Security Directory

I

Interact

interact-sport.com

0

Interact is a non-profit initiative focused on promoting Sport for All by supporting international sport organizations in capacity building, certification, and community engagement. The website presents a professional and content-rich platform targeting sport organizations and grassroots participants. Technically, the site is built on WordPress with common libraries and plugins, but suffers from slow load times and lacks a valid SSL certificate, which is a critical security concern. The security posture is basic with HSTS enabled but no valid TLS protocols or certificate transparency compliance. Privacy compliance is well addressed with a cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is trustworthy but requires urgent improvements in SSL/TLS configuration to ensure secure user interactions.

I

IFMST - International Federation of Municipalities Sports And Tourism

ifmst.org

0

IFMST is an international federation focused on promoting sports and tourism initiatives at the municipal level worldwide. The organization aims to improve quality of life, foster cultural exchange, and stimulate economic growth through local sports and tourism development. The website reflects a structured federation with departments, committees, and a calendar of events, targeting municipalities and stakeholders in sports and tourism sectors. Technically, the site is built on WordPress with Elementor and several plugins, hosted on a LiteSpeed server via Parspack. However, the site lacks a valid SSL certificate and does not serve content over HTTPS, which is a critical security gap. The security posture is weak with no HSTS, no OCSP stapling, and missing security headers. Privacy compliance is minimal, with no visible privacy or cookie policies. Contact is primarily via social media and a contact form, with no explicit emails or phone numbers listed. Overall, the site is functional and content-rich but requires urgent improvements in security and privacy compliance to enhance trust and protect users.

I

International Sport and Culture Association

isca.org

0

The International Sport and Culture Association (ISCA) is a well-established non-profit organization focused on promoting physical activity and recreational sport globally. Their website reflects a mature and consistent brand with a clear mission to empower stakeholders and members through conferences, campaigns, and educational resources. The organization targets NGOs, sport professionals, and the general public interested in physical activity. Technically, the website uses a PHP backend with common frontend libraries such as jQuery and Bootstrap, hosted on Google Cloud infrastructure with DNS managed by Cloudflare. However, the site lacks a valid SSL certificate and modern TLS support, which significantly impacts its security posture. Security headers are present but insufficient without HTTPS. Privacy compliance is weak, with no visible privacy or cookie policies despite GDPR references. Contact information is clearly provided, including email, phone, and physical address, alongside active social media channels. Overall, the site is functional and professional but requires urgent security and privacy improvements.

D

DUNA MÉDIASZOLGÁLTATÓ NONPROFIT ZRT.

duna-haz.com

0

Duna-Ház is a non-profit cultural and educational organization based in Torockó, Romania, offering a variety of programs such as children's activities, workshops, films, trainings, lectures, and online events. The website serves as a portal for event information and community engagement, targeting local families and youth interested in cultural enrichment. The organization appears to have a stable market position as a local non-profit with a mature domain and consistent branding. Technically, the website is built on WordPress using Elementor and Slider Revolution, but suffers from slow load times and lacks HTTPS security, which is a critical vulnerability. The absence of a valid SSL certificate and security headers exposes the site to risks and undermines user trust. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or advanced GDPR features. Contact information is clearly provided, including email and physical address, and social media presence is active on Facebook and YouTube. Overall, the site is functional but requires urgent security improvements to protect user data and enhance credibility.

F

FUNDACION DEL MUSEO GUGGENHEIM BILBAO

guggenheim-bilbao.eus

0

The Museo Guggenheim Bilbao is a prominent non-profit cultural institution based in Bilbao, Spain, managed by the FUNDACION DEL MUSEO GUGGENHEIM BILBAO. The website serves as a comprehensive portal for visitors to plan their visits, explore exhibitions, and access educational resources. It targets a broad audience interested in art, culture, and museum experiences. The museum holds a strong market position as an internationally recognized art venue with strategic partnerships and sponsorships from government and corporate entities. Technically, the website leverages modern web technologies including Next.js and React, with a headless WordPress CMS backend. It integrates accessibility tools and multimedia content hosted on Vimeo. The site is mobile-optimized and SEO-friendly, providing a good user experience and navigation clarity. From a security perspective, the site currently lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability impacting user trust and data security. Other security headers and best practices are partially implemented, but the absence of HTTPS significantly lowers the security posture. Overall, the website is professionally designed and content-rich, but the lack of HTTPS is a major risk. Strategic recommendations include immediate SSL/TLS deployment, enabling HSTS, and improving certificate management to enhance security and user trust.

C

CEATL

ceatl.eu

0

CEATL is a well-established international non-profit association based in Belgium, serving as a platform for literary translators’ associations across Europe. Founded in 1993, it provides advocacy, resources, and information exchange to improve the status and working conditions of literary translators. The website targets translators, associations, publishers, and other stakeholders interested in literary translation and European cultural policies. Technically, the site is built on WordPress with a modern theme and plugins, but it suffers from a critical security issue due to the absence of a valid SSL certificate, resulting in no HTTPS support. This significantly impacts the security posture and user trust. The site includes rich content, structured data, and active social media integration, reflecting good digital maturity. However, privacy compliance is partial, with no cookie consent mechanism despite the use of tracking tools like Google Analytics and StatCounter. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.

A

ACT Alliance

actalliance.org

0

ACT Alliance is a large, global non-profit coalition comprising 152 members operating in 127 countries, focused on humanitarian aid, climate justice, gender justice, migration, peace, and advocacy. The website reflects a well-structured organization with clear thematic areas and a broad international presence. Technically, the site is built on WordPress with modern frameworks such as Bootstrap and uses various JavaScript libraries for UI and mapping functionalities. However, the security posture is weak due to the absence of a valid SSL certificate and lack of essential security headers, which exposes users to risks and undermines trust. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the site is professional and credible but requires urgent security improvements to protect user data and enhance trust.

M

Mission 21

mission-21.org

0

Mission 21 is a well-established Swiss non-profit organization dedicated to sustainable development and humanitarian aid across 18 countries in Africa, Asia, and Latin America. Their work focuses on peace promotion, education, health, food sovereignty, and combating violence against vulnerable groups. The organization is supported by church bodies, foundations, government agencies, and private donors, reflecting a robust and diverse funding model. The website presents comprehensive content in multiple languages, demonstrating a strong commitment to accessibility and outreach. Technically, the website is built on WordPress using the Astra theme and integrates various plugins for forms, e-commerce, and multimedia content. While the site is mobile-optimized and SEO-friendly, performance metrics are not available, indicating potential areas for improvement. The security posture is currently weak due to the absence of a valid SSL certificate and modern TLS protocols, which poses significant risks to user data and trust. Privacy compliance is well addressed with clear privacy and cookie policies, including a consent mechanism, aligning with GDPR requirements. However, the site lacks explicit security policies and incident response information, which are important for transparency and user confidence. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy. Strategically, Mission 21 should prioritize securing their website with valid SSL/TLS certificates and updating their security configurations to protect user data and enhance trust. Enhancing transparency around security policies and incident response would further strengthen their credibility. Continuous monitoring and performance optimization will also benefit user experience and engagement.

A

Achmea Foundation

achmeafoundation.nl

0

Achmea Foundation is a non-profit organization focused on sustainable social impact in the Netherlands and Sub-Sahara Africa, operating under the parent company Achmea. The foundation delivers impact through funding, volunteering, and community programs. The website is professionally designed and content-rich, targeting stakeholders interested in social projects and collaborations. Technically, the site uses modern frameworks like React and Sitecore CMS, hosted likely on Microsoft Azure infrastructure. However, the website suffers from critical security shortcomings, notably the absence of a valid SSL certificate and HTTPS support, which severely impacts its security posture. Privacy policies are present and linked to the parent company, indicating good privacy compliance. Overall, the site is trustworthy but requires urgent security improvements to protect users and data.

D

Demla ry

demla.fi

0

Demla ry is a Finnish non-profit association founded in 1954, dedicated to influencing Finnish legal and social policy with a focus on fundamental and human rights and the rule of law. The organization serves as an expert body promoting equality, social justice, legal protection, democracy, and sustainable development through statements, events, and publications such as the Oikeus-lehti. The website is built on Squarespace, featuring a professional design and clear navigation targeting legal professionals, students, and interested individuals. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. While privacy and cookie policies are present and GDPR compliance is indicated, there is no visible incident response or vulnerability disclosure information. Overall, the site provides good content quality and business credibility but requires urgent security improvements.

S

Suomen ympäristöoikeustieteen seura

sysry.fi

0

The website represents Suomen ympäristöoikeustieteen seura, a Finnish non-profit society dedicated to environmental law research, education, and community engagement. It serves as a platform for announcements of seminars, conferences, awards, and publications related to environmental law in Finland, targeting academics, legal professionals, and students. The site is built on WordPress with standard plugins for event management and contact forms, indicating a moderate level of digital maturity. However, the absence of a valid SSL certificate and modern TLS protocols significantly undermines the site's security posture. While content quality and business credibility are good, the lack of privacy and security policies, combined with weak technical security measures, present compliance and trust challenges. Strategic improvements in security infrastructure and privacy compliance are recommended to enhance user trust and regulatory adherence.

J

Juridiska Föreningen i Finland r.f.

jff.fi

0

Juridiska Föreningen i Finland r.f. is a small Finnish non-profit legal association focused on providing a platform for legal discussions, membership services, and publishing a legal journal. The website serves as an informational and membership portal primarily in Swedish, with options for Finnish and English. The site is built on WordPress using Elementor and Otter Blocks, hosted on Cloudpit infrastructure. While the site offers relevant content and structured navigation, it lacks visible contact details and advanced digital marketing or analytics tools. Security posture is weak due to the absence of a valid SSL certificate and modern security headers, exposing visitors to risks and reducing trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism.

I

Independent Agent Giving

agentgiving.com

0

Independent Agent Giving is a community-focused platform supporting independent insurance agents affiliated with Liberty Mutual and Safeco Insurance. The website promotes charitable giving, volunteerism, and awards programs to recognize agents' community contributions. It serves a niche market of insurance agents seeking to deepen their social impact and community engagement. The site is moderately sized and professionally branded with consistent messaging and trust signals linked to its parent companies. Technically, the site is built on WordPress and hosted on Pantheon, utilizing modern analytics and monitoring tools such as Google Tag Manager and New Relic. However, the site lacks a valid SSL certificate, which significantly impacts its security posture. Security headers are present but incomplete, and no cookie consent mechanism is detected, indicating partial privacy compliance. Overall, the website offers good content quality and user experience but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

O

OpenAsso

openasso.org

0

OpenAsso is a French collaborative platform dedicated to the associative sector, providing expert articles and a Q&A module to support association managers. The platform emphasizes openness, collaboration, and quality content contributed by experts and community members. Technically, the site uses a variety of JavaScript libraries and is hosted on Microsoft Azure, leveraging the Assoconnect CMS platform. However, the site currently lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Cookie consent is managed via Axeptio, and analytics are implemented with Google Analytics, Google Tag Manager, and RudderStack, with consent-based activation. Overall, the site offers good content quality and user experience but requires urgent security improvements to enable HTTPS and strengthen its security posture.

R

Rassemblement Annuel Philanthropique

raphilanthropique.ca

0

Rassemblement Annuel Philanthropique is a small non-profit organization focused on organizing an annual philanthropic event in Quebec, Canada. The event targets professionals and stakeholders in the philanthropic sector, offering workshops, conferences, and networking opportunities. The website is built on WordPress using Elementor and Bootstrap frameworks, with SEO optimized via Yoast plugin. However, the site suffers from critical security issues including lack of HTTPS and security headers, which significantly impacts its security posture. Performance is slow, and while the site is mobile optimized and content-rich, it lacks privacy compliance mechanisms such as cookie consent banners. Overall, the business presents a professional image but must urgently address security and privacy compliance gaps.

V

Veterans United Foundation

enhancelives.com

0

Veterans United Foundation is a non-profit organization dedicated to enhancing the lives of veterans, military families, and local communities across the United States. Supported by its parent company, Veterans United Home Loans, the foundation focuses on scholarships, partnerships, and community support programs. The website reflects a clear mission and strong branding aligned with its target audience. Technically, the site uses modern JavaScript libraries and Google marketing tools, hosted on Amazon AWS infrastructure, but suffers from slow load times and lacks advanced security headers and DNS protections. The SSL certificate is valid and properly issued, ensuring encrypted communications. Security posture is basic with room for improvement in headers and DNS security. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is professional and trustworthy but should enhance privacy and security practices to meet higher compliance standards.

L

Logilys Inc.

imakeanonlinedonation.org

0

I Make An Online Donation is a French-language website initiative by Logilys Inc. offering an integrated online donation solution primarily targeting charitable organizations. The platform enables organizations to manage online donation forms integrated with the Prodon Donation and Donor Management Software, positioning itself as a niche SaaS provider in the non-profit sector in Canada. The website content is professionally presented with clear navigation and relevant business information, including contact details and social media presence. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Google Fonts, Font Awesome, Google reCAPTCHA v3, and Google Tag Manager, but suffers from slow load times and lacks a valid SSL certificate, which critically impacts security and trust.

S

San Gabriel Valley Regional Housing Trust

sgvrht.org

0

The San Gabriel Valley Regional Housing Trust is a non-profit joint powers authority established in 2020 to facilitate funding and financing for homeless and affordable housing projects in the San Gabriel Valley region. The organization serves as a regional resource to support extremely low, very low, and low-income housing initiatives, targeting residents and stakeholders within the area. The website provides information on project funding requests, board meetings, and homelessness resources, reflecting a focused mission on housing affordability and community support. Technically, the site is built on the Wix platform leveraging modern frameworks such as React 18 and Wix-specific components, but suffers from slow performance and lacks mobile optimization. Security posture is weak due to the absence of HTTPS and security headers, exposing the site to risks. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site demonstrates moderate professionalism and trustworthiness but requires significant improvements in security and technical performance to enhance user trust and compliance.

The Axel-Bourjau-Stiftung website represents a small regional non-profit foundation focused on supporting children and youth work through cultural, educational, and social projects in Büchen, Germany. The foundation was established in 2005 and primarily serves local communities, churches, and schools. The website content is well-structured and provides clear information about the foundation's mission, projects, and history, targeting local stakeholders and potential supporters. Technically, the website uses Bootstrap and jQuery for frontend development and is hosted with GoDaddy services. The site performance is moderate with a page load time of approximately 3.3 seconds and basic mobile responsiveness. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which significantly impacts security posture and user trust. From a security perspective, the absence of HTTPS, security headers, and cookie consent mechanisms are critical vulnerabilities. No forms or direct contact emails are present on the homepage, limiting direct user engagement. The site does not implement modern security best practices such as HSTS or OCSP stapling. Privacy compliance is minimal, with a privacy policy page present but no cookie consent or GDPR indicators. Overall, the website is functional and informative but requires urgent security improvements, especially enabling HTTPS and implementing privacy compliance features, to enhance trustworthiness and protect user data.

F

Fuerte Arts Movement

fuerte.org

0

Fuerte Arts Movement is a small non-profit organization focused on leveraging art and culture to drive collective action on social issues such as voting rights, housing justice, and environmental justice, with a focus on Arizona women of color and LGBTQ perspectives. The website serves as a community hub featuring advocacy campaigns, events, a zine library, and multimedia content. Technically, the site is built on WordPress with various plugins for event management and media display, but suffers from slow performance and lacks a valid SSL certificate, resulting in insecure HTTP connections. Security posture is weak due to missing HTTPS, lack of security headers, and absence of email authentication records. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is content-rich and professionally designed but requires urgent improvements in security and privacy to protect users and build trust.

F

For Good

forgood.org

0

For Good is a well-established 501(c)(3) non-profit organization operating a technology-enabled donor-advised fund platform that facilitates charitable giving for individuals and companies. Founded in 2001 by tech executives from AOL, Yahoo!, and Cisco, it has positioned itself as a leader in digital philanthropic innovation, partnering with major platforms such as YouTube, Walmart, and Patagonia. The website clearly communicates its mission, services, and impact, targeting donors, nonprofits, and corporate partners. The business model centers on enabling donors to support charities efficiently and transparently through a secure online platform. Technically, the website is built on Webflow CMS, leveraging modern web technologies and hosting infrastructure with CDN support. It employs Google Tag Manager and Analytics for tracking and performance monitoring. The site is mobile-optimized and accessible, with good SEO practices and a moderate page load time. Security-wise, the site uses HTTPS with TLS 1.3 and 1.2, has valid SPF and DMARC records, and avoids known SSL vulnerabilities. However, it lacks some advanced security features such as HSTS, DNSSEC, OCSP stapling, and Certificate Transparency compliance, which are recommended for enhanced protection. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but no explicit cookie consent mechanism was detected, which may impact GDPR compliance. Contact information is clearly provided, including email, phone, and physical address, along with active social media profiles, enhancing business credibility and trustworthiness. Overall, the site demonstrates a strong professional presence with room for security and privacy improvements.

Bonterra LLC is a leading provider of nonprofit software solutions designed to empower social impact organizations including foundations, corporations, government agencies, and nonprofits. Their product suite covers fundraising, case management, corporate social responsibility, grant management, and volunteer management, positioning them as the second-largest social good software company globally. The website reflects a mature digital presence with strong branding, comprehensive content, and clear navigation targeting a broad social good ecosystem. Technically, the site is built on WordPress with modern JavaScript frameworks like React and uses various marketing and analytics tools such as Google Tag Manager and Marketo. However, performance is currently slow, and there is room for optimization. Accessibility and SEO practices are well implemented, supporting a good user experience. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability impacting trust and data protection. While SPF, DMARC, and HSTS headers are configured, the absence of HTTPS severely undermines the security posture. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, Bonterra's website is professional and content-rich but requires urgent security improvements to protect user data and maintain trust. Strategic recommendations include immediate SSL deployment, enabling TLS 1.2/1.3, and enhancing security configurations to align with best practices.

L

LA Forward Institute

laforward.institute

0

LA Forward Institute is a small nonprofit organization focused on advancing racial and economic justice in Los Angeles County through civic education, leadership development, and coalition building. The website is built on Squarespace, featuring rich educational content, videos, and guides aimed at empowering local residents and activists. Technically, the site uses modern TLS protocols and strong cipher suites but lacks advanced security headers and email authentication policies such as DMARC and DNSSEC. Privacy compliance is weak, with no visible privacy or cookie policies, and no explicit contact emails or phone numbers are provided, only a contact form. Overall, the site is functional and professional but could improve in security and privacy transparency to enhance trust and compliance.

Bonterra is a leading provider of nonprofit software solutions focused on social impact, offering products for fundraising, case management, corporate social responsibility, and grant management. The company is positioned as the second-largest social good software provider globally, targeting nonprofits, foundations, corporations, and government agencies. Their SaaS business model integrates multiple acquired products to serve a broad social good ecosystem. Technically, the website is built on WordPress hosted on WP Engine with Cloudflare CDN, leveraging modern JavaScript frameworks like React and animation libraries such as GSAP. SEO and accessibility are well implemented, with comprehensive metadata and structured data. However, a critical security weakness is the absence of a valid SSL certificate and HTTPS support, severely impacting the security posture. Privacy and cookie policies are present and indicate GDPR compliance. Overall, the site is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

Bonterra is a purpose-built software company specializing in corporate social responsibility (CSR) solutions that empower organizations to enhance their philanthropic programs. Founded in 2021, Bonterra has quickly established itself as the second-largest social good software company globally, serving nonprofits, foundations, corporations, and government entities. Their key offerings include grant management, employee engagement, volunteer management, and fundraising software, all designed to maximize social impact and streamline administrative workflows. Technically, the website is built on a WordPress CMS platform with a modern tech stack including React, Bootstrap, and GSAP for animations. The site integrates multiple marketing and analytics tools such as Marketo, Microsoft Clarity, Facebook Pixel, and Google Tag Manager, reflecting a mature digital marketing strategy. However, performance is currently slow, and while mobile optimization and accessibility are good, there is room for improvement in loading speed. From a security perspective, the site lacks a valid SSL certificate and does not enforce HTTPS, which is a critical vulnerability. Other security best practices like HSTS, OCSP stapling, and modern TLS protocols are missing, significantly lowering the security posture. Privacy and cookie policies are present and include consent mechanisms, indicating good privacy compliance. Contact information is limited to a physical address without explicit phone or email contacts publicly visible. Overall, Bonterra's website demonstrates strong business credibility and content quality but requires urgent security improvements to protect user data and enhance trust. Strategic recommendations include obtaining a valid SSL certificate, enabling HTTPS and modern TLS protocols, and implementing additional security headers and mechanisms to improve the security score and user confidence.

B

Bonterra

givegab.com

0

Bonterra is a leading provider of nonprofit software solutions focused on social impact, offering products for fundraising, case management, corporate giving, and grant management. Founded in 2021, it has quickly established itself as the second-largest social good software company globally, serving nonprofits, foundations, corporations, and government agencies. The company emphasizes a 'better together' approach, integrating multiple social good platforms under its brand. Technically, the website is built on WordPress with modern JavaScript frameworks like React and GSAP, and integrates numerous marketing and analytics tools. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS enforcement, which significantly impacts the site's security posture. Privacy and cookie policies are comprehensive and GDPR compliant, and the site demonstrates strong SEO and accessibility practices. Overall, Bonterra's digital presence is professional and content-rich but requires urgent security improvements to protect user data and maintain trust.

Bonterra LLC operates Network for Good, a leading fundraising software platform tailored for small to medium-sized nonprofits. The company has a strong market position as the second-largest social good software provider globally, offering a comprehensive suite of tools including donor and volunteer management, peer-to-peer fundraising, and coaching services. Bonterra's business model focuses on SaaS solutions for nonprofit organizations, foundations, corporations, and government entities, supported by a robust ecosystem of subsidiaries and partner products. The website content is professionally crafted, targeting nonprofit organizations seeking efficient fundraising and engagement solutions. Technically, the website is built on WordPress hosted on WP Engine with Cloudflare CDN, utilizing modern JavaScript frameworks like React and libraries such as GSAP and Splide.js for UI enhancements. SEO and accessibility are well implemented, with extensive use of structured data and meta tags. However, performance metrics are not explicitly provided, though mobile optimization and user experience appear strong. From a security perspective, while the site employs several security headers and policies, it suffers from a critical issue: the SSL certificate is invalid or missing, and no modern TLS protocols are enabled. This severely impacts the security posture and user trust. Other security best practices like CSP and permissions policies are in place, but the lack of proper SSL/TLS undermines these efforts. Overall, the site is content-rich, professionally designed, and business credible but requires urgent remediation of SSL/TLS issues to ensure secure user interactions and compliance with modern security standards.

V

Verein für Konsumenteninformation (VKI)

vki.at

0

The Verein für Konsumenteninformation (VKI) is a well-established Austrian non-profit organization dedicated to consumer protection through product testing, advice, and information dissemination. The website serves as a comprehensive portal for consumers, offering access to product recalls, educational seminars, and greenwashing checks, targeting Austrian consumers primarily. Technically, the site is built on Drupal CMS and hosted on Amazon AWS infrastructure, utilizing Matomo analytics with a clear cookie consent mechanism, reflecting a moderate level of digital maturity. However, the absence of a valid SSL certificate and HTTPS support is a critical security shortfall that undermines user trust and data protection. While privacy policies and GDPR compliance are well addressed, the lack of security headers and modern TLS protocols indicates room for significant security improvements. Overall, the site provides excellent content quality and user experience but requires urgent security enhancements to align with best practices and regulatory requirements.

Community Partners is a nonprofit organization focused on accelerating social change through fiscal sponsorship and intermediary services. Their website presents a professional and content-rich platform targeting nonprofit leaders, funders, and changemakers. The organization emphasizes equity, justice, and vibrant communities as core themes. Technically, the site is built on WordPress and hosted on Pantheon, utilizing modern JavaScript libraries for UI elements and Google Analytics for tracking. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security concern. Security headers are partially implemented but incomplete, and no cookie consent mechanism is present despite the use of tracking scripts. Privacy and legal policies are available and comprehensive, enhancing compliance posture. Overall, the site demonstrates good business credibility and user experience but requires urgent security improvements.

Asian Pacific Islander Forward Movement (APIFM) is a non-profit organization dedicated to cultivating healthy and vibrant Asian and Pacific Islander communities through engagement, education, and advocacy. The organization operates various community programs including food security initiatives, youth advocacy, and environmental sustainability projects. APIFM maintains an active digital presence with integrated social media feeds and regularly updated blog content, positioning itself as a community-centric entity within the non-profit sector in the United States. Technically, the website is built on WordPress with Elementor and several plugins for social media integration. Hosting is provided by DreamHost. While the site has good SEO metadata and structured data, performance metrics are lacking, and the site exhibits slow loading characteristics. Mobile optimization is good, but accessibility features are basic. From a security perspective, the site lacks a valid SSL certificate and does not support modern TLS protocols, which is a critical vulnerability exposing users to potential data interception. Security headers are minimal, and no incident response or security policies are published. Privacy compliance is limited, with no cookie consent mechanism detected and only a basic privacy policy present. Overall, APIFM's website serves its community well in content and engagement but requires urgent improvements in security infrastructure and privacy compliance to protect users and enhance trustworthiness.

A

ActiveSGV

activesgv.org

0

ActiveSGV is a small non-profit organization dedicated to promoting sustainability, mobility, climate action, health, and wellness in the San Gabriel Valley region. The website serves as a community hub showcasing projects, events, and advocacy efforts, targeting local residents and stakeholders interested in environmental and social improvements. The organization positions itself as a regional leader in community-driven green infrastructure and transit initiatives. Technically, the website is built on Webflow, leveraging modern web fonts, Google Tag Manager for analytics, and a translation service for accessibility. However, the site suffers from a critical security misconfiguration with no valid SSL certificate despite using Cloudflare CDN and HSTS headers, which undermines user trust and security. Privacy compliance is basic, with a privacy policy and terms of service present but lacking cookie consent mechanisms and GDPR indicators. Social media integration is strong, enhancing community engagement. Overall, the site is professionally designed with good content quality but requires urgent security improvements to ensure safe user interactions.

L

LA Forward

laforward.org

0

LA Forward is a small non-profit organization focused on progressive advocacy and community organizing in Los Angeles County. It operates as a 501(c)(4) entity and collaborates closely with its 501(c)(3) partner, LA Forward Institute, to provide education, training, and research. The organization builds grassroots power, promotes progressive leadership, and provides voter education resources. Technically, the website is built on Squarespace and uses standard web technologies and third-party services like EveryAction for forms. However, the site lacks a valid SSL certificate and proper HTTPS configuration, which is a significant security concern. Privacy and cookie policies are not present, indicating compliance gaps. The site is accessible and well-structured with good content quality and branding consistency. Security posture is weak due to missing HTTPS and security headers configuration. Overall, the site is functional but requires urgent improvements in security and privacy compliance to enhance trust and protect user data.

S

Streets For All

streetsforall.org

0

Streets For All is a small non-profit organization focused on transportation advocacy primarily in Los Angeles, with a sister chapter in San Francisco. The organization campaigns for safer streets, improved bus and bike lanes, and pedestrian-friendly urban environments. Their website serves as a hub for community engagement, volunteer recruitment, membership, and donations. Technically, the site is built on Squarespace, leveraging modern web fonts, JavaScript libraries, and third-party services such as Mailchimp for email marketing and Facebook Pixel for tracking. However, the site lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security flaw. Security headers are partially implemented but insufficient to compensate for the missing SSL. Privacy and cookie policies are absent, and no formal security or incident response policies are published. Overall, the site provides good content and user experience but requires urgent improvements in security and privacy compliance to protect users and enhance trust.

C

Climate Resolve

coolestinla.org

0

Climate Resolve is a well-established non-profit organization focused on climate advocacy and community engagement in Los Angeles. Their flagship event, Coolest in LA, celebrates 15 years of climate action and brings together leaders, advocates, and sponsors to promote sustainable solutions. The website is professionally designed using WordPress and Elementor, with good SEO and social media integration. The technical infrastructure leverages modern web technologies and Cloudflare for hosting and CDN services, ensuring good performance and availability. Security posture is adequate with HTTPS and valid SSL, but could be improved by enabling HSTS and DNSSEC. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Contact information is clearly provided, including obfuscated emails and a phone number. Overall, the site presents a credible and trustworthy image for a medium-sized non-profit organization.

C

Climate Resolve

climateresolve.org

0

Climate Resolve is a medium-sized non-profit organization focused on advancing equitable climate solutions primarily in the Los Angeles area. The organization builds collaborations among communities, organizations, and policymakers to address climate change through local action. Their key services include initiatives such as Keeping Cool, transportation solutions, outreach, climate planning and technical assistance, nature-based solutions, climate science, wildfire mitigation, smart growth, and zero emissions transit. The website reflects a strong market position as a local climate advocacy leader with a clear mission and impactful community engagement. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted behind Cloudflare DNS, and integrates various marketing and analytics tools including Facebook Pixel and Klaviyo. While the site is well-designed and content-rich, performance is somewhat slow due to a high number of resources. Security posture is basic with valid SSL and SPF/DMARC records but lacks advanced DNS security features like DNSSEC and CAA records. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite tracking pixels. Overall, the site is professional and trustworthy but could improve in security and privacy practices.

F

Förderverein der Meister- und Techniker aus- und -fortbildung im saarländischen Handwerk e.V.

foerderverein-mts.de

0

The Förderverein der Meister- und Techniker aus- und -fortbildung im saarländischen Handwerk e.V. is a small non-profit association dedicated to supporting master craftsman and technician education in the Saarland region of Germany. Their activities include financial support for educational trips, fostering cross-border economic relationships, awarding excellence in master and technician works, marketing support, and lobbying efforts. The website is professionally designed using modern technologies such as Gatsby and React, hosted on Netlify, and provides clear organizational and contact information. However, the site lacks HTTPS security, which is a critical vulnerability. No privacy or cookie consent mechanisms are present, and no advanced security policies or incident response information is disclosed. Overall, the site serves its informational purpose well but requires significant improvements in security and privacy compliance to meet modern standards.

D

Deutsches Stiftungszentrum

deutsches-stiftungszentrum.de

0

Deutsches Stiftungszentrum is a well-established non-profit organization specializing in foundation consulting and management services in Germany. With over 60 years of expertise and a comprehensive network, it offers a broad range of services including foundation establishment, management, asset management, legal advice, and public relations. The website reflects a professional and consistent brand presence targeting foundation founders and managers. Technically, the site is built on Drupal 10 with modern frontend technologies and uses Usercentrics for cookie consent management, ensuring GDPR compliance. Security posture is basic with valid SPF but lacks DMARC, DNSSEC, and HSTS, which are recommended for enhanced protection. Overall, the site demonstrates good digital maturity and trustworthiness but could improve in security hardening and incident response transparency.

S

SOCIAL POINTS gemeinnützige GmbH

sops.de

0

SOCIAL POINTS gemeinnützige GmbH operates the SOPS platform, a German-language online service dedicated to supporting and promoting non-profit organizations, especially community and social engagement groups. The platform enables non-profits to present themselves, receive digital donations, and build a community with features like messaging and a social points system. The company holds a strong position in the German non-profit sector, supported by partnerships with reputable foundations and local government entities. Technically, the website is built on TYPO3 CMS with common web technologies such as jQuery and Slick Carousel, but suffers from performance issues and lacks a valid SSL certificate, which impacts security and user trust. The site implements GDPR-compliant cookie consent and uses Google Analytics and Google Tag Manager for analytics and marketing purposes. Security posture is weak due to missing HTTPS and modern security headers, though DNS records show good email authentication practices.

P

Protected Tomorrows Inc.

protectedtomorrows.com

0

Protected Tomorrows Inc. is a specialized non-profit organization dedicated to providing compassionate guidance and resources for families and caregivers of individuals with special needs. Their market position is focused on niche services including advocacy, financial advisory, educational programs, and membership-based community support. The website offers a comprehensive range of services and resources, including free tools, expert Q&A, and a shop with educational materials, positioning them as a trusted ally in future planning for special needs families. Technically, the website is built on WordPress with WooCommerce and integrates multiple plugins for events, forms, payments, and analytics. The hosting is managed via WP Engine with Cloudflare CDN, ensuring good performance and availability. Security-wise, the site has a valid SSL certificate but lacks modern TLS protocol support and some advanced security headers. Cookie consent and privacy policies are implemented with GDPR compliance in mind, and accessibility is addressed via an ADA widget. Overall, the site demonstrates a good balance of business focus, technical maturity, and security awareness, though there is room for improvement in security hardening and transparency.

W

Wings for Life

wingsforlife.com

0

Wings for Life is a medium-sized non-profit organization focused on funding spinal cord injury research and supporting life-changing projects worldwide. The organization maintains a strong market position with global outreach and partnerships, including affiliation with Red Bull. Their website is built on modern technologies such as Nuxt.js and Vue.js, hosted on Netlify, and integrates payment processing via Stripe and security via Google reCAPTCHA. The site demonstrates good digital maturity with excellent mobile optimization, accessibility, and SEO practices. Security posture is solid with a valid SSL certificate and HSTS enabled, though it lacks modern TLS protocol support and DNSSEC. Privacy and terms policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the organization presents a professional and trustworthy online presence with room for security enhancements.

The Fellowship Of Gamblers Anonymous Scotland is a small non-profit organization dedicated to supporting individuals suffering from gambling addiction within Scotland. The organization provides a 24-hour helpline, local group support, and resources to help problem gamblers and their families. Their website serves as an informational and support portal, including a member login area and contact details for further assistance. The organization positions itself as a specialized support entity within the non-profit sector focused on addiction recovery. Technically, the website is built on WordPress using Elementor and related plugins, hosted on Inventive Cloud infrastructure. However, the site lacks a valid SSL certificate, which impacts security and user trust. Security posture is basic with no advanced policies or vulnerability disclosures present. Privacy policy exists but is basic and not fully GDPR compliant. Overall, the digital maturity is moderate with room for improvement in security and compliance.

G

Gamblers Anonymous Sverige

gamblersanonymous.se

0

Gamblers Anonymous Sweden operates as a non-profit support community dedicated to helping individuals with gambling addiction through meetings and digital programs. The website serves as a platform to provide information and facilitate access to support services, targeting Swedish-speaking individuals seeking assistance. The organization maintains a clear mission with a focus on community and recovery, without commercial or membership fees. Technically, the site is built on the Wix platform utilizing modern frameworks such as React 18, ensuring a good user experience on desktop but with limited mobile responsiveness. Security measures include HSTS and secure cookie settings; however, the SSL certificate is invalid, representing a significant risk. The absence of explicit privacy, cookie, and terms of service policies indicates compliance gaps. Overall, the site demonstrates moderate digital maturity with room for improvement in security and compliance.

G

Gamblers Anonymous

gamblersanonymous.ie

0

Gamblers Anonymous Ireland is a non-profit fellowship dedicated to helping individuals and families affected by compulsive gambling. The organization provides support through meetings, recovery programs, and family support groups (Gam-Anon), primarily serving the Irish community. Their website serves as an informational and resource hub, offering details about meetings, conventions, and recovery guidance. Technically, the website is built on the Wix platform using React and various Wix services, indicating a moderate level of digital maturity. However, the site lacks a valid SSL certificate, which is a critical security concern. While some security headers like HSTS and X-Content-Type-Options are present, the absence of a valid certificate and comprehensive privacy policies reduces the overall security posture. The site provides clear contact information but lacks explicit privacy, cookie, and terms of service policies, which are essential for compliance and user trust. Strategic improvements in security, compliance, and user experience are recommended to enhance trust and effectiveness.

The Galway Convention website serves as an informational and promotional platform for the 2025 Gamblers Anonymous and Gam-Anon Ireland & International Convention. It targets members and affiliates of these support groups, providing event dates, venue details, and booking options. The business operates as a small non-profit entity focused on community event organization within Ireland. Technically, the website is built on WordPress using the Elementor page builder and hosted on Inventive Cloud servers. However, it lacks a valid SSL certificate and modern TLS support, exposing it to security risks. The absence of privacy, cookie, and terms of service policies indicates low compliance with data protection regulations. Security posture is weak with no published incident response or security policies. Overall, the website offers good design and user experience but requires significant improvements in security and compliance to enhance trust and protect user data.

G

Gam-Anon International Service Office, Inc.

gam-anon.org

0

Gam-Anon International Service Office, Inc. operates a non-profit website dedicated to providing information and support for families and loved ones affected by compulsive gambling. The organization serves an international audience with resources including meeting directories, literature, and educational materials. The website is built on Joomla CMS and incorporates various web technologies such as jQuery, Bootstrap, and UIkit to deliver a responsive and accessible user experience. However, the site lacks critical security infrastructure, notably an invalid or missing SSL certificate, which undermines user trust and data protection. Security headers are partially implemented, but the absence of HTTPS and modern TLS protocols represents a significant vulnerability. No privacy, cookie, or terms of service policies are present, indicating compliance gaps. Contact information is limited to a phone number and postal address, with no email or social media presence detected. Overall, the site provides valuable content but requires urgent security and compliance improvements to protect users and enhance credibility.

G

Gamblers Anonymous England, Wales & Ulster

gamblersanonymous.org.uk

0

Gamblers Anonymous England, Wales & Ulster is a non-profit fellowship organization dedicated to supporting compulsive gamblers and their families through meetings, literature, and resources. The website serves as a regional hub providing meeting information and educational content to its target audience in the UK. Technically, the site is built on WordPress, hosted by SiteGround, and uses common web technologies including jQuery and Google Tag Manager for analytics. The site performs well with fast load times and good mobile optimization, though accessibility is basic. Security posture is moderate with a valid SSL certificate but lacks modern TLS protocol support and advanced security headers. No cookie consent or detailed privacy compliance mechanisms are evident. Overall, the site is trustworthy and professional but could improve in security and privacy compliance areas.

G

Gam-Anon UK and Ireland

gamanon.org.uk

0

Gam-Anon UK and Ireland is a non-profit support organization dedicated to helping individuals affected by a loved one's compulsive gambling. The website serves as an informational and resource hub, offering details about meetings, literature requests, and contact points for support. The organization targets family members and friends impacted by gambling addiction within the UK and Ireland. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, hosted on a LiteSpeed server with a valid SSL certificate. However, the SSL configuration lacks modern TLS protocols and security headers, indicating room for improvement in security posture. No privacy or cookie policies are present, which may affect compliance with data protection regulations. Overall, the site provides essential support information but could enhance its digital maturity and security practices.

N

National Council on Problem Gambling

ncpgambling.org

0

The National Council on Problem Gambling operates as a medium-sized non-profit organization focused on advocacy, support, and awareness related to problem gambling in the United States. Their website serves two primary audiences: individuals and families seeking help, and advocates and stakeholders involved in the issue. The organization provides helpline resources and engages in advocacy efforts to support those affected by gambling problems. Technically, the website is built on WordPress, hosted on WP Engine with Cloudflare CDN, and employs common SEO and analytics tools such as Yoast SEO, Google Analytics, and Google Tag Manager. The site demonstrates good design quality, mobile optimization, and SEO practices, but lacks visible contact information and formal privacy or cookie policies on the homepage. Security-wise, the site uses a valid SSL certificate but does not support modern TLS protocols, and security headers are basic. There is no evidence of GDPR compliance mechanisms or incident response policies publicly available. Overall, the website is professionally presented but could improve in transparency and security posture to enhance trust and compliance.

The website demonstrates a generally strong security posture with no critical or high-risk vulnerabilities detected. Key security modules such as email security, SSL/TLS, and network security are fully compliant and scored 100/100, indicating robust defenses in these areas. However, medium-level issues related to security headers, GDPR compliance, NIS2 regulatory requirements, and DNS health represent areas requiring attention to mitigate potential risks. The absence of DNSSEC and improper security headers could expose the site to DNS spoofing and certain web-based attacks, respectively. GDPR and NIS2 compliance failures pose legal and regulatory risks, which could impact the business's reputation and result in penalties. Low-severity issues related to CAA records configuration should also be addressed to enhance certificate issuance control. Overall, while foundational security controls are effective, addressing medium and low-level findings will strengthen the security posture and regulatory compliance, reducing future business risk.