Switzerland security reports

N

NAEF PARTNERS AG

naefpartners.ch

52

NAEF PARTNERS AG is a Swiss-based boutique consulting firm specializing in corporate development, sales performance, change management, and leadership coaching. The company targets business professionals and organizations seeking tailored consulting services to enhance strategy implementation and leadership effectiveness. Their market position is that of a high-end consulting boutique with a focus on personalized and human-centric business development approaches. Key services include strategy development, leadership empowerment, sales optimization, and change management interventions. Technically, the website is built on the SilverStripe CMS platform and incorporates modern web technologies such as Google Analytics and Google Tag Manager for analytics, along with jQuery-based UI components like Fancybox and Flexslider. The site is mobile-optimized with good navigation and SEO practices, though some accessibility features could be improved. Performance is moderate with asynchronous loading of analytics scripts. From a security perspective, the site enforces HTTPS with an excellent SSL configuration and anonymizes IP addresses in Google Analytics, reflecting some privacy awareness. However, it lacks important security headers such as Content-Security-Policy and X-Frame-Options, and does not provide a cookie consent mechanism or a published security policy. No vulnerability disclosure or incident response contacts are present, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-aligned with the business's consulting focus. The main risks relate to privacy compliance gaps and missing security best practices. Strategic improvements in these areas would strengthen the security posture and regulatory adherence, supporting the company’s credibility and client trust.

S

schweizeraktien.net AG

schweizeraktien.net

50

schweizeraktien.net AG operates a specialized online platform providing comprehensive information, analyses, and commentary on Swiss stocks, including small caps, unlisted shares, and the OTC market. The company targets investors and financial market participants interested in Swiss equities, positioning itself as a niche content provider within the finance sector. The website is professionally designed and regularly updated, reflecting a focused business model centered on financial content delivery. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO Premium for search optimization, Wordfence for security, and Real Cookie Banner Pro for privacy compliance. Integration with Google Tag Manager and various Google services indicates a mature digital infrastructure. Performance and mobile optimization are good, though some accessibility features could be enhanced. From a security perspective, the site employs HTTPS and Wordfence firewall protections, alongside Google reCAPTCHA on forms to mitigate spam. Cookie consent mechanisms comply with GDPR and Swiss data protection laws. However, explicit security headers like Content-Security-Policy are not detected and should be implemented to strengthen defenses. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a low-risk profile with strong privacy and security practices, though the absence of WHOIS registration data raises questions about domain legitimacy. Continuous monitoring of domain registration and further security hardening are recommended to maintain trust and compliance.

S

simple & co gmbh

pokus.ch

55

Pokus is a small Zürich-based digital agency operating under the legal name simple & co gmbh. The company specializes in UX design, web development, CMS solutions, creative coding, and digital concepts including WebApps, SPA, IoT, and interactive installations. Their market position is that of a niche local agency focused on delivering tailored digital solutions to businesses and organizations. The website presents a professional image with clear contact information and a skilled team, but lacks formal privacy and cookie policies, which are important for compliance. Technically, the website uses a modern technology stack including Python/Django backend and frontend frameworks like Vue and React. The presence of technologies for mobile platforms and IoT indicates a diverse technical capability. The website is moderately performant and mobile optimized, though accessibility and SEO optimizations are basic. No analytics or tracking scripts were detected, suggesting minimal user tracking. From a security perspective, the site lacks visible security headers and formal security or incident response policies. The domain uses privacy protection in WHOIS, which is common and justified for small agencies. No vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the security posture is moderate but could be improved by implementing security headers, HTTPS enforcement, and formal policies. The overall risk is moderate with no critical issues detected. Strategic recommendations include adding privacy and cookie policies, enhancing security headers, implementing vulnerability disclosure and incident response information, and conducting a security audit to strengthen the security posture and compliance.

Bänziger Hug is a Swiss-based design agency founded in 2011 by Samuel Bänziger and Olivier Hug. The agency specializes in print and interactive design, offering services such as book design, exhibitions, publications, identities, and website design primarily for cultural institutions, businesses, and individuals. The company has a strong market position within its niche, supported by numerous prestigious design awards, indicating a high level of professional recognition and trust. Technically, the website is built using modern web standards including HTML5, CSS3, and JavaScript, with the use of Modernizr for feature detection and Google Analytics for visitor tracking. The site is mobile optimized and performs moderately well, though accessibility features are basic. The absence of a CMS or hosting provider information limits deeper infrastructure insights. From a security perspective, the website benefits from HTTPS with excellent SSL configuration, but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No forms or input fields are present, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the website is professional and trustworthy in appearance and content, but the lack of WHOIS transparency and privacy compliance policies present moderate risks. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

N

Nora Vögeli Grafik Design

noravoegeli.com

60

Nora Vögeli Grafik Design is a small, professional design atelier based in Zürich, Switzerland, specializing in art direction, graphic design, branding, and spatial design. The website showcases a comprehensive portfolio of projects including corporate design, event branding, publications, and digital applications, targeting clients seeking creative design services primarily in the Zürich region. Technically, the site is built on the Squarespace platform, leveraging modern web technologies such as HTTPS with HSTS, Google Fonts, and YouTube embeds, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS and HSTS, but lacks additional security headers and formal privacy or cookie policies. The absence of WHOIS data limits domain legitimacy verification, though the professional presentation and content quality suggest a legitimate business. Overall, the site is well-designed and functional but would benefit from enhanced privacy compliance and clearer contact information to improve trust and security.

The SYJMB Foundation website represents a small non-profit entity established around 2019, likely based in Switzerland. The site is built using modern web technologies such as Gatsby and React, indicating a moderate level of technical maturity. However, the content is minimal and lacks detailed business descriptions, contact information, or compliance documentation. Security posture is basic with no advanced headers or policies detected, and no privacy or cookie policies are published, which may expose the organization to compliance risks. Overall, the site is accessible and free from blocking mechanisms but would benefit from enhanced transparency and security measures.

M

Mirabella–Morganti

mirabella-morganti.ch

58

Mirabella–Morganti is a Swiss design studio founded in 2013 specializing in art, culture, and education projects. The company offers a range of creative services including visual identities, campaigns, posters, books, and digital media, with a strong emphasis on print design and typography. They also contribute to education through lecturing roles at the Zurich University of the Arts. The website reflects a professional portfolio with rich content and a consistent brand image targeting cultural and educational organizations. Technically, the site is built using Vue.js with deferred JavaScript loading, providing good mobile optimization and SEO. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact emails or phone numbers, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data aligns well with the business claims, indicating legitimacy.

A

Astrom / Zimmer & Tereszkiewicz

azt.ch

62

Astrom / Zimmer & Tereszkiewicz is a small, specialized design and development studio based in Zurich, Switzerland. They focus on creating digital and analogue tools, interfaces, and data modeling solutions aimed at transforming information into knowledge. Their market position is niche, serving clients interested in archives, research, and data visualization projects. The website showcases a professional portfolio with multiple client projects and external references, indicating a credible and established presence in their field. Technically, the site uses modern web technologies including JavaScript and React, hosted likely on DigitalOcean, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and public security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

H

Hubertus Design

hubertus-design.ch

43

Hubertus Design is a Swiss-based design studio specializing in graphic, book, editorial, branding, and multimedia design projects. The website serves as a portfolio showcasing a wide range of creative works for cultural institutions, architects, and enterprises, positioning itself as a niche player in the design industry. The business model is project-based, focusing on delivering high-quality design services to a professional audience. Technically, the website is built on WordPress and leverages several plugins including MonsterInsights for analytics, Getwid for blocks, and Animate Blocks for animations. It uses modern web technologies such as jQuery and Google Analytics with IP anonymization and opt-out features, indicating a moderate level of digital maturity. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS with SSL and includes some privacy-conscious configurations in analytics. However, it lacks important security headers and does not provide vulnerability disclosure or incident response information. Privacy and cookie policies are absent, which is a compliance gap. No contact information is explicitly provided, which may affect user trust and support. Overall, the website is professional and content-rich but could improve in privacy compliance and security best practices. The risk level is moderate due to missing policies and security headers, but no critical vulnerabilities or blocking mechanisms were detected.

Atelier Varga is a Swiss-based creative agency specializing in visual design, web design, corporate identity, and editorial design services. The website showcases a comprehensive portfolio of projects primarily in cultural, architectural, and artistic domains, targeting clients seeking high-quality visual communication solutions. The business operates as a small, niche design atelier with a consistent brand presence and a professional online portfolio. Technically, the website is built on WordPress, utilizing common plugins such as Yoast SEO and Google Analytics for SEO and visitor tracking. The site demonstrates good mobile optimization and moderate performance but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and use of a security plugin, but it lacks important security headers and a vulnerability disclosure mechanism. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Contact information is not explicitly provided on the homepage, which may affect user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

M

mjm.cc AG

mjm.cc

40

mjm.cc AG is a Swiss-based agency specializing in design, communication, and management services. The company positions itself as a creative and strategic partner for clients seeking to make complex topics understandable and relevant through tailored solutions. The website showcases a portfolio of award-winning projects and case studies, indicating a strong market presence and professional reputation within the media sector. Technically, the website is built on WordPress with WooCommerce and utilizes popular plugins such as WPBakery Page Builder and Slider Revolution, reflecting a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS but lacks visible security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain raises some concerns about transparency, although the website content and presentation suggest legitimacy. Overall, mjm.cc AG demonstrates a solid business and technical foundation but should enhance privacy compliance and security disclosures to strengthen trust and regulatory adherence.

Agenza GmbH is a specialized web agency based in Kriens near Luzern, Switzerland, focusing on WordPress websites, UX design, e-commerce solutions, and web platform development. The company serves a diverse clientele including SMEs, organizations, and startups, offering tailored digital solutions that emphasize accessibility, SEO, and user experience. Their market position is solid within the regional technology sector, supported by a portfolio of over 93 clients and positive testimonials. Technically, the website is built on WordPress using modern tools such as the Breakdance builder, WooCommerce for e-commerce, and Yoast SEO for optimization. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Analytics and marketing integrations include Google Tag Manager, Google Ads, and LinkedIn Insight, indicating a moderate level of user tracking and marketing sophistication. From a security perspective, the site enforces HTTPS and follows good practices by avoiding exposed sensitive data and using reputable third-party scripts. However, explicit security headers and a formal security policy are absent, representing areas for improvement. Privacy compliance is strong with a comprehensive privacy policy and cookie policy, though a consent mechanism is not evident. Overall, Agenza GmbH presents a trustworthy and professional online presence with a strong focus on quality and client satisfaction. The website's security posture is good but could benefit from enhanced header policies and incident response transparency. The business is credible, well-branded, and aligned with its WHOIS registration data, supporting a high legitimacy score.

InnovationsTransfer Zentralschweiz (ITZ) is a regional innovation support organization based in Central Switzerland, founded in 2021. The company focuses on assisting startups, SMEs, and private individuals with innovation development, coaching, funding facilitation, and intellectual property consulting. The website presents a professional and consistent brand image, targeting innovation-driven businesses and individuals in the region. Technically, the site is built on WordPress with the Breakdance builder and integrates SEO and analytics tools such as Yoast SEO and Google Analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security and incident response policies are not published. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is well-structured, compliant with privacy regulations, and trustworthy.

G

GEOTEST Ltd.

geotest.ch

53

GEOTEST Ltd. is a Swiss-based leader in geosciences, offering a broad range of services including site development, geoinformatics, natural hazard assessment, and environmental consulting. The company employs over 200 professionals across seven locations in Switzerland, emphasizing innovation, quality, and customer focus. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to business and governmental clients. Technically, the site uses modern web technologies including Cmsbox CMS, Google reCAPTCHA, and analytics tools such as Google Analytics and Matomo, ensuring a secure and performant user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though the absence of visible cookie consent and incident response policies suggests room for compliance improvement. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

Virtual Culture GmbH is a Swiss-based small technology company specializing in digital sustainable strategies, digitization, imaging, and project management services for cultural institutions and museums. Their website presents a professional portfolio showcasing key services such as IT consulting, digital project management, and talent promotion. The company targets cultural organizations and experts in digital culture, positioning itself as a niche provider with a focus on sustainable and interoperable digital content solutions. Technically, the website employs modern JavaScript libraries and CSS frameworks, ensuring good mobile optimization and user experience, though some accessibility and SEO optimizations could be improved. Security posture is moderate with no visible security headers or incident response policies, and privacy compliance is basic with privacy and terms documents available but lacking explicit cookie consent mechanisms. Overall, the site is trustworthy and professional with moderate risk and room for security and compliance enhancements.

Digitales Schaudepot is a small non-profit initiative based in Switzerland focused on digitally connecting and curating cultural heritage collections. The website presents a professional and well-structured platform that highlights their projects, technology use, and partnership ecosystem. Their target audience includes cultural institutions, researchers, and the general public interested in cultural heritage. Technically, the site uses modern front-end frameworks such as Bootstrap and integrates Google Analytics for visitor tracking, though it lacks a cookie consent mechanism. Security posture is moderate with HTTPS implied but no visible security headers or published security policies. Contact information is clearly provided via email, physical address, and a contact form, but no phone numbers or incident response contacts are found. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

J

Julian Humm Gestaltung und Entwicklung

julianhumm.com

60

Julian Humm Gestaltung und Entwicklung is a small design and development office based in Basel, Switzerland, specializing in visual communication and publication solutions for both digital and analog spaces. The company offers services including branding, web design, poster creation, and identity development, targeting clients who require professional visual communication systems. The website showcases a portfolio of projects and client references, indicating a solid market presence within its niche. Technically, the website is built using modern technologies such as Svelte and Swiper.js, with good mobile optimization and a clean, professional design. However, there is a lack of privacy and cookie policies, and no security headers were detected, which are areas for improvement. The WHOIS data for the domain is missing or indicates the domain may not be registered, which is unusual but the website content and contact information suggest a legitimate business. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security and privacy compliance measures.

I

iEvolution GmbH

ievolution.ch

43

iEvolution GmbH is a Swiss-based web and logo design agency located in Wollerau, offering a range of digital design services including web design, eCommerce solutions, logo creation, and mobile app development. The company targets startups and small to medium-sized businesses primarily in Switzerland and Liechtenstein, providing fixed-price packages to ensure cost transparency. The website reflects a professional market position with clear service offerings and client references. Technically, the site is built on WordPress with common plugins such as Yoast SEO, Contact Form 7, and Mailchimp integration, indicating a mature digital infrastructure. Security measures include HTTPS enforcement and Google reCAPTCHA on forms, though some security headers are missing and no explicit security or incident response policies are published. Overall, the site is well-structured, mobile-optimized, and compliant with basic privacy and cookie consent requirements, though privacy policy documentation is lacking. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness.

P

PC CADDIE AG

pccaddie.de

56

PC CADDIE AG is a specialized software provider focused on golf club and golf course management solutions. The company positions itself as a market leader in the golf IT sector, offering a comprehensive suite of products including customer management, reception and proshop integration, golf course and school management, online booking and tournament management, and hosting services. Their target audience includes golf clubs, commercial golf facilities, golf associations, and tournament agencies primarily in German-speaking countries and Switzerland. The website is professionally designed, content-rich, and provides extensive customer references and testimonials, reinforcing its credibility and market position. Technically, the website is built on TYPO3 CMS and employs modern web technologies including JavaScript, CSS, and Google reCAPTCHA for form security. The presence of mobile app links for Android and iOS indicates a mature digital infrastructure. Hosting is managed via agenturserver nameservers, and the site uses HTTPS with good SSL configuration. Performance and mobile optimization are rated as moderate to good, with room for improvement in accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, use of CAPTCHA, and no visible exposure of sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms like a security.txt file. Additional security headers could enhance protection. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, PC CADDIE AG presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security transparency and accessibility could further strengthen their posture.

S

Stiftung Kinderhilfe Sternschnuppe

sternschnuppe.ch

53

Stiftung Kinderhilfe Sternschnuppe is a Swiss non-profit foundation established in 1993 dedicated to supporting children with illnesses or disabilities by fulfilling their wishes, providing leisure activities, and supporting related projects. The foundation operates primarily through donations and fundraising, with clear mechanisms for donors including IBAN and QR code payment options. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Analytics, and reCAPTCHA, ensuring a functional and secure user experience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though the site lacks explicit security policies or incident response contacts. Overall, the domain registration data aligns well with the foundation's identity, indicating high legitimacy and trustworthiness.

Stiftung Behindertensport Lenzerheide is a small Swiss non-profit foundation dedicated to supporting and promoting disabled sports in the Lenzerheide holiday region. The foundation organizes sporting and social events for people with disabilities and maintains a partnership with PluSport Behindertensport Schweiz, a national umbrella organization for disabled sports. The website is built on the Jimdo Creator CMS platform, hosted by Jimdo, and presents content primarily in German. It features a clean design with clear navigation and mobile responsiveness, though it lacks some compliance documents such as a privacy policy and terms of service. Security posture is moderate with HTTPS enforced and cookie consent implemented, but missing security headers and explicit contact information reduce the overall security and compliance score. The website content is safe and appropriate for a general audience, with no adult or questionable material detected.

F

Frizzy Foundation

frizzyfoundation.org

40

Frizzy Foundation is a small non-profit organization dedicated to supporting children with special needs in Switzerland and abroad. Their mission includes promoting mental and physical health through outdoor activities and infrastructure development. The website content is minimal but relevant, providing basic information about the foundation's purpose and contact emails. The domain is well-established since 2011, consistent with the foundation's history, and registered without privacy protection, enhancing transparency. Technically, the website is hand-coded with basic HTML and CSS, utilizing Google Analytics and Google Tag Manager for tracking. Mobile optimization and accessibility are basic, and no CMS or advanced frameworks are detected. Security posture is moderate with domain transfer protection but lacks DNSSEC and security headers. No cookie consent mechanism is present despite analytics usage, indicating a privacy compliance gap. Security-wise, the site shows no critical vulnerabilities or malicious indicators but would benefit from improved security headers, DNSSEC, and explicit security policies. The absence of a cookie policy and consent mechanism is a compliance risk under GDPR. Overall, the website is functional and trustworthy but could improve in privacy and security practices to enhance user trust and regulatory compliance.

S

Stiftung Denk an mich

denkanmich.ch

62

Stiftung Denk an mich is a Swiss non-profit organization dedicated to supporting people with disabilities by providing financial assistance for holidays and leisure activities. The foundation fills a social gap by enabling those who cannot afford recreational time to enjoy improved quality of life. The website reflects a focused mission with clear messaging, targeting individuals with disabilities and their supporters within Switzerland. The organization maintains a credible market position as a niche non-profit with recognized certifications such as ZEWO. Technically, the website is built on modern frameworks including Vue.js and Nuxt.js, with integrations for analytics and media content. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but lacks a public security policy or vulnerability disclosure. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the foundation.

G

Gemeinnützige Stiftung Accentus

accentus.ch

47

Accentus is a Swiss non-profit umbrella foundation based in Zurich, dedicated to supporting social, ecological, cultural, and scientific projects. The foundation operates with a fixed circle of partner organizations and does not accept unsolicited funding requests, positioning itself as a focused and established entity within the non-profit sector. The website is professionally designed using the TYPO3 CMS platform, featuring a clean and accessible layout with multilingual support. Technical infrastructure includes standard web technologies such as jQuery and lazy loading scripts, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage implied, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism present. Contact information is limited to a physical address, with no direct email or phone contacts provided. Overall, the website presents a trustworthy and professional image consistent with its non-profit mission.

G

Gemeinnützige Stiftung Symphasis

symphasis.ch

38

Symphasis is a small non-profit foundation based in Zürich, Switzerland, focused on promoting social, ecological, and cultural causes. The foundation operates by collaborating with a fixed circle of partner organizations and does not accept unsolicited funding requests. The website is professionally designed using TYPO3 CMS, with content primarily in German and language options for English and French. The site provides basic information about the foundation's mission and contact address but lacks direct contact emails or phone numbers. Technically, the site uses modern web technologies including jQuery and Google Fonts, and it appears to be mobile-optimized with moderate performance. Security-wise, HTTPS is enforced, but there is no evidence of advanced security headers or published security policies. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism detected. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

S

Swiss Paralympic

swissparalympic.ch

51

Swiss Paralympic is a Swiss non-profit foundation dedicated to organizing and financing the participation of Swiss para-athletes in international competitions such as the Paralympics, World, and European Championships. The organization holds a strong national position as the official body supporting para-sports in Switzerland, with key services including athlete support, event organization, and public information dissemination. The website reflects a professional and consistent brand image, supported by reputable partners and sponsors.

S

Swiss Olympic

swissolympic.ch

63

Swiss Olympic is the umbrella organization for Swiss sports and serves as the National Olympic Committee of Switzerland. It supports and strengthens its members, including 83 national sports federations and 30 partner organizations, representing approximately 18,300 clubs and 2.2 million active sports participants. The organization is well-established with a strong market position and recognized trust indicators such as ISO 9001:2015 certification and partnerships with major national and international brands. The website reflects a professional and consistent brand image with comprehensive content tailored to its target audience of sports organizations, athletes, and partners. Technically, the website employs modern JavaScript libraries including jQuery, Slick Carousel, JWPlayer, and integrates Google Analytics and Tag Manager for analytics. Accessibility tools like Eye-Able are implemented, and the site is mobile-optimized with good SEO practices. Performance is moderate, with no critical technical issues detected. However, no CMS or hosting provider details were identified. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit security policy pages, incident response contacts, and security headers such as Content-Security-Policy. No vulnerabilities or exposed sensitive data were found. The WHOIS data shows privacy protection consistent with organizational privacy needs, and no suspicious patterns were detected. Overall, the website is secure, professional, and compliant with privacy regulations, with room for improvement in formal security disclosures and enhanced security headers. The risk level is low, and the site effectively supports the organization's mission and stakeholder engagement.

J

Jazzcampus / Hochschule für Musik Basel

jazzcampus.com

64

Jazzcampus is an educational institution specializing in jazz music education located in Basel, Switzerland. It operates as part of the Hochschule für Musik Basel under the Fachhochschule Nordwestschweiz FHNW umbrella. The website presents a professional and comprehensive digital presence, offering detailed information about study programs, music courses, events, and affiliated organizations. The site is well-structured, mobile-optimized, and integrates multimedia content such as Vimeo videos to enhance user engagement. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements in cookie consent and security headers are recommended. The absence of WHOIS data for the domain raises concerns about domain registration transparency, but the strong institutional affiliation and content quality support legitimacy. Overall, the site serves its educational mission effectively with a trustworthy and professional online presence.

M

Musikschule Basel

musikschule-basel.ch

65

Musikschule Basel is a well-established music education institution based in Basel, Switzerland, offering a wide range of musical education services including individual and group instrumental and vocal lessons, ensembles, choirs, and music projects for children, youth, and adults. The website reflects a strong market position as a competence center for musical education with a comprehensive offering and clear target audience. Technically, the website employs modern JavaScript and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policy and incident response information are not present. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

A

Allegra Academy

allegra.academy

65

Allegra Academy is an educational platform specializing in bike tourism and slow traffic mobility, primarily serving the Graubünden region in Switzerland. The website offers online courses with multimedia content and certificates, targeting professionals involved in bike tourism such as product managers, municipal employees, hotel staff, and guides. The platform is positioned as a niche educational resource with a focus on enhancing knowledge and service quality in the bike tourism sector. Technically, the site is built on WordPress using popular plugins like LearnDash for LMS functionality, WooCommerce for e-commerce, and Elementor for design. It employs modern web technologies and is mobile-optimized with good SEO practices. Security-wise, the site uses HTTPS and Google Tag Manager but lacks some security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism but no clear privacy or terms of service pages. No direct contact or incident response information is provided, which could be improved to enhance trust. Overall, the site is professional, secure, and credible but could benefit from enhanced privacy and security disclosures.

S

StiftungSchweiz

spendenschweiz.ch

58

SpendenSchweiz is a Swiss non-profit online donation platform operated by StiftungSchweiz, offering donors access to over 900 charitable organizations and projects. The platform facilitates easy, secure donations and enables users to start their own fundraising campaigns. The website is professionally designed, SEO optimized, and uses modern WordPress technologies including jQuery, Slick Carousel, and Intercom for user engagement. Google Analytics and Google Tag Manager are employed for traffic analysis. Security posture is strong with HTTPS and secure forms, though explicit privacy and cookie policies are missing, which impacts compliance. No incident response or vulnerability disclosure information is provided. Overall, the platform is trustworthy and well-positioned in the Swiss charitable sector, but could improve transparency and privacy compliance.

I

iart ag

fluxdock.io

47

Fluxdock is a Swiss-based business offering modular and flexible workspace rentals located in the urban Dreispitz area near Basel. The company targets SMEs and organizations seeking agile, collaborative project spaces with options for short-term and long-term rentals. The website presents a professional and consistent brand image with clear service descriptions and partner affiliations. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Swiper.js, and is mobile-optimized with moderate performance. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks DNSSEC and security headers, and does not have an active cookie consent mechanism. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site is trustworthy and business credible but could improve privacy compliance and security best practices.

S

Schule für Gestaltung Basel

sfgbasel.ch

70

Schule für Gestaltung Basel is a well-established educational institution based in Basel, Switzerland, specializing in design and art education. The website presents a comprehensive range of courses and programs targeting talented young individuals, experienced professionals, and anyone interested in developing their creative skills. The institution offers foundational courses, vocational training, higher education, and public continuing education, positioning itself as a key regional player in design education. Technically, the website is built on modern frameworks such as Next.js and uses DatoCMS for content management, ensuring a responsive and user-friendly experience. Cookie consent is managed via Cookiebot, reflecting awareness of privacy regulations. However, the site lacks explicit privacy policies, terms of service, and security policies, which are important for compliance and trust. From a security perspective, the site uses HTTPS with excellent SSL configuration but does not implement common security headers or publish incident response contacts or vulnerability disclosure policies. No signs of WAF or blocking mechanisms were detected, and no analytics or tracking scripts beyond cookie consent were found, indicating a privacy-conscious approach. Overall, the website is professional, trustworthy, and content-rich, but it would benefit from enhanced privacy and security documentation to improve compliance and user trust.

F

Filmexplorer

filmexplorer.ch

61

Filmexplorer is a Swiss non-profit association dedicated to providing a rich cultural media platform focused on film as an experiential art form rather than a commodity. The website offers curated film critiques, interviews, podcasts, and festival coverage, targeting film enthusiasts and cultural audiences primarily in Switzerland. The platform maintains a consistent and professional brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Swiper.js for interactive sliders, a consent manager for GDPR-compliant cookie handling, and Google Analytics for visitor insights. The site is mobile-optimized and SEO-friendly, though no specific CMS or hosting provider details are evident. Performance is moderate with good accessibility features. From a security perspective, the site uses HTTPS with an effective cookie consent mechanism and email obfuscation to reduce spam. However, it lacks explicit security policies, incident response contacts, and terms of service pages. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, Filmexplorer presents a trustworthy, well-maintained cultural media website with strong privacy compliance and a clear focus on its niche audience. Strategic improvements could include publishing security policies and incident response information to enhance transparency and trust.

M

Musik-Akademie Basel

musik-akademie.ch

11

Musik-Akademie Basel is a well-established educational institution specializing in musical education across all levels, including higher education, talent development, and cultural events. It holds a strong market position in Basel, Switzerland, with a history spanning over 150 years. The website reflects a professional and comprehensive digital presence, offering detailed information about courses, institutes, and events, targeting music students, educators, and cultural audiences. Technically, the site employs modern web technologies with good mobile optimization and accessibility, and integrates Google Tag Manager for analytics with user consent mechanisms. Security posture is solid with HTTPS enforcement and appropriate security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates high trustworthiness and compliance with privacy regulations, making it a credible and reliable resource for its audience.

K

Kulturstiftung Basel H. Geiger | KBH.G

kbhg.ch

46

Kulturstiftung Basel H. Geiger (KBH.G) is a small non-profit cultural foundation based in Basel, Switzerland, focused on contemporary art exhibitions and public cultural programs. The website presents a professional and consistent brand image with clear navigation and relevant content targeting art enthusiasts and the general public interested in cultural events. The business model centers on hosting exhibitions and related public programs, positioning itself as a regional cultural institution with a specialized audience. Technically, the site uses a modern but simple tech stack including jQuery, Slick Carousel, Material Design Icons, and Matomo analytics, providing a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS usage and privacy-respecting analytics, but lacks published privacy and cookie policies, security headers, and explicit incident response contacts. Overall, the site is trustworthy and safe with no adult or questionable content detected.

Brogramming is a small, specialized web development business operated by Fabian Voegeli based in Zürich, Switzerland. The company focuses on delivering custom web development projects primarily for cultural heritage institutions, academia, art galleries, and architecture firms. Their portfolio demonstrates expertise in modern web technologies including Next.js, React, Craft CMS, WordPress, and Gatsby, reflecting a mature and technically competent digital infrastructure. The website showcases a broad network of partners and clients, reinforcing its niche market position. Technically, the website employs a modern tech stack with frameworks like React and Next.js, and integrates Google Analytics for user tracking. The site is mobile optimized with good SEO practices, though accessibility features are basic. Hosting and DNS are managed through Key-Systems GmbH and firestorm.ch DNS servers. Performance is moderate, with room for improvement in security configurations. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas for enhancement. The domain is secured with clientTransferProhibited status, and HTTPS is presumed but not explicitly confirmed in the data. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is professional and trustworthy with a solid business foundation and technical implementation. However, it would benefit from improved security practices and formalized privacy compliance to enhance user trust and regulatory adherence.

The website www.alinaguenter.ch is a professional portfolio site for an individual artist and illustrator based in Switzerland. It showcases various projects including illustrations, graphic design, book design, and exhibition design. The site targets art enthusiasts and potential clients in creative sectors. The business model is primarily service-based, focusing on creative commissions and client work. The website is built on WordPress using the Lay theme, indicating a moderate level of digital maturity with a focus on visual presentation and portfolio management. Mobile optimization is good, and the site loads with moderate performance. Security posture is basic with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the site is safe for general audiences and professionally presented but would benefit from enhanced privacy compliance and security best practices.

F

FUNDAMENT

fundament.finance

49

FUNDAMENT is a Swiss-based digital financing platform focused on providing innovative financing solutions for SMEs and startups. The platform acts as an ecosystem orchestrator, connecting capital-seeking companies with investors and offering services such as consulting, enabling, community building, and digital securities issuance. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, it leverages WordPress with the Avada theme, integrates modern JavaScript libraries, and uses HubSpot and Google Analytics for marketing and analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain WHOIS data is limited due to privacy and TLD restrictions but shows no suspicious indicators. The website is trustworthy, compliant with GDPR, and positioned as a niche player in the Swiss digital finance sector.

*

*zünder Startup-Förderung Zentralschweiz

zuender.ch

54

The website zuender.ch represents *zünder Startup-Förderung Zentralschweiz, a startup accelerator and investment facilitation program focused on innovative startups in Central Switzerland. It offers an accelerator program, coaching, networking, and investment opportunities, positioning itself as the leading startup booster in the region. The site targets startups, young entrepreneurs, investors, students, and interested parties, providing a comprehensive ecosystem for startup growth and visibility. Technically, the site is built on WordPress with the Breakdance theme, enhanced by Yoast SEO, HubSpot marketing and analytics tools, and Google reCAPTCHA Enterprise for form security. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Contact information is clearly provided via email, phone, and multiple contact forms. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

G

Gebäudeversicherung Bern

gvb.ch

65

Gebäudeversicherung Bern (GVB) is a well-established regional insurance provider specializing in obligatory building insurance for the Canton of Bern, Switzerland. With over 200 years of history, GVB offers comprehensive insurance products including obligatory building and construction period insurance, as well as voluntary insurance products through its subsidiaries. The website targets property owners and residents in Bern, providing detailed information on insurance services, claims, fire prevention, and natural hazard protection. The company maintains a strong market position as a trusted insurer in the region.

W

wemakeit Ltd

wemakeit.com

69

wemakeit Ltd operates a well-established crowdfunding platform specializing in creative projects such as art, music, literature, and innovative ideas. Founded in 2014 and based in Switzerland, the platform has facilitated over 7,900 successful projects with a strong community of over 720,000 members. The business model centers on enabling project creators to raise funds through community engagement and offers additional services such as crowdfunding consultancy and webinars. The platform maintains a consistent brand presence and leverages partnerships with various specialized channels to expand its reach. Technically, wemakeit employs a modern web stack including Ruby on Rails with Turbo (Hotwire) for dynamic content delivery, Cloudinary for image hosting, and Matomo Tag Manager for analytics. The website is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Hosting details are partially known, with domain registration through EuroDNS S.A. The platform uses HTTPS with valid SSL but lacks DNSSEC and some security headers, which are recommended for enhanced security. From a security perspective, the platform demonstrates good practices such as HTTPS enforcement and CSRF protection in forms. However, the absence of DNSSEC, security headers, and explicit incident response contacts indicates areas for improvement. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but the lack of a cookie consent mechanism is a notable gap given GDPR requirements. No critical vulnerabilities or adult content were detected, and the website is fully accessible without WAF blocking. Overall, wemakeit presents a trustworthy and professional crowdfunding platform with strong business credibility and a solid technical foundation. Strategic enhancements in security headers, DNSSEC, and privacy consent mechanisms would further strengthen its security posture and compliance standing.

C

ClubDesk

clubdesk.com

61

ClubDesk is a Swiss-based online club management software provider offering a comprehensive SaaS platform for associations and clubs to manage members, accounting, events, and websites. The company targets a broad range of clubs including sports, cultural, and hobby groups, with a strong presence in Switzerland and Germany. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Contao CMS, jQuery, and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and explicit privacy policies are missing. The business demonstrates legitimacy through transparent WHOIS data and partnerships with reputable financial and sports organizations. Overall, ClubDesk presents a mature digital infrastructure with a strong market position in the club management software niche.

T

TITLIS Bergbahnen AG

titlis.ch

72

TITLIS Bergbahnen AG operates a leading mountain tourism website promoting the TITLIS mountain region in Central Switzerland. The site offers information on skiing, hiking, cable cars, accommodation, restaurants, and events, positioning itself as a premier destination for tourists and adventure seekers. The technical infrastructure is modern, leveraging Next.js and React frameworks, with integrated analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit privacy and terms of service pages are not detected in the provided content. Overall, the website is professional, well-branded, and trustworthy, supporting the business's market position.

W

Werkstatt für Gestaltung WfG AG

wfg.ch

55

Werkstatt für Gestaltung WfG AG is a Swiss-based company specializing in the design and retail of furniture and accessories, including sofas, felt bags, and leather bags. The company operates an e-commerce platform built on Magento, targeting primarily German-speaking Swiss customers. The website presents a professional design with good navigation and mobile optimization, supporting a positive user experience. The business model focuses on direct online sales and retail of design products, positioning itself as a niche regional player in the furniture retail sector. From a technical perspective, the website leverages a modern Magento stack with RequireJS, jQuery, and Magento PageBuilder components. The platform is well-structured, though performance is moderate and some SEO and accessibility features could be improved. Security-wise, the site enforces HTTPS with valid SSL certificates and uses form key protections. However, it lacks several important security headers such as Content-Security-Policy and HSTS, and does not provide explicit incident response or vulnerability disclosure information. Overall, the security posture is adequate but could benefit from enhancements to headers and incident response transparency. Privacy compliance is basic, with a privacy and cookie policy present but no GDPR-specific indicators or data protection officer contact. The absence of direct contact emails or phone numbers reduces immediate trust signals, though a contact form is available. There are no signs of malicious content or adult material, and the domain registration data aligns well with the business claims, supporting legitimacy. The website scores a 75 overall on AI evaluation, reflecting good content quality and business credibility, moderate technical implementation, and room for improvement in security and privacy compliance. Strategic recommendations include implementing stronger security headers, adding vulnerability disclosure and incident response contacts, enhancing privacy compliance transparency, and improving SEO and accessibility features.

V

Val Surses

val-surses.ch

65

Val Surses is a regional tourism website promoting winter sports, accommodations, and activities in the Val Surses area of Switzerland, including Savognin and Bivio. The site targets tourists interested in winter holidays and outdoor experiences, offering booking services and information about local events and weather. Technically, the website is built on Drupal 10, uses Google Tag Manager for analytics, and includes a chat widget for user interaction. The site is mobile-optimized with a professional design and good navigation. Security-wise, the site uses HTTPS and has cookie consent mechanisms denying ad personalization and storage by default, but lacks explicit privacy policy and terms of service pages, which are important for GDPR compliance. No security incidents or vulnerabilities are evident from the content. Overall, the website is legitimate, professional, and safe for general audiences, but could improve privacy transparency and contact information to enhance trust and compliance.

S

Swissgrid

swissgrid.ch

66

Swissgrid is the national transmission grid operator in Switzerland, responsible for the safe, stable, and efficient operation of the country's extra-high-voltage electricity grid. The company plays a critical role in ensuring Switzerland's electricity supply security and is actively involved in planning and building the grid of the future to support the energy transition. The website reflects a mature and professional organization with comprehensive information about grid operations, projects, regulation, and market activities. Technically, the website is built on modern frameworks including Angular and Adobe Experience Manager, with good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and use of reCAPTCHA for forms, although explicit incident response contacts and vulnerability disclosure mechanisms are not found. Overall, the site demonstrates high trustworthiness and compliance with privacy regulations, including GDPR. The domain registration data aligns well with the company's identity, reinforcing legitimacy. Recommendations include publishing explicit incident response contacts and vulnerability disclosure policies to further enhance security transparency.

T

Top Klassik Zürcher Oberland

topklassik.ch

55

Top Klassik Zürcher Oberland is a well-established Swiss non-profit organization dedicated to promoting classical music concerts in the Zürcher Oberland region. With over 50 years of history, it offers a rich annual program of classical concerts, targeting classical music enthusiasts locally. The website serves as a platform for event information, ticket sales, and membership engagement, supported by reputable local sponsors and municipalities. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring a good user experience and SEO optimization. However, there is room for improvement in security headers and privacy compliance. The security posture is solid with HTTPS and anonymized Google Tag Manager usage but lacks advanced security headers. Overall, the site is professional, trustworthy, and safe for general audiences, though it should address privacy and cookie policy gaps to enhance compliance and user trust.

M

Müller & Schade

mueller-schade.com

58

Müller & Schade operates a professional e-commerce website specializing in music sheets, books, and musical instruments, primarily serving customers in Switzerland. The company has a long-standing history dating back to 1850 and maintains physical stores in Bern and Zurich. The website is well-structured with multiple product categories and features, including user login, registration, and a contact form with captcha protection. Technical infrastructure leverages jQuery and slick carousel for UI components, and the CMS is identified as NImQ Enterprise Shop Edition. While the website demonstrates good content quality and user experience, the absence of WHOIS data raises concerns about domain registration legitimacy. Security practices include HTTPS usage and form validation, but lack of security headers and cookie consent mechanisms indicate room for improvement. Overall, the site is functional and trustworthy from a user perspective but requires attention to domain registration transparency and enhanced privacy compliance.

W

Wellnesshotel Golfpanorama

golfpanorama.ch

67

Wellnesshotel Golfpanorama is a premium hospitality business located in Lipperswil, Switzerland, specializing in wellness, golf, and luxury accommodation services. The website presents a comprehensive range of offerings including hotel rooms, spa and wellness treatments, golf packages, restaurant services, and business seminar facilities. The business targets leisure travelers, wellness enthusiasts, and corporate clients, positioning itself as a 4-star superior hotel in the Bodensee region. The site is professionally designed with multilingual support and strong branding consistency. Technically, the website employs modern JavaScript libraries, Google Tag Manager, Cookiebot for consent management, and integrates third-party booking and chat services. The CMS appears to be Kirby, supporting a well-structured and responsive design optimized for mobile devices. SEO and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with a solid security posture and effective business presentation. Strategic improvements in security headers and incident response disclosures could further enhance the security maturity and trustworthiness of the site.