commerce, events, and marketing integrations. The site is mobile-optimized and SEO-friendly, with good content quality and consistent branding. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with a legitimate, long-standing media entity.

P

Prison Journalism Project

prisonjournalismproject.org

59

Prison Journalism Project is a US-based nonprofit organization established in 2019 that trains incarcerated individuals to become journalists and publishes their stories. It occupies a unique niche in the nonprofit media sector focused on criminal justice reform and prison-related storytelling. The organization operates a professionally designed WordPress website with rich content, including articles, educational resources, and special projects. The site actively engages its audience through newsletters, social media, and donation campaigns. Technically, the website uses modern WordPress plugins and SEO tools, is hosted with Cloudflare, and employs HTTPS with strong security headers, reflecting a mature digital infrastructure. However, DNSSEC is not enabled, and privacy compliance could be improved with explicit cookie consent and GDPR details. No critical security vulnerabilities were detected, but the absence of published security and incident response policies suggests room for improvement in formal security governance. Overall, the website demonstrates high professionalism, trustworthiness, and a solid security posture suitable for its nonprofit mission.

E

Epicenter NYC

epicenter-nyc.com

58

Epicenter NYC is a digital media platform focused on connecting New Yorkers with local news, information, arts, politics, and community events. Founded in 2020, it operates as a small media business with a strong local focus, offering news articles, newsletters, podcasts, advertising, membership, and an e-commerce shop. The website is built on WordPress with modern SEO and analytics tools, demonstrating a mature digital infrastructure. Security posture is good with HTTPS and domain registration protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

B

Berkeleyside

berkeleyside.org

47

Berkeleyside is a nonprofit local news organization focused on delivering comprehensive news coverage for Berkeley, California. It holds a strong market position as the leading local news source, offering services such as breaking news, public safety updates, political coverage, food and real estate news, and community events. The website is well-branded and targets residents and community members interested in local affairs. Technically, the site is built on WordPress using the Newspack theme, integrating modern technologies like Gravity Forms, WooCommerce, Google Analytics, and Facebook Pixel. Hosting leverages Amazon S3 for media assets, ensuring fast content delivery. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though explicit security headers and privacy policies could be improved. Overall, the site demonstrates a high level of professionalism and trustworthiness, though privacy compliance disclosures and cookie consent mechanisms are areas for enhancement.

O

Outlier Media

outliermedia.org

60

Outlier Media is a nonprofit newsroom dedicated to serving the Detroit community by providing local, accountable, and informed journalism. The organization focuses on community needs, accountability, and local issues, supported by donations and sponsorships such as from the W.K. Kellogg Foundation. The website is well-structured with clear navigation, multiple social media channels, and donation integration, reflecting a mature nonprofit media entity. Technically, the site is built on WordPress with modern plugins and SEO tools, hosted on WordPress.com infrastructure. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.