Security Directory

I

Intellihealth

intellihealth.co

0

FlyteHealth, operating under the legal name Intellihealth, is a healthcare company specializing in obesity care and chronic condition management. Their services combine medical care, coaching, and pharmacotherapy to empower individuals and businesses to achieve better health outcomes. The company targets employers, payers, PBMs, and individual patients, positioning itself as a clinically proven and cost-effective solution in the healthcare market. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the website is built on WordPress using Elementor and integrates several modern tools including Yoast SEO, CleanTalk anti-spam, Pardot marketing automation, Hotjar analytics, and Google Analytics. The site demonstrates good SEO and accessibility practices, with a cookie consent mechanism compliant with GDPR and CCPA. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses anti-spam measures and cookie consent banners. However, explicit security headers are missing, and no dedicated security or incident response policies are published. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and transparency, which impacts trustworthiness despite the professional appearance. Overall, FlyteHealth presents a credible healthcare service with strong business and technical foundations but should improve transparency around domain registration and enhance security policies to strengthen trust and compliance.

S

San Diego Documenters

sandiegodocumenters.org

0

San Diego Documenters is a community journalism initiative operated under the parent organization inewsource, focusing on gathering and reporting information from local governments in the San Diego area. The platform engages community members to attend public meetings and produce detailed notes and reports, leveraging AI tools like DocBot to synthesize content. The website is positioned as a trusted local media source with a clear mission to enhance government transparency. Technically, the website is built on WordPress with modern plugins for SEO, performance, and analytics. It uses Google Analytics and Parsely for tracking and integrates social media channels extensively. The site is mobile-optimized and uses HTTPS, but lacks DNSSEC and some security headers, indicating room for security improvements. Security posture is moderate with domain registration privacy protection and domain locks in place, but no explicit security or incident response policies are published. Privacy compliance is weak due to the absence of privacy and cookie policies. Business credibility is strong given the professional content, clear parent organization, and active social presence. Overall, the site is a well-maintained community media platform with good technical infrastructure but needs to improve privacy compliance and security hardening to enhance trust and regulatory adherence.

N

NewsFuel from Local Media Association

newsfuel.org

0

NewsFuel is a specialized platform developed by the Local Media Association to connect local journalism projects with funding opportunities, primarily targeting North American journalists and news organizations. The platform is supported by startup funding from the Google News Initiative Innovation Challenge, positioning it as a niche but credible resource in the media philanthropy space. The website provides search functionality for funders and opportunities, along with news updates related to journalism funded by philanthropy. Technically, the site is built on WordPress using common plugins such as Yoast SEO and Jetpack, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and uses HTTPS, but lacks advanced security headers and cookie consent mechanisms. From a security perspective, the site shows good basic practices but could improve by enabling DNSSEC and publishing formal security policies. Overall, the domain registration is privacy-protected but consistent with the business profile, and the site presents a professional and trustworthy front for its intended audience.

F

FlyteHealth

joinflyte.com

0

FlyteHealth is a healthcare service provider specializing in medically supervised weight loss programs delivered through a connected technology platform. The company targets employer-sponsored plans and individual consumers seeking evidence-based, personalized metabolic health care. Their services include medical weight loss, a world-class care team, telemedicine appointments, health data tracking, and direct communication with care providers via a patient app. The website is professionally designed, mobile-optimized, and provides comprehensive information about their approach and care team. The parent company is IntelliHealth Inc., indicating a structured corporate backing. Technically, the website leverages modern frameworks such as React, Next.js, and Chakra UI, with integration of Google Tag Manager and Analytics for marketing and performance tracking. The site demonstrates good SEO, accessibility, and performance characteristics. Security is robust with HTTPS enforced and appropriate security headers present. However, no explicit cookie consent mechanism was detected, which may impact GDPR compliance. Privacy and terms policies are present and comprehensive. The security posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of published security policies or incident response contacts is a gap. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional appearance and content quality of the site. Overall, FlyteHealth presents as a credible healthcare service with a mature digital presence but should address privacy compliance mechanisms and clarify domain registration details to enhance trust and compliance.

V

Vizion Interactive

vizion.com

0

Vizion Interactive is a well-established full-service digital marketing agency based in the United States, specializing in SEO, PPC, LLM, Amazon advertising, web design, and enterprise reporting. The company targets businesses seeking comprehensive digital marketing solutions and maintains a strong market position supported by a professional website, client testimonials, and case studies. The technical infrastructure is built on WordPress with modern plugins and analytics tools, demonstrating a mature digital presence with good SEO and mobile optimization. Security posture is solid with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is addressed with clear policies and consent mechanisms. The absence of WHOIS data is a notable gap affecting domain trustworthiness but does not detract from the overall professionalism of the site.

I

Investigative Newsource

inewsource.org

0

inewsource is a well-established nonprofit investigative newsroom focused on delivering impactful, data-driven journalism for the San Diego and Imperial counties region. The organization holds a strong market position as a 2025 Pulitzer Prize finalist and maintains a consistent brand presence with comprehensive coverage areas and community engagement initiatives. Their business model relies on donations and community support, reflected in dedicated donation subdomains and partnership links. Technically, the website is built on WordPress with modern plugins and analytics tools, ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS enforcement and client transfer protection on the domain, though improvements can be made by enabling DNSSEC and adding explicit security headers and cookie consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy policies, making it a credible source of investigative journalism.

L

LINK nky

linknky.com

0

LINK nky is a regional news organization serving Northern Kentucky, providing comprehensive coverage of local news, sports, business, arts, and culture. Established in 2021, it positions itself as the largest newspaper in the region, targeting residents and stakeholders interested in community affairs. The website leverages WordPress with the Newspack theme, integrating modern web technologies and advertising platforms to support its business model. Technically, the site is well-structured with good SEO practices and moderate performance, optimized for mobile users. Security posture is adequate with HTTPS enabled and domain protections in place, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking a dedicated cookie policy page. Overall, the site demonstrates a professional and trustworthy presence with room for enhanced security and privacy measures.

I

Illinois Answers Project

illinoisanswers.org

0

Illinois Answers Project is a nonprofit investigative and solutions journalism organization focused on Illinois state issues. It operates under the parent organization Better Government Association and targets Illinois residents, civic leaders, and public officials. The website offers investigative reports, newsletters, podcasts, and databases to inform and engage its audience. Technically, the site is built on WordPress with modern SEO and analytics tools, including Yoast SEO Premium, Google Analytics, and social media integrations. The site is mobile-optimized and has a professional design with clear navigation. Security posture is good with HTTPS enabled and use of security plugins, but lacks DNSSEC and some security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. No explicit incident response or vulnerability disclosure information is available. Overall, the site is trustworthy and professionally maintained but could improve privacy and security transparency.

Cityside is a US-based media organization founded in 2020, focused on journalism and community news reporting. The website presents basic content with moderate design and branding consistency, targeting local community members interested in news. The technical infrastructure includes Google Analytics and Tag Manager for tracking, and Font Awesome Pro for iconography, hosted by Tiger Technologies LLC. The website uses HTTPS but lacks advanced security headers and DNSSEC, indicating room for security improvements. Privacy compliance is minimal, with no detected privacy or cookie policies, which may expose the organization to regulatory risks. Overall, the security posture is basic, and the website would benefit from enhanced privacy and security practices to build trust and compliance.

E

Events.com

events.com

0

Events.com is a well-established event technology platform founded in 1995, offering a comprehensive suite of tools for event organizers including ticket sales, event promotion, sponsorship management, event execution, insights, and virtual event capabilities. The platform targets event creators, sponsors, and attendees, positioning itself as an end-to-end solution in the event management industry. The website demonstrates strong branding, professional design, and clear navigation, supporting a positive user experience. Technically, the site is built on WordPress with Elementor, leveraging modern JavaScript libraries and integrations with major analytics and marketing platforms such as Google Analytics, Google Ads, and Usercentrics for consent management. Hosting appears to be on AWS infrastructure, ensuring scalability and reliability. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent management. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, reflecting a mature and trustworthy online presence.

N

National Trust for Historic Preservation

savingplaces.org

0

The National Trust for Historic Preservation operates savingplaces.org as a digital platform to promote historic preservation across the United States. The organization is a well-established non-profit with a large presence and a broad target audience including donors, preservation professionals, and the general public interested in heritage conservation. The website offers extensive resources, advocacy tools, and calls to action for donations and memberships, reflecting a mature business model reliant on community support and grants. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and Bing Ads for analytics and marketing, and appears to be built on a Ruby on Rails framework. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and CSRF protections in place, but lacks visible security headers and published security policies. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy or terms of service pages detected in the provided content. Overall, the domain registration is privacy protected but consistent with the organization's profile and history, indicating legitimacy.

Votebeat is a nonprofit media organization dedicated to providing nonpartisan, local reporting on elections and voting in the United States. It operates under the Civic News Company umbrella and targets voters, election officials, and policymakers with in-depth journalism and educational content. The website is professionally designed, mobile-optimized, and rich in relevant content, positioning Votebeat as a trusted source in its niche. Technically, the site leverages modern web technologies including React, Google Analytics, Google Tag Manager, and various advertising and tracking services. It is hosted likely on Akamai CDN infrastructure, ensuring fast performance and global availability. The site employs HTTPS with strong security headers and uses reCAPTCHA v3 to protect forms, indicating a mature security posture. Security-wise, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, it lacks a visible cookie consent mechanism and a dedicated security policy or incident response contact, which are areas for improvement. Privacy compliance is strong with a comprehensive privacy policy and GDPR considerations. Overall, Votebeat presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include implementing a cookie consent banner, publishing a security policy, and establishing a vulnerability disclosure process to further enhance trust and compliance.

N

Next City, Inc.

nextcity.org

0

Next City, Inc. is a well-established nonprofit media organization founded in 2012, dedicated to publishing solutions-oriented journalism focused on urban transportation, housing, environment, and social justice. The website serves a target audience of urban planners, policymakers, activists, and engaged citizens, offering a variety of content formats including news articles, podcasts, webinars, ebooks, and events. The business model relies on memberships, donations, institutional support, and sponsored content, positioning Next City as a trusted voice in the urban equity media space. Technically, the website employs a modern tech stack including JavaScript, jQuery, Font Awesome, Google Tag Manager, and Stripe for payments, hosted behind Cloudflare for DNS and CDN services. The site is built on the ExpressionEngine CMS and demonstrates good mobile optimization and SEO practices. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks explicit security headers and published security policies. DNSSEC is not enabled, and no vulnerability disclosure or incident response information is available. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which may affect GDPR compliance. Overall, Next City presents a professional, trustworthy, and content-rich platform with a solid business foundation. Strategic improvements in security headers, privacy compliance, and transparency around incident response would enhance its security posture and regulatory adherence.

P

Planet Detroit

planetdetroit.org

0

Planet Detroit is an independent nonprofit newsroom dedicated to producing news about local climate, environment, and public health issues in Detroit and Michigan. The organization targets residents and stakeholders interested in environmental accountability and community empowerment. Their business model focuses on nonprofit journalism with a strong emphasis on community engagement and transparency. The website demonstrates a solid market position as a regional media outlet specializing in environmental reporting. Technically, the website is built on WordPress using the Newspack theme and plugins, integrating modern technologies such as Google Analytics, Google AdSense, OneSignal push notifications, and Broadstreet Ads. The site is hosted by Bluehost and uses AWS DNS services. The technical infrastructure is modern and well-optimized for SEO, mobile responsiveness, and accessibility, though performance is moderate. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, it lacks DNSSEC, security headers, and published security or incident response policies. Privacy compliance is partial, with no explicit privacy or cookie policies found, though consent mode scripts are implemented to restrict tracking in EU regions. No vulnerability disclosure or security.txt files are present. Overall, Planet Detroit presents a trustworthy and professional online presence with excellent content quality and business credibility. Security and privacy practices can be improved by adding explicit policies, security headers, and incident response information to enhance user trust and compliance.

E

EL CENTRAL Hispanic News

elcentralmedia.com

0

EL CENTRAL Hispanic News is a bilingual media publication serving Michigan's Hispanic community with local business features, national news, and community stories. Established in 2022, it positions itself as Michigan's oldest bilingual Hispanic newspaper, targeting bilingual readers interested in Hispanic culture and community news. The website uses WordPress with Elementor and the jNews theme, supported by Google Tag Manager and Mailchimp for analytics and marketing. Hosting and domain registration are managed via Squarespace Domains and Google Cloud DNS. Security posture is moderate with HTTPS enabled and domain status protections, but lacks DNSSEC and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact is available via a web form, and social media presence is active on Facebook, Twitter, and Instagram. Overall, the site is professionally designed with good content quality and SEO, but should improve privacy and security disclosures to enhance trust and compliance.

D

Detroit Free Press

freep.com

0

Detroit Free Press is a well-established regional news media organization serving Detroit and Michigan, operating under the umbrella of Gannett Co., Inc. The website provides comprehensive news coverage including local news, sports, business, and entertainment. It targets residents and news consumers interested in regional and national news. The business model is primarily advertising-supported with subscription options, leveraging a strong affiliation with the USA TODAY Network to maintain market leadership in the region. The site demonstrates consistent branding and good content quality, supporting a large audience with professional digital news services. Technically, the website employs a modern technology stack including Polymer web components, extensive use of JavaScript libraries, and integration with multiple advertising and analytics platforms such as Google Analytics, Adobe Audience Manager, and various ad networks. The site is hosted on Gannett's CDN infrastructure, optimized for mobile and desktop with good SEO and accessibility features. Performance is moderate, with room for improvement in loading speed. From a security perspective, the site enforces HTTPS, uses strong security headers, and implements cookie consent management compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a publicly available security policy or incident response contact, and no vulnerability disclosure program is evident. Overall, the security posture is good but could be enhanced with formalized policies and transparency. The domain eu.freep.com is a subdomain of freep.com, which is a legitimate and trusted domain owned by Gannett. WHOIS data for the subdomain is not available, which is typical for subdomains. No WAF or blocking mechanisms were detected, and the site content is fully accessible. The site integrates multiple third-party advertising and tracking services with user consent, balancing monetization and privacy compliance effectively.

C

Chalkbeat

chalkbeat.org

0

Chalkbeat is a reputable nonprofit news organization dedicated to education reporting across the United States. It operates under the parent company Civic News Company and serves a target audience of parents, educators, and decision-makers interested in education policy and school improvement. The website offers rich, up-to-date content including news articles, newsletters, events, and community engagement opportunities. Chalkbeat's business model relies on donations and sponsorships, reflecting its nonprofit status. Technically, the website is built on modern web technologies including React and Arc Publishing CMS, with integrations for analytics, advertising, and performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Hosting and CDN services appear to be robust, likely leveraging Akamai. From a security perspective, Chalkbeat employs HTTPS with strong SSL configuration and multiple security headers. It uses Google reCAPTCHA v3 to protect forms and includes various tracking and advertising scripts typical for media sites. However, the site lacks a visible cookie consent banner and explicit terms of service, which are areas for improvement in privacy compliance. Overall, the domain WHOIS data is unavailable or privacy-protected, which is common for nonprofit organizations and does not raise immediate concerns. The website demonstrates a high level of professionalism, trustworthiness, and technical maturity, with minor gaps in privacy policy implementation. Strategic recommendations include adding cookie consent mechanisms, publishing terms of service, and enhancing security contact transparency.

Bridge Michigan is a nonprofit, nonpartisan news organization focused on delivering original, fact-driven reporting and analysis on Michigan state issues including politics, environment, education, and quality of life. The website serves Michigan residents and stakeholders seeking trustworthy local news and insights. The business model relies on donations, memberships, and sponsorships, positioning Bridge Michigan as a respected regional media entity with a strong digital presence and community engagement. Technically, the site is built on Drupal 10, leveraging modern analytics and advertising technologies such as Google Tag Manager, Adsense, and Facebook Pixel. The site is mobile optimized, accessible, and SEO friendly, providing a professional user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. The WHOIS data is missing or unavailable, which is unusual but does not detract significantly from the site's credibility given its nonprofit status and professional presentation. Overall, Bridge Michigan demonstrates a mature digital infrastructure and trustworthy content delivery, with room for improvement in security transparency and WHOIS data clarity.

S

Signal Cincinnati

signalcincinnati.org

0

Signal Cincinnati is a nonprofit, community-focused newsroom dedicated to providing Cincinnati residents with actionable local news, particularly through training and paying community members to document government meetings. The organization is part of a broader Ohio news initiative and aims to offer free, accessible journalism funded by donations. Technically, the website is built on WordPress with modern plugins and integrations for SEO, analytics, and fundraising. While HTTPS is properly configured and domain management is secure, the site lacks explicit privacy and cookie policies, which are important for compliance. Social media presence and donation mechanisms support community engagement and sustainability.

S

Signal Akron

signalakron.org

0

Signal Akron is a nonprofit newsroom dedicated to providing local news for the Akron, Ohio community. Founded in 2023, it operates as part of a network of Signal Newsrooms, focusing on community engagement, local government, public safety, and cultural reporting. The organization relies on donations and reader support, offering newsletter subscriptions and opportunities for community members to contribute as documenters. Technically, the website is built on WordPress with integrations including Gravity Forms, HubSpot, Fundraise Up, and Google Analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized and employs modern SEO practices but lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is adequate with HTTPS enabled and domain registration protected by privacy services, though DNSSEC is not enabled and security headers are absent. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security hardening.

S

Local news and resources for Ohioans by Ohioans

signalohio.org

0

SignalOhio.org is a local news and resource platform dedicated to serving Ohio residents with community-focused content. The website operates on a WordPress CMS and integrates marketing and analytics tools such as HubSpot and Fundraise Up. The domain is relatively new, registered in late 2022, and uses privacy protection services common for small or new websites. The site demonstrates basic content quality and design, with moderate SEO and mobile optimization. However, it lacks critical privacy and cookie policies, security headers, and explicit contact information, which impacts its overall trustworthiness and compliance posture.

B

Bitly, Inc.

signalnews.info

0

Bitly, Inc. is a well-established technology company specializing in branded link management and URL shortening services. Founded in 2003, Bitly serves a global enterprise audience, providing tools to customize, share, and track links effectively. The company holds a strong market position, trusted by major brands such as BuzzFeed, The New York Times, Gartner, and Bose. Their business model is SaaS-based, offering subscription and enterprise solutions that include URL shortening, branded links, QR codes, and analytics. Technically, Bitly's website is built on WordPress with a modern tech stack including Snowplow Analytics, Google Tag Manager, Optimizely, and ProfitWell for marketing and analytics. Hosting is provided via Amazon AWS Cloudfront CDN and Google Domains for DNS. The site demonstrates good performance, mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, Bitly exhibits a strong posture with HTTPS enforced, SOC 2 Type 2 certification, GDPR and CCPA compliance, and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. However, DNSSEC is not enabled, and there is no public security.txt or explicit incident response contact information, which could be improved. Overall, Bitly presents a trustworthy, professional, and secure online presence with comprehensive privacy and security policies. The domain registration data aligns well with the business claims, reinforcing legitimacy. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing incident response transparency to further strengthen security and compliance.

The Accountability Project is a non-profit investigative journalism platform operated by The Center for Public Integrity. It provides a powerful search tool for over 1.9 billion public records, supporting journalists and researchers in uncovering accountability stories. The project is grant-funded and partners with reputable foundations and investigative organizations, positioning it as a trusted resource in the media sector. Technically, the website uses standard web technologies with Google Analytics and Tag Manager for tracking, and is hosted with a registrar that provides privacy protection. The site is accessible, mobile-optimized, and professionally designed, though it lacks some advanced technical frameworks and CMS indications. Security posture is moderate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is credible and functional but would benefit from enhanced privacy and security practices.

Public Media Venture Group (PMVG) is a nonprofit consortium comprising 32 leading public media organizations focused on business development and technology partnerships. The organization aims to empower public television and radio stations through innovative technology platforms, NextGen TV capabilities, and new revenue models. The website reflects a professional and consistent brand presence, targeting public media stakeholders and broadcasters. Technically, the site is built on the Wix platform, leveraging modern web technologies and delivering moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and some script-based security hardening, but lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, impacting overall trust despite the professional site content. Strategic recommendations include enhancing security headers, publishing privacy and cookie policies, and providing clear contact channels for security incidents to improve compliance and trust.

L

Lenfest Institute

lenfestinstitute.org

0

The Lenfest Institute for Journalism is a non-profit organization dedicated to supporting and sustaining local journalism through grant funding, advisory services, and community-building initiatives. Positioned as a key player in the media sector, it serves journalism professionals, local news organizations, and donors with resources aimed at fostering sustainable news ecosystems. The website reflects a mature digital presence with professional design, clear navigation, and active engagement channels including social media and newsletters. Technically, the site is built on WordPress with modern analytics and monitoring tools, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site demonstrates high business credibility and trustworthiness, though the absence of WHOIS data limits domain registration transparency.

G

Gates Family Foundation

gatesfamilyfoundation.org

0

The Gates Family Foundation is a well-established philanthropic organization focused on improving quality of life in Colorado through strategic philanthropy and mission-forward investing. Their website clearly communicates their strategic priorities including education, natural resources, community development, and informed communities. The foundation operates primarily as a non-profit entity, providing capital and strategic grants, impact investments, and fellowship programs. Their market position is strong within the Colorado philanthropic sector, supported by a domain registered since 2002 and consistent branding and messaging. Technically, the website is built on WordPress using the Divi theme, enhanced with modern tools such as FontAwesome Pro, HubSpot analytics, Google Tag Manager, and Facebook Pixel for marketing and tracking. The site demonstrates good SEO practices and mobile optimization, though accessibility features are basic. Performance is moderate, with caching and optimization plugins like WP Rocket in use. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no visible security policy or incident response contact information, which could be improved. Privacy compliance is limited as no privacy or cookie policies were found, and no consent mechanisms are evident. Overall, the website is professional, trustworthy, and credible, with minor gaps in privacy compliance and security best practices. The domain WHOIS data aligns well with the organization's identity, reinforcing legitimacy. No WAF or blocking mechanisms interfere with content access, allowing full analysis.

F

FJC

fjc.org

0

FJC is a well-established non-profit organization based in New York, specializing in philanthropic fund management including donor advised funds, fiscal sponsorships, and innovative investment solutions. The organization targets donors, nonprofits, and wealth advisors, providing flexible and personalized philanthropic services. The website reflects a mature digital presence with a professional design, clear navigation, and rich content that supports its mission and services. Technically, the site is built on WordPress with modern libraries and tools, ensuring good performance and accessibility. Security posture is solid with HTTPS and domain transfer protections, though improvements are needed in DNSSEC and security headers. Privacy compliance is a notable gap, with no visible privacy or cookie policies or consent mechanisms. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

T

The Colorado Trust

coloradotrust.org

0

The Colorado Trust is a well-established non-profit organization dedicated to promoting health equity and positive social change across Colorado. With over 40 years of experience, it partners with various organizations to provide funding, resources, and support for initiatives focused on food security, housing, mental and behavioral health, and community resilience. The website reflects a mature and professional presence with comprehensive content, clear navigation, and strong branding consistency. The organization targets community groups, nonprofits, and stakeholders interested in health equity and social justice within Colorado. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. It employs reCAPTCHA for form security and demonstrates good mobile optimization and accessibility. Performance is moderate, with room for improvement in loading speed and security header implementation. From a security perspective, the site uses HTTPS with a strong SSL configuration and secure form handling. However, it lacks explicit security headers like Content-Security-Policy and does not display a cookie consent banner, which may affect privacy compliance. WHOIS data is unavailable due to privacy protection or query issues, which slightly reduces trust but is common for non-profits. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and credible digital presence for The Colorado Trust, with recommendations to enhance privacy compliance and security headers to further strengthen its posture and user trust.

C

Colorado Media Project

coloradomediaproject.com

0

Colorado Media Project is a small non-profit organization focused on researching and testing new ideas and digital tools to strengthen the civic fabric of Colorado, particularly the local news ecosystem. The organization targets Coloradans interested in local news and civic engagement, positioning itself as a niche player in the non-profit media sector. The website is built on the Squarespace platform, leveraging modern web technologies including Facebook Pixel for analytics and marketing. The site is professionally designed with good mobile optimization and clear navigation, though it lacks comprehensive privacy and cookie policies. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but could be improved by enabling DNSSEC and adding security headers. Overall, the website demonstrates moderate digital maturity and business credibility but should enhance privacy compliance and security transparency to strengthen trust and compliance.

C

Colorado Community Media

coloradocommunitymedia.com

0

Colorado Community Media is a well-established regional media company founded in 2012, providing comprehensive local news coverage across multiple Colorado communities. The website serves as a digital hub for news, sports, arts, and community events, targeting residents within its service areas. The business model relies on advertising, sponsored content, and newsletter subscriptions, positioning itself as a trusted local news source with a consistent brand presence and partnership with the National Trust for Local News. Technically, the website is built on WordPress using the Newspack theme, optimized for news media with moderate performance and good mobile responsiveness. The infrastructure includes modern analytics and advertising technologies such as Google Analytics, Broadstreet Ads, and Jetpack. Hosting and domain registration are managed via GoDaddy, with standard domain protections but lacking DNSSEC. From a security perspective, the site uses HTTPS with good SSL configuration and domain-level EPP protections. However, it lacks advanced security headers and a formal vulnerability disclosure policy. Privacy compliance is partial, with a comprehensive privacy policy present but no cookie consent mechanism detected, which may affect GDPR compliance. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security best practices and privacy compliance. Strategic enhancements in these areas would strengthen trust and regulatory adherence while maintaining its role as a key local news provider.

V

VTDigger Shop

vtdiggershop.org

0

VTDigger Shop is an e-commerce website dedicated to selling branded merchandise that supports independent journalism in Vermont. The site offers products such as tote bags, hats, t-shirts, and gift cards, targeting Vermont residents and supporters of local journalism. The business model focuses on on-demand production to reduce overproduction and promote thoughtful purchasing. The website is built on the Squarespace platform, leveraging modern web technologies including Google Tag Manager for analytics and Typekit for fonts. The site is mobile optimized with a clear navigation structure and professional design, providing a good user experience. Security posture is strong with HTTPS and HSTS enabled, but lacks some advanced security headers and explicit vulnerability disclosure mechanisms. Privacy compliance is limited due to the absence of a privacy policy and cookie consent banner. WHOIS data is unavailable, likely due to privacy protection, but the domain and website content appear consistent with a legitimate small media-related e-commerce operation. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, and providing clear contact information for security incidents.

V

VTDigger Jobs

vtdiggerjobs.org

0

VTDigger Jobs is a specialized online job board serving Vermont and nearby regions, operated by Vermont Journalism Trust, Ltd. The platform offers job seekers and employers a focused marketplace for remote, hybrid, and on-site employment opportunities. It leverages a modern WordPress-based infrastructure with WooCommerce and HivePress plugins to manage listings and transactions. The site is well-branded, professionally designed, and provides relevant content including company profiles and testimonials, positioning itself as a trusted regional employment resource. Technically, the site uses standard web technologies and integrates Google services for analytics and spam protection. Security posture is adequate with HTTPS and reCAPTCHA, but lacks some advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is partial, with a privacy policy and terms of service present but no cookie consent mechanism detected. Overall, the site is credible and functional with room for security and privacy improvements.

K

Knock Knock WHOIS Not There, LLC

kjtz.co

0

The website jungespublikum.blog is a German-language cultural blog dedicated to performing arts and young audiences, providing networking, event information, funding, and research dissemination. It is hosted on WordPress.com and registered via Automattic Inc., with domain registration dating from 2023, consistent with the site's recent content. The platform targets professionals and stakeholders in the cultural and performing arts sectors, operating as a small non-profit media entity. Technically, the site uses WordPress with Jetpack and Gutenberg, delivering a modern and moderately performant user experience with good mobile optimization and basic accessibility. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and explicit security headers are not visible. Privacy compliance is weak, lacking visible privacy or cookie policies and consent mechanisms. Contact is primarily via a blog subscription form, with no direct emails or phone numbers published. Social media presence is established across major platforms. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy disclosures and security hardening.

The Washington Monthly is a well-established independent media organization focused on political and educational journalism, with a strong emphasis on government accountability and policy analysis. The website serves a target audience interested in in-depth political commentary, education issues, and public affairs, supported by subscription and donations. Technically, the site is built on WordPress with modern SEO and analytics tools, delivering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit cookie consent mechanism is present. Overall, the site demonstrates high professionalism and trustworthiness with a long domain history and consistent WHOIS data.

M

Montana Free Press

montanafreepress.org

0

Montana Free Press is an independent nonprofit digital newsroom providing fact-based statewide news coverage focused on Montana. It operates with a reader-supported business model emphasizing transparency, ethics, and community engagement. The organization is positioned as a leading source of independent journalism in Montana, offering news, newsletters, special projects, and events. The website is professionally designed with excellent content quality and clear navigation targeting Montana residents and stakeholders interested in local affairs. Technically, the site is built on WordPress with a modern tech stack including WooCommerce for e-commerce, Fundraise Up for donations, and Google Analytics for tracking. Hosting is via WordPress.com nameservers, ensuring reliable infrastructure. The site is mobile-optimized, fast loading, and accessible with good SEO practices. Security posture is strong with HTTPS, multiple security headers, and use of Google reCAPTCHA on forms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy and GDPR considerations, though cookie consent mechanisms and terms of service are missing. Contact information is available primarily via email and contact forms. Overall, the website presents a trustworthy, professional, and secure platform for nonprofit journalism. Strategic recommendations include implementing cookie consent banners, publishing terms of service, and adding vulnerability disclosure and incident response information to enhance transparency and compliance.

T

The Colorado News Conservancy

coloradonewsconservancy.com

0

The Colorado News Conservancy is a nonprofit collaboration launched in 2021 by the National Trust for Local News and The Colorado Sun to maintain community ownership of 24 local newspapers in Colorado. The organization positions itself as an innovative alternative to national media consolidation, focusing on local journalism and community engagement. The website reflects this mission with clear content, partnership references, and a call to support the initiative. Technically, the site uses modern React technology, is hosted on Glitch, and integrates Google Tag Manager and Mailchimp for analytics and marketing. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Business credibility is strong given the reputable partners and consistent WHOIS data. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security practices.

V

VTDigger

vtdigger.org

0

VTDigger is a well-established, member-supported news organization focused on Vermont, providing comprehensive coverage of business, politics, environment, and public policy since 2009. The website demonstrates a strong market position as Vermont's largest newsroom, with a professional and consistent brand presence. Technically, the site is built on WordPress with modern plugins and integrations such as Gravity Forms, WooCommerce, and Google Analytics, hosted with reputable providers and using Cloudflare DNS. The site is mobile-optimized and SEO-friendly, offering a good user experience. Security posture is solid with HTTPS and domain protections, though it lacks some advanced security headers and explicit security policies. Privacy compliance is limited by the absence of visible privacy and cookie policies, which should be addressed to improve trust and regulatory adherence. Overall, the site is credible and trustworthy with room for improvement in privacy and security transparency.

Mirror Indy is a small nonprofit media organization dedicated to community-oriented news reporting in Indianapolis. The website serves as a platform to engage local residents with relevant news, events, and community stories. The organization relies on donations and subscriptions to support its mission. Technically, the site is built on WordPress using the Newspack theme, integrating modern analytics and advertising tools such as Google Analytics, Google Tag Manager, and DoubleClick. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and reCAPTCHA on forms, but lacks DNSSEC and some recommended security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is consistent with nonprofit use, employing privacy protection appropriately. The site is trustworthy and professionally maintained, with room for security and privacy enhancements.

The Center for Public Integrity is a well-established nonprofit investigative journalism organization founded in 1997, focused on exposing inequality and holding powerful interests accountable. It operates a professional, content-rich website with a strong emphasis on investigative reports, podcasts, and data tools. The organization targets a broad audience interested in social justice, democracy, and accountability. Technically, the website is built on WordPress, leveraging modern SEO and performance optimizations, hosted behind Cloudflare for DNS and CDN services. Security posture is strong with HTTPS enforced and domain transfer protections, though some security headers and explicit incident response policies are absent. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity.

S

Signal Cleveland

signalcleveland.org

0

Signal Cleveland is a nonprofit newsroom dedicated to serving the Greater Cleveland community with local news and resources. Founded recently in 2022, it operates with a mission to provide accessible, community-focused journalism covering government, housing, education, and public safety. The organization relies on donations and community support, as evidenced by donation appeals and fundraising campaigns on the website. The site is well-branded and maintains consistent messaging aligned with its nonprofit media identity. Technically, the website is built on WordPress using the Newspack theme, leveraging modern tools such as Gravity Forms for data collection, Yoast SEO for search optimization, and integrations with HubSpot, Fundraise Up, and Parsely for marketing and analytics. Hosting is provided by Automattic Inc., consistent with WordPress.com infrastructure. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers such as CSP or HSTS. No privacy or cookie policies were found, indicating gaps in compliance with GDPR and other privacy regulations. No incident response or vulnerability disclosure information is published. Tracking and advertising scripts are present, including Google Analytics and Facebook Pixel, with moderate user tracking. Overall, Signal Cleveland presents a credible and professional nonprofit media presence with solid technical foundations but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

L

Lookout Santa Cruz

lookout.co

0

Lookout Santa Cruz is a well-established local news media organization founded in 2010, serving Santa Cruz County with daily news, opinion, and community resources. The website is professionally designed using WordPress CMS and integrates modern technologies such as WooCommerce, Google Tag Manager, and Broadstreet Ads for monetization and analytics. The site demonstrates good content quality and user experience, targeting local residents and community members. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and published security policies. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is trustworthy and credible with room for improvement in privacy and security transparency.

T

The Black Wall Street Times

theblackwallsttimes.com

0

The Black Wall Street Times is a small, niche national news publication focused on delivering news from Black perspectives, headquartered in Tulsa's historic Greenwood District. The website is built on WordPress and leverages a modern technology stack including Yoast SEO, WooCommerce, Jetpack, and various advertising and analytics tools. The site demonstrates good content quality, consistent branding, and a professional design optimized for both desktop and mobile users. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as enabling DNSSEC and implementing security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures to improve user trust and regulatory compliance.

T

The Haitian Times

haitiantimes.com

0

The Haitian Times is a well-established online news media outlet focused on delivering news and information about Haiti and the Haitian diaspora globally. Founded in 1998, it serves as an authoritative voice for the Haitian community with a broad range of content including news articles, videos, and special reports. The website targets the Haitian diaspora and those interested in Haitian affairs, operating primarily as an advertising-supported media platform with subscription and donation options. The brand is consistent and professional, with a strong social media presence and a clear market position within its niche. Technically, the site is built on WordPress using the Newspack theme and associated plugins, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and OneSignal for push notifications. The site is hosted with Cloudflare DNS and uses HTTPS with good SSL configuration, ensuring secure communications. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well implemented through Yoast SEO and structured data. From a security perspective, the site follows best practices such as HTTPS enforcement and domain transfer protection. However, DNSSEC is not enabled, and there is a lack of published security policies or incident response information. Privacy compliance is weak due to missing privacy and cookie policies and no visible consent mechanisms, which could expose the site to regulatory risks. Overall, The Haitian Times presents a credible and professional online presence with solid technical infrastructure but should improve privacy compliance and DNS security to enhance trust and regulatory adherence.

B

Bridge Detroit

bridgedetroit.com

0

BridgeDetroit is a nonprofit news media organization dedicated to providing original, community-driven reporting focused on Detroit's local issues including health, education, jobs, and neighborhoods. The website serves Detroit residents and stakeholders by delivering relevant news, analysis, and community engagement through multiple channels such as newsletters and podcasts. The organization is grant-funded by reputable foundations, emphasizing its nonprofit and community-oriented mission. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, and AMP partial implementation, ensuring good performance, mobile optimization, and SEO effectiveness. Security posture is strong with HTTPS, security headers, and secure forms using reCAPTCHA, though privacy compliance could be improved by adding a cookie consent mechanism and publishing more explicit security policies. The absence of public WHOIS data slightly reduces trust but the professional content and transparency in business information mitigate this concern. Overall, BridgeDetroit presents a trustworthy, well-maintained digital presence aligned with its nonprofit mission.

T

The Center for Investigative Reporting

revealnews.org

0

Reveal from The Center for Investigative Reporting is a well-established nonprofit investigative journalism organization founded in 2014. It provides high-quality investigative news content, podcasts, and multimedia storytelling aimed at engaging and empowering the public on critical social issues. The organization maintains a strong market position within nonprofit media, supported by a professional website and active social media presence. Technically, the website is built on WordPress with modern plugins and integrations such as Yoast SEO, Google Analytics, and reCAPTCHA, hosted on WordPress.com infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS and secure forms, but could be enhanced by enabling DNSSEC and adding security headers. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the website is professional, trustworthy, and credible, with room for improvement in privacy and security transparency.

F

Flint Beat

flintbeat.com

0

Flint Beat is a small, community-focused non-profit media organization dedicated to providing rigorous, evidence-based local news coverage for Flint, Michigan. The website serves as a platform for community engagement, local news dissemination, and fundraising through donations and newsletter subscriptions. Technically, the site is built on WordPress using the Newspack theme and plugins, leveraging modern web technologies and integrations such as Google Analytics, Facebook Pixel, and Broadstreet Ads for monetization and audience insights. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA on forms, but lacks advanced security headers and DNSSEC. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the site is professional, well-branded, and trustworthy, with room for improvement in privacy and security best practices.

B

Black Voice News

blackvoicenews.com

0

Black Voice News is a niche media organization focused on serving the Black community in California through advocacy and data-driven journalism. The website offers news content, community engagement via newsletters, and donation-based funding. Technically, the site is built on WordPress with a modern plugin ecosystem supporting e-commerce, events, and marketing integrations. The site is mobile-optimized and SEO-friendly, with good content quality and consistent branding. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with a legitimate, long-standing media entity.

P

Prison Journalism Project

prisonjournalismproject.org

0

Prison Journalism Project is a US-based nonprofit organization established in 2019 that trains incarcerated individuals to become journalists and publishes their stories. It occupies a unique niche in the nonprofit media sector focused on criminal justice reform and prison-related storytelling. The organization operates a professionally designed WordPress website with rich content, including articles, educational resources, and special projects. The site actively engages its audience through newsletters, social media, and donation campaigns. Technically, the website uses modern WordPress plugins and SEO tools, is hosted with Cloudflare, and employs HTTPS with strong security headers, reflecting a mature digital infrastructure. However, DNSSEC is not enabled, and privacy compliance could be improved with explicit cookie consent and GDPR details. No critical security vulnerabilities were detected, but the absence of published security and incident response policies suggests room for improvement in formal security governance. Overall, the website demonstrates high professionalism, trustworthiness, and a solid security posture suitable for its nonprofit mission.

E

Epicenter NYC

epicenter-nyc.com

0

Epicenter NYC is a digital media platform focused on connecting New Yorkers with local news, information, arts, politics, and community events. Founded in 2020, it operates as a small media business with a strong local focus, offering news articles, newsletters, podcasts, advertising, membership, and an e-commerce shop. The website is built on WordPress with modern SEO and analytics tools, demonstrating a mature digital infrastructure. Security posture is good with HTTPS and domain registration protections, but lacks DNSSEC and explicit security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.