Switzerland security reports

S

Stiftung Solvita

solvita.ch

51

Stiftung Solvita is a well-established Swiss non-profit foundation dedicated to serving people with disabilities for over 50 years. The organization offers a broad range of services including production and logistics, residential care, education, employment, and professional integration. Their market position is strong within their regional and sectoral niche, supported by a clear mission and comprehensive service offerings. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at beneficiaries, partners, and the community. Technically, the website is built on WordPress using modern plugins such as Elementor for design, WooCommerce for e-commerce capabilities, and Yoast SEO for search optimization. Google Analytics is used for visitor tracking, and the site is mobile-optimized with good performance. Accessibility is basic but present. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. No critical security or privacy compliance issues were detected. The site includes a privacy policy and cookie consent mechanism compliant with GDPR. Contact information is clearly provided, enhancing business credibility. No adult or unsafe content is present, making the site safe for general audiences. Overall, Stiftung Solvita's website demonstrates a mature digital presence aligned with its mission and audience, with room for incremental security and privacy enhancements.

L

laSuite fitnessclub AG

lasuite-fit.ch

61

laSuite fitnessclub AG operates a fitness club located in Luzern, Switzerland, offering 24/7 access to members along with professional personal training, physiotherapy services through a partnership with MoveSphere, and a retail shop for health and fitness products. The company positions itself as a local premium fitness provider with a focus on holistic training including strength, endurance, coordination, and nutrition support. The website is built on TYPO3 CMS and integrates modern web technologies such as HTML5 video and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and provides clear navigation and contact information, enhancing user experience and trust. Security posture is good with HTTPS enforced, though improvements are recommended in security headers and cookie consent mechanisms to enhance compliance and protection. WHOIS data confirms the legitimacy of the domain registration consistent with the business location and identity. Overall, the website reflects a professional and credible fitness business with room for technical and compliance enhancements.

G

Gstaad Saanenland Tourismus

gstaad.ch

55

The website www.gstaad.ch/sommer serves as the official tourism portal for the Gstaad holiday region in Switzerland, focusing on promoting summer activities, events, and travel planning. It targets tourists and visitors seeking comprehensive information about the region's offerings, including hiking, biking, cultural events, and accommodation options. The site is positioned as a regional destination marketing organization with a medium-sized operational scope. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript modules, intersection observers, and font loading APIs to deliver a responsive and accessible user experience. It integrates analytics tools such as Matomo and Google Tag Manager with GDPR-compliant mechanisms and includes a chatbot for user engagement. Performance and mobile optimization are good, with clear navigation and SEO-friendly metadata. From a security perspective, the site enforces HTTPS and uses tracking scripts responsibly with consent mechanisms. However, it lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business purpose, indicating legitimacy. Overall, the website presents a professional and trustworthy tourism platform with room for improvement in privacy transparency and security documentation. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding terms of service, and providing clear contact channels for security incidents to enhance user trust and compliance.

M

Missionswerk MSD

msd-online.ch

52

Missionswerk MSD is a Swiss-based non-profit organization dedicated to mission work and charitable activities. The website serves as an informational platform to present their mission, projects, and ways to support their cause. The organization targets individuals interested in religious outreach and charitable giving. The business model is donation-based, focusing on small to medium scale operations within the non-profit sector. Technically, the website is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and PHP. The site is multilingual, supporting German, French, and English, enhancing accessibility for a broader audience. Performance and mobile optimization are moderate to good, though accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and formal security policies. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security maturity. Privacy compliance is weak, with no visible privacy or cookie policies and no consent mechanisms. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security policies, and explicit contact information to improve trust and regulatory adherence.

A

ACTS

andacts.ch

51

ACTS is a Swiss-based educational organization specializing in leadership and vocation training with a Christian focus. Their website offers detailed information about their training modules, intensive programs, cultural training, and community living options. The organization targets individuals seeking to deepen their calling and leadership skills through biblical study and practical training. The website is professionally designed, mobile-optimized, and integrates modern WordPress technologies and plugins, including WPBakery, Slider Revolution, and Everest Forms. Social media presence on Facebook, Instagram, and YouTube supports their outreach efforts. Technically, the site uses HTTPS with good SSL configuration and integrates Google Analytics and Tag Manager with consent mode configured to deny personalization and ad storage in the EU/CH region, reflecting some privacy awareness. However, the absence of explicit privacy and cookie policies is a compliance gap. Security headers are not detected, and no published security or incident response policies exist, indicating room for improvement in security posture. Overall, the website is trustworthy and credible, with consistent WHOIS data supporting legitimacy. The site is safe for general audiences, with no adult or explicit content. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing incident response documentation to enhance compliance and security maturity.

I

ISTL

istl.ch

58

ISTL is an educational institution specializing in dual theological studies offering Bachelor and Master degree programs as well as Bible school education. The website targets individuals interested in theological education primarily in Switzerland and Germany. The institution maintains a professional online presence with comprehensive privacy and cookie policies, and active social media engagement. Technically, the website is built on WordPress using the Astra theme and integrates modern analytics and marketing tools such as Google Analytics 4, Google Ads, and Meta Pixel, all managed with user consent via a cookie banner. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. The lack of WHOIS data for the domain introduces uncertainty about domain registration legitimacy, which should be further investigated. Overall, the website is professional, user-friendly, and compliant with GDPR requirements.

B

Bienen Meier AG

bienen-meier.ch

55

Bienen Meier AG is a specialized Swiss retailer focused on beekeeping supplies, offering a comprehensive online shop with a wide range of products including protective clothing, honey containers, and beekeeping tools. The company targets beekeepers and honey producers, positioning itself as a trusted provider with Swiss-made products and customer engagement initiatives such as surveys and consultation for new beekeepers. Technically, the website is built on the PepperShop e-commerce platform, leveraging modern libraries like jQuery and Bootstrap, and integrates Google Analytics for user tracking. The site is mobile-optimized with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses client-side validation but lacks some advanced security headers and a formal vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional and trustworthy but could improve in security and privacy transparency.

A

APINATURA

apinatura.ch

53

APINATURA is a Swiss-based small business specializing in the production and sale of bee products and cosmetics derived from bee products, with a strong emphasis on apitherapy. The company leverages a long family tradition in beekeeping and combines traditional knowledge with modern scientific methods. Their market position is niche and regional, targeting health-conscious consumers interested in natural and bee-based products. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive product and company information. Technically, the site uses the indual CMS platform with common libraries such as jQuery and Fancybox, and integrates Google Analytics for user tracking. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security policy or incident response contacts are provided. Overall, the site is trustworthy, compliant with GDPR, and presents a safe user experience.

swissdatabox.com is a Swiss-based cloud storage and backup service provider operated by alixon gmbh, a small IT company located in Aarau, Switzerland. The company offers secure cloud solutions emphasizing Swiss data sovereignty, automatic synchronization across devices, and team collaboration features. Their business model is subscription-based with tiered pricing plans targeting individuals and teams seeking reliable and secure cloud storage. The website content is professional and well-structured, providing clear information about services, pricing, and contact details. Technically, the website leverages the Nextcloud open source platform and uses ExtJS for frontend interactions. While the site is accessible and functional, technical implementation shows room for improvement in performance optimization, mobile responsiveness, and accessibility. The presence of Lead Forensics tracking indicates moderate user tracking without visible privacy compliance mechanisms such as cookie consent banners or privacy policies. From a security perspective, the website benefits from Swiss data center hosting with high physical security standards and encrypted data transmission. However, the absence of HTTP security headers, lack of visible security policies, and missing WHOIS domain registration data raise concerns about the overall security posture and domain legitimacy. The login form lacks advanced protections such as CSRF tokens or CAPTCHA, which could be improved to enhance security. Overall, swissdatabox.com presents a credible business offering with good content quality and moderate technical maturity. The main risks stem from incomplete domain registration transparency and insufficient published privacy and security policies. Strategic improvements in these areas would enhance trust and compliance.

The website alixon-web.ch presents a small technology business offering a modular web management platform primarily targeting organizations and businesses needing address management, event scheduling, website content editing, and communication tools. The platform uses a proprietary CMS with Ext JS for UI components and provides multiple portal options for different user groups. The site is primarily in German and hosted on subdomains related to alixon-web. Technically, the site uses HTTPS for login forms but lacks visible security headers and privacy policies, indicating room for improvement in security and compliance. No contact emails or phone numbers are provided, which may affect user trust and support accessibility. Overall, the site is functional with basic content and moderate technical implementation but lacks comprehensive privacy and security measures.

M

Mozzatti Schlumpf Architekten AG

mozzattischlumpf.ch

53

Mozzatti Schlumpf Architekten AG is a medium-sized Swiss architecture and real estate company established in 1967, specializing in contemporary building planning, renovations, and property management. The company targets private clients, general contractors, public entities, and foundations, offering comprehensive architectural services with a focus on quality, sustainability, and client satisfaction. Their website reflects a professional and consistent brand image with detailed project portfolios and team information. Technically, the website uses modern web technologies including Foundation framework, jQuery, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is moderate with some best practices observed but lacks explicit security headers and incident response information. Privacy compliance is basic, missing cookie consent mechanisms. Overall, the website is trustworthy and well-positioned in its market niche.

Imkereibedarf Wespi operates a specialized e-commerce platform focused on beekeeping supplies in Switzerland. The website offers a broad range of products including beehives, honey harvesting equipment, protective clothing, and bee products. The target audience primarily consists of professional and hobby beekeepers within the Swiss market. The business model is retail-oriented, leveraging an online storefront powered by Shopware 6, providing a structured and user-friendly shopping experience. The company appears to be a small-sized entity with a consistent brand presence and a niche market position.

A

APISUMM A. Schuler

apisumm.ch

10

APISUMM A. Schuler is a small Swiss retail business specializing in the production and sale of high-quality Swiss honey, bee cosmetics, and health supplements derived from bee products such as Propolis and Gelée Royal. The company operates an e-commerce platform targeting health-conscious consumers and regional customers in Switzerland. The website presents a professional and consistent brand image with clear navigation and product offerings. Technically, the site is built on the Shopware platform, employs modern web technologies, and integrates security features such as HTTPS, CSRF tokens, and Google reCAPTCHA. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit security policies and incident response information. Overall, the website is trustworthy, secure, and well-suited for its business model.

apimedi GmbH is a small Swiss company specializing in beekeeping products, honey sales, and beekeeping training services. The company operates a commercial beekeeping business and complements it with an educational offering through its Imkerschule. The website targets local and regional customers interested in bee products and beekeeping education. Technically, the website uses a custom CMS with older but functional JavaScript libraries such as jQuery and Bootstrap. It is mobile optimized and includes basic SEO and accessibility features. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy and cookie banner present. Overall, the website is professional, trustworthy, and suitable for its business purpose.

Swissdatabox.com is a Swiss-based cloud and backup service provider operated by alixon gmbh, a small IT solutions company located in Aarau, Switzerland. The company offers secure cloud storage and synchronization services leveraging the open-source Nextcloud platform, emphasizing Swiss data sovereignty and high security standards. Their business model is subscription-based with tiered pricing plans targeting individuals, teams, and corporate clients. The website presents clear service descriptions, pricing, and contact information, positioning itself as a niche provider in the Swiss market. Technically, the website uses ExtJS for frontend interactivity, Font Awesome for icons, and includes scripts such as MD5.js. The infrastructure is implied to be hosted in Switzerland with claims of high physical security at data centers. The website is moderately optimized for performance and mobile devices but lacks advanced accessibility and SEO features. Tracking is implemented via Lead Forensics, indicating moderate user tracking. From a security perspective, the site uses HTTPS and claims encrypted data transmission. However, no explicit security headers were detected in the provided data, and the login form lacks visible anti-CSRF or CAPTCHA protections. The absence of privacy and cookie policies is a compliance gap, especially under GDPR. The WHOIS data is missing or unavailable, which raises concerns about domain legitimacy despite the professional appearance of the site. Overall, the website is functional and professional but would benefit from improved transparency in privacy compliance, enhanced security headers, and resolution of WHOIS data inconsistencies to strengthen trust and compliance posture.

A

adidas

adidas.ch

11

The website www.adidas.ch is the official Swiss e-commerce platform for adidas, a globally recognized sportswear brand. It offers a wide range of products including shoes, sports clothing, and equipment tailored for the Swiss market. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. It targets sports enthusiasts and consumers in Switzerland, operating under the enterprise business model of retail e-commerce. Technically, the site leverages modern frameworks such as React and Next.js, employs microfrontend architecture, and integrates performance monitoring tools like Instana and Tealium. The platform is optimized for mobile and desktop with good SEO and accessibility practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy and terms of service pages were not found in the provided content, which slightly impacts privacy compliance scoring. Overall, the domain registration aligns well with the brand, reinforcing legitimacy and trust.

R

RaiseNow

raisenow.com

74

RaiseNow is a professional fundraising and payment platform targeting nonprofits, clubs, and changemakers globally. The company offers a SaaS model with tools for donation collection, payment processing, community engagement, CRM integration, and campaign management. The website is well-designed, mobile-optimized, and uses modern technologies such as HubSpot CMS and Google Analytics. Privacy and cookie compliance are well addressed with visible policies and consent mechanisms. However, the absence of WHOIS data and lack of explicit security and incident response policies slightly reduce trustworthiness. Overall, the platform appears mature and reliable for its target audience.

S

Schweizerische Pfadistiftung

pfadistiftung.ch

48

The Schweizerische Pfadistiftung is a Swiss non-profit foundation with over 40 years of history dedicated to supporting scouting projects and securing campgrounds for scouting activities. The website clearly communicates its mission and services, targeting scouting groups and donors within Switzerland. The organization maintains a professional online presence with consistent branding and good content quality. Technically, the site is built on WordPress using modern plugins such as Elementor and Yoast SEO, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although security headers and incident response information are lacking. Privacy compliance is a notable gap due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned within its niche, but should improve compliance and security transparency.

F

Fastenaktion

fastenopfer.ch

56

Fastenaktion is a Swiss non-profit organization dedicated to ending hunger and poverty through long-term development projects in Africa, Asia, and Latin America. The organization positions itself as a trusted and transparent entity with a strong focus on donor engagement and impact. Their website reflects a mature digital presence with multilingual support and comprehensive content about their mission and activities. Technically, the site is built on WordPress with WooCommerce integration for donations, enhanced by modern plugins for SEO, maps, and cookie consent management. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good compliance with GDPR and provides clear contact and trust signals including ZEWO certification. The risk profile is low with no detected vulnerabilities or suspicious indicators.

K

Kandersteg International Scout Centre

kisc.ch

56

Kandersteg International Scout Centre (KISC) operates as the World Centre of the World Organisation of the Scout Movement (WOSM), providing accommodation, adventure programs, and volunteering opportunities primarily for scouts and youth organizations globally. The website reflects a well-established non-profit entity with a clear mission to support scouting activities and community engagement. The site is professionally designed with consistent branding and clear navigation, targeting a global scouting audience. Technically, the site is built on Drupal 7 with a range of JavaScript libraries enhancing user experience and interactivity. Mobile optimization and SEO practices are adequately implemented, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks visible security headers and published security policies. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is trustworthy, functional, and compliant with privacy regulations.

G

GPTCA AG

gptcatennis.org

58

The Global Professional Tennis Coach Association (GPTCA) is a Switzerland-based organization founded in 2012, dedicated to educating and supporting professional tennis coaches aiming to work at ATP Tour and women's pro tennis levels. The website serves as a global hub offering membership, educational courses, events, and resources tailored to tennis coaching professionals. It maintains partnerships with recognized entities such as ATP, ITIA, and Golden Set Analytics, enhancing its credibility and market position. Technically, the website employs a modern tech stack including Google Analytics, Google Tag Manager, Alpine.js, Swiper.js, and AOS for animations, hosted likely on home.pl infrastructure. The site is mobile-optimized with good SEO practices and a consistent branding approach. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and visible security headers. There are no privacy or cookie policies published, representing compliance gaps. No incident response or vulnerability disclosure information is provided. The domain WHOIS data is consistent and legitimate, supporting trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and incident response transparency to improve its security posture and regulatory adherence.

T

The Salvation Army Switzerland

salvationarmy.ch

53

The Salvation Army Switzerland operates as a reputable non-profit organization focused on international development and humanitarian aid. Their website demonstrates a clear mission to provide holistic help for self-help to people in need worldwide, supported by government funding and certifications such as ZEWO. The site is well-structured, multilingual, and includes donation mechanisms to support their projects. Technically, the website is built on WordPress with modern tools like Google Tag Manager and Cookiebot for analytics and privacy compliance. Security measures include HTTPS and reCAPTCHA on forms, though some security headers could be improved. Overall, the organization presents a trustworthy and professional digital presence aligned with its humanitarian mission.

Z

Zalando SE

zalando.ch

52

Zalando.ch is a leading Swiss e-commerce platform specializing in fashion, shoes, and accessories for women, men, and children. It operates as part of the larger Zalando SE group, a major European online fashion retailer. The website offers a broad assortment of products with a focus on user experience, fast and free shipping, and easy returns. The platform targets general consumers in the German-speaking market, providing a comprehensive and professional shopping experience.

K

Kloster Leiden Christi

klosterleidenchristi.ch

42

Kloster Leiden Christi is a small, non-profit religious institution located in Jakobsbad, Switzerland, operating a Kapuzinerinnenkloster with a long tradition. The website serves to inform visitors about religious services, community events, and the Klosterladen retail shop offering handmade and natural products. The target audience includes local community members, religious visitors, and women interested in religious life. The business model combines spiritual services with retail sales, supported by an online presence and event announcements. Technically, the site is built on WordPress with common plugins and uses HTTPS, but lacks some advanced security headers and privacy compliance features. Security posture is moderate with room for improvement in headers and policies. Overall, the website is professional, trustworthy, and content-rich but should enhance privacy and security compliance to meet modern standards.

A

Azione Quaresimale

azionequaresimale.ch

52

Azione Quaresimale is a Swiss non-profit organization dedicated to fighting hunger and poverty worldwide through long-term development projects primarily in Africa, Asia, and Latin America. The website serves as a comprehensive platform for information dissemination, fundraising, and donor engagement, featuring multilingual support and detailed project descriptions. The organization holds recognized certifications such as Zewo, enhancing its credibility and trustworthiness. Technically, the website is built on a modern WordPress CMS with WooCommerce for donation processing, multilingual capabilities via WPML, and advanced SEO optimization through Yoast SEO Premium. It integrates Google Maps for project visualization and employs Google Tag Manager and Facebook Pixel for analytics and marketing. The site demonstrates good mobile optimization, accessibility, and performance. From a security perspective, the site enforces HTTPS, uses reCAPTCHA for form protection, and avoids exposing sensitive data. While some security headers are not explicitly detected, the overall posture is strong with recommendations to enhance header implementation and incident response visibility. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Overall, the website presents a professional, trustworthy, and secure digital presence for Azione Quaresimale, supporting its mission effectively while maintaining compliance and user trust.

A

Aiuto alla Chiesa che Soffre (ACN)

aiuto-chiesa-che-soffre.ch

61

Aiuto alla Chiesa che Soffre (ACN) is a Swiss-based non-profit organization dedicated to providing aid to persecuted and impoverished Christians worldwide. The website serves as an informational and donation platform targeting supporters and donors interested in humanitarian and religious aid. The organization appears established with a consistent brand and a clear mission focused on Christian humanitarian support. Technically, the website is built using modern frameworks such as Next.js and React, hosted on a reputable Swiss hosting provider. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enabled and no obvious vulnerabilities, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

I

Interaction

interaction-suisse.ch

46

Interaction is a Swiss non-profit umbrella association for Christian development organizations. It coordinates programs, supports projects, and fosters learning and advocacy among its members. The website is professionally designed using WordPress and Elementor, with good mobile optimization and clear navigation. Social media presence on Facebook and LinkedIn supports community engagement. Technically, the site uses modern plugins and enforces HTTPS, but lacks some security headers and privacy compliance features such as a privacy policy and cookie consent. No direct company contact emails or phone numbers are publicly visible, but contact forms and social media channels are available. Overall, the site reflects a credible and established organization with room for improvement in privacy and security practices.

C

Culligan Suisse

culligan.ch

60

Culligan Suisse operates a professional website focused on water treatment solutions including water softeners, water fountains, and purifiers targeting both private individuals and businesses in Switzerland. The company positions itself as a global leader in water treatment with a long-standing presence since 1979. The website is well designed, mobile optimized, and uses modern web technologies such as WordPress CMS, jQuery, Bootstrap, and Google Tag Manager. Cookie consent mechanisms and trust widgets are implemented to enhance user trust and comply with privacy expectations. However, explicit privacy policies, terms of service, and security policies are not found in the provided content, which represents a compliance gap. Security posture is generally good with HTTPS enabled but lacks explicit security headers and incident response information. Overall, the website is trustworthy and professional but could improve transparency and security documentation.

C

Conferenza dei vescovi svizzeri

ivescovi.ch

43

The website www.ivescovi.ch serves as the official online presence of the Swiss Bishops' Conference, a key religious and governmental entity representing the Catholic Church in Switzerland. It provides comprehensive information about the bishops, church history, committees, official documents, and news updates relevant to the Catholic community and the general public interested in religious affairs. The site targets primarily Italian-speaking users but offers links to German and French versions, reflecting Switzerland's multilingual context. The business model is non-profit, focusing on communication and information dissemination within the religious sector. Technically, the website is built on WordPress 6.6.2 with a Bootstrap-based theme, leveraging modern JavaScript libraries such as jQuery and Slick Carousel. It integrates Google Analytics via Google Site Kit for visitor tracking. The site demonstrates good mobile optimization and a professional design, though some accessibility features are basic. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site enforces HTTPS with an excellent SSL configuration but lacks explicit HTTP security headers such as CSP or HSTS. No vulnerability disclosure or incident response policies are published, and cookie consent mechanisms are absent, which may affect GDPR compliance. Contact information is clearly provided, enhancing trust and credibility. Overall, the security posture is adequate but could be improved with additional headers and privacy compliance measures. The overall risk assessment indicates a well-maintained and trustworthy website with minor gaps in privacy compliance and security best practices. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing security policies, and improving accessibility to strengthen the site's security and compliance posture.

K

Kloster Leiden Christi

kapuzinerinnenkloster.ch

10

Der Klosterladen is a small Swiss-based e-commerce and physical retail business operated by Kloster Leiden Christi, specializing in natural health products, cosmetics, and religious devotional items. The website is well-structured, primarily in German, and targets customers interested in traditional monastic remedies and religious goods. The business model combines online sales with a physical store, offering a niche market presence. Technically, the site uses the PepperShop platform with modern libraries such as jQuery and Bootstrap, delivering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and incident response policies are missing. Overall, the site is trustworthy, compliant with GDPR, and free from adult or questionable content.

XXXLutz is a leading furniture retailer operating in Switzerland with a strong online presence through the website www.xxxlutz.ch. The company offers a wide range of furniture, lighting, and home accessories, targeting general consumers seeking quality home products. The website is professionally designed, mobile optimized, and provides a good user experience with clear navigation and relevant content. Technically, the site leverages modern web technologies including React and Dynatrace for performance monitoring, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though explicit security headers and privacy policies are missing or not detected in the provided content. The absence of visible privacy and cookie policies suggests a gap in compliance with GDPR and related regulations. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

H

Heilsarmee Schweiz

heilsarmee.ch

52

Heilsarmee Schweiz is a Swiss Christian non-profit organization dedicated to social welfare and church services, focusing on alleviating human suffering. The website reflects a well-established entity with consistent branding and a clear mission. The technical infrastructure is based on WordPress CMS, utilizing modern tools such as Gravity Forms, Cookiebot for cookie consent, and Google Tag Manager for analytics. The site is mobile-optimized and employs standard SEO and accessibility practices. Security posture is solid with HTTPS enforcement, security headers, and bot protection via reCAPTCHA, though formal security and incident response policies are not publicly documented. Overall, the website is trustworthy and professionally maintained, with moderate tracking and good privacy compliance.

A

AFDRIPE

creches-ensemble.ch

53

The website 'Ensemble pour l'avenir' is a French-language platform dedicated to promoting an event on November 18, 2025, aimed at showcasing the daily operations and socio-economic importance of childcare centers in the canton of Fribourg, Switzerland. It targets childcare providers, political authorities, employers, and other stakeholders in early childhood education. The site provides detailed information about the event, including program schedules, registration forms, and contact details, positioning itself as a regional advocacy and informational resource. Technically, the website is built on WordPress 6.8.3, utilizing modern libraries such as Leaflet.js for interactive maps and Ultimate Addons for Gutenberg for form handling. The site is mobile-optimized with good navigation and content quality. Security practices include HTTPS enforcement and anti-spam measures, though it lacks advanced security headers and explicit incident response or vulnerability disclosure policies. From a security perspective, the site maintains a moderate security posture with no critical vulnerabilities detected. Privacy compliance is addressed through a privacy policy and cookie consent banner, aligning with GDPR requirements. Contact information is clearly presented, enhancing business credibility. No advertising or tracking beyond form submissions is present, indicating a privacy-conscious approach. Overall, the website is a trustworthy, well-structured informational platform with a clear business purpose in the non-profit and government sectors. Strategic recommendations include enhancing security headers, formalizing incident response policies, and improving accessibility features to further strengthen the site's security and compliance posture.

M

mégaphone-internet sàrl

megaphone-internet.ch

46

mégaphone-internet sàrl is a Swiss-based small technology company specializing in web creation and hosting services since 1995. The company targets associations and businesses in Switzerland seeking tailored digital solutions including website creation, e-commerce, content management, hosting, and email marketing. Their market position is that of a local artisan web service provider with a long-standing presence and a professional online presence. Technically, the website uses a modern but minimal tech stack including jQuery, Slick Carousel, and lazy loading with Lozad.js, delivering a good user experience with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is strong given the clear company information, physical address, and professional content. Overall, the website is safe, professional, and trustworthy but could improve in privacy compliance and security best practices.

M

Maison Béthel / Fondation Praz-Soleil

maison-bethel.ch

52

Maison Béthel is a Swiss non-profit healthcare establishment specializing in transitional psychiatric care for adults aged 18 to 65. It operates under the Fondation Praz-Soleil umbrella and is recognized as a public interest institution within the canton of Vaud's psychiatric network. The website presents clear information about its mission, services, and contact details, targeting patients, families, and healthcare professionals. Technically, the site uses standard web technologies including HTML5, CSS3, and jQuery, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although formal security policies and incident response information are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, with room for improvement in security transparency and accessibility.

S

Stiftung Pfadiheime Schweiz

heimv.ch

64

HeimV is a specialized reservation and management software designed for Swiss scout homes and group houses, offering a comprehensive suite of features from booking validations to payment management. The platform is supported by the Stiftung Pfadiheime Schweiz, which also subsidizes its operation, positioning HeimV as a trusted solution within its niche market. The business model includes hosted SaaS offerings and a self-hosted open source option for internal use, with commercial licensing for providers. Technically, the website is built using the Astro framework, optimized for performance and mobile responsiveness, with Swiss-based hosting ensuring data sovereignty. Security posture is strong with HTTPS and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, HeimV presents a professional, trustworthy, and well-maintained digital presence aligned with its business goals.

S

Stiftung Pfadiheime Schweiz

stiftung-pfadiheime.ch

51

Stiftung Pfadiheime Schweiz is a Swiss non-profit foundation established in 1919 dedicated to supporting the establishment and maintenance of scout homes and campgrounds across Switzerland. It owns multiple properties and operates several scout homes, serving as a central organization for the Swiss scouting community. The foundation also provides a booking platform for scout homes and collaborates with the Swiss Scout Foundation for financing projects. The website is built on WordPress using modern themes and plugins, offering a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a trustworthy and professional organization with a strong market position in the non-profit scouting sector in Switzerland.

R

Réseau évangélique suisse

evangelique.ch

52

The Réseau évangélique suisse is a Swiss non-profit organization that serves as a network for evangelical churches, unions, and works across Switzerland. It provides coordination, publications, and project management to support its members and promote evangelical interests nationally. The website is professionally designed using WordPress and Elementor, with a moderate technical infrastructure including Google Maps integration and Piwik analytics. Security posture is solid with HTTPS and security headers, though there is room for improvement in privacy compliance and explicit security policies. Overall, the site is trustworthy and well-positioned within its niche community.

O

One’

one-event.ch

51

One’ is a non-profit Christian event organizer based in Switzerland, focusing on uniting the Christian community in the French-speaking region through a large annual event. The website provides detailed information about the event scheduled for November 15, 2025, including speakers, program, ticketing, and partner organizations. The technical infrastructure is built on WordPress with Elementor and uses reputable third-party services for ticketing and analytics. Security posture is good with HTTPS and security headers, but lacks published privacy and cookie policies, which impacts compliance. Overall, the site is professional and trustworthy but should improve privacy compliance and incident response transparency.

Fondation Praz-Soleil is a Swiss non-profit foundation established in 1984, providing medical psychosocial services including an EPSM, supervised apartments, and home care in the Vaud region. The organization collaborates with regional health authorities and is engaged in modernization projects to enhance its service offerings. The website is professionally designed with clear navigation and provides comprehensive contact information and compliance with GDPR through a cookie consent mechanism and a privacy policy document. Technically, the site uses basic but functional technologies including HTML5, CSS, and jQuery, with room for modernization and improved security headers. Security posture is moderate with no critical vulnerabilities detected, but lacks published security policies or incident response contacts. Overall, the website is trustworthy, safe, and well-aligned with the foundation's mission and audience.

A

Association du Scoutisme Jurassien (ASJ)

asj.ch

59

The Association du Scoutisme Jurassien (ASJ) operates as a regional non-profit scouting organization in Switzerland, serving the Jura and Jura-bernois regions. It coordinates local scout groups, organizes training and events, and promotes youth development through scouting principles. The website reflects a well-structured association with clear organizational teams and committees, supported by regional government funding. Technically, the site is built on Joomla CMS with modern libraries like Bootstrap and jQuery, offering a good user experience and mobile optimization. Security is adequate with HTTPS and CSRF protections, though it lacks some security headers and formal privacy/cookie policies, which are compliance gaps. No tracking or analytics scripts were detected, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy, but could improve privacy compliance and security hardening.

Service de Missions et d'Entraide (SME) is a Swiss non-profit organization dedicated to providing education and professional training to underprivileged populations. Established in 2007, SME operates primarily in the education sector, focusing on basic education, professional training, and professional development. The organization relies on donations and volunteer support to fund its projects and has a strong presence in Switzerland with multilingual website support in French and German. SME maintains a reputable position in its niche with certifications such as ZEWO and active social media engagement.

M

Ministock.ch

ministock.ch

48

Ministock.ch is a small non-profit website providing evangelical Christian educational resources primarily for children, families, and church ministries in the French-speaking region of Switzerland. The site offers a variety of content including illustrated Bible verses, videos, lesson programs, and links to partner organizations. It is affiliated with La FREE - Fédération romande d'Eglises évangéliques, reinforcing its niche position within the evangelical community. The website was founded around 2016 and maintains consistent branding and content quality suitable for its target audience. Technically, the site is built on Joomla CMS with the K2 extension and uses common web technologies such as jQuery, Magnific Popup, and Google reCAPTCHA for form security. It integrates social media sharing and newsletter subscription via AcyMailing. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. From a security perspective, the site uses HTTPS and employs reCAPTCHA to protect forms, but lacks explicit security headers which could improve its security posture. No privacy or cookie policies were found, indicating compliance gaps with GDPR and other privacy regulations. Contact information is limited to a newsletter subscription form without direct emails or phone numbers. Overall, Ministock.ch presents a trustworthy and professional resource platform for its community but should enhance privacy compliance and security headers to improve user trust and regulatory adherence.

L

lafree.ch - Site évangélique d'information

eglisesfree.ch

50

The website eglisesfree.ch serves as the official online presence for the Fédération romande d'Églises évangéliques (FREE), a non-profit federation of evangelical churches in French-speaking Switzerland. It provides news, event information, resources, and community support tailored to evangelical communities. The site is well-structured, content-rich, and targets a specific religious audience with relevant services such as podcasts, theological commissions, and youth programs. The business model is non-profit and community-focused, with partnerships to support its mission. Technically, the site is built on Joomla CMS using the Helix3 framework, integrating common web technologies like jQuery, Google Analytics, and YouTube embeds. The site is mobile-optimized and performs moderately well, with good SEO practices. However, it lacks some advanced accessibility features and security headers that could enhance its robustness. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No vulnerability disclosure or security.txt files are present, and security headers are missing, indicating room for improvement in security posture. The WHOIS data aligns well with the website's identity, supporting legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

L

lafree.ch - Site évangélique d'information

myfreelife.ch

50

Myfreelife.ch is a French-language evangelical Christian news and community website operated under the Fédération romande d’Églises évangéliques (FREE), targeting the Suisse romande evangelical community. The site provides news, portraits, spiritual reflections, and societal articles relevant to its audience. It maintains a consistent brand identity aligned with the federation and integrates social media channels for broader engagement. Technically, the site is built on Joomla CMS with the Helix3 template framework and uses common web technologies such as jQuery and Bootstrap. Google Analytics and Tag Manager are employed for user tracking. Security posture is adequate with HTTPS enabled and CSRF protections in forms, but lacks security headers and explicit privacy or cookie policies. Contact information and incident response details are not directly visible, which may impact user trust and compliance. Overall, the site is professionally presented, content-rich, and trustworthy within its niche, but could improve privacy compliance and security best practices.

C

CCEJ

cckj.ch

48

The website cckj.ch represents a small non-profit organization focused on promoting a charter for Christian children and youth work in Switzerland. The site provides information about the charter, encourages signatories, and targets Christian youth organizations and stakeholders. The business model is centered on advocacy and community engagement within a niche religious and youth sector. Technically, the website is built on WordPress using common plugins such as WPML for multilingual support and Contact Form 7 for user interaction. The site employs Google Analytics and Tag Manager for user tracking, indicating moderate digital maturity. Security posture is basic with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy PDF available but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is functional and professional but could improve in security and privacy compliance to enhance trust and regulatory adherence.

S

Scoutisme Neuchâtelois

scoutne.ch

45

Scoutisme Neuchâtelois is a regional non-profit youth organization based in the canton of Neuchâtel, Switzerland, focused on providing scouting activities, outdoor adventures, and community engagement for young people starting from age 5. The website serves as an informational and engagement platform for local scouting groups, offering details about activities, groups, and contact options. The organization positions itself as a trusted community resource promoting friendship, nature, and adventure.

Pfadiheime.ch is a specialized non-profit platform operated by Stiftung Pfadiheime Schweiz, serving as the primary directory and booking platform for scout homes across Switzerland. With over 25 years of history, it provides comprehensive search and booking functionalities tailored to scout groups and home administrators. The platform also promotes HeimV, a home management software, enhancing operational efficiency for home administrators. The website is well-structured, mobile-optimized, and offers clear navigation, targeting a niche audience effectively. Technically, the site leverages modern web technologies including HTML5, CSS3, JavaScript with jQuery, and likely a Ruby on Rails backend. The presence of CSRF tokens indicates attention to form security, though there is room for improvement in security headers and privacy compliance mechanisms. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS and includes CSRF protection but lacks visible security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Contact information is limited to a general info email, with no phone or physical address provided. Overall, the platform presents a trustworthy and professional service with a strong business credibility score. Strategic improvements in privacy compliance, security headers, and incident response documentation would enhance its security posture and regulatory adherence.

A

Association du Scoutisme Vaudois

asvd.ch

49

Association du Scoutisme Vaudois (ASVd) is a well-established non-profit organization dedicated to promoting scouting activities for youth aged 5 to 16 in the Vaud region of Switzerland. It is part of the largest youth movement in Switzerland, serving thousands of scouts locally. The website provides comprehensive information about scouting, the association's structure, history, and facilities, targeting families and youth interested in scouting. Technically, the site is built on WordPress with common plugins such as Contact Form 7 and Jetpack, and uses modern JavaScript libraries like Leaflet for maps. The site is mobile-optimized and has good SEO practices but lacks visible privacy and cookie policies, which is a compliance gap. Security posture is generally good with HTTPS enforced, but security headers are missing and no vulnerability disclosure or incident response information is provided. Overall, the domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness.