Switzerland security reports

J

JAXForms AG

jaxforms.com

70

JAXForms AG is a Swiss technology company specializing in digital form and workflow solutions, offering a range of services from simple forms to tailored complete solutions. The company positions itself as a competent partner for digital transformation projects, serving a business audience primarily in Switzerland. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including success stories and job postings, indicating active operations and growth. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics for user tracking. Security posture is strong with HTTPS enforced and security headers present, though the absence of a dedicated security policy and incident response information suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for its business clientele.

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of social, cultural, environmental, educational, and scientific services aimed at improving the quality of life for its residents. The website reflects a well-established public institution with clear communication of its mission and services, supported by active social media channels and event listings. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and a responsive design that supports good user experience across devices. Security posture is solid with HTTPS enforced and CSRF protections in place, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and aligned with the expectations for a government organization.

V

Valaisdigital

valais-economy.ch

52

Economic Promotion Valais is a regional government-affiliated entity focused on supporting entrepreneurs, startups, investors, and companies in the Canton of Valais, Switzerland. The website serves as a strategic platform offering services such as assistance to enterprises, innovation support, financial aid, and land or facility search to foster regional economic development. The site is professionally designed with consistent branding and clear navigation, targeting a broad audience of business stakeholders interested in the Valais economy. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, leveraging modern web technologies like jQuery and Swiper.js for interactive elements. The site is mobile-optimized and implements SEO best practices, including structured data for enhanced search visibility. Performance is moderate with good mobile responsiveness. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Cookie consent is implemented via the Complianz GDPR plugin, indicating some level of privacy compliance. Overall, the website presents a low-risk profile with a strong business credibility and technical foundation. Strategic improvements include publishing comprehensive privacy and security policies, adding direct contact information, and implementing a vulnerability disclosure mechanism to enhance transparency and trust.

V

Valaisdigital

valais-economie.ch

69

Promotion économique Valais is a regional government economic promotion entity serving entrepreneurs and businesses in the Valais region of Switzerland. The website provides information and services to support innovation, business development, and investment in the local economy. It targets SMEs, startups, investors, and external companies interested in establishing themselves in Valais. The site is professionally designed using WordPress and Elementor, with good SEO practices implemented via Yoast SEO. Multilingual support is provided for French, German, and English audiences. Technically, the site uses modern web technologies and enforces HTTPS, ensuring secure communications. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security headers are not detected, indicating room for improvement in security hardening. The site uses Google Analytics with a cookie consent mechanism, reflecting basic GDPR compliance. Overall, the website is credible and trustworthy, aligned with its governmental role, but could enhance privacy and security policies to strengthen compliance and user confidence.

B

blue-community.ch

bluecommunity.ch

48

Blue Community is a Swiss non-profit organization dedicated to advocating for water as a human right and promoting sustainable water management practices. The website serves as a community platform for municipalities, educational institutions, technical enterprises, church communities, and companies to demonstrate responsibility locally and globally. The organization positions itself as a niche player in the environmental non-profit sector with a focus on water resource protection and international partnerships. Technically, the website is built on WordPress using modern Gutenberg blocks, enhanced with Matomo analytics and Mautic marketing automation tools. It employs a cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses cookie consent best practices but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the organization's Swiss non-profit identity. Overall, the website presents a trustworthy, professional, and privacy-conscious platform with room for improvement in formal security documentation and incident response readiness.

Seelsorge Polizei und Rettungskräfte Zürich SPuR is a specialized non-profit organization providing confidential and free counseling services to police and emergency personnel in Zurich. The website serves as an informational and contact platform, offering support for stressful work or personal situations and special life events. The organization maintains a local presence with clear contact details and event announcements, positioning itself as a trusted support resource within its niche. Technically, the website is built on WordPress using common plugins and frameworks, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is professional, trustworthy, and serves its target audience effectively, though it would benefit from enhanced compliance and security measures.

B

Bahnhofkirche Zürich

bahnhofkirche.ch

52

Bahnhofkirche Zürich is a small non-profit organization providing a spiritual and contemplative space in Zurich. The website offers information about the chapel, pastoral care, community groups, and daily reflections called Weg-Wort. It targets the general public and spiritual seekers in the local community. The business model is focused on community service and donations, positioning itself as a trusted local spiritual resource. Technically, the website is built on WordPress using common plugins such as WPForms and MailPoet for forms and newsletters. The site is served over HTTPS, has a moderate performance profile, and is mobile optimized. However, it lacks advanced security headers and a cookie consent mechanism, which are areas for improvement. From a security perspective, the site shows good basic practices with HTTPS and secure form handling but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy present but no cookie policy or terms of service. The domain uses privacy protection, which is justified for this type of non-profit entity. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, adding cookie consent, publishing security policies, and maintaining plugin updates to improve security posture and compliance.

S

Solidara Zürich

solidara.ch

58

Solidara Zürich is a well-established non-profit organization founded in 1862, dedicated to providing social support and professional counseling to socially disadvantaged individuals in Zürich. Their key services include the Café Yucca, a welcoming meeting place; Isla Victoria, a counseling center for sex workers; and assistance for people in emergency situations. The organization maintains a transparent and professional online presence with clear contact information and social media engagement. Technically, the website is built on WordPress with modern themes and SEO plugins, offering good mobile optimization and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the website reflects a trustworthy and credible organization with a focus on social welfare.

E

Evang.-ref. Kirchgemeinde Zürich

migrationskirchen.ch

44

The Zentrum für Migrationskirchen (ZMK) is a non-profit church-affiliated organization under the Evangelisch-reformierte Kirchgemeinde Zürich, focused on supporting migration churches and fostering intercultural Christian dialogue in Zurich. The website provides comprehensive information about their services, including room rental for worship, support and mediation between migration churches and local reform churches, and current news. The organization is well-positioned regionally with clear contact details and a professional online presence. Technically, the site uses a CMS likely based on DynPG, with Bootstrap and Matomo analytics, delivering a mobile-optimized and user-friendly experience. Security posture is adequate with HTTPS and secure form handling, though security headers and explicit policies are not evident. Privacy compliance is strong with a clear cookie consent mechanism and a detailed privacy policy in German. Overall, the site is trustworthy, professional, and serves its community well.

S

Home | Stadtkloster Zürich

stadtkloster.ch

61

The website www.stadtkloster.ch is a small-scale, community-oriented site hosted on the Wix platform, primarily serving a Swiss audience. The site uses Wix's Thunderbolt framework and standard JavaScript libraries, indicating a modern but basic technical infrastructure. The content is minimal with no visible business or contact information, privacy policies, or terms of service, which limits its professional and compliance stature. Security posture is basic with no advanced headers or policies detected, and no forms or data collection mechanisms are apparent. Overall, the site appears safe and suitable for general audiences but lacks critical compliance and security features.

S

Streetchurch

streetchurch.ch

48

Streetchurch is a small non-profit organization based in Zurich, Switzerland, dedicated to supporting young people through work integration, housing, and social enterprise services. The organization focuses on providing holistic and low-threshold assistance to help individuals develop new life perspectives. Their website is professionally designed using WordPress with the Salient theme and includes clear navigation and relevant content tailored to their target audience. The site is accessible, mobile-optimized, and includes social media integration to enhance community engagement. Technically, the website uses modern web technologies and plugins, though some performance and security enhancements could be made. Security posture is adequate with HTTPS enforced, but lacks security headers and a formal security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a credible and trustworthy non-profit entity with room for improvement in security and privacy practices.

P

Pilgerzentrum St. Jakob Zürich

jakobspilger.ch

49

Pilgerzentrum St. Jakob Zürich is a small non-profit organization affiliated with the reformierte Kirche Zürich, focused on offering spiritual pilgrimage experiences, thematic pilgrimages, community events, and educational programs. Their website provides detailed event listings, newsletter signups, and community engagement features targeting pilgrims and spiritually interested individuals primarily in Switzerland. Technically, the site uses modern JavaScript libraries such as jQuery and Swiper.js, integrates Google Analytics and Tag Manager for tracking, and is built on the Redaxo CMS platform. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS enforced and email obfuscation implemented, though it lacks advanced security headers and explicit security policies. Privacy and cookie policies are present and GDPR compliant. WHOIS data confirms the domain is registered consistently with the organization's identity, enhancing trust. Overall, the site is professional, trustworthy, and well-suited for its community-focused mission.

M

Mosaic Church und Fachstelle Zürich

mosaic-zuerich.ch

69

Mosaic Church und Fachstelle Zürich is a small non-profit religious organization affiliated with the reformierte Kirche Zürich, focusing on providing a welcoming church community and educational resources for LGBTIQ+ individuals. Their services include church gatherings, theological education, and community support. The website is built on Squarespace, featuring a modern and responsive design with good SEO and accessibility basics. Security posture is strong with HTTPS and HSTS enabled, complemented by a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is trustworthy, professional, and well-aligned with its mission.

Z

Zytlos

zyt-los.com

46

Zytlos is a small non-profit community organization affiliated with the reformed church of Zurich, providing a welcoming space near Bahnhof Enge that includes a café and diverse event offerings such as concerts, coworking, meditation, and yoga. The website is professionally designed using WordPress and Elementor, featuring modern web technologies and responsive design. Security posture is adequate with HTTPS and reCAPTCHA integration, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and serves its community-focused mission effectively.

K

Kirchgemeinde Zürich

kirche-zh.ch

50

The kirche-zh.ch website functions as a portal for the Kirchgemeinde Zürich, serving as a gateway to various church communities in Zurich. It provides basic information and links to affiliated church websites, targeting local residents and church members. The site is modest in content and design, reflecting its non-profit and community-oriented nature. Technically, the site uses a variety of JavaScript libraries including jQuery, Bootstrap, and Piwik/Matomo for analytics, but lacks modern CMS identification and advanced SEO or accessibility features. Security posture is basic with no visible security headers or privacy policies, and no forms or user input mechanisms are present. The domain uses privacy protection in WHOIS, which is justified for this type of organization. Overall, the site is functional but could benefit from improved privacy compliance, security hardening, and richer content to enhance user trust and engagement.

E

Evangelisch-reformierte Kirchgemeinde Zürich

darum-kirche.ch

52

The website darum-kirche.ch represents the Evangelisch-reformierte Kirchgemeinde Zürich, a medium-sized non-profit religious organization serving the city of Zurich. It offers a broad range of spiritual, social, and cultural services aimed at fostering community, hope, and reconciliation. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins such as Yoast SEO and Matomo Analytics, ensuring good SEO and privacy-conscious analytics. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The domain registration data aligns well with the organization's identity, supporting legitimacy and trustworthiness. Overall, the website effectively communicates its mission and services to its target audience while maintaining good technical and security standards.

K

Krüger + Co. AG

krueger.ch

58

Krüger + Co. AG is a Swiss medium-sized company specializing in heating, cooling, humidification, dehumidification, and water damage drying solutions, serving both industrial and residential markets across 21 locations. The company offers a broad range of products and services including emergency heating, climate systems, and consulting, positioning itself as a reliable regional player in the energy sector. Technically, the website is built on WordPress with WooCommerce, enhanced by modern plugins for SEO, multilingual support, and GDPR compliance. Analytics tools like Microsoft Clarity, Google Tag Manager, and Hotjar are used for user behavior insights. Security posture is solid with HTTPS and consent mechanisms, though security headers and explicit policies could be improved. Overall, the website is professional, user-friendly, and trustworthy, with transparent contact information and compliance with privacy regulations.

F

FORS AG

fors.ch

68

FORS AG is a Swiss-based company specializing in the retail and professional supply of household and commercial appliances, with over 40 years of market presence. The website showcases a broad product range including cooling, cooking, washing, and professional equipment, supported by warranty and service offerings. The company targets both private consumers and professional clients, positioning itself as a trusted specialist in its sector. Technically, the website is built on WordPress with WooCommerce, leveraging modern SEO and marketing tools such as Yoast SEO, Google Tag Manager, and multiple tracking pixels. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility could be enhanced. Security posture is strong with HTTPS and security headers implemented, but lacks explicit privacy and cookie policies, which impacts compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Schulthess Maschinen AG

schulthess.ch

59

Schulthess Maschinen AG is a well-established Swiss manufacturer and retailer specializing in washing machines, dryers, and dishwashers. The company emphasizes innovation rooted in tradition, targeting both homecare and professional customers primarily in Switzerland and German-speaking regions. Their business model combines product sales, service contracts, and an online shop for wash cards, positioning them as a trusted brand in the household appliance sector. The website reflects a mature digital presence with multilingual support and comprehensive customer engagement tools. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, secure, and compliant, supporting the company's market position effectively.

A

ANSARO

ansaro.ch

62

ANSARO is a Swiss-based coffee roastery specializing in freshly roasted coffee beans and retailing coffee products. The company positions itself as a local Swiss quality brand with a focus on authentic taste and craftsmanship. The website is professionally designed using the Wix platform, indicating a moderate level of digital maturity suitable for a small retail business. The technical infrastructure leverages Wix's Thunderbolt framework, ensuring reasonable performance and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and visible privacy compliance mechanisms. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security features to meet compliance standards. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and improving accessibility.

S

Swiss Olympic

coolandclean.ch

64

The website coolandclean.ch represents a national youth sports prevention program operated under the auspices of Swiss Olympic. It focuses on promoting healthy behaviors, fair play, and substance abuse prevention among young athletes and their leaders. The platform offers educational content, training tips, a material shop, and community support including regional ambassadors and consultation services. The site is well-branded, professionally designed, and targets youth sports organizations and their stakeholders in Switzerland. Technically, the site employs modern web technologies including Google Analytics, Facebook Pixel, and Google Maps API, likely built on a CMS such as Adobe Experience Manager. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not visible. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

S

Swiss Olympic Association

swissolympicteam.ch

62

Swiss Olympic Association is the official national Olympic organization representing Swiss athletes and promoting Olympic values such as Excellence, Respect, and Friendship. The website highlights their involvement in Olympic missions, including the upcoming Milano Cortina 2026 Winter Games, and showcases athlete stories and official partners. The organization operates as a non-profit entity focused on supporting athletes and the Olympic movement within Switzerland. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, JWPlayer, and Slick Carousel. The site appears to be built on a CMS platform with structured content and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. However, security headers are not explicitly detected and incident response contact details are absent, which could be improved. The domain WHOIS data aligns well with the organization's identity, reinforcing legitimacy. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. It provides clear contact information, partner listings, and social media integration, supporting a positive user experience and business credibility.

N

natelo

natelo.ch

64

natelo is a Swiss-based retail and e-commerce company specializing in mobile subscriptions, smartphones, buyback, repairs, and accessories. The company operates both online and through four physical locations, targeting Swiss consumers seeking mobile technology products and services. The website presents a professional and consistent brand image with a clear focus on the Swiss market. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern plugins for SEO and payment processing. It employs HTTPS and security best practices such as Google reCAPTCHA and cookie consent management, indicating a mature digital infrastructure. However, the absence of a dedicated privacy policy and terms of service pages represents a compliance gap. Security posture is strong with appropriate headers and no visible vulnerabilities, but incident response and security policy documentation are lacking. Overall, natelo demonstrates a solid market presence with good technical and security foundations but should enhance privacy compliance and transparency to improve trust and regulatory adherence.

SWISS is a major international airline operating under the Lufthansa Group, providing comprehensive flight booking and travel services globally. The website is professionally designed, mobile-optimized, and offers a rich user experience with clear navigation and extensive travel-related content. Technically, the site leverages modern JavaScript frameworks, Adobe Helix RUM for performance monitoring, and Tealium for tag management, hosted on Akamai CDN ensuring fast and reliable delivery. Security posture is strong with HTTPS enforcement, secure login mechanisms, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness, aligned with the Lufthansa Group's reputation.

S

Suva

suva.ch

75

Suva is a leading Swiss public institution specializing in accident prevention, insurance, and rehabilitation services. The organization serves a broad audience including employers and insured individuals across Switzerland, positioning itself as a key player in the national insurance and healthcare sector. The website reflects a mature digital presence with a clear focus on user experience and compliance with privacy regulations. Technically, the site leverages modern frameworks such as Angular, integrates reputable third-party services like Google Tag Manager and Cookiebot, and employs a Sitecore CMS backend, indicating a robust and scalable infrastructure. Security posture is strong with enforced HTTPS, cookie consent mechanisms, and CSRF protections, although explicit security policies and incident response contacts are not publicly detailed. Overall, Suva's website demonstrates high professionalism, trustworthiness, and compliance, supporting its role as a major government-related insurance provider.

The Swiss Paraplegic Group is a well-established non-profit organization based in Switzerland, dedicated to supporting individuals with spinal cord injuries through a comprehensive network of services including rehabilitation, advocacy, and education. The website reflects a professional and trustworthy presence with clear communication of their mission and services. Technically, the site is built on modern frameworks such as Gatsby and React, leveraging reputable third-party services for analytics and consent management, ensuring a fast and accessible user experience. Security posture is strong with HTTPS enforcement, appropriate security headers, and no detected vulnerabilities, although a formal security policy and incident response information could enhance trust further. Privacy compliance is robust, with a detailed cookie policy and consent mechanism aligned with GDPR requirements. Overall, the site demonstrates high business credibility and technical maturity, suitable for its healthcare and non-profit sector audience.

T

Toyota Schweiz

toyota.ch

71

Toyota Schweiz operates as the official Swiss website for Toyota, providing comprehensive information about Toyota vehicles, especially hybrid models, targeting German-speaking customers in Switzerland. The site reflects a strong market position as part of the global Toyota brand, offering key services such as vehicle sales information, dealer location, and customer support. The technical infrastructure is modern and robust, leveraging Adobe Experience Manager as CMS, advanced analytics via Datadog and Google Tag Manager, and a compliant cookie consent mechanism through OneTrust. The website is well-optimized for performance, mobile responsiveness, and accessibility, ensuring a high-quality user experience. Security posture is strong with HTTPS enforcement, bot protection via hCaptcha, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, professional, and aligned with corporate standards, supporting Toyota's brand integrity in Switzerland.

F

Fondation Etoile filante

etoilefilante.ch

51

Fondation Etoile filante is a Swiss non-profit organization dedicated to improving the lives of children living with illness or disabilities by fulfilling their dreams and providing leisure and support projects. Established in 1993, it holds a strong market position as a recognized public utility foundation with tax-exempt status and annual audits by Swiss authorities. The website reflects a professional and trustworthy presence with clear donation mechanisms and active social media engagement. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA implemented, though lacking some advanced security headers and explicit privacy documentation. Overall, the site is safe, well-branded, and credible, serving its target audience effectively.

W

WOLF-POWER GMBH

wolf-power.ch

54

Wolf-Power GmbH operates a professional automotive tuning e-commerce and service website based in Switzerland, offering a wide range of tuning software, hardware, and related services with over 50 years of experience. The company targets car enthusiasts and vehicle owners seeking performance enhancements and motorsport support. The website is built on the Shopware platform and integrates multiple modern marketing and analytics technologies, including Google Analytics, TikTok Pixel, Facebook Pixel, and Sendinblue marketing tools. Security posture is solid with HTTPS and reCAPTCHA v3, but lacks explicit privacy and cookie policies, which are compliance gaps. No contact emails or phone numbers are explicitly provided on the site, limiting direct communication channels. Overall, the website is professional, well-structured, and trustworthy, but could improve privacy compliance and transparency.

Z

zurichnetgroup ag

netgroupcloud.ch

56

Zurichnetgroup ag is a Swiss ICT service provider specializing in cloud solutions tailored for small and medium-sized enterprises (KMU). The company leverages strong partnerships with Microsoft and Swisscom to offer a range of cloud services including private, public, hybrid clouds, and Microsoft 365 cloud solutions. Their market position is solidified by certifications such as ISO 9001, 14001, and 27001, and their focus on Swiss data protection standards appeals to privacy-conscious KMU clients. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and good SEO practices. The use of JSON-LD structured data and lazy loading images enhances performance and search engine visibility. Hosting is implied to be with Swisscom, aligning with their service offerings. From a security perspective, the site enforces HTTPS, employs multiple security headers, and benefits from the robust encryption standards of their cloud partners. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, the website and business present a trustworthy, professional image with strong compliance to privacy regulations and security best practices. The company is well-positioned in the Swiss KMU market with a comprehensive portfolio of cloud and IT services.

W

Wasch- & Küchentechnik Urs Ruoss | Altendorf, March Höfe

wakutech.ch

45

Wasch- & Küchentechnik Urs Ruoss is a small, established retail business based in Switzerland specializing in household and kitchen appliances, including washing machines, kitchen technology, and coffee machines. The company operates a physical showroom in Altendorf SZ and offers repair services, home delivery, and disposal of old appliances. Their market position is that of a trusted local specialist with over 20 years of experience, supported by partnerships with well-known appliance brands and an online webshop. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, with Google reCAPTCHA implemented for form security. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and reCAPTCHA in place, but lacks advanced security headers and a formal security policy. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's local retail focus.

Joe Pfister is a small boutique wine producer and retailer based in Castelrotto, Tessin, Switzerland. The company offers exclusive wines primarily through an online shop, targeting adult wine consumers interested in high-quality boutique wines. The website reflects a focused e-commerce business model with event hosting and direct sales. Technically, the site is built on WordPress with WooCommerce, enhanced by plugins for SEO, cookie consent, age verification, and photo galleries. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security-wise, the site enforces HTTPS and includes cookie consent and age verification mechanisms, but lacks visible security headers and explicit privacy or security policies. The Google Analytics plugin is present but not configured, indicating limited user tracking. Overall, the website is professional and trustworthy but could improve in privacy transparency and security hardening.

S

Skiclub Graue Hörner

grauehoerner.ch

49

Skiclub Graue Hörner is a well-established non-profit ski club based in Mels, Switzerland, founded in 1935. The club offers a variety of skiing-related activities including youth racing groups, ski touring, ski gymnastics, and social events for members. The website serves as an information hub for members and prospective members, providing event schedules, membership applications, and news updates. The club maintains a local presence with sponsorships and active social media channels on Facebook and Instagram. Technically, the website is built on WordPress with a modern plugin stack including Events Manager and Beaver Builder, providing a functional and moderately optimized user experience. Security posture is adequate with HTTPS enforced and spam protection via honeypot, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, suitable for its community-focused purpose.

A

AC Alpina Consult GmbH

ac-alpina.ch

49

AC Alpina Consult GmbH is a small Swiss consulting firm specializing in fiduciary and financial advisory services tailored to SMEs and private clients. The company emphasizes a personalized, trust-based coaching approach, positioning itself as a generalist guiding clients through complex financial and entrepreneurial challenges. The website reflects this with professional content, clear contact information, and trust signals such as membership in Treuhand Suisse. Technically, the site is built on WordPress with modern frontend libraries like jQuery and Slick Slider, and it is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and secure forms, though it lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy. Overall, the site is trustworthy and professionally maintained, supporting the company's market position as a reliable small consulting firm.

P

Pensionskasse der Bank J. Safra Sarasin

pkbjss.ch

46

The website www.pkbjss.ch represents the pension fund of Bank J. Safra Sarasin, providing information primarily to its members. The site is multilingual (German, English, French) and offers a secure member login portal hosted externally. The business is a niche financial entity focused on pension fund management for bank employees in Switzerland. The website content is basic but consistent with the business purpose, with limited direct contact information and no visible advanced security or privacy features beyond HTTPS. Technically, the site is built on WordPress with common libraries such as jQuery and Owl Carousel. It is moderately optimized for mobile and SEO but lacks advanced accessibility and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of marketing or user behavior insights. Security posture is adequate with HTTPS enforced and external secure login, but the absence of security headers and cookie consent mechanisms are notable gaps. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user trust and regulatory adherence.

Schaffer-office is a small Swiss-based service provider specializing in accounting, tax declarations, real estate sales and rentals, administrative support, and payroll services primarily targeting small and medium enterprises (KMU) and private customers in the Wollerau region. The website presents a professional business offering with clear service descriptions and a focus on local clientele including EU citizens relocating to Switzerland. The business appears to be established since 2015, consistent with domain registration data. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Contact Form 7, with a moderate performance and good mobile optimization. However, some technical debt is evident from outdated jQuery usage and visible PHP warnings, which could pose security risks. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, HTTPS is enforced, but there is a lack of security headers and visible privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure information is provided. The site does not employ tracking or advertising scripts, which reduces privacy concerns but also limits marketing insights. Overall, the website is functional and professional but would benefit from improved security practices, updated technical components, and enhanced privacy compliance to strengthen trust and reduce risk.

K

KAFILAND

kafiland.ch

61

KAFILAND is a small local retail business specializing in coffee machines located in Altendorf SZ, Switzerland. The website is built on the Wix platform and uses Wix's Thunderbolt framework and standard JavaScript polyfills. The business targets local consumers and businesses seeking coffee machines. The website provides basic business information including phone number and physical address but lacks email contact and online forms. The technical infrastructure is modern for a small business, with HTTPS enabled and moderate performance. However, privacy and cookie policies are missing, which is a compliance gap. Security posture is adequate with HTTPS and some script-based security hardening but lacks explicit security headers and incident response information. Overall, the website is functional and trustworthy but could improve privacy compliance and contact options.

C

Cava Hispania

cavahispania.ch

50

Cava Hispania is a small retail business based in Basel, Switzerland, specializing in the import and sale of Spanish wines. With over 25 years of experience, the company has established itself as a trusted local wine importer and retailer. The website is professionally designed, targeting mature wine consumers in the Basel region, and offers clear contact information and social media engagement. The business model focuses on direct import from producers and retail sales, including gastronomy supply. Technically, the website uses modern frontend technologies such as React and Webpack, with Craft CMS as the backend platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS but lacks security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. No blocking or WAF mechanisms interfere with access, and no suspicious content or vulnerabilities were detected. Overall, the website demonstrates a solid digital presence with room for improvement in privacy compliance and security best practices.

The website stefan-aufdermaur.ch serves as a personal or professional portfolio site for Stefan Auf der Maur, likely showcasing artistic or photographic work. The site is minimalistic with limited metadata and no structured data, focusing primarily on visual content. The target audience appears to be general visitors interested in the individual's work, with no commercial or transactional features evident. Technically, the site uses basic HTML, CSS, and JavaScript with lazy loading for images, but lacks advanced SEO, accessibility, and performance optimizations. Security posture is weak, with no visible security headers or privacy policies, and no HTTPS status confirmed from the provided data. No contact information or forms are present, limiting user engagement and trust signals. Overall, the site is functional but basic, with room for significant improvements in security, privacy compliance, and user experience.

Genossenschaft Haus Oslo Ateliers is a small cooperative likely focused on providing atelier spaces or community services for artists and creatives in Switzerland. The website is primarily informational, presented in German, and built on the CraftCMS platform. The technical infrastructure is moderate with HTTPS enabled and hosted on an Apache server, but lacks advanced security headers and privacy compliance features. No contact or policy information is provided, which limits user trust and compliance with regulations such as GDPR. The site does not employ analytics or advertising technologies, indicating a minimal digital footprint. Overall, the website serves its niche audience but requires improvements in privacy, security, and contact transparency to enhance credibility and compliance.

Julian Salinas Fotografie is a small photography business based in Switzerland, focusing on artistic and commissioned photography services primarily in Basel and Zurich. The website presents basic information about the business and its offerings, including art works, commissioned projects, exhibitions, portraits, and video projects. The target audience is general, including art enthusiasts and potential clients seeking photography services. Technically, the website is built using React and standard web technologies such as JavaScript and CSS. The site appears moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There are no detected content management systems or third-party analytics or advertising tools integrated. From a security perspective, the website lacks visible security headers and privacy or cookie policies, indicating a low maturity level in security and compliance. No forms or data collection mechanisms are present, reducing immediate data protection concerns but also limiting user engagement. The absence of HTTPS information prevents a full SSL configuration assessment. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website presents a basic but functional online presence for a small photography business. Key recommendations include implementing HTTPS, adding privacy and cookie policies, improving security headers, and providing clear contact information to enhance trust and compliance.

J

Jugendkulturfestival Basel (JKF)

jkf.ch

45

Jugendkulturfestival Basel (JKF) is a small-scale cultural festival focused on youth engagement in Basel, Switzerland. The website serves as an informational platform for the festival's upcoming events, providing program links, partner information, and contact details. The festival targets youth and cultural enthusiasts in the region, positioning itself as a key local cultural event. Technically, the site is built on WordPress with modern web standards, including HTTPS and responsive design, but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and no visible incident response or security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and professional but could improve in compliance and security transparency.

A

ARS Architektur AG

ars-architektur.ch

52

ARS Architektur AG is a Swiss architecture firm located in Münchenstein, Basel region, specializing in architecture, interior design, general planning, project development, and area development. The website presents a professional image with project showcases and a clean, modern design using the Svelte framework. The technical infrastructure is moderately modern with good mobile optimization and SEO practices, but lacks explicit CMS or hosting details. Security posture is weak due to absence of security headers, privacy policies, and incident response information. No HTTPS or SSL configuration details were available from the provided data. Overall, the site is functional and professional but requires improvements in security and privacy compliance to meet modern standards. The risk level is moderate with no critical vulnerabilities detected but gaps in security best practices and compliance.

R

Ruedi Walti Fotografie

ruediwalti.ch

47

Ruedi Walti Fotografie is a small Swiss photography business specializing in architecture, flora, and publication photography. The website serves primarily as a portfolio or informational site with minimal content and no visible contact or policy information. The technical infrastructure is based on modern frontend technologies such as React and Webpack, indicating a contemporary approach to web development. However, the site lacks advanced SEO, accessibility, and performance optimizations, reflecting a basic digital maturity level. Security posture is minimal with no detected security headers or privacy policies, and no HTTPS status was explicitly provided, suggesting room for improvement in securing the site and enhancing user trust. Overall, the risk level is moderate due to the absence of critical security flaws but also due to missing compliance and contact information.

S

Stück Labor Basel

stuecklabor.ch

47

Stück Labor Basel is a well-established cultural initiative founded in 2008 by Theater Basel to promote new Swiss dramaturgy. The program annually supports selected playwrights and collaborates with major Swiss theaters such as Theater Basel, Bühnen Bern, and Luzerner Theater. The website reflects this cultural focus with professional design and consistent branding, targeting theater professionals and audiences interested in Swiss dramaturgy. Technically, the site uses modern JavaScript frameworks (Svelte) and demonstrates good mobile optimization and SEO practices, although some accessibility features are basic. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and no privacy or cookie policies are present, indicating room for improvement in compliance and security best practices. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

B

Back Simonsen

backsimonsen.ch

46

Back Simonsen is a Swiss architecture firm based in Basel, founded in 2015 by Valerie Simonsen and Lukas Back. The firm offers architectural design, planning, and project management services for private and public clients, focusing on sustainable and high-quality building culture. Their portfolio includes interior renovations, private homes, residential complexes, public buildings, and urban quarters. The website presents a professional image with clear contact details and project listings, targeting clients in the Swiss real estate and construction sectors. Technically, the site is built with modern React technology and CSS modules, providing a good user experience and mobile optimization. However, the site lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and security. No blocking or WAF protections hinder content access, and the domain registration data aligns well with the business profile, supporting legitimacy. Overall, the website is a good representation of a small architecture firm with room for improvement in security and privacy compliance.

Christine Moser's website serves as an online portfolio showcasing her art exhibitions and objects, primarily targeting art enthusiasts and museum visitors. The site highlights projects such as 'Double Face' at the Museum für Gestaltung Zürich, positioning her as a niche artist in the contemporary art and design space. The business model is centered on artistic presentation rather than commercial sales or services. Technically, the website employs modern frontend technologies including Svelte and Swiper.js for interactive galleries, indicating a moderate level of digital maturity. The site appears mobile-optimized with good design quality and navigation clarity, although accessibility features are basic. No CMS or hosting provider details are evident. From a security perspective, the site lacks key security headers and explicit privacy or cookie policies, which lowers its compliance posture. The absence of contact information and incident response details further limits trust and security transparency. However, no vulnerabilities or suspicious elements were detected, and the content is safe for general audiences. Overall, the website is functional and professionally presented but would benefit from enhanced security practices, privacy compliance, and clearer contact information to improve trustworthiness and regulatory adherence.

3

3 Mai Avocates

3mai.ch

58

3 Mai Avocates is a small, multilingual law firm based in Geneva, Switzerland, specializing in criminal law, torts and contracts, and public law. The firm is led by founding partners Xenia Rivkin and Sofia Suarez-Blaser and serves clients in French- and German-speaking Switzerland as well as in international disputes. The website is professionally designed with good content quality and clear navigation, supporting multiple languages to cater to a diverse client base. Technically, the site uses modern frameworks such as SvelteKit and integrates Google Maps for location display, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site presents a trustworthy and professional image but would benefit from enhanced compliance and security documentation.

M

Miranda Roux

mirandaroux.net

51

Miranda Roux is a Danish artist based in Geneva, specializing in figurative art that explores surrealism, classical sculpture, and taboo themes. The website serves as a portfolio showcasing her selected works, biography, news, texts, and contact information. The site targets art enthusiasts, collectors, and galleries interested in contemporary European art. Technically, the website is built using the modern Svelte framework, hosted by Infomaniak Network SA, and employs HTTPS with domain transfer protection. However, it lacks DNSSEC and a defined Content-Security-Policy header, which are recommended for enhanced security. The site does not provide privacy or cookie policies, nor does it include direct contact emails or phone numbers, relying solely on a contact form for communication. No tracking or advertising technologies are detected, indicating a privacy-conscious approach but also a lack of compliance documentation. Overall, the website is professional and well-structured but would benefit from improved security headers and privacy compliance measures.

S

Stücheli Pestalozzi Schiratzki Architekt*innen ETH SIA

stuepetzki.ch

44

Stücheli Pestalozzi Schiratzki Architekt*innen ETH SIA is a small architecture firm based in Zürich, Switzerland, specializing in architecture and urban planning projects ranging from new constructions to renovations. The website showcases a portfolio of projects with extensive imagery, targeting clients interested in architectural services. The technical infrastructure is modern, leveraging the SvelteKit framework and JavaScript modules, indicating a contemporary digital presence. However, the site lacks critical privacy and security policies, contact information, and security best practices, which impacts its overall security posture. No WAF or blocking mechanisms were detected, and the site is fully accessible. The WHOIS data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.