Security Directory

Dobrobot is a pioneering charity auction platform based in the Czech Republic, established in 2021. It connects socially responsible companies, individual donors, and non-profit organizations to facilitate fundraising through online auctions. The platform emphasizes transparency, trust, and community service, positioning itself as a key player in the Czech non-profit fundraising ecosystem. The website is professionally designed, mobile-optimized, and provides comprehensive legal and privacy documentation, enhancing user trust and compliance with GDPR standards. Technically, Dobrobot employs modern web technologies including React and Next.js, integrates secure payment gateways, and uses reputable analytics and consent management tools. Security practices are robust with HTTPS enforcement and multiple security headers, though a dedicated security policy page and incident response contact could further strengthen its posture. Overall, Dobrobot presents a secure, trustworthy, and user-friendly platform with strong business credibility and a clear mission to support charitable causes.

T

The School for Moral Ambition

moralambition.org

0

The School for Moral Ambition is a non-profit organization dedicated to fostering moral ambition by helping individuals pursue careers with positive social impact. Their offerings include fellowships, community circles, and educational content such as articles, films, and podcasts. The organization is positioned as a niche leader in the social impact and moral ambition space, supported by media recognition from reputable outlets like The Guardian and Financial Times. Technically, the website is built on Webflow with modern technologies including Google Tag Manager and Plausible Analytics, ensuring good performance, mobile optimization, and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. Overall, the website is professional, trustworthy, and well-aligned with its mission, though WHOIS data is privacy protected, which is common and justified for non-profits.

S

Stichting Present Nederland

stichtingpresent.nl

0

Stichting Present Nederland is a Dutch non-profit organization dedicated to connecting volunteers with individuals and communities in need, fostering a caring society. The website presents a professional and consistent brand image, with clear descriptions of its mission and services. It targets a general audience interested in social volunteering and community support. Technically, the website is built on WordPress, utilizing common plugins such as Gravity Forms and Cookiebot for consent management. The infrastructure includes modern web technologies and integrates Google Tag Manager and Facebook Pixel for analytics and marketing purposes. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a good balance of usability, compliance, and trustworthiness, suitable for its non-profit mission.

NL Cares operates as the largest flexible volunteer platform in the Netherlands, connecting individuals and companies with volunteer opportunities tailored to their preferences and schedules. The platform supports corporate social responsibility initiatives by offering customized employee volunteer programs. The website is professionally designed, user-friendly, and targets volunteers, companies, and social organizations within the Netherlands. It has a mature domain age and a consistent brand presence. Technically, the website leverages modern frontend technologies including React and Chakra UI, with integration of Stripe for payment processing. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. From a security perspective, the site uses HTTPS with DNSSEC enabled, but lacks several security headers and explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a gap. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance the security posture and compliance standing.

S

Stichting Jarige Job

stichtingjarigejob.nl

0

Stichting Jarige Job is a Dutch non-profit organization dedicated to ensuring that children in financially disadvantaged households can celebrate their birthdays. With over 15 years of operation and recognized by the CBF certification, the organization has established a strong market position within the social aid sector in the Netherlands. Their key services include providing birthday packages and raising awareness and donations to support their cause. The website reflects a professional and consistent brand image targeting donors and beneficiaries in the Netherlands. Technically, the site is built on WordPress with modern technologies such as Gravity Forms, Google Tag Manager, and Cookiebot for compliance and analytics. The site is mobile-optimized and SEO-friendly, providing a good user experience.

W

Woodland Park Zoo

zoo.org

0

Woodland Park Zoo is a non-profit organization dedicated to wildlife conservation, education, and providing engaging visitor experiences in Seattle, Washington. The website reflects a professional and consistent brand presence focused on these core missions. Technically, the site is built on ASP.NET WebForms and leverages modern JavaScript libraries and third-party marketing and analytics tools, including Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and TikTok Pixel. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal vulnerability disclosure mechanisms. Privacy and cookie policies are not evident in the provided content, indicating room for compliance improvement. WHOIS data is unavailable due to malformed responses, limiting domain trust assessment. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy and security transparency.

P

Pendleton Center for the Arts

pendletonarts.org

0

Pendleton Center for the Arts is a small, established non-profit arts organization located in Eastern Oregon. It operates from a historic Carnegie Library building and offers a variety of cultural services including art exhibits, classes for all ages, live music, and venue rentals. The organization targets local community members and artists, focusing on arts education and community engagement. The website is built on WordPress and uses common web technologies such as jQuery and Google Analytics. It is moderately optimized for performance and mobile devices, with good accessibility and SEO practices. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Contact information and social media presence are clear and professional, supporting business credibility. Overall, the website is trustworthy and serves its community well but could improve in privacy and security compliance.

B

Boom Arts

boomarts.org

0

Boom Arts is a small non-profit performing arts presenter and producer based in Portland, Oregon, focusing on socially and politically engaged performance art. The organization offers curated series featuring international and local artists, with a strong community and cultural emphasis. The website is hosted on Squarespace, leveraging its CMS and native video capabilities, and integrates external services for ticketing, donations, and volunteer engagement. While the site is professionally designed with good content quality and mobile optimization, it lacks explicit privacy, cookie, and terms of service policies, which are important for compliance and user trust. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but security headers and incident response information are missing. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection common for non-profits.

O

Oregon Historical Society

ohs.org

0

The Oregon Historical Society is a well-established non-profit organization dedicated to preserving and sharing Oregon's rich history through its museum, research library, educational programs, and digital content. The website reflects a mature digital presence with comprehensive content targeting historians, educators, researchers, and the general public interested in Oregon's cultural heritage. The organization maintains a strong market position as the state's collective memory with over a century of history and a large collection of artifacts and archival materials. Technically, the website is built on the CommonSpot CMS platform and employs modern web technologies including Google Analytics for tracking and Adobe Typekit for fonts. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and includes anti-clickjacking measures. However, explicit security headers like Content-Security-Policy are not clearly present, and there is no visible security or incident response policy published. Privacy compliance is partial; a privacy policy is present and comprehensive, but cookie consent mechanisms are lacking, which may pose GDPR compliance risks. Overall, the website is trustworthy and professional, with strong business credibility and content quality. The main risk areas include privacy compliance enhancements and formalizing security policies. The absence of WHOIS data limits domain registration trust verification but does not detract significantly from the site's legitimacy.

Oregon Humanities is a well-established non-profit organization founded in 2006, dedicated to fostering community engagement and education in the humanities across Oregon. Their website offers a broad range of programs, grants, fellowships, and educational resources targeting Oregonians interested in cultural and social dialogue. The organization maintains a professional online presence with clear navigation and relevant content tailored to its audience. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Google Analytics, hosted on DNSimple-managed infrastructure. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility features. The domain is secured with HTTPS, but lacks DNSSEC and some recommended security headers. From a security perspective, the site demonstrates a reasonable posture with HTTPS and domain status protections but lacks explicit privacy and cookie policies, security.txt files, and DNSSEC. The use of multiple tracking scripts indicates moderate user tracking without clear consent mechanisms, which may pose privacy compliance risks. The WHOIS data shows privacy protection typical for non-profits and a domain age consistent with the organization's history, supporting legitimacy. Overall, Oregon Humanities presents a trustworthy and professional digital presence with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and DNS security would enhance their risk profile and user trust.

C

Cooper Hewitt, Smithsonian Design Museum

cooperhewitt.org

0

Cooper Hewitt, Smithsonian Design Museum is a well-established non-profit cultural institution located in New York City, affiliated with the Smithsonian Institution. The museum offers a variety of services including exhibitions, educational programs, memberships, donations, and a retail shop. The website reflects a professional and polished digital presence, targeting a broad audience including design enthusiasts, educators, students, and families. The business model is focused on cultural education and community engagement, supported by memberships and donations. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Google Analytics, Facebook Pixel, and Google Tag Manager. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The technical infrastructure supports a secure HTTPS connection, but some security headers could be improved. From a security perspective, the site enforces HTTPS and uses reputable analytics and marketing tools. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present. The WHOIS data is unavailable or blocked, which limits domain registration trust analysis, but the Smithsonian affiliation and website professionalism strongly support legitimacy. Overall, the website is a trustworthy and authoritative source for museum visitors and stakeholders, with recommendations to enhance security headers, implement cookie consent, and publish security policies to further strengthen compliance and trust.

W

WESTAF

publicartarchive.org

0

Public Art Archive, operated by WESTAF, is a well-established non-profit platform dedicated to making public artworks more accessible and discoverable worldwide. The website serves as an authoritative source curated by public and private arts organizations, offering search, exploration, and educational resources about public art. It targets arts organizations, researchers, and the general public interested in cultural heritage and public art. The platform's business model focuses on providing collection management services and fostering community contributions to enrich the archive. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Amazon AWS CloudFront for hosting and Google Maps API for location services. It integrates Google Tag Manager for analytics and Usercentrics for cookie consent management, reflecting a mature digital infrastructure. The site demonstrates good performance, mobile optimization, and accessibility compliance. From a security perspective, the site enforces HTTPS, employs domain transfer protection, and uses a consent management platform to comply with privacy regulations. However, DNSSEC is not enabled, and there is no publicly available security policy or incident response contact, which are areas for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website presents a high level of professionalism, trustworthiness, and compliance with privacy standards. The domain registration aligns well with the organization's identity and history, supporting its legitimacy. Strategic recommendations include enabling DNSSEC, publishing a security policy, and establishing a vulnerability disclosure process to enhance security posture and stakeholder trust.

Make-A-Wish Nederland is a well-established non-profit organization dedicated to fulfilling the wishes of children aged 3 to 18 with serious or life-threatening illnesses. The organization operates primarily within the Netherlands and has been active since 2011. Their website reflects a professional and consistent brand image, targeting donors, volunteers, and families of children in need. The site provides clear information about their mission and services, supported by a modern technical infrastructure including Cookiebot for consent management and Google Tag Manager for analytics. The use of Craft CMS is inferred from cookie names, indicating a robust content management system. Security posture is solid with HTTPS enforced and CSRF protections in place, though some security headers could be explicitly implemented. Privacy compliance is well addressed with a comprehensive cookie policy and consent mechanism. However, contact information and formal security policies are not explicitly published, which could be improved to enhance trust and transparency. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR requirements.

S

Social Care Network

bredavoorelkaar.com

0

Bredavoorelkaar is a Dutch non-profit online platform dedicated to facilitating voluntary help and neighborhood assistance within the Breda community. The platform enables residents to post help requests and volunteer offers, fostering community engagement and support. It partners with local organizations such as MOOIWERK Breda to provide volunteer vacancy listings, positioning itself as a key local resource for social care and community support. The website is professionally designed, mobile-optimized, and provides comprehensive information and user-friendly navigation.

S

Social Care Network

zorgzaam010.nl

0

Zorgzaam010 is a well-established non-profit platform dedicated to connecting volunteers and individuals seeking help within Rotterdam. It operates as part of the larger NLvoorelkaar network, providing a comprehensive suite of services including volunteer matching, social activities, and community support. The platform targets local residents and organizations, facilitating social engagement and impact through a user-friendly web interface. Technically, the website employs modern JavaScript frameworks, integrates with analytics and monitoring tools such as Google Analytics, Hotjar, and New Relic, and uses push notification services like OneSignal. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the platform enforces HTTPS, implements standard security headers, and maintains privacy and cookie policies with consent mechanisms, though it lacks a dedicated security policy or incident response contact. Overall, the website is professional, trustworthy, and aligned with its community-focused mission.

N

Nationale Postcode Loterij N.V.

postcodeloterij.nl

0

Nationale Postcode Loterij is a well-established Dutch lottery operator founded in 1989, focusing on providing lottery services where participants' postcodes serve as their lottery numbers. The organization supports over 146 charitable causes, distributing a significant portion of proceeds to these good causes. The website reflects a professional and trustworthy platform with clear business objectives, targeting a general audience interested in lottery participation and social good. Technically, the site employs modern web technologies including Vue.js and RequireJS, hosted likely on Microsoft Azure infrastructure, and managed via the Enonic CMS platform. The site is mobile-optimized and SEO-friendly, with a good user experience and clear navigation. Security posture is strong with HTTPS enforced, consent management via Usercentrics, and reputable third-party analytics and marketing tools integrated. No critical vulnerabilities or suspicious domains were detected. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the website demonstrates a mature digital presence aligned with its business goals and regulatory requirements.

R

Rode Kruis

actievoorrodekruis.nl

0

The website www.actievoorrodekruis.nl serves as a fundraising and community engagement platform for the Dutch Red Cross (Rode Kruis). It encourages individuals and groups to organize actions such as sponsor runs and other activities to support people in need. The site is well-branded with consistent Red Cross imagery and messaging, targeting a general audience interested in charitable activities. The business model is non-profit, focusing on fundraising and volunteer mobilization within the Netherlands. Technically, the website employs modern tracking and analytics tools including Google Analytics, Facebook Pixel, Hotjar, and VWO, all managed with a robust cookie consent mechanism via Cookiebot. The site is hosted likely behind Cloudflare, ensuring good performance and security. The CMS appears to be Kentaa, a platform commonly used for fundraising and non-profit websites. The site is mobile-optimized and includes accessibility basics, though there is room for improvement. From a security perspective, the site enforces HTTPS and uses standard security headers, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present on the site, which could be improved to enhance trust and compliance. Privacy compliance is well-handled through Cookiebot, but a dedicated privacy policy page was not detected in the provided HTML content. Overall, the website presents a professional and trustworthy front for the Dutch Red Cross fundraising efforts, with moderate technical maturity and good security posture. Strategic recommendations include publishing comprehensive privacy and security policies, adding incident response contacts, and enhancing accessibility features to meet higher compliance standards.

P

Protos Agency

protosagency.com

0

Protos Agency is a small, specialized design agency focused on providing design, strategy, and branding services to environmental and non-profit organizations. Their website presents a professional and consistent brand image targeting environmental groups dedicated to conservation and restoration. The technical infrastructure includes modern web fonts, jQuery, and Google Analytics, indicating a moderate level of digital maturity. However, the absence of a CMS or hosting provider details limits deeper technical insights. Security posture is moderate with no visible security headers and unknown SSL configuration, but no critical vulnerabilities or exposed sensitive data were detected. The lack of privacy and cookie policies, along with missing WHOIS registration data, presents compliance and legitimacy concerns. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

A

Ambitious Impact

ambitiousimpact.com

0

Ambitious Impact is a non-profit organization dedicated to empowering exceptional individuals through training, research, and funding to address significant global challenges. Their flagship offering is a charity entrepreneurship incubation program, positioning them as a niche player in the non-profit sector focused on impact-driven initiatives. The website is built on the Wix platform, leveraging modern web technologies and Google Tag Manager for analytics. While the site demonstrates good design quality and user experience, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is provided. Security posture is basic with HTTPS enabled but missing security headers and policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the active and professional website presence partially mitigates this risk. Overall, the site is functional and safe but requires improvements in compliance, security, and transparency to enhance trust and credibility.

G

Giving What We Can

givingwhatwecan.org

0

Giving What We Can is a reputable non-profit organization dedicated to promoting effective philanthropy by guiding donors to high-impact charities and encouraging giving pledges. The organization operates primarily in the UK and USA, with a strong community focus and recognized market position in the effective altruism space. Their website is professionally designed, mobile-optimized, and uses modern web technologies such as React and Next.js, hosted on Vercel, ensuring fast performance and good user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are not publicly detailed. Overall, the domain and website present a trustworthy and credible platform for charitable giving.

P

Paměť národa

pametnaroda.cz

0

Paměť národa is a well-established non-profit project dedicated to preserving historical testimonies and cultural memory related to totalitarian regimes, primarily in the Czech Republic. The website serves as a digital archive offering access to witness recordings, photographs, and stories, complemented by a magazine and educational initiatives. It targets researchers, historians, students, and the general public interested in history and memory preservation. The project is supported by reputable institutions such as Post Bellum and the Ústav pro studium totalitních režimů, enhancing its credibility and market position. Technically, the website is built on Drupal 10, utilizing modern JavaScript libraries like Slick Carousel and Google Tag Manager for analytics. The site is mobile-optimized with good SEO practices and a professional design, providing a positive user experience. However, some technical improvements are recommended, including the implementation of security headers and a cookie consent mechanism to enhance privacy compliance. From a security perspective, the site enforces HTTPS and does not expose sensitive data or vulnerable libraries. The absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for maturity improvement. The lack of WHOIS data reduces trust signals but does not indicate malicious intent, given the site's affiliations and professional presentation. Overall, Paměť národa presents a trustworthy, content-rich platform with a strong cultural and educational mission. Strategic enhancements in security and privacy compliance would further solidify its position and user trust.

F

Future for Ukraine

futureforukraine.eu

0

Future for Ukraine is a Czech-based non-profit organization dedicated to providing humanitarian aid and support to Ukraine through fundraising campaigns and targeted assistance such as rehabilitation for children, military aid, drone rescue support, and mine clearance. The website serves as a platform to engage donors and supporters, featuring multiple campaigns and calls to action. Technically, the site is built on WordPress using popular plugins like GiveWP for donations and Elementor for design, hosted by a reputable Czech provider, WEDOS Internet. The site is accessible, mobile-optimized, and uses HTTPS with a good SSL configuration, but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy within its niche but should enhance privacy compliance and security transparency to improve user trust and regulatory adherence.

T

Team 4 Ukraine | Team 4 Ukraine

team4ukraine.eu

0

Team 4 Ukraine is a website representing a non-profit initiative focused on supporting Ukraine. The website's content is minimal but consistent with its stated purpose, featuring a clear title and description. The site uses modern web technologies including CMS Nette, Bootstrap, and Google Tag Manager, indicating a moderate level of digital maturity. Cookie consent is managed via Cookiebot, demonstrating awareness of privacy compliance requirements. However, the absence of a dedicated privacy policy, terms of service, and contact information limits the site's transparency and trustworthiness. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Overall, the site is accessible and functional but would benefit from enhanced compliance documentation and security best practices.

N

Nadační fond pro Ukrajinu

proukrajinu.org

0

Nadační fond pro Ukrajinu is a Czech non-profit organization dedicated to supporting Ukraine in its defense against Russian aggression. The organization operates a fundraising platform and an e-commerce site selling themed merchandise to raise funds. It has a strong media presence with mentions in major international outlets such as BBC, CNN, NYTimes, and Spiegel, indicating a reputable market position within the humanitarian aid sector. The website is primarily targeted at Czech and European audiences sympathetic to Ukraine's cause. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Slick Carousel for UI components. The site is mobile-optimized and presents a professional design with good navigation and content relevance. However, some technical improvements could be made in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. However, no explicit security headers were detected, and there is no visible incident response or vulnerability disclosure policy. The WHOIS data is unavailable due to privacy protection or query failure, which slightly reduces trust but is common for non-profits. Overall, the security posture is moderate with room for improvement. The overall risk assessment is low, with the main recommendations focusing on enhancing security headers, implementing cookie consent for GDPR compliance, and publishing security policies. These steps will improve user trust and regulatory compliance while maintaining the organization's positive reputation and operational effectiveness.

A

Arts Council Santa Cruz County

artscouncilsc.org

0

Arts Council Santa Cruz County is a small non-profit organization dedicated to nurturing and investing in artists and the arts throughout Santa Cruz County. The website reflects a focused mission on supporting the local arts community with key services including artist support and community arts programs. The organization has been established since 2013, with domain registration details consistent with its stated purpose and location. Technically, the website is built using modern web technologies such as Gatsby, React, and Tailwind CSS, hosted behind Cloudflare DNS services. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. No CMS is detected, indicating a custom or static site architecture. From a security perspective, the site uses HTTPS with good SSL configuration but lacks security headers and DNSSEC, which are recommended for enhanced security. No privacy or cookie policies are present, indicating gaps in compliance with privacy regulations such as GDPR. No contact information or incident response details are found, limiting transparency. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance, security hardening, and clearer contact information to enhance user trust and regulatory adherence.

S

Santa Cruz Museum of Art & History

santacruzmah.org

0

The Santa Cruz Museum of Art & History (MAH) is a well-established non-profit cultural institution located in Santa Cruz, California. It serves as a vibrant community hub offering a diverse range of art and history exhibitions, educational programs, public events, and community collaborations. The museum targets local residents, tourists, students, and art enthusiasts, providing memberships, donations, sponsorships, and facility rentals as part of its business model. The website reflects a professional and consistent brand image with clear calls to action and comprehensive content about its offerings. Technically, the website employs modern web technologies including Vue.js, lazy loading for images, and Google Tag Manager for analytics and tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting details are not explicitly disclosed but the use of CDNs and asynchronous scripts suggests a contemporary infrastructure. From a security perspective, the site enforces HTTPS and includes some security headers, though there is room for improvement by adding Content-Security-Policy and other recommended headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy likely present but no visible cookie consent mechanism or detailed GDPR compliance indicators. WHOIS data is unavailable, which slightly reduces trustworthiness but the website content and contact information support legitimacy. Overall, the site presents a low-risk profile with strong business credibility and good technical implementation. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to further strengthen the security posture.

W

Wax On bv

assistonline.eu

0

Assistonline.eu is a specialized SaaS platform developed by Wax On bv, targeting non-profit organizations such as vzw's, federations, and local governments in Belgium. The platform offers comprehensive online management tools for administration, bookkeeping, GDPR compliance, event management, and member management. The website is professionally designed with a clear focus on its niche market and demonstrates consistent branding and trust signals through partner logos and cookie consent mechanisms. Technically, the site employs modern frontend technologies including Bootstrap 5, jQuery, and Matomo analytics, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though formal security policies and incident response contacts are not publicly documented. Overall, the site presents a trustworthy and professional digital presence suitable for its target audience.

N

NLvoorelkaar

nlvoorelkaar.nl

0

NLvoorelkaar is the largest volunteer platform in the Netherlands, providing a comprehensive digital space for volunteers, organizations, and individuals seeking help. The platform offers a wide range of volunteer opportunities, impact challenges, and corporate volunteering options, positioning itself as a key player in the Dutch non-profit sector. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a positive user experience and strong community engagement. Technically, the site employs modern JavaScript frameworks, integrates advanced analytics and monitoring tools like Google Analytics, Hotjar, and New Relic, and uses push notification services via OneSignal. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly documented. Overall, the platform demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

H

Het Nederlandse Rode Kruis

rodekruis.nl

0

Het Nederlandse Rode Kruis is a prominent humanitarian non-profit organization in the Netherlands, providing emergency aid both domestically and internationally. The website clearly communicates its mission to assist people in crisis situations such as natural disasters and conflicts, supported by donation campaigns and volunteer programs. The organization holds recognized certifications and maintains a strong trust presence through transparent contact information and social media engagement. Technically, the website is built on WordPress with modern SEO and performance optimizations, ensuring a fast, accessible, and mobile-friendly user experience. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a mature digital presence aligned with the organization's humanitarian goals.

The Regional Arts and Culture Council (RACC) is a well-established nonprofit organization founded in 1995, dedicated to enriching the greater Portland community through arts and culture. The organization operates a diverse portfolio of services including grant programs, a nationally recognized public art program, advocacy efforts, and arts education support. Their market position is strong within the regional arts ecosystem, supported by a clear mission and active community engagement. The website reflects a professional and consistent brand image, targeting artists, creatives, and cultural organizations in the Portland area. Technically, the website is built on WordPress with modern front-end technologies such as Foundation CSS and Swiper.js for interactive elements. It integrates Google Analytics and Tag Manager for tracking and uses Yoast SEO for optimization. The site is mobile responsive and performs moderately well, though there is room for improvement in accessibility and security headers. Hosting details are not explicit but DNS and registrar information indicate a reputable setup. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain transfer protections in place. However, DNSSEC is not enabled, and security headers are absent, which are areas for improvement. There is no visible security policy or incident response information published, and cookie consent mechanisms are missing, which impacts privacy compliance. The WHOIS data shows privacy protection typical for nonprofits and a domain age consistent with the organization's history, supporting legitimacy. Overall, the website is trustworthy, professionally maintained, and serves its nonprofit mission effectively. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent for GDPR compliance, and publishing security and incident response policies to enhance trust and compliance.

O

Oregon Cultural Trust

culturaltrust.org

0

The Oregon Cultural Trust is a well-established non-profit organization dedicated to supporting arts, heritage, and humanities nonprofits across Oregon. It operates a unique cultural tax credit program that enables donors to match their donations and supports over 1,600 nonprofits statewide. The website reflects a mature digital presence with comprehensive content, multimedia resources, and clear calls to action for donations and grant applications. The organization maintains strong partnerships with state government and cultural institutions, reinforcing its market position as a key cultural funding entity in Oregon. Technically, the website is built on WordPress with modern web technologies including jQuery, MediaElement.js, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, Hotjar, and Reddit Pixel. The site is mobile-optimized and SEO-friendly, leveraging Yoast SEO and Typekit fonts for branding consistency. Performance is moderate with asynchronous loading of scripts enhancing user experience. From a security perspective, the site enforces HTTPS and uses several security best practices, though explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly present. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. WHOIS data is unavailable, likely due to privacy protection, but the website's professionalism and official branding indicate legitimacy. Overall, the Oregon Cultural Trust website presents a trustworthy and professional digital front for a non-profit cultural funding organization. Strategic recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and publishing a security policy with incident response contacts to further strengthen trust and compliance.

T

The Oregon Community Foundation

oregoncf.org

0

The Oregon Community Foundation is a well-established non-profit organization dedicated to improving lives across Oregon through philanthropy. The foundation facilitates charitable giving via donor advised funds, grants, scholarships, and philanthropic advising. It has a strong market position as a trusted community foundation since 1973, serving a broad audience including donors, volunteers, professional advisors, and community members. The website reflects this with comprehensive content, clear navigation, and multiple regional offices to serve the state. Technically, the website is built on Silverstripe CMS and leverages modern marketing and analytics tools such as Google Analytics, Facebook Pixel, and Adroll. Hosting is provided via Cloudflare, ensuring good performance and security. The site is mobile optimized and SEO friendly, though accessibility could be improved. Security posture is solid with HTTPS and domain transfer protections, but could benefit from additional security headers and DNSSEC. Security-wise, no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic improvements in security headers, DNSSEC, and transparency around security policies would further strengthen its posture and user trust.

V

VWC-BUUV

haarlemvoorelkaar.nl

0

VWC-BUUV operates as a regional non-profit platform dedicated to facilitating volunteer work and neighborhood help in Haarlem and Bloemendaal. The website offers a comprehensive set of services including volunteer matching, posting help requests and offers, educational workshops, and community event promotion. The platform targets local volunteers, residents, and organizations seeking to engage in social impact activities. Technically, the website employs modern JavaScript frameworks, integrates analytics and monitoring tools such as New Relic, Hotjar, and OneSignal, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly documented. Overall, the domain registration data aligns well with the website's mission and regional focus, supporting its legitimacy and trustworthiness.

The Spitalfields Trust is a UK-based charitable building preservation trust established in 1977, focused on conserving historic buildings primarily in East London, Kent, and Wales. It operates as a small non-profit entity managed by trustees and a small staff, emphasizing community engagement and heritage conservation. The website serves as an informational and donation platform highlighting their custodianship of notable historic properties such as Dennis Severs House and 19 Princelet Street. Technically, the website is built on WordPress with Elementor, employing modern web technologies and responsive design, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS usage but lacks advanced security headers and explicit policies. WHOIS data is missing, raising concerns about domain registration legitimacy, though the website content and business information appear consistent and trustworthy. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and professional but would benefit from enhanced security and privacy transparency.

F

Five Q

journity.com

0

Journity, operated by Five Q, is a specialized service provider offering website personalization solutions tailored for nonprofits. The company focuses on enhancing user journeys by guiding visitors to relevant next steps on nonprofit websites. The business positions itself as a niche player in the nonprofit sector, leveraging modern web technologies and analytics to deliver its services. The website reflects a professional and consistent brand image with good content relevance and user experience. Technically, the site is built on WordPress using the Divi theme, incorporating modern JavaScript libraries and performance optimizations such as lazy loading and New Relic monitoring. Hosting and DNS services are provided by Cloudflare, ensuring reliable infrastructure and HTTPS security. While performance and mobile optimization are good, accessibility features are basic, and SEO is well implemented. From a security perspective, the site benefits from HTTPS and domain transfer protections but lacks advanced security headers like CSP and DNSSEC. There is no visible privacy policy, cookie consent mechanism, or vulnerability disclosure, indicating gaps in compliance and transparency. Analytics usage is moderate, with tracking via Google Analytics and New Relic, but privacy compliance is poor due to missing policies. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing vulnerability disclosure information.

V

Vlaams Steunpunt Vrijwilligerswerk vzw

vrijwilligerswerk.be

0

Vrijwilligerswerk.be is a well-established Flemish non-profit platform dedicated to connecting volunteers with organizations and local governments seeking volunteer support. Founded in 2000, it offers a comprehensive service including volunteer vacancy listings, management tools, and a CRM system (Assist) for candidate management. The platform targets volunteers and organizations within Flanders, Belgium, and positions itself as a key regional player in the volunteer sector. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

V

Vluchtelingenwerk Vlaanderen vzw

vluchtelingenwerk.be

0

Vluchtelingenwerk Vlaanderen is a well-established non-profit organization based in Belgium, dedicated to supporting refugees through legal aid, advocacy, volunteer coordination, and community projects. The website reflects a mature digital presence with clear calls to action for donations and volunteering, supported by a consistent brand identity and comprehensive content tailored to its audience. The organization maintains active engagement through multiple social media channels and provides transparent contact information and policies. Technically, the site is built on Drupal 10, leveraging modern web technologies and tracking tools such as Google Tag Manager and Facebook Pixel, with a good level of mobile optimization and accessibility. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response policies could be improved. Overall, the domain age and WHOIS data support the legitimacy and trustworthiness of the organization.

.

.orgSource

orgsource.com

0

The website orgsource.com represents .orgSource, a specialized consultancy focused on associations and non-profits, offering management and technology consulting services with expertise in digital strategy, AI, and organizational transformation. The company positions itself as a trusted partner with over 20 years of experience and a client base exceeding 350 organizations worldwide. Their service portfolio includes strategic planning, digital transformation, leadership development, and staffing, emphasizing tailored solutions and long-term partnerships. Technically, the site is built on WordPress with modern plugins such as Gravity Forms, Yoast SEO, and Google reCAPTCHA, indicating a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, with good content quality and navigation. However, some security best practices like DNSSEC and security headers are missing, and no explicit privacy or terms of service pages were found, which could be improved. The security posture is moderate with HTTPS enabled and form protection via reCAPTCHA, but lacks advanced DNS and HTTP security headers. No signs of malware or phishing were detected. The domain is long-standing and consistent with the business claims, enhancing trustworthiness. Overall, the site is professional and credible but could benefit from enhanced privacy and security disclosures. Strategic recommendations include implementing DNSSEC, adding comprehensive privacy and security policies, deploying security headers, and maintaining regular security audits to strengthen compliance and trust.

N

Nonprofit Tech for Good

nptechforgood.com

0

Nonprofit Tech for Good is a specialized digital marketing and fundraising resource aimed at nonprofit and charity professionals worldwide. The website offers educational content, certificate programs, webinars, and research reports to support nonprofit professionals in enhancing their digital marketing and fundraising capabilities. It holds a strong market position as a leading resource in the nonprofit sector, supported by active social media presence and sponsorship partnerships. Technically, the website is built on WordPress 6.8.1 with modern web technologies including Google Analytics, Google Tag Manager, and MailerLite for marketing automation. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published privacy policy, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a concern for domain legitimacy but does not detract from the professional presentation and content quality of the site. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing comprehensive privacy and terms of service policies, enhancing security headers, and adding incident response contact information to further strengthen trust and compliance.

L

Live + Work in Maine

liveandworkinmaine.com

0

Live + Work in Maine is a non-profit organization dedicated to providing comprehensive resources, job postings, community events, and relocation guides for individuals interested in living, working, or staying in Maine. The website serves as a central hub for job seekers, employers, entrepreneurs, and community members, offering a variety of services including a job board, employer resources, and educational opportunities. Their market position is that of a trusted regional resource with strong community ties and partnerships. Technically, the website is built on the Webflow platform, leveraging modern web technologies such as Google Tag Manager, Facebook Pixel, Hotjar, and Weglot for multilingual support. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility features could be improved. The use of third-party analytics and tracking is evident, but no cookie consent mechanism was detected. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and does not publish a security policy or incident response information. The absence of WHOIS data for the domain raises some concerns about transparency, although the website content and external partnerships suggest legitimacy. Overall, the website presents a professional and trustworthy front for its non-profit mission but would benefit from enhanced security practices, improved privacy compliance, and greater transparency in domain registration details.

E

Effective Altruism

effectivealtruism.org

0

Effective Altruism is a globally recognized non-profit movement and philosophy focused on using reason and evidence to maximize positive impact through philanthropy and effective giving. The website serves as a comprehensive educational and community platform offering resources such as articles, online courses, newsletters, and an opportunities board to engage individuals interested in doing the most good. The organization holds a strong market position within the philanthropic and ethical giving sectors, targeting individuals and organizations seeking to apply effective altruism principles. Technically, the website is built on a modern React and Next.js stack, leveraging Cloudflare for hosting and streaming, and integrates advanced analytics tools including Segment, Heap, Google Analytics, and Facebook Pixel. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. However, explicit privacy and cookie policies are not prominently linked, indicating room for improvement in privacy compliance. From a security perspective, the site uses HTTPS with strong SSL configuration and employs security best practices such as secure form handling and no exposed sensitive data. Nonetheless, the absence of publicly available security policies, incident response information, and vulnerability disclosure mechanisms suggests potential gaps in transparency and readiness. The WHOIS data is unavailable or malformed, limiting domain registration trust verification, but the website content and external references support legitimacy. Overall, the website presents a professional, trustworthy, and content-rich platform with a solid technical foundation. Strategic recommendations include publishing clear privacy and cookie policies, enhancing security transparency, and improving domain registration information visibility to strengthen trust and compliance.

F

Free Law Project

free.law

0

Free Law Project is a leading nonprofit organization dedicated to making the legal ecosystem more equitable and competitive through technology, data, and advocacy. They provide a suite of open-source tools and datasets including CourtListener, RECAP, and Bots.law, serving journalists, researchers, legal professionals, and the public. Their market position is strong as a pioneer in legal data transparency and open access, supported by donations and organizational sponsorships. Technically, the website is built on modern frameworks such as Next.js and React, hosted on Netlify, and optimized for performance and mobile responsiveness. The site demonstrates good SEO and accessibility practices, with a clean, professional design and clear navigation. Analytics are implemented via plausible.io, indicating a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS and employs domain status protections but lacks DNSSEC and security headers like CSP or HSTS. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a basic privacy policy present but no cookie consent mechanism or detailed GDPR compliance statements. Contact information is limited to a contact form, with no direct emails or phone numbers publicly listed. Overall, the website presents a low-risk profile with a high degree of professionalism and trustworthiness. Strategic recommendations include enhancing security headers, implementing DNSSEC, adding cookie consent, and publishing a security.txt file to improve incident response transparency.

N

Nadační fond pro Ukrajinu

zbraneproukrajinu.cz

0

Dárek pro Putina is a Czech non-profit initiative focused on raising funds to support Ukraine's defense against Russian aggression by purchasing weapons and military equipment. The project operates through campaigns and merchandise sales, collaborating with the Ministry of Defense. The website is built on Webflow CMS, uses modern JavaScript libraries, and integrates Plausible Analytics for privacy-respecting user tracking. While the site enforces HTTPS and provides clear contact and organizational information, it lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. The absence of WHOIS data reduces domain trust slightly, but media coverage and transparent operations support legitimacy. Overall, the website presents a professional and trustworthy platform for charitable contributions and merchandise sales.

9

916 Ink

916ink.org

0

916 Ink is a small non-profit organization dedicated to empowering children and youth through creative writing workshops and literacy tutoring in the Sacramento region. The organization offers a variety of programs including after-school workshops, summer camps, and one-on-one tutoring, targeting disadvantaged youth to improve literacy and creative skills. Their market position is that of a community-focused educational non-profit with strong local engagement and social media presence. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Analytics, Google Tag Manager, and reCAPTCHA for security and analytics. The site is mobile-optimized with good design quality and clear navigation, although some accessibility features could be improved. Performance is moderate, typical for a CMS-based site. From a security perspective, the site enforces HTTPS and uses reCAPTCHA on forms, but lacks advanced security headers like HSTS and Content Security Policy, which are recommended to enhance protection. Privacy compliance is minimal, with no explicit privacy or cookie policies found, which could be improved to meet GDPR and other regulations. Overall, the website is trustworthy and professional, with clear contact information and consistent branding. The lack of WHOIS data is likely due to privacy protection, which is justified for a non-profit. Strategic recommendations include enhancing security headers, adding privacy and cookie policies, and improving accessibility to strengthen compliance and user trust.

T

The Bank of Dreams and Nightmares

thebankofdreamsandnightmares.org

0

The Bank of Dreams and Nightmares is a small UK-based registered charity focused on delivering creative writing workshops and cultural events for children and young people aged 7 to 18 in West Dorset. The organization targets rural disadvantaged areas, providing educational and artistic opportunities through festivals, workshops, and collaborations with professional writers and media producers. The website is built on the Squarespace platform, featuring multimedia content such as videos and images, and maintains a consistent and professional brand presence. Social media integration includes active Instagram and Facebook profiles. However, the site lacks explicit privacy and terms of service pages and does not provide direct contact information, which could be improved for transparency and compliance.

S

Shout Mouse Press

shoutmousepress.org

0

Shout Mouse Press is a nonprofit organization dedicated to empowering marginalized youth aged 12 and above through writing workshops, book publication, and public speaking opportunities. The organization focuses on amplifying underrepresented voices in literature and operates primarily within the United States. Their business model centers on nonprofit activities with a strong community and educational focus, supported by book sales and donations. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google Analytics and Facebook SDK for tracking and engagement. The site is mobile optimized with good SEO practices and a professional design, though some accessibility features are basic. Performance is moderate, typical for a Squarespace-hosted site. From a security perspective, the site uses HTTPS but lacks some advanced security headers such as HSTS and CSP, which could improve protection against certain web attacks. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is addressed with a clear privacy policy and cookie consent banner, indicating GDPR awareness. Overall, the website presents a trustworthy and professional front for a nonprofit organization with a clear mission and active social media presence. The lack of WHOIS data is due to privacy protection, which is justified for this type of entity. Recommendations include enhancing security headers and continuing to maintain privacy compliance and transparency.

V

Visible Studio

visiblealliance.org

0

Visible Studio was a small, US-based 501(c)3 non-profit creative agency focused on providing pro-bono creative services and paid residencies to support BIPOC businesses, non-profits, and emerging designers. The organization operated from 2016 to 2021 and was founded by The Beauty Shop. The website serves as an archive of their work and highlights their mission to increase equity within the creative industry. Technically, the site is built on Squarespace, leveraging standard web technologies and fonts, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protections, but lacks DNSSEC and HSTS. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional, trustworthy, and safe for general audiences.

U

Ubuntu Pathways

ubuntupathways.org

0

Ubuntu Pathways is a US-based non-profit organization dedicated to breaking the cycle of poverty through education and community support, adopting a cradle to career approach. The organization targets communities affected by poverty and relies on donations and volunteer engagement to fulfill its mission. The website is professionally designed using Squarespace, featuring modern web technologies and a moderate performance profile. Social media integration and Google Tag Manager analytics are present, indicating a moderate level of digital maturity. Security posture is strong with HTTPS and HSTS enabled, though DNSSEC is not configured. The site lacks explicit privacy and cookie policies, which impacts privacy compliance scores. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is trustworthy and well-branded but could improve transparency and compliance by adding privacy-related policies and contact information.

Y

YELLOW

teamyellow.org

0

YELLOW is a US-based 501c3 non-profit organization founded by Pharrell Williams with a mission to promote educational equity and 'even the odds' through education. The website is professionally designed using WordPress and Elementor, featuring clear branding and consistent messaging focused on youth empowerment and educational opportunities. The technical infrastructure includes modern CMS and SEO tools, hosted with reputable providers and secured with HTTPS. However, the site lacks explicit privacy and cookie policies, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled but missing security headers and DNSSEC. No incident response or vulnerability disclosure policies are present. Overall, the website is credible and trustworthy but would benefit from enhanced privacy and security practices.

B

Black Ambition

blackambitionprize.com

0

Black Ambition is a non-profit organization dedicated to closing the opportunity and wealth gap by investing in Black and Latinx founders and HBCU students. The organization operates prize competitions, accelerator programs, and community initiatives to support underrepresented entrepreneurs. Their market position is strong within the non-profit entrepreneurship support sector, with a clear focus on impact and inclusivity. Technically, the website is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager and Facebook Pixel, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and domain locks enabled, though improvements like DNSSEC and CSP headers could enhance security further. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned to serve its audience effectively.