Switzerland security reports

K

Kanton Luzern

lu.ch

65

The website www.lu.ch serves as the official digital portal for the Canton of Luzern, Switzerland. It provides comprehensive information about the cantonal government, parliament, administration, municipalities, courts, and citizens' rights. The site also offers news updates, digital services through the my.lu.ch portal, and access to statistical and geographic data. It targets residents, government officials, businesses, and tourists within the region, positioning itself as the authoritative source for cantonal governance and public services. Technically, the website employs a modern technology stack including jQuery, VideoJS, Moment.js, Slick Slider, and CookieConsent for user experience and compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly. It uses HTTPS with strong SSL configuration and includes a cookie consent mechanism aligned with GDPR requirements. Analytics are conducted via Piwik (Matomo), ensuring moderate user tracking with privacy considerations. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit visible security headers such as CSP or X-Frame-Options in the provided data. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered to the official government entity, enhancing trust and legitimacy. Overall, the website demonstrates a high level of professionalism, security, and compliance suitable for a government entity. Recommendations include enhancing security headers, publishing a security policy and incident response contact, and considering a security.txt file for vulnerability disclosures to further strengthen security posture.

B

Biodiversia GmbH

biodiversia.ch

48

Biodiversia GmbH is a small Swiss company specializing in biodiversity promotion and sustainable regional development, primarily serving public and private clients in the Bern, Luzern, Aargau, and Solothurn regions. Their key services include project management, consulting, communication, event organization, invasive species management, and education for sustainable development. The website is professionally designed with clear navigation and relevant content, targeting environmentally conscious organizations and stakeholders. Technically, the site uses older JavaScript libraries such as jQuery 1.6.4 and Modernizr, with basic mobile optimization and SEO. Security posture is moderate but could be improved by updating libraries, adding security headers, and enforcing HTTPS. Privacy compliance is limited, with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and functional but would benefit from technical and compliance enhancements.

A

Apotheke Meyer Roggwil AG

apotheke-meyer.ch

49

Apotheke Meyer Roggwil AG is a local Swiss pharmacy and health center based in Roggwil, Switzerland. The company offers a broad range of pharmacy retail products, medical services including vaccinations, health analyses, and holistic complementary medicine. It positions itself as a community-focused, independent pharmacy with a strong emphasis on customer service and health education through events and a health blog. The website is professionally designed with clear navigation and good mobile optimization, supporting a positive user experience for its target audience. Technically, the site uses the SIQUANDO Pro CMS platform with jQuery and includes cookie consent mechanisms and privacy policies aligned with GDPR requirements. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response contacts could be improved. WHOIS data confirms the legitimacy and consistency of the business registration. Overall, the website reflects a trustworthy, professional small healthcare business with a solid digital presence.

F

fenaco Genossenschaft

landimelchnau.ch

62

The website landi.swiss/de-CH/cooperative/landi-melchnau-buetzberg represents the LANDI Melchnau-Bützberg, an agricultural cooperative in Switzerland under the parent organization fenaco Genossenschaft. The cooperative supports local farmers and private persons with agricultural supplies, retail goods, and energy services including fuel stations and electric vehicle charging. The website is built on a modern Angular framework with integration of Google Tag Manager and a cookie consent mechanism, indicating a moderate level of digital maturity. However, it lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Security posture is generally good with HTTPS and domain transfer protection, but DNSSEC is not enabled, and security headers are not explicitly detected. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

A

Arbonia AG

smart-doors.de

58

Arbonia AG is a Swiss-based company specializing in smart door solutions for residential buildings, offering keyless access systems branded as SmartDOOR. The company collaborates with KIWI.KI GmbH for sensor technology integration and distributes products through established system partners in Germany and Switzerland. Their business model combines manufacturing, distribution, and digital access management services via the KIWI Portal, targeting residents, landlords, and service providers. The website is professionally designed, multilingual, and provides comprehensive product information and contact options. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and cookie consent management tools. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for corporate domains. Overall, the website reflects a mature digital presence with strong business credibility and moderate security maturity. There are opportunities to enhance security transparency and incident response readiness. The site is safe for general audiences and free from adult or questionable content.

S

SvizzeraEnergia

svizzeraenergia.ch

63

SvizzeraEnergia is an official program of the Swiss Federal Office of Energy aimed at supporting voluntary measures to implement Swiss energy policy. The website serves as an informational platform targeting stakeholders in the Swiss energy sector and the general public interested in energy policy. It is positioned as a government-backed initiative with a focus on sustainability and energy efficiency. Technically, the website is built using modern static site generation technology (Gatsby) and includes multimedia support via Video.js and Uppy for file uploads, indicating a moderate level of digital maturity. However, the site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no detected security headers or incident response information, suggesting room for improvement in security best practices. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security measures.

O

Office fédéral de l'énergie (Swiss Federal Office of Energy)

suisseenergie.ch

64

SuisseEnergie is an official program of the Swiss Federal Office of Energy aimed at promoting voluntary implementation of Swiss energy policy. The website serves as an informational platform targeting Swiss residents, energy professionals, and policymakers, providing resources and encouragement for energy efficiency and renewable energy adoption. The site is well-branded and consistent with government standards, reflecting a strong market position as a trusted public sector initiative. Technically, the website is built using modern web technologies including React and Gatsby, ensuring a performant and mobile-optimized experience. The use of static site generation contributes to moderate loading speeds and good SEO practices. However, there is room for improvement in accessibility and the addition of security headers. From a security perspective, the site benefits from HTTPS encryption and does not expose sensitive data. Nonetheless, the absence of security headers, privacy and cookie policies, and incident response contact information indicates gaps in compliance and security best practices. No vulnerability disclosure or security.txt files were found, limiting transparency for security researchers. Overall, SuisseEnergie presents a low-risk profile with high business credibility due to its government affiliation. Strategic improvements in privacy compliance and security policy transparency would enhance trust and regulatory adherence.

D

Das Gebäudeprogramm

ilprogrammaedifici.ch

69

Das Gebäudeprogramm is an official Swiss government-backed initiative aimed at promoting energy efficiency and renewable energy investments in buildings. The website provides comprehensive information about funding opportunities, supported measures, and procedural guidance for applicants. It targets homeowners, builders, and renovators across Switzerland, offering multilingual support in German, French, and Italian. The program is a key pillar of Swiss energy and climate policy, supported by federal and cantonal authorities. Technically, the website employs modern web standards, uses Matomo for privacy-conscious analytics, and is well-optimized for mobile and accessibility. Security posture is strong with HTTPS and security headers, though it lacks explicit incident response or vulnerability disclosure pages. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and serves as a reliable resource for energy efficiency funding in Switzerland.

D

Das Gebäudeprogramm

leprogrammebatiments.ch

69

Das Gebäudeprogramm is an official Swiss government initiative supporting energy-efficient building and renovation projects. The website provides comprehensive information on funding opportunities, energy-saving measures, and application procedures targeted at homeowners and builders in Switzerland. It is well-positioned as a key pillar in Swiss energy and climate policy, backed by federal and cantonal authorities. The digital infrastructure is modern and secure, employing HTTPS and security headers, with Matomo analytics for user tracking. The site offers a professional user experience with clear navigation and multilingual support. Security posture is strong, though improvements could be made in cookie consent and incident response transparency. Overall, the website is trustworthy, compliant with GDPR, and serves its public service mission effectively.

T

TRINTEC Informatik GmbH

trintec.ch

48

TRINTEC Informatik GmbH is a Swiss-based IT services company specializing in consulting, sales, installation, and support of IT solutions including PCs, servers, networks, hosting, and Digitalstrom systems. The company targets both businesses and private individuals, positioning itself as a professional provider of comprehensive IT solutions. The website reflects a small-sized, regionally focused business with a consistent brand presence and clear contact information. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and Bootstrap, with modern fonts and Google Tag Manager for analytics. Mobile optimization is good, though accessibility and SEO could be improved. Security posture is solid with HTTPS and CSRF tokens but lacks important security headers and a published security policy. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could enhance compliance and security practices.

G

Gemeinde Raperswilen

raperswilen.ch

58

Gemeinde Raperswilen operates as the official municipal government website for the community of Raperswilen, Switzerland. It provides residents and visitors with comprehensive information about local government, community services, news, events, and digital administrative services (eServices). The website is positioned as a trusted local government portal, serving a small community with essential public services and transparent communication. Technically, the website is built on the GOViS Swiss eGovernment CMS platform, utilizing modern JavaScript libraries such as jQuery and Font Awesome for UI enhancements. It implements a cookie consent mechanism compliant with GDPR, and uses Matomo analytics configured for privacy. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance characteristics. From a security perspective, the site enforces HTTPS and employs cookie consent best practices. However, it lacks explicit HTTP security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's governmental nature, confirming legitimacy and trustworthiness. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include enhancing HTTP security headers and publishing security policies to further strengthen trust and security posture.

G

Gemeinde Kemmental

kemmental.ch

68

Gemeinde Kemmental operates as a municipal government portal serving the residents and stakeholders of the Kemmental community in Switzerland. The website provides comprehensive information about local governance, administrative services, political activities, community life, and upcoming events. It positions itself as an essential public service platform with a focus on accessibility and user engagement through online services such as the Online-Schalter. Technically, the site leverages modern web technologies including jQuery, Font Awesome, and the GOViS CMS tailored for eGovernment solutions, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforced and privacy compliance demonstrated through a detailed privacy policy and cookie consent mechanism. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, professional, and well-aligned with its public service mission.

G

Gemeindeverwaltung Gottlieben

gottlieben.ch

61

The website www.gottlieben.ch serves as the official digital presence of the municipality of Gottlieben in Switzerland. It provides comprehensive information about local government, politics, administration, cultural events, and public services aimed at residents, local businesses, and visitors. The site is well-structured with clear navigation and a consistent branding approach, reflecting its role as a trusted government resource. Technically, the website employs a modern technology stack including jQuery, Font Awesome, Magnific Popup, and Matomo analytics, built on the GOViS CMS platform. It demonstrates good mobile optimization and accessibility features, ensuring usability across devices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses Matomo with secure cookie settings, but lacks several recommended security headers and a visible cookie consent mechanism. There is no published security policy or incident response contact, which could be improved to enhance trust and compliance. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website is a reliable and professional government portal with good content quality and technical implementation. Strategic improvements in privacy compliance and security policies would further strengthen its posture and user trust.

S

Schweizer Bäuerinnen & Bauern

paysanssuisses.ch

46

Paysannes & paysans suisses is a prominent Swiss agricultural association dedicated to promoting local farming, sustainable agriculture, and farm products. The website serves as an information hub for Swiss consumers interested in farm life, seasonal produce, and direct farm sales. It also offers event information and an online shop for related merchandise. The organization maintains a strong market position as a leading voice for Swiss farmers, supported by consistent branding and professional content.

S

Schweizer Bäuerinnen & Bauern

swiss-farmers.ch

51

Swiss Farmers is a professionally managed website representing Swiss agricultural interests, providing comprehensive information about farming, fresh produce, and farm experiences. The site serves as an authoritative platform for promoting Swiss agriculture and connecting consumers with farm shops and events. The business model focuses on information dissemination, farm experience promotion, and an online shop for related products. Technically, the site is built on WordPress with modern plugins and technologies such as Yoast SEO, Google Tag Manager, and Google Maps integration, ensuring good performance and SEO optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-branded, and compliant with GDPR and cookie regulations.

S

Schweizer Bäuerinnen & Bauern

contadinisvizzeri.ch

46

Schweizer Bäuerinnen & Bauern operates a well-established online platform dedicated to Swiss agriculture, providing rich informational content, farm visit opportunities, seasonal calendars, and an online shop for related materials. The website targets a broad audience interested in local farming, sustainability, and regional products. Technically, the site is built on WordPress with modern SEO and compliance plugins, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though explicit security policies and incident response contacts are not published. Overall, the domain registration aligns well with the business, enhancing trustworthiness. Strategic recommendations include publishing a formal security policy and vulnerability disclosure to further strengthen security transparency.

G

Golfclub Wylihof

golfclub.ch

47

Golfclub Wylihof is a well-established Swiss golf club offering a 27-hole championship course, practice facilities, a restaurant, golf school, and shop. The club targets golf enthusiasts, members, and corporate clients in the Swiss Mittelland region. The website is built on WordPress with modern plugins supporting multilingual content, SEO, and user engagement. The club demonstrates commitment to sustainability through recognized certifications. Security posture is adequate with HTTPS and reCAPTCHA implemented, though some security headers and incident response details are missing. Privacy compliance is addressed with a cookie consent banner and privacy policy. Overall, the site is professional, trustworthy, and serves its audience effectively.

C

Cmsbox GmbH

cmsbox.ch

57

Cmsbox GmbH is a Swiss-based technology company specializing in a proprietary content management system designed to simplify website editing and enable rapid custom web design implementation. The company targets businesses and web professionals seeking efficient CMS solutions with a focus on ease of use and responsive design. Their market position is niche, emphasizing Swiss software quality and personalized service. Technically, the website employs modern web standards, integrates Google Analytics, Tag Manager, and reCAPTCHA for security and analytics, and uses their own Cmsbox CMS platform. The site is mobile-optimized and presents a professional user experience. Security posture is solid with HTTPS and anti-bot measures, though lacking explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and professional, with clear contact information and social media presence. Recommendations include enhancing privacy compliance and security transparency to improve trust and compliance.

G

Gesundheitscluster Lengg

gesundheitscluster.ch

53

Gesundheitscluster Lengg is a Swiss healthcare cluster association that coordinates specialized healthcare, research, and educational institutions in the Lengg area of Zurich. The organization fosters collaboration and innovation among its members to enhance patient care, research, and education. The website reflects a mature digital presence built on WordPress, featuring modern SEO practices, structured data, and interactive elements such as contact and newsletter forms protected by Google reCAPTCHA. Security posture is strong with HTTPS and spam protection, though some HTTP security headers could be improved. Privacy policies and cookie consent mechanisms are present and GDPR compliant. Overall, the site is professional, trustworthy, and well-optimized for its target audience of healthcare professionals, patients, and local authorities.

S

Schweizer Bäuerinnen & Bauern

schweizerbauern.ch

53

Schweizer Bäuerinnen & Bauern is a well-established Swiss agricultural organization focused on providing comprehensive information about Swiss farming, promoting local farm products, and engaging the community through stories, videos, and an online shop. The website targets Swiss consumers interested in agriculture and fresh farm products, offering tools such as a farm shop locator and seasonal calendar. Technically, the site is built on WordPress with modern plugins for SEO, multilingual support, and GDPR compliance, demonstrating a mature digital infrastructure. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

C

Call-Up Communication & Design

call-up.ch

50

Call-Up Communication & Design is a Swiss-based web design agency specializing in affordable and professional web solutions for small and medium-sized enterprises (KMU) across Switzerland. With over 20 years of experience and more than 650 customer projects completed, the company offers a comprehensive range of services including web design, CMS implementation (notably Contao), e-commerce solutions, hosting, SEO, and online marketing. Their market position is that of a trusted local agency with a strong portfolio and client references. Technically, the website is built on modern web standards with a CMS backend, uses common JavaScript libraries, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-aligned with the business claims. Recommendations include enhancing privacy compliance with cookie consent, publishing a security policy, and adding incident response contacts to improve trust and compliance.

Auto Lang - Shop operates a specialized e-commerce platform focused on Mercedes-Benz branded automotive accessories and lifestyle products, targeting primarily German-speaking customers in Switzerland. The website presents a professional and consistent brand image with a clear market niche in premium automotive merchandise. The business model revolves around online retail with fast shipping and a curated product selection. Technically, the site leverages Shopify's robust e-commerce infrastructure, modern JavaScript modules, and integrates multiple marketing and analytics tools such as Facebook Pixel and Klaviyo, indicating a mature digital marketing approach. Security posture is strong with HTTPS enforcement, security headers, and CAPTCHA protections, although explicit privacy and terms of service documentation are missing, which could impact compliance. Overall, the site is trustworthy and well-implemented but would benefit from enhanced transparency and compliance documentation.

K

Kompetenzzentrum Soziale Dienste Seerücken

sdseeruecken.ch

67

Kompetenzzentrum Soziale Dienste Seerücken is a regional government entity providing social services to the communities in the Seerücken area of Switzerland. The website serves as an information hub for residents, offering news, service descriptions, and contact details. It maintains a professional and accessible design, supporting multiple municipalities with links to partner sites. The technical infrastructure includes modern JavaScript libraries such as jQuery and Font Awesome, and it is built on the GOViS CMS platform. The site is mobile-optimized and implements accessibility best practices. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanism, and GDPR adherence. Analytics are handled via Matomo, emphasizing privacy. However, the site lacks explicit security policy and incident response contact pages, which could enhance trust and preparedness. Overall, the site is trustworthy, well-maintained, and suitable for its public service role.

S

Schule Salenstein im Grund

schule-salenstein.ch

58

Schule Salenstein im Grund is a local primary education institution based in Salenstein, Switzerland. The website serves as an informational portal for students, parents, staff, and the local community, providing school news, event calendars, contact information, and administrative resources. The site is built on the i-web CMS platform and uses Matomo analytics with a user consent mechanism, reflecting a moderate level of digital maturity. The content is well-structured, primarily in German, and targets a general audience interested in local education services. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with responsive design for mobile devices. While the site uses HTTPS and secure login forms, it lacks visible advanced security headers and explicit security policies. The performance is moderate, and accessibility features are present, contributing to a good user experience. From a security perspective, the site demonstrates basic best practices such as HTTPS enforcement and no exposed sensitive data. However, it lacks publicly available incident response or vulnerability disclosure policies. Privacy compliance is addressed through a privacy and cookie policy with consent mechanisms, aligning with GDPR requirements. The domain registration data is consistent with the website's claims, indicating legitimacy and trustworthiness. Overall, Schule Salenstein im Grund's website is a professional, secure, and compliant educational portal with room for improvement in security policy transparency and technical security headers. The risk level is low, with recommendations focusing on enhancing security posture and policy disclosures.

S

Digitale Themen- und Erlebniswege – smarTrails

smartrails.ch

64

The website smartrails.ch presents itself as a digital platform focused on thematic and experience trails, likely serving a niche market in Switzerland. The site uses modern web technologies such as Nuxt.js, Vue.js, and Tailwind CSS, indicating a contemporary technical infrastructure with good mobile optimization and user experience. However, the content is basic and lacks comprehensive business and contact information, which limits the depth of user engagement and trust signals. Security posture is weak due to the absence of security headers and explicit policies, and privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is functional and professionally designed but requires significant improvements in security, privacy, and business transparency to enhance trust and compliance.

The website gmd-tg.ch currently serves as a default hosting start page provided by TRINTEC Hosting, indicating that the domain is hosted by TRINTEC and redirects users to the main site trintec.ch. The business focus appears to be web hosting services, targeting a general audience primarily in Switzerland. The site content is minimal, with no privacy, cookie, or terms of service policies present, and limited contact information consisting of an email and physical address. Technically, the site uses basic HTML and CSS without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and no incident response or vulnerability disclosure information is provided.

S

Stolz WEB GmbH

stolzweb.ch

47

Stolz WEB GmbH is a Swiss-based small technology company specializing in custom web development, online shops, and web applications. Founded in 2012, the company offers tailored software solutions including their proprietary CMS 'Simpli', targeting designers, agencies, and businesses seeking bespoke digital solutions. The website reflects a professional and consistent brand image with clear service descriptions and customer testimonials, positioning Stolz WEB as a reliable niche player in the Swiss web development market. Technically, the site employs modern web technologies such as HTML5, CSS, JavaScript, PHP, and Bootstrap, with a moderate performance profile and good mobile optimization. Analytics are implemented using Google Analytics with IP anonymization and Matomo, indicating some privacy awareness. Security posture is adequate with HTTPS enabled but lacks standard security headers and explicit security policies. Contact information is comprehensive and clearly presented, though privacy and terms policies are missing. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.

B

Basler Kantonalbank

baslerkantonalbank.ch

76

Basler Kantonalbank is a well-established regional Swiss bank providing a broad range of financial services to private customers. The website targets private clients with offerings including accounts, cards, investment advisory, mortgages, and pension planning. The bank maintains a professional online presence with consistent branding and a clear navigation structure. Technically, the website uses modern web technologies and implements cookie consent via OneTrust, ensuring compliance with basic privacy standards. Security posture is strong with HTTPS enforced and good SSL configuration, although explicit security headers and incident response information are not publicly available. Overall, the website reflects a mature digital infrastructure suitable for a large financial institution, with room for improvement in transparency around privacy policies and security disclosures.

C

Creanet Internet Service AG

creanet.ch

77

Creanet Internet Service AG is a Swiss-based web agency specializing in web design, IT security, cloud solutions, and digital signage, primarily serving the regions of Luzern, Sursee, Zug, Basel, and Zürich. The company positions itself as a regional expert offering tailored IT and web services to small and medium-sized enterprises, emphasizing project planning, execution, and ongoing support. Their service portfolio includes web development, SEO, online marketing, IT security solutions such as ESET and SonicWALL, and cloud services, supported by a professional and user-friendly digital presence. Technically, the website is built on the CONTENS CMS platform and leverages modern web technologies including jQuery, Flickity for carousels, and Lottie for animations. Analytics are implemented via Google Analytics and Matomo, with a robust cookie consent mechanism powered by CookieHub, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO practices, although accessibility could be further enhanced. From a security perspective, the site enforces HTTPS and employs cookie consent for privacy compliance. While explicit security headers are not evident, the company promotes IT security services and uses reputable security products. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, Creanet Internet Service AG presents a professional, trustworthy, and well-structured online presence with strong regional market positioning. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility standards to further strengthen their security posture and compliance.

H

Hochparterre

klima-bauen.ch

46

Klima-bauen.ch is a Swiss media platform operated by Hochparterre AG, focusing on climate-conscious architecture, landscape architecture, and spatial planning. The website offers a rich collection of news articles, practical tips, publications, and videos aimed at professionals in the building and planning sectors. It positions itself as a niche media outlet dedicated to promoting sustainable and climate-friendly building practices. Technically, the site is built on TYPO3 CMS with Bootstrap and integrates advertising and tracking services such as adition and Google Tag Manager. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks important security headers and explicit privacy and cookie policies, indicating compliance gaps. Contact information is limited to a login form for subscribers, with no direct emails or phone numbers publicly available. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices.

S

SPOTHEROZ

spotheroz.ch

56

SPOTHEROZ is a Swiss-based creative studio specializing in the intersection of planning, design, and technology. The company positions itself as a niche player offering art direction, design, and technology integration services primarily targeting creative professionals and businesses seeking innovative digital solutions. The website reflects a modern and visually appealing design, leveraging Webflow CMS and advanced 3D graphics via Spline, indicating a moderate level of digital maturity and technical sophistication. However, the site lacks comprehensive privacy and cookie policies, direct contact information such as emails or phone numbers, and explicit security policies, which are critical for compliance and trust. The security posture is minimal with no detected security headers or incident response contacts, representing an area for improvement. Overall, the website is professional and credible but would benefit from enhanced security and privacy compliance measures to reduce risk and improve user trust.

SPOT Agency is a well-established creative digital agency based in St. Moritz, Switzerland, with a history dating back to 1990. The company specializes in developing strong brands, digital products, and e-commerce solutions primarily targeting the tourism, sport, and lifestyle sectors. Their market position is solid within their niche, supported by a professional website that reflects their expertise and creative capabilities. The agency leverages modern web technologies such as Next.js and React, ensuring a performant and mobile-optimized user experience. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism, reflecting adherence to GDPR standards. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website and business present a trustworthy and professional image suitable for their target audience.

S

SPOT Werbung AG

spotbase.ch

61

SPOT Werbung AG operates SPOT.BASE, a design-driven coworking and meeting space hub located in St. Moritz, Switzerland. The business targets individuals and small teams seeking flexible workspace solutions without long-term commitments. Their services include various desk types, meeting rooms, workshop spaces, and executive offices, all bookable online with digital door access via Salto KS technology. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Next.js and DatoCMS, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no exposed sensitive data, though improvements are recommended in privacy compliance, such as implementing cookie consent and publishing security policies. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

H

hosttech AG

hosttech.ch

64

hosttech AG is a Swiss-based technology company specializing in web hosting, domain registration, and server hosting services. Established in 2000, it holds a strong position in the Swiss market with subsidiaries in Austria and Germany, targeting businesses and individuals seeking reliable hosting solutions. The website reflects a mature digital presence with a professional design and clear navigation tailored for its target audience. Technically, the site is built on WordPress with Elementor, leveraging modern analytics and marketing tools such as Matomo and HubSpot, while maintaining GDPR compliance through comprehensive privacy and cookie policies. Security posture is robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates a trustworthy and professional business with a solid technical foundation and good privacy practices.

S

SPOT Group

spotgroup.ch

11

SPOT Group is a well-established Swiss branding and digital design network operating since 1990 with offices in St. Moritz and Locarno. The company specializes in creating impactful brands and digital products primarily for the tourism, sports, and lifestyle sectors. Their market position is strong within their niche, supported by a professional portfolio and clear business focus. Technically, the website is built on modern frameworks such as Next.js and React, with integration of media players and a CMS likely DatoCMS, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the website reflects a professional and trustworthy business with good compliance and user experience.

T

Tollkirsch AG

tollkirsch.ch

46

Tollkirsch AG is a creative marketing and branding agency based in Winterthur, Switzerland, specializing in branding, corporate identity, corporate design, SEO, web design, and digital marketing. The company positions itself as a boutique agency delivering tailored, bold, and effective brand strategies and communications to businesses seeking to enhance their market presence. The website reflects a professional and consistent brand image with clear service offerings and a portfolio of references, targeting companies looking for comprehensive marketing solutions. Technically, the website is built on the Cmsbox CMS platform, integrating modern web technologies including Google reCAPTCHA for security and Mailchimp for marketing automation. The site is mobile-optimized, SEO-friendly, and uses analytics tools such as Piwik/Matomo for user tracking. Performance is moderate with good accessibility and navigation clarity. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or suspicious activities were detected. Privacy compliance is strong with GDPR-aligned policies and transparent data collection practices. Overall, the website demonstrates a high level of professionalism, trustworthiness, and digital maturity, with minor recommendations to enhance security headers and publish formal security policies to further strengthen its posture.

Sportschule Tennis Academy GmbH operates a specialized tennis training and facility business in Switzerland, targeting a broad audience from toddlers to seniors and from beginners to top athletes. The website presents core services including a tennis academy and indoor tennis halls with multiple courts and an indoor golf facility. The business is positioned as a local sports education and facility provider with a small company size and a focused service offering. Technically, the website is built on the Flectra CMS platform, utilizing modern web technologies such as Google Analytics and Google Tag Manager for user tracking. The site is moderately optimized for mobile devices and has basic SEO and accessibility features. Performance is moderate with no critical technical issues detected. However, the site lacks advanced security headers and explicit privacy or cookie policies. From a security perspective, HTTPS is enabled and CSRF tokens are present in scripts, indicating some security awareness. Nonetheless, the absence of security headers, privacy policies, and incident response contacts represents gaps in compliance and security maturity. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and moderately professional but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and regulatory adherence.

M

Meier + Cie AG

shn.ch

10

Schaffhauser Nachrichten is a well-established regional news media company based in Switzerland, operating since 1861. The website serves the Schaffhausen region with news, classifieds, multimedia content, and subscription services. It maintains a strong market position as a trusted local news source with a comprehensive digital presence including e-paper, newsletters, and social media engagement. The business model relies on subscriptions and advertising revenue, targeting residents and businesses in the region. Technically, the site uses Drupal 9 CMS with React components, integrates modern analytics and push notification tools, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

M

MTF Solutions AG

mtf.ch

10

MTF Solutions AG is a Swiss IT company specializing in digital transformation, consulting, cloud solutions, and holistic IT services tailored for small and medium-sized enterprises (SMEs). With a strong regional presence across Switzerland and Liechtenstein, the company positions itself as a trusted partner for future-oriented digitalization, offering a comprehensive portfolio including IT management, cybersecurity, modern workplace solutions, business applications, professional services, and cloud infrastructure. Their market position is solid within the Swiss SME segment, emphasizing competence, innovation, and regional proximity. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, and SVG graphics for scalable visuals. The presence of remote support links via TeamViewer indicates operational readiness to assist clients efficiently. The site is mobile-optimized with lazy loading for performance, though accessibility features could be enhanced. SEO practices are good, supported by structured data and meta tags. From a security standpoint, the website enforces HTTPS with strong SSL configuration and includes essential security headers. Cookie consent mechanisms comply with GDPR, and no exposed sensitive data or vulnerable libraries were detected. However, explicit incident response contacts and vulnerability disclosure policies are not found, representing areas for improvement. Overall, MTF Solutions AG demonstrates a mature digital presence with strong business credibility and compliance posture. The risk profile is low, but strategic enhancements in security transparency and accessibility would further strengthen trust and operational resilience.

M

Musikbüro Basel

musikbuerobasel.ch

64

Musikbüro Basel is a regional non-profit organization dedicated to promoting pop music and supporting the music community in the Basel region of Switzerland. The organization offers various funding programs, workshops, infrastructure support, and networking opportunities to musicians, bands, clubs, and event organizers. Their website reflects a clear focus on community engagement and cultural support, positioning them as a key player in the local music scene. Technically, the website is built on Magnolia CMS and uses modern web technologies including HTML5, CSS, and JavaScript. It integrates Google Analytics with IP anonymization and provides a cookie consent mechanism, indicating a moderate level of digital maturity and privacy awareness. The site is mobile-optimized and offers good navigation and content relevance. From a security perspective, the site uses HTTPS with a good SSL configuration and anonymizes user IPs in analytics. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected, suggesting a solid but improvable security posture. Overall, the website is trustworthy, professional, and compliant with basic privacy regulations such as GDPR. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance their security and compliance stance.

U

Uptown – Verein für Musik, Kunst, Kultur und Gesellschaft

vereinuptown.ch

68

Uptown is a small non-profit association based in Basel, Switzerland, focused on promoting music, art, culture, and society. Founded in 2020 during the COVID-19 pandemic, it aims to strengthen cultural infrastructure and support cultural creators in the Basel region, particularly around the Kaschemme venue. The website is built on WordPress and presents a professional design with clear navigation and relevant content about projects, support, and partners. Technically, the site uses modern web technologies but lacks some advanced security headers and privacy compliance features. Security posture is moderate with HTTPS enabled but missing security policies and headers. No forms or tracking scripts are present, indicating minimal data collection and user tracking. Overall, the site is trustworthy and serves its community purpose well but would benefit from enhanced privacy and security measures.

The Römisch-Katholische Kirche Basel-Stadt website serves as the official online presence of the Roman Catholic Church in Basel-Stadt, Switzerland. It provides comprehensive information about church activities, pastoral care, social services, and community engagement. The site targets local residents and members of the Catholic community, offering resources and news relevant to their spiritual and social needs. The business model is non-profit, focusing on religious and community services within the regional government and non-profit sectors. Technically, the website employs a modern web application framework (webIQ 6.1) and integrates popular JavaScript libraries such as jQuery and Bootstrap for responsive design. It uses multiple analytics platforms including Matomo, Microsoft Clarity, and Google Analytics, alongside a robust privacy consent management system powered by Truendo. The site is mobile-optimized and demonstrates good performance and accessibility basics. From a security perspective, the website enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the website presents a professional, trustworthy, and secure platform for its intended audience, though improvements in privacy policy transparency, security header implementation, and contact information visibility are recommended.

M

M. DESAX AG

mdesaxag.ch

54

M. DESAX AG is a Swiss family-owned company established in 1999 specializing in the sale, rental, and installation of construction elevators and transport platforms. The company serves the Swiss construction and event markets with a broad product range including transport platforms, material elevators, and rope winches. Their market position is solid with a large rental fleet and references from significant projects, indicating reliability and expertise. Technically, the website uses a proprietary CMS (admiralCX) with modern technologies such as jQuery, FontAwesome, Google Analytics, and Cookiebot for cookie consent management. The site is well-structured, mobile-optimized, and provides clear contact information. Security posture is good with HTTPS and standard security headers, but lacks explicit security policies or incident response contacts. Privacy compliance is supported by a detailed cookie consent mechanism, though no dedicated privacy policy page was found in the provided content. Overall, the website is professional, trustworthy, and suitable for its target audience.

H

Hutterli AG

hutterli-ag.ch

44

Hutterli AG is a Swiss-based manufacturing company specializing in precision CNC machining services including milling, turning, 3D and 5-axis machining, and measurement. With over 35 years of experience since its founding in 1979, the company serves industrial clients requiring high-quality, complex single and series parts. The website reflects a medium-sized, established business with a focus on quality and technical expertise. Technically, the site is built on WordPress using common plugins such as Yoast SEO and WPBakery Page Builder, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

Arenenberg is a culturally significant hospitality and educational estate located in Switzerland, owned by the Canton of Thurgau since 1906. The website presents a comprehensive offering including hotel accommodations, dining, museum visits, seminars, events, wine experiences, and public courses. The business targets tourists, cultural visitors, and local community members seeking educational and leisure activities. Technically, the website is built on WordPress with WooCommerce and uses modern libraries and plugins to provide multilingual support, booking integration, and GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and formal policies are missing. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

E

Elisabeth Böhni

praxis-boehni.ch

49

Praxis Böhni is a small natural medicine healthcare practice based in Kreuzlingen, Switzerland, specializing in holistic treatments including hormonal dysregulation, allergies, metabolic disorders, musculoskeletal pain, autoimmune diseases, and tumor support. The website is professionally designed using WordPress with Elementor and provides clear contact information and a contact form for patient inquiries. The business targets local patients seeking alternative medical treatments. Technically, the site uses modern WordPress plugins and themes but lacks advanced security headers and cookie consent mechanisms, which are important for compliance and security. The site is served over HTTPS with a valid SSL certificate, ensuring secure communication. Security posture is moderate with room for improvement in headers and incident response transparency. Overall, the website is trustworthy and professional but could enhance privacy compliance and security best practices.

G

Gemeinde Turbenthal

turbenthal.ch

68

Gemeinde Turbenthal operates as the official municipal government website for the Turbenthal community in Switzerland, providing residents and visitors with access to local government services, community news, events, and administrative information. The site is well-positioned as a trusted local authority with a focus on energy sustainability, as evidenced by its Energiestadt Gold certification. The website targets local residents and stakeholders seeking municipal services and information.

D

Die Urologie

dieurologie.ch

47

Die Urologie is a specialized urology medical center based in the Thurgau region of Switzerland, offering comprehensive urological services including consultation, operative treatments, men's health checks, and second opinions. The website presents a professional image with detailed information about doctors, services, and multiple physical locations, targeting patients in the local German-speaking community. The business is positioned as a leading urology provider in the region with experienced specialists and FMH membership credentials. Technically, the website is built on WordPress with common plugins such as Yoast SEO, WPBakery Page Builder, and Contact Form 7, providing a modern and responsive user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by adding security headers and incident response information. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, suitable for its healthcare audience.

E

ERMARINE GmbH

ermarine.ch

48

ERMARINE GmbH operates as a specialized boat service provider and dealer located in Switzerland, serving the Boden- and Zürichsee regions. Their offerings include boat winter storage, repairs, rentals, sales, and motorhome rentals, targeting boat owners and leisure travelers. The company maintains a professional online presence with clear contact details and social media engagement, positioning itself as a trusted local partner in the transportation sector. Technically, the website is built on Joomla CMS using the Helix Ultimate framework, incorporating modern libraries such as jQuery and Bootstrap, and is mobile responsive with moderate performance. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the site is professional and trustworthy but lacks some compliance and security best practices.

M

Macardo Swiss Distillery GmbH

macardo.ch

61

Macardo Swiss Distillery GmbH operates a professional and well-branded website focused on premium spirits production, hospitality services including a bed and breakfast, and event hosting in the Thurgau region of Switzerland. The company positions itself as a premium Swiss distillery with a strong local presence and an e-commerce platform for direct sales. The website demonstrates a mature digital infrastructure built on WordPress with WooCommerce, enhanced by modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel. The site is mobile-optimized and SEO-friendly, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration details align well with the business profile, indicating legitimacy and transparency. Overall, the website reflects a trustworthy and credible business with room for enhanced security policies and incident response disclosures.