Switzerland security reports

S

SFS Group

sfs.com

71

SFS Group is a globally recognized supplier specializing in application-critical precision components, mechanical fastening systems, quality tools, and procurement solutions. The company targets industrial and manufacturing sectors, providing mission-critical products embedded in customer processes. Their market position is strong, with a worldwide footprint and a large operational scale. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored for B2B audiences. Technically, the site employs modern JavaScript libraries, Google Tag Manager for analytics, and Cookiebot for privacy compliance, indicating a commitment to data protection and user consent. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though explicit security headers could be improved. The absence of WHOIS data limits domain registration trust verification, but the overall site professionalism and active social media presence support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

R

Radio Munot Club

radiomunotclub.ch

32

Radio Munot Club is a non-profit organization supporting the local radio station Radio Munot in Schaffhausen, Switzerland. The club finances investments and supports the training of the radio team, fostering local media presence. The website is well-structured, professionally designed, and provides relevant content for its target audience of members and supporters. Technically, it is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and security headers, but lacks explicit security policies and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible, reflecting a legitimate local media support organization.

O

Ombud-PostCom

ombud-postcom.ch

64

Ombud-PostCom is a neutral arbitration service operating under the Swiss Federal Post Commission (PostCom) to resolve civil disputes related to postal services in Switzerland. The website serves as an official platform providing information, dispute submission forms, and annual reports in multiple languages (German, French, Italian, English), targeting both private and business customers within Switzerland. The business model is non-profit and government-affiliated, focusing on avoiding costly and lengthy court proceedings through mediation.

Contenthub is a specialized platform serving the Jubla scout community by providing content elements, blogs, and detailed instructions to assist in website management and migration. The platform targets scout group administrators and offers a niche service focused on content reuse and website support. Technically, the website is built on Neos CMS with modern web technologies, hosted likely behind Cloudflare, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Sven Röhler

roehler.ch

26

The website roehler.ch serves as a personal and professional wiki and documentation platform managed by Sven Röhler, focusing on IT solutions and services primarily for small and medium enterprises (KMU) and private users in Switzerland. The site provides extensive technical content, guides, and links related to Linux, Windows, programming, and IT infrastructure. The market position is niche and local, with a focus on knowledge sharing and IT consultancy. Technically, the site is built on CMSimple 5.12 with standard web technologies including HTML5, CSS3, JavaScript, and jQuery. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic, with no HTTPS enforcement or security headers detected, and no published privacy or cookie policies, which are critical gaps. No contact information or incident response channels are provided, limiting user trust and compliance. Overall, the site is functional and content-rich but requires significant improvements in security, privacy compliance, and professional contact transparency to enhance trust and compliance.

L

Lichtblick Römisch-katholisches Pfarrblatt Nordwestschweiz

lichtblick-nw.ch

52

Lichtblick Römisch-katholisches Pfarrblatt Nordwestschweiz is a regional non-profit publication serving the Catholic parishes in the Swiss cantons of Aargau, Basel, and Solothurn. The website provides parish news, event agendas, job listings, and multimedia content such as videos and podcasts. It targets the Catholic community and interested readers in the region, positioning itself as a trusted source of religious and community information. The business model focuses on information dissemination and community engagement rather than commercial profit. Technically, the website is built on WordPress 6.8.3 with modern web technologies including jQuery, Google Tag Manager, and reCAPTCHA for form security. The site is mobile-optimized with good SEO practices and uses structured data (JSON-LD) for enhanced search engine understanding. Performance is moderate with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Email addresses are obfuscated to reduce spam. However, some security headers are not explicitly detected and could be implemented to strengthen security posture. No critical vulnerabilities or exposed sensitive data were found. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations. It provides clear contact information and maintains a consistent brand presence. The risk level is low, with recommendations focusing on enhancing security headers and ongoing maintenance to ensure continued compliance and security.

A

Aliena

aliena.ch

49

Aliena is a Basel-based non-profit organization dedicated to supporting women involved in the sex industry, including those currently active, former workers, and those seeking professional reorientation. The organization focuses on improving living and working conditions, advocating for rights, and combating social exclusion and stigmatization. Their services include information dissemination, language courses, meeting points, and comprehensive support for integration and personal challenges. The website is multilingual, professionally designed, and provides clear contact information, reflecting a focused social service mission. Technically, the website is built on WordPress with several plugins enhancing functionality such as multilingual support (WPML), email obfuscation, and interactive sliders. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Security-wise, HTTPS is properly implemented, and email addresses are protected against scraping. However, the absence of security headers and cookie consent mechanisms indicates room for improvement in security posture and privacy compliance. Overall, the security posture is adequate for the organization's scope but lacks formal policies and incident response details. The domain uses privacy protection, which is justified given the sensitive nature of the services. No adult explicit content is present, making the site safe for general audiences. Strategic recommendations include implementing security headers, publishing comprehensive privacy and cookie policies, and adding incident response contacts to enhance trust and compliance.

The website familiennamenbuch.ch is an academic and historical resource operated by the Stiftung Historisches Lexikon der Schweiz (HLS). It provides a searchable online database of Swiss family names and citizenship data from 1962, serving genealogists, historians, and researchers interested in Swiss heritage. The site is positioned as a trusted, authoritative reference with a non-commercial, educational mission. Technically, the site uses standard HTML, CSS, and JavaScript with Matomo analytics for visitor tracking. The design is basic but functional, with multilingual support and clear navigation. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is published. Overall, the site is safe, trustworthy, and well-aligned with its academic purpose, though improvements in privacy compliance and security best practices are recommended.

The website at https://hls-dhs-dss.ch/ghh/ currently serves as a maintenance placeholder page for an XWiki service managed by an administrator named 'Skol'. The content is minimal, indicating temporary unavailability with a promise of improved performance upon return. There is no active business description, contact information, or policies presented on the site. The domain is Swiss (.ch), consistent with the French and English bilingual maintenance message, but uses privacy protection in WHOIS data limiting transparency. Technically, the site is very basic, consisting of static HTML and CSS with no advanced scripts or external resources detected. The CMS is identified as XWiki from the administrator's message. No security headers or SSL details are available from the provided data, and no forms or data collection mechanisms are present. The site lacks SEO optimization and accessibility features. From a security perspective, the absence of HTTPS information and security headers is a concern. No privacy or cookie policies are found, indicating non-compliance with GDPR and related regulations. No incident response or vulnerability disclosure information is available. The domain's privacy protection is common for small or administrative sites but reduces trustworthiness. No suspicious or malicious indicators are detected. Overall, the website is currently non-functional for end users and provides minimal information. The risk is moderate due to lack of security and compliance features, but no active threats or adult content are present. Strategic improvements should focus on enabling HTTPS, publishing privacy and cookie policies, adding contact and incident response information, and enhancing content quality and professionalism.

The website e-lir.ch serves as an online historical lexicon focused on the Romansh-speaking region and the history of Graubünden, Switzerland. It provides access to approximately 3200 articles including biographies, geographic, thematic, and family history entries. The project is editorially completed as of 2012 and is linked to the official Swiss historical lexicon project (HLS/DHS). The target audience includes researchers, historians, and cultural enthusiasts interested in regional history and languages. The business model is non-commercial, likely supported by cultural or governmental institutions. Technically, the website is built with basic HTML, CSS, and JavaScript without modern CMS or frameworks. The site shows moderate performance but lacks mobile optimization and advanced accessibility features. SEO is basic with meta tags present but no structured data or Open Graph tags detected. No analytics or tracking technologies are used, indicating a privacy-respecting approach. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation in the content. Forms have basic JavaScript validation but no advanced security measures like CSRF tokens. No privacy or cookie policies are present, which is a compliance gap. Contact information is clearly provided, enhancing trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a trustworthy, niche cultural resource with good business credibility but basic technical and security implementations. Strategic improvements in security headers, HTTPS verification, and privacy compliance would enhance its posture and user trust.

P

PubliReno GmbH

publireno.ch

48

PubliReno GmbH is a small Swiss company specializing in the retail of regional books and publications primarily from the canton of Graubünden. Their online presence is a WordPress-based e-commerce platform using WooCommerce and Elementor, offering a catalog of over 500 titles from various local publishers. The website is professionally designed with good navigation and mobile optimization, targeting readers interested in regional literature. Technically, the site uses modern web technologies but lacks some advanced security headers and GDPR cookie consent mechanisms. Security posture is adequate with HTTPS and reCAPTCHA integration but could be improved by publishing security policies and enhancing privacy compliance. Overall, the business appears legitimate with consistent WHOIS data and clear contact information, though privacy and security policies should be enhanced to meet higher compliance standards.

S

Schwabe

schwabe.ch

61

Schwabe is an established Swiss academic publisher specializing in humanities and social sciences, offering a broad range of scholarly books, e-books, journals, and databases. The website targets academics, researchers, libraries, and authors, providing a professional platform for content discovery and purchase. The business model centers on publishing and distributing academic content with a focus on quality and scholarly relevance. The company maintains a consistent brand presence and good content quality, positioning itself as a reputable player in its niche market. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and Algolia Search integrated within a Shopware CMS platform. The site is mobile-optimized with good SEO and basic accessibility features. Performance is moderate, with room for improvement in accessibility and loading speed. Privacy considerations are evident through cookie consent mechanisms and IP anonymization in analytics. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting a good security posture. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. No critical vulnerabilities or exposed sensitive data were detected. Overall, Schwabe's website is professional, secure, and compliant with GDPR principles, though it could benefit from publishing more comprehensive security and legal policies. The risk level is low, with strategic recommendations focusing on improving transparency and accessibility to further strengthen user trust and regulatory compliance.

Lumeum Verein Bethanien operates a cultural and spiritual venue in St. Niklausen, Switzerland, offering an immersive 360° film experience centered on the historical figures Niklaus von Flüe and Dorothee Wyss. The organization targets visitors interested in culture, spirituality, and history, providing ticketing, visitor information, and group visit services. The website is professionally designed, consistent in branding, and provides clear contact details and social media presence, positioning it as a trustworthy small non-profit entity in the hospitality and media sectors. Technically, the website is built on the Contao CMS platform and employs modern JavaScript libraries such as jQuery, Handorgel, and Swipe.js. It integrates third-party booking and tracking services from Smeetz and Google Analytics. The site is mobile-optimized with moderate performance and basic accessibility and SEO features. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and visible security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, but incident response and vulnerability disclosure information are absent. Overall, the website is safe, family-friendly, and professionally maintained with a good security posture but could improve privacy compliance and security transparency. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

K

Kloster Werthenstein

kloster-werthenstein.ch

46

Kloster Werthenstein is a Swiss cultural and spiritual site offering visitors a place to experience tradition, history, and spirituality. The website serves as an informational platform highlighting the monastery's history, events, pilgrimage services, and natural surroundings. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and tracking tools such as Google Analytics, Facebook Pixel, and Pinterest Tag. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and professionally presented but would benefit from enhanced privacy and security disclosures.

K

Kirchgemeinde Thomas

thomaskirche.ch

46

Thomaskirche is a small, non-profit religious community based in Basel-Stadt, Switzerland, affiliated with the Evangelisch-reformierte Landeskirche Basel-Stadt. The website serves as an information hub for community events, religious services, youth programs, and social engagement projects. It targets local community members and churchgoers, providing schedules, contact information, and event details. Technically, the site is built on WordPress using the Divi theme, with standard web technologies such as FontAwesome and Google Fonts. The site is moderately performant, mobile-optimized, and SEO-friendly, with good content quality and clear navigation. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is trustworthy and professionally maintained but could improve in privacy and security transparency.

K

Kulturbüro Riehen

eigenundartig.ch

69

Riehen Events is a municipal cultural event platform operated by the Kulturbüro Riehen, providing comprehensive information about local cultural events, exhibitions, and community activities in Riehen, Switzerland. The website serves residents and visitors by offering event calendars, venue information, permit guidance, and cultural funding details. It supports event organizers with tools to submit events and promotes local culture effectively. Technically, the site is built on Drupal 10 with modern JavaScript libraries such as Alpine.js and Splide.js, ensuring a responsive and accessible user experience. The use of Matomo analytics with a cookie consent mechanism demonstrates a commitment to privacy and GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-aligned with its municipal purpose.

A

ALSO Holding AG

also.com

74

ALSO Holding AG operates as a leading technology provider specializing in comprehensive IT solutions for SMB resellers, offering a broad portfolio including webshop services, cloud marketplace, AI, IoT, cybersecurity, and value-added services. The company targets IT partners and resellers, positioning itself as a central ecosystem player in the ICT industry with enterprise scale and a strong presence in Switzerland. The website reflects a mature digital infrastructure utilizing modern JavaScript libraries, consent management, and analytics tools, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is solid with HTTPS enforcement and consent mechanisms, though lacks explicit published security policies and incident response contacts. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position effectively.

A

Arosa Tourismus Genossenschaft

arosalenzerheide.swiss

61

Arosa Tourismus Genossenschaft operates the website arosalenzerheide.swiss, promoting the Arosa and Lenzerheide ski areas in Switzerland. The site targets tourists and winter sports enthusiasts, offering information about regional activities and attractions. The business is positioned as a regional tourism leader in Graubünden, Switzerland, with a medium-sized cooperative structure founded in 2015. Technically, the website employs modern frontend technologies such as Bootstrap 4, jQuery UI, and Cookiebot for cookie consent management. The site is served over HTTPS with a valid SSL certificate, but lacks some security headers and explicit privacy and terms of service documents. Security posture is moderate with room for improvement in headers and incident response contact information. Overall, the website is professional and trustworthy, but could enhance privacy compliance and security transparency to improve user trust and regulatory adherence.

Claire & George's website is minimalistic and currently serves primarily as a frontend shell with a loading spinner and no visible business content or contact information. The site uses modern web technologies, likely Angular, and integrates Google Analytics and Google Maps APIs, indicating some level of digital maturity. However, the lack of visible content, privacy policies, and contact details limits its effectiveness and trustworthiness. Security posture is weak due to missing security headers and no visible incident response or data protection information. Overall, the site presents a low-risk profile but also low transparency and professionalism, suggesting it may be under development or poorly maintained.

G

Ginto

sitios.info

50

Ginto is a Swiss non-profit organization providing a comprehensive platform for information about the accessibility of locations across Switzerland. The website offers tools such as a web map and a mobile app to find, record, and share accessibility data. The platform targets individuals seeking accessibility information and those willing to contribute data, positioning itself as a leading resource in this niche. Technically, the website is built on Webflow with modern JavaScript libraries and integrates Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and accessible, with multilingual support in German, French, and English. Security-wise, the site uses HTTPS and secure forms but lacks explicit security headers and published security policies, which could be improved. WHOIS data is unavailable due to privacy or query failure, which slightly impacts trust but is understandable for a privacy-conscious non-profit. Overall, the site is professional, functional, and trustworthy with room for enhanced security and privacy transparency.

T

TCR Store

tcrstore.com

60

TCR Store is a newly launched e-commerce website specializing in official racing merchandise, apparel, and collectibles related to TCR racing. The site targets racing enthusiasts and fans looking to purchase premium branded merchandise. The business operates on the Squarespace platform, leveraging its hosting and content management capabilities. The website demonstrates good design quality, mobile optimization, and clear navigation, providing a professional shopping experience. However, it lacks critical compliance documents such as privacy and cookie policies, and does not provide explicit contact information, which may impact user trust and regulatory compliance. Security posture is adequate with HTTPS and HSTS enabled, but DNSSEC is not configured, and additional security headers are missing. Overall, the site is functional and trustworthy for e-commerce but requires improvements in privacy compliance and security best practices.

W

Wingflow AG

wingflow.com

62

Wingflow AG is a specialized technology company focused on providing customized high performance microfluidic systems. Established in 2012 and based in Switzerland, the company targets businesses and researchers requiring advanced microfluidic solutions. The website reflects a professional and consistent brand presence with clear descriptions of their core offerings. Technically, the site is built on WordPress using Elementor and optimized with Rank Math SEO, indicating a moderate level of digital maturity. Analytics are implemented via Yandex Metrika, but no Google Analytics or other major trackers are present. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Privacy and cookie policies are absent, which is a compliance gap. Overall, the website is functional and professional but would benefit from enhanced security and privacy disclosures.

Z

Z-AG Engineering

z-ag.ch

71

Z-AG Engineering, represented by Oeschgen AG, specializes in thermal process engineering with a focus on steam systems including planning, construction, and service of steam plants and boilers. The company targets industrial clients requiring expert solutions in energy and steam generation. The website is professionally designed, multilingual, and employs modern web technologies such as service workers and cookie consent mechanisms, reflecting a moderate to advanced digital maturity. Security posture is strong with HTTPS, security headers, and privacy compliance via Cookiebot. However, the absence of explicit security policies, incident response contacts, and terms of service pages suggests areas for improvement. Overall, the website presents a trustworthy and professional image with a low risk profile.

Herzog Transporte AG is a small transportation and logistics company based in Switzerland. The website serves as a basic informational platform presenting the company's services, employee information, job openings, and contact options. The business appears to target local businesses and individuals requiring transport services. The site uses a simple technical stack including Bootstrap 3 and jQuery 3.2.1, with content that is minimal but functional and navigable. However, the website lacks critical compliance and security features such as privacy and cookie policies, security headers, and visible contact information, which limits trust and user confidence. No advanced tracking or analytics tools are detected, indicating a minimal data collection approach. Overall, the site is safe and appropriate for general audiences but requires improvements in security and compliance to enhance credibility and user trust.

C

codin GmbH

codin.ch

76

codin GmbH is a Swiss-based managed IT service provider specializing in comprehensive IT solutions for small and medium-sized enterprises (KMU). Their offerings include IT support, Microsoft 365 services, cybersecurity, procurement, training, and backup management, all provided at a fixed monthly price. Positioned as an external IT department, codin GmbH aims to simplify and secure IT operations for SMEs, allowing clients to focus on their core business. The website reflects a professional and modern digital presence, leveraging Next.js and Vercel hosting for performance and scalability. Cookie consent is managed effectively through Cookiebot, ensuring compliance with data privacy norms. Security posture is strong with HTTPS and appropriate security headers, though explicit privacy policy and terms of service pages are currently missing, representing areas for improvement. Overall, codin GmbH demonstrates a credible and trustworthy business with a clear market focus and solid technical infrastructure.

O

OPAN®

opancare.ch

71

OPAN® operates a leading digital platform in Switzerland for online patient registrations and healthcare coordination among hospitals, clinics, Spitex organizations, nursing homes, and patients. The platform streamlines communication and administrative processes in the healthcare sector, enhancing efficiency and reducing errors. The website reflects a professional and consistent brand presence targeting healthcare providers and patients within Switzerland. Technically, the site uses modern web technologies including the Uikit framework and secure HTTPS connections, with good mobile optimization and SEO practices. However, explicit privacy and cookie policies are not clearly found, and security headers are missing, indicating areas for improvement in compliance and security posture. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

M

Museum für Gestaltung Zürich

museum-gestaltung.ch

51

Museum für Gestaltung Zürich is a leading Swiss museum specializing in design and visual communication, operating across three locations in Zurich. It is affiliated with the Zurich University of the Arts and supported by prominent cultural and corporate entities. The museum offers exhibitions, educational programs, publications, and an online shop, targeting a broad audience including groups, schools, families, and accessible audiences. The website reflects a mature digital presence with modern technologies such as Nuxt.js and Vue.js, and integrates Matomo analytics for user tracking. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the addition of cookie consent mechanisms and explicit security policies. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

M

Mittner & Partner

mittner-partner.ch

47

Mittner & Partner is a well-established Swiss financial services firm specializing in fiduciary services, auditing, tax consulting, and business advisory primarily serving clients in Chur, Zurich, the Eastern Switzerland region, and Liechtenstein. With over 30 years of experience, the company positions itself as a trusted partner for both corporate and private clients, emphasizing professional and competent service delivery. The website reflects a focused business model with clear service offerings and regional expertise, supported by memberships in relevant professional associations.

L

Luca Brunoni

lucabrunoni.com

54

The website lucabrunoni.com serves as the official online presence of Swiss author Luca Brunoni, showcasing his literary works, biography, and multimedia content related to his novels. The site targets readers interested in contemporary literature, particularly French and Italian-speaking audiences. The business model centers on personal branding and book promotion, with a niche market position in the literary domain. Technically, the site is built on the Adobe Portfolio platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, Google Analytics, and Adobe Typekit fonts. The site demonstrates good mobile optimization and moderate performance but lacks advanced accessibility features and comprehensive SEO optimization. Security-wise, the site benefits from HTTPS encryption and uses sandboxed iframes for embedded content, but it lacks important security headers and DNSSEC is not enabled, which could be improved to enhance security posture. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms, which poses compliance risks under GDPR. The site does not provide explicit contact information or incident response channels, limiting business credibility and user trust. Overall, the website is professional and functional but would benefit from enhanced security, privacy compliance, and contact transparency to improve trust and regulatory adherence.

W

WSC GROUP

tcr-series.com

68

WSC GROUP is a Swiss-based company founded in 2014 specializing in motorsport rule-making and service provision, particularly in touring car racing categories such as TCR and ETCR. The company has established itself as a leader in global touring car racing and electric vehicle racing, also expanding into SIM racing competitions. The website is professionally designed using Squarespace, featuring good content quality and clear navigation targeted at motorsport professionals and enthusiasts. Technically, the site uses modern web technologies and is hosted on Squarespace's platform with HTTPS and HSTS enabled, ensuring a secure connection. However, the site lacks comprehensive privacy and cookie policies, contact information, and additional security headers, which are areas for improvement. The WHOIS data is privacy protected, which is common for corporate domains, and no suspicious patterns were detected. Overall, the site presents a moderate to high level of business credibility and security posture but would benefit from enhanced privacy compliance and security best practices.

3W-Room is a Swiss-based company specializing in creating virtual 360-degree tours using advanced 3D scanning technology to produce digital twins of physical spaces. Their business model uniquely integrates sustainability and social inclusion by supporting global reforestation projects, reducing CO2 emissions, and making spaces accessible to people with mobility or cognitive impairments. The website reflects a professional and consistent brand image with good content quality and clear navigation aimed at businesses and organizations interested in sustainable virtual tours and inclusive tourism. Technically, the website employs modern web technologies including Google Maps API, Facebook Pixel, Google Analytics, and YouTube background video integration. The site is mobile-optimized with good performance and basic accessibility features. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit security and privacy policies are missing. Cookie consent is managed via a third-party service, indicating some level of privacy compliance. Security-wise, the site shows no critical vulnerabilities or exposed sensitive data. However, it lacks a vulnerability disclosure policy and incident response contact information, which are recommended for enhanced security maturity. The WHOIS data confirms a legitimate Swiss registration consistent with the website's claims, supporting high trustworthiness. Overall, 3W-Room presents a credible and professional online presence with a focus on sustainability and inclusion. Strategic improvements in privacy policy transparency and security disclosure would further strengthen their security posture and compliance standing.

S

Swiss Sport Integrity

sportintegrity.ch

63

Swiss Sport Integrity is a Swiss foundation dedicated to protecting the integrity of Swiss sports through anti-doping measures, ethical guidelines, and incident reporting services. The organization serves athletes, coaches, sports organizations, and the public by providing education, prevention, control, and legal frameworks to ensure clean and ethical sports practices. The website is professionally designed, multilingual, and provides comprehensive information and services related to sports integrity in Switzerland. Technically, the website is built on Drupal 11 with modern frontend technologies including Tailwind CSS and jQuery. It is mobile-optimized, accessible, and integrates Google Tag Manager and Analytics for user tracking. The site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. From a security perspective, the site follows best practices such as secure forms and no exposed sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is consistent with the website's Swiss non-profit sports integrity mission, indicating legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong content quality and business credibility. Strategic improvements in security transparency and incident response readiness would further enhance trust and compliance.

S

shop4runners

shop4runners.ch

69

shop4runners.ch is a specialized e-commerce retailer focused on running shoes, apparel, and accessories targeting runners and sports enthusiasts primarily in Switzerland and German-speaking regions. The website presents a professional and consistent brand image with a clear business model centered on online retail of high-quality running products from top brands. The technical infrastructure is modern, leveraging Magento CMS with Hyvä Themes for frontend, integrated marketing automation via SalesManago, and Google Tag Manager for analytics. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and vulnerability disclosure mechanisms. WHOIS data confirms domain legitimacy with consistent registrant information and appropriate domain age. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in privacy policy transparency and security disclosures are recommended.

yesforever.ch is a Swiss-based small business operated by Optimize AG, offering a niche SaaS platform for creating personalized wedding websites. The platform provides tailored features such as gift registries, photo galleries, guest registration forms, and password-protected pages, targeting couples planning weddings and their guests. The business model is subscription-based with free trials and flexible pricing plans. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Owl Carousel, and integrates analytics tools like Google Analytics and Hotjar, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and password protection for certain pages but lacks explicit security headers and published security policies, which are areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

I

invitu

invitu.ch

43

invitu.ch is a Swiss-based online platform specializing in stylish and quick event invitations for private, corporate, and public events. The website offers a user-friendly interface with various event categories and customizable invitation templates, targeting individuals and companies in Switzerland. The business operates as a small-sized entity focusing on digital event invitation services with a clear market niche. Technically, the site employs modern web technologies including Bootstrap, jQuery, FontAwesome, and integrates analytics and user behavior tracking tools such as Google Analytics, Google Tag Manager, and Hotjar. The website is mobile-optimized and presents a professional design with good navigation and content relevance. Security-wise, the site uses HTTPS with appropriate security headers, but lacks some advanced security policies and incident response information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the site is legitimate and trustworthy with room for improvement in privacy and security documentation.

E

EXPO EVENT – Swiss LiveCom Association

expo-event.ch

61

EXPO EVENT – Swiss LiveCom Association is a national industry association representing the Live Communication sector in Switzerland. The organization provides membership services, industry events, education, and sustainability consulting to its members. The website reflects a professional and well-established entity with a clear market position as a leading voice for LiveCom in Switzerland. The technical infrastructure is modern, leveraging Nuxt.js and Vue.js frameworks, with integration of common analytics and marketing tools such as Google Analytics and LinkedIn Insight Tag. Security posture is strong with HTTPS and security headers implemented, although cookie consent mechanisms and explicit terms of service are missing. Overall, the site is well-designed, mobile-optimized, and provides comprehensive contact and event information, supporting a high level of trust and credibility.

G

Grafik Design Katja Saenze

grafik-art.ch

47

Grafik Design Katja Saenze is a small, professional graphic design agency based in Aargau, Switzerland, specializing in comprehensive visual branding services including logo creation, corporate identity, and web design. The website demonstrates a strong market position locally with over 20 years of experience and a portfolio of more than 1000 projects. Technically, the site is built on WordPress with Elementor and integrates modern web technologies and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be enhanced. Overall, the site is trustworthy, professional, and compliant with GDPR, providing clear contact information and social media presence.

T

Text Aha - Texte und Marketingberatung

text-aha.ch

54

Text Aha is a small Swiss-based marketing consultancy and copywriting service specializing in helping clients attract new customers with authentic and non-intrusive marketing approaches. The website is professionally designed using WordPress and Elementor, with good SEO optimization and mobile responsiveness. Security measures include HTTPS and Google reCAPTCHA v3 on forms, though advanced security headers and formal security policies are absent. Contact information is clearly provided, enhancing business credibility. Overall, the site presents a trustworthy and professional digital presence suitable for its niche market.

K

Kunst Raum Riehen

kunstraumriehen.ch

70

Kunst Raum Riehen is a publicly funded cultural institution serving as the official exhibition space for contemporary art in the municipality of Riehen, Switzerland. The website provides comprehensive information about current and upcoming exhibitions, events, and art mediation activities, targeting a general audience interested in culture and the arts. The institution operates with free public access and maintains active engagement through newsletters and social media channels. Technically, the website is built on Drupal 10, leveraging modern JavaScript frameworks such as Alpine.js and Splide.js for interactive components. It employs Matomo analytics with privacy-conscious settings and a cookie consent mechanism, reflecting a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the site enforces HTTPS, uses cookie consent, and avoids exposing sensitive data. However, it lacks explicit security policies and incident response contacts, and could improve by adding security headers and formal vulnerability disclosure mechanisms. Overall, the security posture is solid but could benefit from enhanced transparency and formal documentation. The domain registration aligns well with the website's municipal identity, showing no suspicious patterns and indicating high legitimacy. The website content is safe for general audiences, with no adult or questionable material. The overall risk is low, and the site demonstrates good compliance with privacy regulations such as GDPR.

The website www.hotel-in-gstaad.com serves as a regional hospitality and tourism platform focused on the Gstaad area in Switzerland. It provides hotel booking services, restaurant listings, event information, and sightseeing guides tailored to tourists and travelers seeking accommodation and leisure activities in the Swiss Alps. The business model centers on facilitating bookings and promoting regional tourism, positioning itself as a specialized local service provider. The website content is professionally presented with good design quality, clear navigation, and relevant information for its target audience. Technically, the site is built on the MASCH CM Studio CMS platform, utilizing standard web technologies such as JavaScript, CSS, and jQuery UI components. While the site is moderately optimized for performance and mobile use, there is room for improvement in accessibility and mobile responsiveness. The presence of a TripAdvisor conversion pixel indicates integration with third-party marketing tools, but no extensive analytics or tracking services are detected. From a security perspective, the website enforces HTTPS and implements a cookie consent banner compliant with GDPR. However, no explicit security headers are detected in the HTML source, and no dedicated security or incident response policies are published. The absence of WHOIS registration data for the domain is a notable concern, as it reduces transparency and trust in domain ownership. Despite this, the website itself appears legitimate and professional, with no signs of malicious activity or vulnerabilities visible in the content. Overall, the site demonstrates a solid foundation for a regional hospitality platform but would benefit from enhanced security practices, improved domain registration transparency, and clearer contact information to strengthen trust and compliance.

M

mylokalesuche AG

myls.ch

67

mylokalesuche AG operates as a specialized marketing agency and software developer focused on Swiss small and medium-sized enterprises (SMEs). Their core offerings include the myls App for synchronizing business profiles across multiple directories, website creation with SEO optimization, and management of Google and Meta advertising campaigns. The company positions itself as a Google Partner, enhancing its credibility and market presence within the local Swiss digital marketing landscape. The website is professionally designed, multilingual, and optimized for mobile devices, reflecting a mature digital infrastructure. Technically, the site leverages WordPress CMS with modern plugins and libraries, ensuring good performance and SEO compliance. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response details are absent. Overall, the business demonstrates a trustworthy and professional online presence with strong customer trust signals, including numerous positive Google reviews.

M

MUKS Museum Kultur und Spiel Riehen

muks.ch

11

MUKS Museum Kultur und Spiel Riehen is a small cultural museum located in Riehen, Switzerland, focusing on exhibitions and programs related to local culture, history, and play. The website presents a professional and well-structured digital presence, offering detailed information about exhibitions, events, and visitor services. The museum targets a broad audience including families, children, students, and cultural visitors, operating primarily as a non-profit institution. Technically, the site is built on Drupal 10 with modern JavaScript libraries and includes privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policy and incident response information. Overall, the domain registration aligns well with the museum's identity, supporting trustworthiness and legitimacy.

K

KOMUNIQUE

komunique.com

10

KOMUNIQUE is a Swiss-based independent web design and development studio led by Philipp Roth, specializing in creating custom websites, web applications, and mobile apps using advanced platforms such as Webflow, Craft CMS, FlutterFlow, and Webstudio. The company serves clients primarily in Switzerland but also internationally, focusing on delivering unique, user-friendly, and SEO-optimized digital solutions. KOMUNIQUE collaborates with partners in design and content to provide comprehensive digital services. Technically, the website leverages modern web technologies, including GSAP for animations, Lenis for smooth scrolling, and integrates marketing and analytics tools like Google Tag Manager and MailerLite. The site is well-optimized for performance, mobile responsiveness, and accessibility. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and publicly available security policies. WHOIS data is unavailable, which slightly reduces trust but is likely due to privacy protection or recent registration. Overall, KOMUNIQUE presents as a professional and credible digital agency with a strong technical foundation and good privacy compliance.

C

Culturescapes

culturescapes.ch

10

Culturescapes is a Swiss-based cultural festival and platform dedicated to international cultural exchange, with a focus on thematic editions such as Sahara 2025 that explore North African culture and its political ties with Switzerland. The website offers a rich array of content including event programs, magazines, books, and archives, targeting cultural enthusiasts, academics, and the general public interested in intercultural dialogue. The business operates primarily as a non-profit cultural organization, leveraging events and publications to engage its audience. Technically, the website employs modern web technologies including Vue.js, ES modules, and Swiper.js for interactive content presentation. It integrates Mailchimp for newsletter subscriptions and maintains a responsive design optimized for mobile devices. While the site performs moderately well, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy and cookie banner present but no terms of service or vulnerability disclosure policy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security policies, contact transparency, and compliance documentation would enhance its security posture and user trust.

Z

zweihochdrei gmbh

zweihochdrei.ch

9

zweihochdrei gmbh is a small Swiss agency based in Basel that has operated for 17 years, providing agency services to clients. The website announces the cessation of agency activities as of May 31, 2023, and provides contact details for support after closure. The company maintains a professional web presence using WordPress and UIkit, with a consistent brand image and clear contact information. Technically, the site uses common web technologies and is moderately optimized for performance and mobile devices. Security posture is adequate with HTTPS enabled but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No forms or tracking scripts are present, reducing privacy risks but also limiting user engagement and analytics capabilities. Overall, the website is trustworthy and professional but could improve compliance and security practices.

L

L'Unique Foundation

rockartcollection.com

10

The Rock Art Collection website by L'Unique Foundation presents a niche private collection of celebrity and rock memorabilia art, targeting collectors and enthusiasts. The site supports e-commerce for art sales and promotes charitable activities through the foundation. The business operates primarily in Switzerland and maintains a professional online presence with clear contact details and social media engagement. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins and Google Analytics for tracking. While the site is generally well-structured and mobile-optimized, it lacks some privacy compliance features such as a cookie consent mechanism and explicit security headers. The domain registration is consistent with the business age and shows no suspicious patterns. Overall, the site demonstrates a good balance of business credibility and technical implementation but could improve its security posture and privacy compliance.

L

L'Unique Foundation

lunique-foundation.org

51

L'Unique Foundation is a Swiss non-profit organization established in 2018, managing a significant private collection of celebrity and rock art. The foundation channels proceeds from its collection and related activities into humanitarian aid projects in Nepal, focusing on water supply and sanitation for vulnerable communities. The website is professionally designed using WordPress and WooCommerce, integrating modern plugins and multimedia content to engage donors and supporters. The foundation maintains a consistent brand presence and transparent contact information, enhancing trustworthiness. Technically, the site is hosted by Hostpoint AG, uses HTTPS, and implements Google Analytics with an opt-out mechanism, though it lacks DNSSEC and some advanced security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Overall, the site demonstrates a solid security posture with room for improvement in vulnerability disclosure and cookie management.

A

Abteilung Kultur, Präsidialdepartement des Kantons Basel-Stadt

museenbasel.ch

61

Museen Basel is a government-affiliated cultural platform representing 37 museums in Basel, Switzerland. It provides comprehensive information about museums, exhibitions, events, and educational contacts, targeting the general public, families, and cultural enthusiasts. The website is professionally designed with consistent branding and clear navigation, supporting multiple languages with German as the primary language. The platform serves as a central hub for cultural engagement in Basel, enhancing the visibility and accessibility of local museums. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, styled with Tailwind CSS, and integrates analytics tools like Google Tag Manager and Microsoft Clarity. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. The content is rich and relevant, supporting a positive user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and cookie consent mechanisms, which are areas for improvement. No critical vulnerabilities or suspicious patterns were detected, and the domain registration aligns well with the website's government affiliation, indicating high legitimacy. Overall, Museen Basel presents a trustworthy and professional digital presence for cultural promotion, with recommendations to enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.

E

Evangelisch-reformierte Kirche des Kantons Basel-Stadt

erk-bs.ch

69

The Evangelisch-reformierte Kirche des Kantons Basel-Stadt website serves as the official online presence for the regional Protestant church in Basel-Stadt, Switzerland. It provides comprehensive information about church services, events, community programs, and pension fund management. The site targets church members and the local community, offering timely updates and resources in German. The business model is non-profit and community-oriented, focusing on religious and social services within the canton. Technically, the website is built on the kirchenweb.ch CMS platform, utilizing common web technologies such as jQuery and Owl Carousel. The site is mobile-optimized and presents a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes some security headers, but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, with domain registration details consistent with the organization's identity.

Z

zur Mägd

zurmaegd.ch

38

Zur Mägd is an Italian restaurant located in Basel, Switzerland, offering authentic Italian cuisine, private events, and banquet services. The business operates under the parent company groupe-Oniro and targets local residents and visitors seeking Italian dining experiences. The website is built on WordPress with modern technologies such as jQuery and integrates Mailchimp for newsletter subscriptions. The site is professionally designed with good mobile optimization and clear navigation, providing comprehensive contact information and booking options. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements can be made by adding security headers and cookie consent mechanisms. Privacy policies and terms of service are present and linked to the parent company’s domain, indicating compliance with GDPR. Overall, the website reflects a trustworthy and credible hospitality business with a moderate to good digital maturity level.