Security Directory

5

50501 Movement

fiftyfifty.one

0

The website fiftyfifty.one represents a grassroots political movement named '50501 Movement' focused on organizing protests across 50 states to uphold the Constitution and end executive overreach. The site is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies including polyfills and Google Fonts. The content is clear, targeted at a general audience interested in political activism, and the design is consistent and professional for a small-scale movement. Technically, the site uses Wix's hosting and CMS infrastructure, with no detected advanced analytics or tracking beyond Wix's standard scripts. Mobile optimization is good, but SEO and accessibility features are basic. Security posture is moderate; HTTPS is assumed but no explicit security headers or policies are detected. The absence of privacy, cookie, and terms of service policies, as well as lack of contact information, reduces privacy compliance and business credibility scores. WHOIS data is unavailable, indicating privacy protection or registry data unavailability, which is somewhat justified given the political nature of the site but limits trust analysis. No WAF or security challenge is detected, and the site content is fully accessible and safe, with no adult or explicit content. Overall, the site is a legitimate grassroots activism platform with moderate technical maturity and security posture but would benefit from improved privacy compliance, contact transparency, and security best practices to enhance trust and compliance.

P

Privacy Guides

privacyguidesusercontent.com

0

Privacy Guides is a reputable non-profit organization founded in 2021 that provides independent, ad-free, and open-source privacy and security resources. It operates a comprehensive website offering privacy tool recommendations, educational content, and a community forum. The site is recognized by major media outlets and maintains strict editorial independence, enhancing its credibility in the privacy advocacy space. Technically, the website is built using modern static site generation technologies (mkdocs and mkdocs-material), optimized for performance, accessibility, and mobile responsiveness. Security best practices are well implemented, including HTTPS and robust security headers, with no detected vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism is a minor compliance gap. WHOIS data is unavailable or privacy protected, which is consistent with the site's privacy focus and does not detract from its legitimacy. Overall, Privacy Guides demonstrates a strong security posture, high content quality, and trustworthy business practices, making it a valuable resource for privacy-conscious users.

SLRPNK.net is a community-driven Lemmy instance dedicated to solarpunk ideals, climate activism, and collaborative community building. It offers federated social networking integrated with XMPP chat and collaborative tools, hosted by the community-oriented F-hub.org in Portugal. The platform emphasizes privacy, inclusivity, and constructive discourse, with strict rules against bigotry and adult content. The domain and hosting infrastructure are consistent with the website's mission and location, with GDPR compliance and no tracking or ads. The site experienced a notable outage in mid-2025 due to firewall and ISP IP reassignment issues but has taken steps to improve resilience. Overall, SLRPNK.net presents a trustworthy, well-maintained, and privacy-respecting platform for its niche audience.

T

The Congressional Award

congressionalaward.org

0

The Congressional Award website represents a prestigious non-profit organization recognized as the United States Congress' highest honor for youth civilians. It focuses on recognizing initiative, service, and achievement among American youth. The site targets youth participants, educators, and community leaders, providing information about award programs and encouraging community service. The organization maintains a strong market position as an official government-endorsed entity with a clear mission and trusted brand identity. Technically, the website is built on WordPress with Elementor and uses modern web technologies including Google reCAPTCHA for form security and Google Analytics for traffic analysis. The site demonstrates good mobile optimization, SEO practices, and accessibility features, although some security headers could be improved. Performance is moderate, with a well-structured and professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of some security headers like Content-Security-Policy and X-Frame-Options suggests room for enhancement. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Contact information is readily available, enhancing business credibility. Overall, the website is trustworthy, professionally maintained, and aligned with its non-profit mission. The lack of WHOIS data due to privacy protection does not detract from its legitimacy given the official nature of the organization. Strategic recommendations include enhancing security headers, conducting regular security audits, and maintaining up-to-date software to ensure continued trust and compliance.

Rock the Vote is a well-established non-profit organization focused on engaging young voters and promoting civic participation in the United States. The organization has maintained its domain since 1995, reflecting a long-standing presence in the non-profit advocacy sector. The website is built on WordPress and employs the Defender Security plugin to protect against malicious traffic and bots. However, the current content is inaccessible due to an IP block triggered by the AntiBot Global Firewall, limiting the ability to fully assess the site's content and user experience. From a technical perspective, the site uses standard web technologies including jQuery and is hosted on infrastructure likely provided by Amazon AWS, as inferred from DNS servers. The lack of DNSSEC and absence of visible security headers suggest room for improvement in domain and web security configurations. No privacy, cookie, or terms of service policies were detected in the provided content, indicating potential compliance gaps. Security posture shows some strengths such as the use of a security plugin and domain transfer protection, but also weaknesses like missing DNSSEC and no visible security headers. The blocking mechanism indicates active security management but also restricts access for some users. Overall, the risk assessment is moderate with recommendations to enhance security configurations, improve privacy compliance, and ensure accessibility. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, publishing clear privacy and cookie policies, and providing accessible contact information to improve trust and compliance. Enhancing transparency and user experience will support Rock the Vote's mission and digital presence.

50501.chat is a Lemmy-based federated social platform dedicated to a nationwide political activism movement called 50501, which organizes protests across all 50 US states to uphold the Constitution and oppose perceived executive overreach. The platform provides community forums, resource repositories, and event promotion tools to support activists. The site is relatively new, founded in 2025, and targets politically engaged Americans interested in grassroots activism. Technically, the site leverages modern open-source federated social software (Lemmy) with Bootstrap for UI, hosted with a reputable registrar and DNS providers. Security posture is good with HTTPS and clientTransferProhibited domain status, but lacks DNSSEC and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is functional, content-rich, and safe for general audiences, but could improve transparency and security documentation.

F

Federated Open Communications Canada (Fedecan)

fedecan.ca

0

Fedecan is a Canadian non-profit organization established in 2024 that facilitates access to federated social media platforms such as Lemmy and Pixelfed. The organization emphasizes community-driven, privacy-respecting social networking alternatives to mainstream platforms. Their website serves as a resource hub offering guides, announcements, and donation options to support their mission. Technically, the site is built using modern static site generation technology (VitePress) and is hosted with Cloudflare DNS services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission, but could improve in privacy and security transparency.

Parachute is a Canadian national non-profit organization dedicated to injury prevention through education, advocacy, and training programs. The organization targets a broad audience including healthcare professionals, educators, parents, seniors, youth, and the general public. Their market position is strong within the Canadian injury prevention sector, offering recognized programs and resources. Technically, the website is built on WordPress with modern technologies such as Google reCAPTCHA and Google Tag Manager, hosted likely by Webnames.ca Inc. The site is well optimized for mobile and accessibility, with good SEO practices. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are missing. Privacy compliance is basic with a clear privacy policy but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and serves its mission effectively.

H

Heart and Stroke Foundation of Canada

jumpropeforheart.ca

0

The website jumpropeforheart.ca represents the Heart and Stroke Foundation of Canada's Jump Rope for Heart fundraising program. It serves as an informational and transactional platform to support fundraising activities, provide educational resources, and facilitate donations and registrations. The site targets schools, teachers, families, and donors interested in supporting heart health initiatives. The business model is non-profit, focusing on community engagement and fundraising for health research and education. The website is professionally designed with consistent branding and clear navigation, reflecting a reputable organization in the Canadian non-profit sector. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Tag Manager and Facebook SDK, indicating a mature digital infrastructure. The site is mobile optimized and uses HTTPS with service workers for progressive web app features. However, some improvements could be made in accessibility and explicit privacy and cookie policy disclosures. From a security perspective, the site benefits from HTTPS and no visible vulnerabilities in the HTML content. The lack of explicit security headers and incident response contact information suggests room for enhancement in security posture. The WHOIS data is not publicly available, likely due to privacy protection, but the domain aligns with the known foundation, supporting legitimacy. Overall, the site is a credible and professional platform for a non-profit fundraising initiative, with moderate technical sophistication and a good security baseline. Strategic improvements in privacy compliance and security transparency would further strengthen trust and compliance.

S

SofterWare, Inc.

donorperfect.com

0

DonorPerfect, operated by SofterWare, Inc., is a leading provider of fundraising software tailored for nonprofit organizations. The company offers a comprehensive suite of tools including donor management, online donation forms, payment processing, event management, and marketing automation. Trusted by over 75,000 nonprofit professionals, DonorPerfect holds a strong market position with a focus on enabling nonprofits to raise more funds efficiently. The website reflects a mature digital presence with integrated marketing and analytics technologies, professional design, and extensive customer support resources. Technically, the site is built on WordPress with modern integrations such as Gravity Forms and various tracking pixels, ensuring a robust and scalable platform. Security posture is solid with HTTPS and spam protection via hCaptcha, though some security headers and explicit incident response policies are not evident. Privacy compliance is partially addressed with a comprehensive privacy policy and GDPR indications, but lacks a visible cookie consent mechanism. Overall, the domain WHOIS data is unavailable, which slightly impacts transparency but does not detract from the site's legitimacy given its professional presentation and business consistency.

S

Science & Design, Inc.

hushline.app

0

Hush Line is a privacy-focused, open-source whistleblower platform operated by Science & Design, Inc., a US-based 501(c)(3) non-profit. It provides secure, anonymous tip lines with end-to-end encryption and Tor Onion service access, targeting journalists, lawyers, employers, educators, and activists. The platform offers a free core service with paid tiers for enhanced features and managed hosting, supported by donations and sponsorships. The website is professionally designed, well-structured, and highly trustworthy, with strong emphasis on privacy and security. Technically, it uses modern technologies including Python Flask backend and OpenPGP.js for encryption, with a focus on accessibility and mobile optimization. Security posture is strong, supported by a recent independent security audit, encrypted data storage, and verified accounts for authenticity. However, the site lacks a cookie policy and explicit security headers, which are recommended for compliance and enhanced security. Overall, Hush Line presents a mature, credible, and secure service for whistleblower communication with a clear commitment to user privacy and transparency.

G

gifttool.com inc.

gifttool.com

0

GiftTool.com is a well-established provider of cloud-based fundraising and nonprofit eCommerce software solutions, serving primarily small to mid-size nonprofit organizations. Founded in 1999, the company offers a comprehensive suite of services including online donations, event registration, peer-to-peer fundraising, membership management, and eCommerce shopping cart capabilities. The website presents a professional and consistent brand image with clear navigation and responsive design, targeting nonprofit organizations seeking to streamline fundraising and event management operations. Technically, the website employs modern web technologies such as Materialize CSS and JavaScript, with a responsive and mobile-optimized design. The hosting provider is not explicitly identified but the domain uses DNS servers from teksavvy.com. Performance is moderate with good SEO and basic accessibility features. Security posture is solid with HTTPS enforced and domain transfer protection enabled, though some security headers like Content-Security-Policy are not explicitly present. Privacy compliance is partial, with a privacy policy available but lacking cookie consent mechanisms and GDPR compliance indicators. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The WHOIS data is consistent with the business claims, showing a long domain age and no privacy protection, which supports legitimacy. However, the absence of incident response contacts and vulnerability disclosure policies suggests room for improvement in security transparency and readiness. Overall, GiftTool.com is a credible and professional nonprofit software provider with a solid technical foundation and good security practices. Enhancements in privacy compliance and security policy transparency would further strengthen its trustworthiness and regulatory alignment.

P

Privacy Guides

privacyguides.org

0

Privacy Guides is a small, non-profit organization founded in 2021 that provides comprehensive privacy and security resources, including tool recommendations, educational content, and a community forum. The website is highly regarded in the privacy community and is recognized by reputable publications. Technically, the site is built using mkdocs and mkdocs-material, delivering fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and no exposed sensitive data, though improvements could be made by adding explicit security headers and cookie consent mechanisms. Overall, the site demonstrates a high level of professionalism, trustworthiness, and commitment to privacy advocacy.

F

Farm and Food Care PEI

farmfoodcarepei.com

0

Farm and Food Care PEI is a small non-profit organization dedicated to educating Islanders about local food production and celebrating local farmers in Prince Edward Island, Canada. The website serves as an educational and community engagement platform, providing resources, events, and projects related to agriculture and food. The organization positions itself as a regional leader in agricultural education and local food promotion. Technically, the website is built on WordPress using the Divi theme, with modern web technologies and a moderate performance profile. It is hosted likely via GoDaddy, with proper HTTPS enabled and basic SEO optimizations in place. Security posture is adequate with SSL but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security measures.

F

Farm & Food Care Ontario

farmfoodcareon.org

0

Farm & Food Care Ontario is a registered Canadian charity and coalition dedicated to building public trust and consumer confidence in food and farming in Ontario and Canada. The organization collaborates with farmers, agricultural professionals, related businesses, and government organizations to provide educational resources, events, and support services. Their website serves as a comprehensive resource hub for farmers and the general public interested in agriculture, featuring projects, guides, and partner initiatives such as virtual farm tours and educational campaigns. Technically, the website is built on WordPress with modern plugins like Yoast SEO and WooCommerce, integrated with Google Tag Manager and Analytics for tracking. The site is mobile optimized and demonstrates good SEO practices, although some accessibility features could be improved. Performance is moderate with caching and minification in place. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is incomplete, which slightly impacts trust but the overall digital presence and charity registration support legitimacy. Overall, the website is a well-maintained, professional platform supporting a non-profit agricultural coalition with a strong focus on education and public engagement. Strategic improvements in privacy compliance and security headers would enhance trust and compliance posture.

C

CanadaHelps

canadahelps.org

0

CanadaHelps operates as Canada's largest online platform for charitable giving, enabling Canadians to donate and fundraise for any registered Canadian charity. The platform offers a comprehensive suite of services including one-time and monthly donations, cause funds, urgent crisis support, and charity gift cards. Established since 2000, CanadaHelps holds a strong market position as a trusted non-profit intermediary facilitating philanthropy across Canada. Technically, the website is built on WordPress with modern libraries and tools such as jQuery, Font Awesome, Google Tag Manager, and New Relic monitoring, hosted on Azure CDN infrastructure. The site demonstrates excellent design quality, mobile optimization, and SEO practices, providing a seamless user experience. Security posture is robust with HTTPS enforcement and bot protection via Google reCAPTCHA, though some security headers could be improved. Privacy compliance is good with clear privacy and terms of use policies, though explicit cookie consent mechanisms are not evident. Overall, the website is professional, trustworthy, and well-maintained, supporting its mission to inspire generosity and facilitate charitable donations.

F

Farm & Food Care

farmfoodcare.org

0

Farm & Food Care is a Canadian non-profit coalition focused on providing credible information about food and farming to the public. The organization collaborates with farmers, agricultural professionals, government bodies, and related businesses to educate consumers about Canadian agriculture. Their website serves as a hub linking to provincial partner sites and various educational resources such as virtual farm tours, Q&A about farming, recipes, and photo libraries. The site targets Canadian consumers interested in understanding food origins and farming practices. Technically, the website employs a modest but effective technology stack including jQuery, Google Fonts, and Google Analytics, with performance and mobile optimization rated as moderate to good. The site uses HTTPS and modern web standards but lacks some advanced security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data is unavailable due to privacy protection, but the website's content and partner links strongly indicate legitimacy. From a security perspective, the site shows a basic but acceptable posture with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and privacy compliance mechanisms such as cookie consent banners reduces the overall security and privacy score. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust and readiness. Overall, Farm & Food Care presents a professional, trustworthy, and content-rich platform for agricultural education in Canada. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response and vulnerability disclosure information to strengthen security posture and compliance.

W

Wellspring

wellspring.ca

0

Wellspring is a Canadian non-profit organization established in 2000, providing free cancer support programs designed to improve quality of life for people affected by cancer. Their services include specialized programs to ease pain, fatigue, distress, and provide financial and workplace support. The website is built on WordPress with modern plugins such as Elementor and Yoast SEO, indicating a mature digital infrastructure. Accessibility features are robust, including third-party accessibility tools. Security posture is good with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is limited due to absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and well-positioned in the non-profit healthcare sector.

N

North Perth Community Hospice

northperthcommunityhospice.org

0

North Perth Community Hospice is a small non-profit organization dedicated to providing compassionate hospice and palliative care services to individuals and families in the North Perth region of Canada. Their services include volunteer hospice care, grief support for adults and children, community education, and resource lending. The organization positions itself as a trusted local community hospice with a focus on personalized care and volunteer engagement. Technically, the website is built on the MultiScreenSite CMS platform, utilizing modern JavaScript libraries such as jQuery and Snowplow Analytics for tracking. The site is mobile optimized and includes accessibility features, though there is room for improvement in security headers and privacy compliance mechanisms. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and cookie consent mechanisms are notable gaps. The WHOIS data is unavailable, which limits domain trust verification, but the website content and trust indicators such as audited financial statements and clear contact information support legitimacy. Overall, the site is professional, trustworthy, and serves its community-focused mission effectively.

I

Institut des administrateurs de sociétés

ias.ca

0

The Institut des administrateurs de sociétés (IAS) is a Canadian non-profit organization dedicated to promoting excellence in corporate governance. It provides education, resources, networking opportunities, and recognition programs for corporate directors and governance professionals. The website is professionally designed, primarily in French, and targets Canadian governance professionals and board members. It offers a variety of training programs, regional networks, and publications to support its members. Technically, the site uses modern web technologies including Next.js and React, with integrations for Google Tag Manager and reCAPTCHA, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit privacy and security policies are not prominently found. Overall, the site is trustworthy and well-positioned in its niche, though it could improve transparency around privacy and incident response.

H

Heart and Stroke Foundation

fundraiseyourway.ca

0

The website 'fundraiseyourway.ca' serves as a dedicated fundraising platform for the Heart and Stroke Foundation of Canada, enabling individuals and groups to create personalized fundraising campaigns to support heart disease and stroke research and awareness. It offers multiple fundraising options including social media challenges, livestream fundraising, memorial giving, and virtual canvassing. The platform is well-branded, consistent with the parent organization's identity, and targets Canadian donors and supporters. Technically, the site uses a modern tech stack with jQuery, Google Tag Manager, Snowplow Analytics, Facebook SDK, and other tools, hosted on a CDN-backed infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and captcha protections, though it lacks visible cookie consent and formal security policies. WHOIS data for the domain is missing, which raises some concerns about domain registration legitimacy, but the content and external references strongly associate it with the legitimate Heart and Stroke Foundation. Overall, the site is professional, trustworthy, and effective for its non-profit fundraising mission.

H

Heart & Stroke Foundation of Canada

rideforheart.ca

0

Ride for Heart is a Canadian non-profit fundraising event organized by the Heart & Stroke Foundation of Canada, aimed at raising funds and awareness for heart disease and stroke research. The website provides comprehensive information about event participation, corporate challenges, fundraising incentives, and inspirational stories, targeting Canadian residents interested in health and charitable causes. The site leverages modern web technologies and integrates with a third-party fundraising platform to facilitate donations and registrations. Technically, the website is well-structured, mobile-optimized, and uses HTTPS with good SSL configuration, though it lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. The absence of WHOIS data due to privacy protection is justified for this non-profit entity. Overall, the website demonstrates a strong security posture, good business credibility, and a professional online presence.

A

Adam Green

publicdomainreview.org

0

The Public Domain Review is a well-established non-profit online journal dedicated to showcasing and exploring curious and compelling works from the history of art, literature, and ideas that are in the public domain. Founded in 2011 and registered in the UK under Adam Green, it serves a broad audience including researchers, educators, and enthusiasts interested in public domain content. The website offers curated collections, essays, and sells prints and books to support its mission. Technically, the site is built on modern frameworks such as Gatsby and React, ensuring fast performance, mobile optimization, and good accessibility. Security posture is solid with HTTPS enforced and standard security headers, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and content quality, making it a reliable resource in its niche.

A

Abilities Centre

abilitiescentre.org

0

Abilities Centre is a well-established Canadian non-profit organization founded in 2004, dedicated to fostering accessibility, inclusion, and community engagement for people of all ages and abilities. The organization offers a broad range of programs and services including sports, therapeutic recreation, skills development, and training, supported by research and advocacy efforts. Their market position is strong within the Canadian non-profit sector focused on disability inclusion, supported by partnerships with government entities and foundations. Technically, the website is built on a Kentico CMS platform using modern JavaScript libraries and frameworks such as jQuery, Foundation, and Slick Carousel, providing a responsive and accessible user experience. Security posture is good with HTTPS enabled and CSRF protections in place, though improvements are recommended in DNSSEC implementation and security headers. Privacy compliance is partial with a clear privacy policy but lacking cookie consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and content quality, making it a credible digital presence for the organization.

T

The Kidney Foundation of Canada

kidneycar.ca

0

Kidney Car is a well-established Canadian non-profit vehicle donation program operated by The Kidney Foundation of Canada. The website effectively communicates its mission to support kidney and transplant patients by providing a convenient vehicle donation process with free towing and tax receipts. The program has a strong market position with over 500,000 vehicles donated since 1992, reflecting trust and longevity. Technically, the site uses a mature tech stack including ASP.NET, Kentico CMS, and modern front-end libraries, hosted behind Cloudflare for performance and security. Privacy compliance is robust with a comprehensive cookie consent mechanism and clear privacy and terms policies. Security posture is good with HTTPS, CSRF protections, and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and user-friendly, supporting its non-profit mission effectively.

O

Ontario Caregiver Organization

ontariocaregiver.ca

0

Ontario Caregiver Organization is a Canadian non-profit dedicated to supporting over 4 million caregivers in Ontario through comprehensive resources, counselling, peer support, and educational tools. The organization holds a strong market position as a key provincial resource, targeting caregivers, healthcare providers, employers, and community members. Their business model focuses on providing free programs and support to improve caregiver well-being. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Gravity Forms, and WPBot Pro chatbot, hosted by easyDNS Technologies Inc. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Security posture is solid with HTTPS enforced and domain registration protections, though improvements are recommended in security headers and DNSSEC implementation. Privacy compliance is basic, with a comprehensive privacy policy but lacking explicit cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with its mission, though it could enhance security and privacy practices to meet higher compliance standards.

O

Ontario Caregiver Coalition

ontariocaregivercoalition.ca

0

The Ontario Caregiver Coalition website serves as a non-profit advocacy and education platform dedicated to supporting caregivers in Ontario, Canada. The organization focuses on providing educational resources and advocacy efforts to improve the lives of caregivers. The website is built on the Wix platform, leveraging Wix's website builder technologies and hosting infrastructure. It features basic SEO optimizations and structured data to enhance search engine visibility. However, the site lacks comprehensive privacy and cookie policies, which are critical for compliance and user trust. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but it lacks advanced security headers and incident response information. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices to improve trust and regulatory adherence.

A

Amyotrophic Lateral Sclerosis Society of Canada

revolutionride.ca

0

The ALS Canada Revolution Ride website serves as a professional and well-branded platform for promoting the 2025 fundraising cycling event organized by the Amyotrophic Lateral Sclerosis Society of Canada. The site effectively communicates the event's purpose, target audience, and key services including fundraising, community support, research funding, advocacy, and information dissemination. The organization behind the site is a reputable Canadian non-profit established in 1977, with a strong market position in ALS awareness and support. The website's content is relevant, well-structured, and visually appealing, targeting cyclists and supporters of ALS causes. From a technical perspective, the site employs a modern technology stack including jQuery, TinyMCE, Google reCAPTCHA, Facebook SDK, and Very Good Vault for secure data collection. Hosting appears to be on Rackspace infrastructure. The site is mobile optimized and SEO friendly, though accessibility features could be improved. Security posture is strong with HTTPS enforced and use of security tools, but lacks some security headers and publicly available security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the security posture is good with no detected vulnerabilities or WAF blocking. The domain WHOIS data is unavailable, likely due to privacy protection, which is justified for this non-profit event site. Trust indicators such as charity registration and certifications bolster credibility. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding security headers, providing clear contact information for security and privacy matters, and enhancing accessibility compliance to improve overall trust and compliance posture.

H

Huntington Society of Canada

huntingtonsociety.ca

0

The Huntington Society of Canada is a well-established non-profit organization dedicated to supporting individuals and families affected by Huntington disease. Their website provides comprehensive resources including family services, research updates, advocacy, and community engagement. The organization positions itself as a leading Canadian entity in the Huntington disease space, supported by charitable registration and partnerships with research funding bodies. Technically, the website is built on WordPress with WooCommerce integration, leveraging modern web technologies and frameworks such as Foundation and jQuery. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enforced but lacks several important security headers, and no cookie consent mechanism was detected, indicating room for improvement in privacy compliance. The absence of WHOIS data is a notable anomaly that slightly impacts trust but does not detract from the overall professionalism and legitimacy of the site. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to strengthen trust and compliance.

C

Crohn’s and Colitis Canada

crohnsandcolitis.ca

0

Crohn’s and Colitis Canada is a well-established Canadian national non-profit organization dedicated to supporting individuals affected by Crohn’s disease and ulcerative colitis. The organization provides comprehensive resources, patient support, research funding, advocacy, and community engagement through various programs and events. Their website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to patients, caregivers, healthcare providers, and donors. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and multiple third-party analytics and marketing tools, hosted on Netfirms with Kentico CMS. Security posture is good with HTTPS enforced and CSRF protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website demonstrates high business credibility and trustworthiness, supported by certifications like the Imagine Canada Trustmark.

C

CNIB Foundation

cnib.ca

0

The CNIB Foundation website represents a well-established Canadian non-profit organization dedicated to supporting people who are blind, Deafblind, or have low vision. The organization has a rich history dating back to 1918 and offers a variety of programs including guide dogs, live events, play, work, learning, and technology services. The website is professionally designed using Drupal 10 and incorporates modern tracking and analytics tools to support marketing and outreach efforts. Contact information is clearly provided, including a toll-free phone number and a contact form. However, explicit privacy and cookie policies are not clearly found in the provided content, which is a compliance gap. The WHOIS data for the domain is not available, likely due to privacy protection, but the website's professional appearance and content strongly indicate legitimacy.

The Canadian Cancer Society operates as Canada's largest national cancer charity, providing funding for cancer research, offering support services, and disseminating trusted cancer-related information. The organization targets a broad audience including patients, caregivers, researchers, and donors. Their market position is strong as a leading non-profit in the healthcare sector, with a well-established brand and extensive service offerings. Technically, the website is built on the Sitecore CMS platform, leveraging modern JavaScript libraries, Coveo search technology, and integrates multiple third-party tools for analytics, marketing, and user engagement. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, uses domain transfer protection, and implements a cookie consent mechanism, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and compliant with privacy standards, though there is room for improvement in security transparency and DNS security. The domain WHOIS data is privacy protected but consistent with a legitimate, long-standing non-profit entity.

A

Alzheimer Society of Canada

alzheimer.ca

0

The Alzheimer Society of Canada is a well-established national non-profit organization dedicated to supporting people affected by dementia through education, support services, research funding, and advocacy. The website reflects a mature digital presence with comprehensive content targeting multiple stakeholders including individuals living with dementia, caregivers, healthcare professionals, and researchers. The organization maintains a strong market position as a leading dementia support entity in Canada, supported by clear branding, active social media engagement, and transparent contact information. Technically, the website is built on Drupal 9 with modern JavaScript libraries and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and FundraiseUp for donations. The site is hosted behind Cloudflare DNS and uses HTTPS with a Content-Security-Policy header, indicating a good security baseline. However, DNSSEC is not enabled, and some advanced security headers are missing, representing areas for improvement. From a security and compliance perspective, the site enforces HTTPS and protects domain transfer and update rights, but lacks a visible cookie consent mechanism and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the organization's identity and history, reinforcing legitimacy. Overall, the website scores highly on content quality, business credibility, and technical implementation, with moderate scores on privacy compliance and security posture. Strategic recommendations include enabling DNSSEC, implementing cookie consent, publishing security policies, and enhancing security headers to further strengthen trust and compliance.

R

Road Hockey to Conquer Cancer

roadhockeytoconquercancer.ca

0

Road Hockey to Conquer Cancer is a Canadian non-profit initiative focused on organizing a road hockey fundraising event to support vital cancer research at The Princess Margaret Cancer Centre. The website targets recreational hockey players, celebrities, and the general public interested in supporting cancer research through community engagement and fundraising activities. The domain was registered in 2019, consistent with the event's history, and is hosted with Cloudflare DNS and uses Kentico CMS for content management. Technically, the website employs modern tools including Cookiebot for cookie consent management, Google Tag Manager, Google reCAPTCHA, and various marketing and analytics integrations such as AddThis and Contentsquare. The site is mobile optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, but could be improved by enabling DNSSEC and adding security headers. No explicit privacy policy or terms of service pages were found in the provided content, which is a compliance gap. Contact information such as emails or phone numbers is not directly available on the main page, limiting direct user communication. The domain registration is privacy protected but consistent with the business type and location, indicating legitimacy. Overall, the website presents a professional and trustworthy front for a niche non-profit event, with good technical implementation and moderate security maturity. Strategic improvements in privacy disclosures, security headers, and contact transparency would enhance compliance and user trust.

K

Kids Help Phone

walksokidscantalk.ca

0

Kids Help Phone is a well-established Canadian non-profit organization focused on youth mental health support. The website promotes the BMO Walk so Kids Can Talk event, a national fundraising initiative engaging thousands of participants and donors to support youth mental health services. The organization holds a strong market position as a trusted leader in youth mental health advocacy and support across Canada. The website content is professionally presented, targeting youth and supporters, with clear calls to action for donations, volunteering, and participation.

J

Jack.org

jack.org

0

Jack.org is a Canadian non-profit organization dedicated to youth mental health support and education. It operates the largest network of young people supporting each other in Canada, offering programs such as mental health presentations (Jack Talks), community chapters, and training to safely support peers (Be There). The organization also provides resources for youth and supporters and runs fundraising initiatives to sustain its mission. The website reflects a professional and consistent brand image targeting young Canadians and mental health advocates. Technically, the site is built on Webflow, leveraging modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Sentry for error monitoring. It is well optimized for performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanisms aligned with GDPR. Overall, the site presents a trustworthy and professional digital presence for a medium-sized non-profit organization.

C

Covenant House Toronto

covenanthousetorontoevents.ca

0

Covenant House Toronto is a well-established non-profit organization dedicated to serving youth who are homeless, trafficked, or at risk in Canada. As the largest agency of its kind in the country, it offers a comprehensive range of services including prevention, housing, health, education, and advocacy. The organization relies on donations and volunteer support to fulfill its mission and maintains a strong market position with a large audience and extensive community engagement. Technically, the website is built on WordPress with modern plugins and tracking technologies such as Google Analytics, Facebook Pixel, and Bing Ads. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS and reCAPTCHA for security, though some security headers could be improved. The domain is mature and privacy protected, consistent with a legitimate non-profit. Security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy and cookie policies are present and indicate GDPR compliance. However, the site lacks explicit security policies or incident response contacts, which could be enhanced to improve trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and maintaining rigorous third-party script audits to sustain a strong security posture.

H

HealthPartners

healthpartners.ca

0

HealthPartners is a well-established Canadian non-profit organization focused on facilitating workplace giving campaigns to support a collective of health charities across Canada. Their website demonstrates a strong market position with comprehensive content, clear branding, and a professional digital presence. The organization targets employers and employees interested in charitable giving, providing turnkey solutions and partnership opportunities. The site is bilingual with a French alternate domain, enhancing accessibility to the Canadian market. Technically, the website is built on WordPress with modern plugins and tracking tools, optimized for performance and mobile use. Security posture is good with HTTPS enforced and domain transfer protections in place, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic; a privacy policy is present but no cookie consent mechanism is detected despite active analytics tracking. Overall, the website is trustworthy and professional, with minor areas for enhancement in security and privacy transparency.

A

A.K.A. New Media Inc.

akaraisin.com

0

A.K.A. New Media Inc. operates the AKA raisin platform, providing specialized online and mobile fundraising software tailored for nonprofits and foundations. Established in 2006, the company has a strong market presence in Canada, offering key services such as donations management, peer-to-peer fundraising, ticketing, and digital design services. The website reflects a professional and consistent brand image, targeting nonprofit organizations seeking scalable fundraising solutions. Technically, the site leverages modern JavaScript libraries, HubSpot CMS integrations, and analytics tools like Google Analytics and Hotjar, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and reCAPTCHA on forms, though improvements like DNSSEC and security headers could enhance protection. Privacy compliance is well addressed with visible cookie consent and a comprehensive privacy policy. Overall, the site demonstrates high business credibility with clear contact information, client testimonials, and a well-maintained online presence.

B

Berliner CSD e.V.

csd-berlin.de

0

Berliner CSD e.V. is a non-profit organization dedicated to organizing the Berlin Pride event (CSD Berlin), one of the largest demonstrations advocating for the rights of LGBTIQA* individuals. The website serves as an informational and promotional platform for the upcoming event scheduled for July 26, 2025. The organization maintains a consistent brand presence across social media channels and employs modern web technologies including WordPress with the Divi theme, Yoast SEO, and Cookiebot for privacy compliance. The technical infrastructure is moderately optimized for performance and mobile responsiveness, with a focus on user experience and accessibility. Security posture is adequate with HTTPS enforced and privacy-conscious tracking configurations, though improvements could be made by adding security headers and formal security policies. Overall, the website reflects a trustworthy and professional digital presence aligned with its advocacy mission.

M

Mental Health Commission of Canada

mentalhealthcommission.ca

0

The Mental Health Commission of Canada (MHCC) is a well-established non-profit organization dedicated to improving mental health outcomes across Canada. The website serves as a comprehensive platform offering public and professional resources, training programs, research, and advocacy initiatives. It targets a broad audience including individuals experiencing mental health challenges, caregivers, professionals, and policymakers. The MHCC holds a strong market position as a national leader in mental health advocacy and education, supported by partnerships with government and other organizations. Technically, the website is built on WordPress using modern tools such as Elementor and JetEngine, with integrations for SEO and analytics including Yoast SEO, Google Tag Manager, Microsoft Clarity, and multiple social media tracking pixels. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC, explicit security headers like Content-Security-Policy, and a published vulnerability disclosure policy. Privacy compliance is partial; while a privacy policy and terms of service are present, there is no visible cookie consent mechanism, which may pose compliance risks under GDPR and similar regulations. Overall, the MHCC website is professional, trustworthy, and content-rich, with a solid technical foundation. Strategic improvements in security headers, DNS security, and privacy compliance would enhance its security posture and regulatory adherence.

Ο

Οι Γιατροί του Κόσμου – Ελλάδας

mdmgreece.gr

0

Οι Γιατροί του Κόσμου – Ελλάδας is a well-established humanitarian NGO founded in 1990, providing medical and psychosocial support to vulnerable populations in Greece and globally. The organization is part of the international Doctors of the World network, enhancing its credibility and reach. The website reflects a professional and consistent brand image, with clear communication of its mission and services, targeting a general audience interested in humanitarian aid and health services. Technically, the site is built on WordPress with modern SEO and cookie consent implementations, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. Overall, the site demonstrates a mature digital presence with strong business credibility and trust indicators.

A

Asociația Dăruiește Viață

daruiesteviata.ro

0

Asociația Dăruiește Viață is a Romanian non-profit organization dedicated to fundraising for pediatric healthcare infrastructure, specifically the Marie Curie pediatric medical campus. The website serves as a platform to engage donors and supporters through campaigns such as "Promit". The organization positions itself as a trusted entity in the Romanian healthcare non-profit sector, leveraging modern web technologies and secure payment solutions to facilitate donations. Technically, the website is built on a modern stack including Next.js and React, with integration of Stripe for payment processing and Cookiebot for GDPR-compliant cookie management. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities. However, the absence of explicit contact information, terms of service, and security incident response details are areas for improvement. Overall, the domain is privacy protected via ROTLD, which is common and justified for this business type, and the website content aligns with the organization's mission and legitimacy. Strategic recommendations include publishing terms of service, incident response contacts, and a security.txt file to enhance transparency and trust.

C

Canadian Centre on Substance Use and Addiction

thehighwayhome.ca

0

The High Way Home? is a Canadian non-profit educational website sponsored by the Canadian Centre on Substance Use and Addiction (CCSA) and Desjardins. It provides interactive content and resources aimed at raising awareness about substance use and promoting harm reduction strategies across Canadian provinces and territories. The website targets the general public with a focus on safe decision-making related to substance use. Technically, the site is built on Drupal CMS and employs modern web technologies including Google Analytics and Google Tag Manager for user tracking and performance monitoring. The site is mobile optimized and accessible with a clear navigation structure. Security posture is adequate with HTTPS enforced and domain transfer protections in place, though improvements such as enabling DNSSEC and publishing explicit security policies are recommended. Privacy compliance is supported by a clear cookie consent mechanism and links to comprehensive privacy and terms of use policies hosted on the authoritative CCSA domain. Overall, the website is professional, trustworthy, and serves its educational mission effectively.

C

Canadian Centre on Substance Use and Addiction

issuesofsubstance.ca

0

The website issuesofsubstance.ca represents the Canadian Centre on Substance Use and Addiction’s Issues of Substance Conference 2025, a well-established national event focused on substance use and addiction issues in Canada. The conference targets a diverse audience including healthcare professionals, researchers, policy makers, and individuals with lived experience. The business model is non-profit and educational, positioning itself as a key knowledge-sharing platform in the Canadian health sector. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience and trustworthiness. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates analytics tools such as Google Analytics and Webtrends. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Hosting and domain registration are consistent with the Canadian non-profit identity, though DNSSEC is not enabled, representing a minor security gap. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. However, it lacks explicit security policies, incident response contacts, and security headers, which could be improved to enhance security posture. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a solid security and privacy foundation with room for improvement in security policy transparency and DNS security. The business credibility is high, supported by consistent WHOIS data and reputable partnerships. Strategic recommendations include enabling DNSSEC, publishing security policies, and implementing security headers to further strengthen trust and resilience.

C

Canadian Centre on Substance Use and Addiction

ccsa.ca

0

The Canadian Centre on Substance Use and Addiction (CCSA) is a well-established Canadian non-profit organization focused on substance use and addiction research, policy, and public health. The website serves as a comprehensive resource hub offering research publications, conferences, guidance tools, and community resources. It targets a broad audience including researchers, policymakers, healthcare professionals, and the general public interested in substance use health. The organization's market position is strong nationally, supported by a long domain history and consistent branding. Technically, the website is built on Drupal 10, leveraging modern web technologies and analytics tools such as Google Analytics and Google Tag Manager. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Hosting is provided by Webnames.ca Inc., a Canadian registrar, with HTTPS enabled and domain status clientTransferProhibited, indicating good domain security. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks visible security headers and publicly disclosed security policies or incident response contacts. No vulnerability disclosure or security.txt file was found. Privacy and cookie policies are not explicitly detected in the provided HTML content, which may impact compliance perception. Overall, the security posture is good but could be improved with enhanced headers and transparency. The overall risk assessment is low, with no signs of malicious activity or suspicious domain registration patterns. Strategic recommendations include enabling DNSSEC, publishing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process to enhance trust and compliance.

T

The Icon Museum and Study Center

iconmuseum.org

0

The Icon Museum and Study Center is a specialized non-profit museum based in the United States, focusing on the collection and study of icons and Eastern Christian art. It holds a prominent position in its niche market, offering exhibitions, educational programs, research resources, and community engagement through tours and internships. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to art enthusiasts, scholars, and the general public. Technically, the website is built on WordPress using modern plugins and frameworks such as Yoast SEO, Elementor, and Smart Slider 3 Pro. It employs structured data (JSON-LD) for enhanced SEO and social media integration via Open Graph and Twitter Cards. The site is mobile optimized and demonstrates good performance and accessibility standards. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit public security policies or incident response contacts, which could be improved to enhance trust and compliance. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations such as GDPR. The domain WHOIS data is privacy protected or unavailable, which is common for non-profit organizations. Strategic recommendations include publishing a security.txt file, enhancing incident response transparency, and adopting formal security frameworks to further strengthen the security posture.

I

Institutul Biblic - Atelierele Patriarhiei Române

atelierelepatriarhiei.ro

0

Atelierele Patriarhiei Române operates as a religious manufacturing entity under the Romanian Orthodox Church, producing and selling cult objects and ecclesiastical vestments. The website presents a professional and consistent brand image, targeting religious institutions and faithful customers. Technically, the site is built on WordPress with WooCommerce and Elementor, providing a modern e-commerce platform with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced but lacks advanced security headers and cookie consent mechanisms. WHOIS data is privacy protected, which is typical for such institutions but limits transparency. Overall, the site is trustworthy and safe for general audiences.

P

Acasa - Pictăm Catedrala

pictamcatedrala.ro

0

The website pictamcatedrala.ro serves as an informational and donation platform for the Romanian National Cathedral painting project. It targets Romanian Orthodox Christians and cultural heritage supporters, providing rich content about the iconography, mosaic art, and the cathedral's significance. The site is built on WordPress and uses modern frontend libraries such as jQuery, Bootstrap, and FontAwesome, ensuring a good user experience and mobile optimization. The presence of Google Analytics indicates moderate user tracking, but no cookie consent mechanism is implemented, which is a compliance gap. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit security policies. The domain registration is consistent with the website's Romanian cultural and religious focus, and the domain age aligns with the project's timeline. Overall, the site is professional, trustworthy, and well-branded, but could improve in privacy compliance and security transparency.