Switzerland security reports

G

GPG Sports AG

sonnenwende-charity.com

44

Sonnenwende Charity Golfturnier is a Swiss-based non-profit organization that hosts an annual charity golf tournament to raise funds for children with rare diseases. The event is organized by GPG Sports AG and features notable guests such as golf legend Gary Player. The website is built on WordPress using Elementor and includes multimedia content such as videos and image galleries highlighting past events. While the site is professionally designed and provides relevant content for its target audience, it lacks critical privacy and cookie policies and does not provide explicit contact information. The absence of WHOIS data for the domain raises some concerns about domain registration transparency. Overall, the website demonstrates a good business credibility and content quality but requires improvements in privacy compliance and security best practices.

G

Goldgelb Zeit und Raum GmbH

goldgelb.ch

51

Goldgelb Zeit und Raum GmbH is a Swiss-based marketing and media production agency specializing in advertising photography, videoproduction, virtual reality, drone aerial photography, web design, SEO, and AI-generated artwork. The company targets businesses and professionals seeking high-quality visual communication services to enhance their brand presence across web and print media. Their market position is that of a niche regional agency with a strong focus on creative and technological solutions for visual marketing. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder, Yoast SEO, and Slider Revolution. It integrates Google Analytics and Google Tag Manager for tracking and marketing purposes. The site is mobile-optimized with good SEO practices and moderate performance. Some minor issues with lazy loading images were noted but do not significantly impact user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating good privacy compliance. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and should be added to enhance security posture. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the legitimacy of the domain with consistent registrant information matching the business identity. Overall, the website presents a professional and trustworthy digital presence with good content quality and compliance. Strategic recommendations include enhancing security headers, fixing minor technical issues, and publishing explicit security and incident response policies to further strengthen trust and security culture.

T

Thurgau Golf

thurgaugolf.ch

51

Thurgau Golf is a regional sports organization dedicated to promoting golf in the Thurgau canton of Switzerland. The organization primarily focuses on organizing annual golf championships including the Thurgauer Golf Meisterschaft and Senioren Meisterschaft, fostering youth development, and supporting senior players. The website serves as an information hub for tournament details, results, and organizational information, targeting golf enthusiasts and players in the region. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile optimized and includes SEO best practices such as structured data and meta tags. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though it lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

L

le19ieme.ch

le19ieme.ch

53

Le19ieme.ch is the official website of a small hospitality business operating a restaurant and bar located at the golf course in Neuchâtel, Switzerland. The business offers seasonal and daily menus, event hosting, and a scenic dining experience targeting local residents, golf enthusiasts, and business clients. The website is professionally designed using WordPress with modern UIkit framework and SEO optimization via Yoast plugin. Contact information including phone, email, and physical address is clearly presented, along with social media presence on Instagram and Tripadvisor, enhancing trust and customer engagement. However, the site lacks visible privacy and cookie policies, which are important for GDPR compliance and user trust.

T

Tarifverbund OSTWIND

steigensieum.ch

51

The website steigensieum.ch serves as a promotional and informational portal for OSTWIND, a major public transport tariff association in Eastern Switzerland and Liechtenstein. It provides detailed information about monthly and yearly subscriptions, corporate offers, ticket comparisons, and alternatives to car commuting such as P+Rail. The site integrates with official OSTWIND and Swiss public transport services, offering users direct links to purchase tickets and subscriptions. The target audience includes commuters, seasonal travelers, and corporate employees seeking efficient public transport options. The website is professionally designed, content-rich, and well-branded, reflecting a strong market position in the regional transportation sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery and Swiper.js for interactive elements. It uses Google Maps API for mapping features and employs Matomo and Google Analytics for user tracking. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the security posture is solid with no critical vulnerabilities detected. However, improvements in privacy compliance and explicit security policies would enhance trust. The domain uses privacy-protected WHOIS, which is justified for this business type. The website demonstrates high professionalism and trustworthiness, supported by official partner links and social media presence. Strategic recommendations include implementing a cookie consent banner, publishing a security policy and incident response contacts, enhancing security headers, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

S

Swiss Quality Hotels

swissqualityhotels.com

52

Swiss Quality Hotels is a hospitality-focused business specializing in curated hotel listings and bookings within Switzerland. Established in 2003, the company targets travelers seeking high-quality accommodations including city, mountain, and lake hotels. The website is multilingual, professionally designed, and optimized for mobile users, reflecting a mature digital presence. Technically, it is built on WordPress with modern JavaScript and integrates Google Analytics via Google Tag Manager for visitor insights. Security posture is strong with HTTPS enforced, standard security headers present, and a comprehensive cookie consent mechanism ensuring GDPR compliance. However, there is room for improvement in DNS security and publishing formal security policies. Overall, the site is trustworthy and well-positioned in its niche market.

I

IN4OUT AG

in4out.ch

58

IN4OUT AG is a Swiss-based IT services company specializing in digital transformation, IT outsourcing, managed services, and security solutions. Positioned as a regional expert and Microsoft Gold Partner, the company targets businesses seeking comprehensive IT support and cloud services. Their website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the site is built on Orchard CMS and leverages common analytics tools such as Google Analytics and Piwik/Matomo, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and avoids exposing sensitive data but lacks explicit security headers and a cookie consent mechanism, which are areas for improvement. WHOIS data confirms the legitimacy and transparency of the business, matching the website's claims and location. Overall, the website presents a trustworthy and professional front for IN4OUT AG, with moderate tracking and good business credibility.

BKW is a large Swiss enterprise specializing in energy, buildings, and infrastructure solutions. The company positions itself as an innovator balancing prosperity with environmental concerns, serving a broad audience including businesses and consumers. Their website is professionally designed using TYPO3 CMS, with good SEO, accessibility, and mobile optimization. They employ modern technologies such as Google Tag Manager and Usercentrics for analytics and consent management. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. The WHOIS data is missing or inaccessible, which raises transparency concerns but does not detract from the professional presentation and trust signals on the site. Overall, the website is safe, business-focused, and compliant with privacy regulations.

S

Stadt Wallisellen

wallisellen.ch

61

Stadt Wallisellen operates an official municipal website providing comprehensive information and digital services to its residents and stakeholders. The site covers a broad range of topics including local politics, administration, education, culture, and public services, positioning itself as the primary digital interface for the community. The website demonstrates a solid technical infrastructure using modern web standards, responsive design, and privacy-conscious analytics (Matomo) with user consent mechanisms. Security posture is good with HTTPS enforced and secure form implementations, though some security headers could be improved. Overall, the site is trustworthy, professional, and well-aligned with its government entity status.

S

Stadt Dübendorf

duebendorf.ch

58

Stadt Dübendorf operates an official municipal website serving the residents and visitors of Dübendorf, Switzerland. The site provides comprehensive information about city services, news, events, and digital administrative functions such as the Online-Schalter. The website targets local citizens and stakeholders, positioning itself as a reliable government portal with a focus on accessibility and user engagement. The business model is that of a public service provider, offering transparent and accessible municipal services online. Technically, the website employs a modern CMS platform (i-web CMS) with JavaScript frameworks and libraries such as Owl Carousel and Matomo for analytics. It integrates Google Tag Manager for marketing and tracking purposes while maintaining user privacy through consent mechanisms. The site is mobile-optimized and accessible, with clear navigation and structured content. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks explicit HTTP security headers which could enhance protection against common web threats. No vulnerabilities or exposed sensitive data were detected. The site holds an ISO 27001 certification, indicating a mature security framework. Privacy policies and cookie consent are well implemented, supporting GDPR compliance. Overall, the website is trustworthy, professional, and well-maintained with a strong focus on user privacy and security. Strategic improvements could include adding security headers, publishing incident response contacts, and implementing a vulnerability disclosure policy to further enhance security posture and transparency.

R

Raiffeisen Schweiz Genossenschaft

raiffeisen.ch

75

Raiffeisen Schweiz Genossenschaft is the second largest Swiss banking group, specializing in retail and corporate banking services. Founded in 1899, it offers a broad range of financial products including mortgages, investment services, insurance, and e-banking solutions. The website targets both private and business customers, providing comprehensive information and digital services. Technically, the site is built on Adobe Experience Manager with modern JavaScript frameworks and is optimized for mobile and accessibility. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site reflects a mature, trustworthy financial institution with a professional online presence.

K

Error

klsm.ch

51

The domain klsm.ch currently hosts an error page served by the Wix platform indicating that the domain is not connected to an active website. There is no business information, contact details, or content describing any services or products. The website uses AngularJS and jQuery libraries and is hosted on Wix infrastructure. The technical implementation is basic and lacks SEO, accessibility, and performance optimizations. Security posture is minimal with no visible HTTPS or security headers in the provided content. Privacy and cookie policies are absent, indicating non-compliance with GDPR and related regulations. Overall, the website is non-functional and does not provide any business or user value at this time.

BKW is a large Swiss energy and infrastructure company focused on developing sustainable solutions in energy, buildings, and infrastructure sectors. The website presents a professional and comprehensive digital presence with multilingual support, targeting customers, businesses, public sector, investors, and media. The business model centers on providing energy solutions, power grid management, and infrastructure services, positioning BKW as a key player in the Swiss energy market. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript modules, Google Tag Manager for analytics, and Usercentrics for consent management. The site is fast, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security best practices such as HTTPS and consent mechanisms are implemented, though explicit security policies and incident response contacts are not publicly disclosed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. However, improvements could be made by publishing formal security policies and vulnerability disclosure mechanisms. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Business credibility is high, supported by consistent branding, official reports, and active social media channels. Overall, BKW's website reflects a trustworthy, professional, and secure corporate digital presence suitable for its industry and audience.

The website www.koelliker-saibene.ch is a small personal or hobbyist site operated by Annemarie Koelliker and Roberto Saibene, showcasing travel photography and accompanying Tonbildshows (audio-visual presentations) from various countries. The site targets travel enthusiasts and photography lovers, offering galleries and photo books. Technically, the site is built on the Jimdo Creator platform, leveraging Jimdo's hosting and CDN infrastructure. It uses HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and formal security or privacy policies. No contact emails or phone numbers are provided, limiting direct communication. The site is accessible without WAF or blocking mechanisms and contains no adult or questionable content. Overall, the site is functional and professionally presented for its niche but could improve in security and compliance documentation.

H

Hotel Bären Suhr

baeren-suhr.ch

60

Hotel Bären Suhr is a small-sized hospitality business located in Switzerland, offering comfortable business hotel accommodations, restaurant dining, and event hosting services. It operates as part of the regional hotel group AARGAUHOTELS.CH and holds a Swiss Quality Hotels certification, indicating a commitment to quality and service excellence. The website is professionally designed with clear navigation, comprehensive content, and strong branding consistency, targeting business travelers and event organizers in the region. Technically, the website is built on WordPress 6.8.2, utilizing modern web technologies such as jQuery, Swiper.js, and Google Fonts. It integrates analytics tools like Matomo and Google Analytics 4, and employs Google reCAPTCHA for form security. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. While basic security best practices are observed, including secure forms and no exposed sensitive data, the site could improve by implementing additional security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or suspicious activities were detected. Overall, the website presents a low-risk profile with a high legitimacy score based on consistent WHOIS data and transparent business information. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and considering a vulnerability disclosure policy to further strengthen security posture.

H

Hotel Villmergen

hotel-villmergen.ch

59

Hotel Villmergen is a medium-sized business hotel located centrally in Villmergen, Switzerland, offering 57 rooms and a unique Spanish grill restaurant called El Toro. The hotel caters primarily to business travelers and local visitors, providing accommodation, dining, and event hosting services. It operates under the parent company AARGAUHOTELS.CH and holds Swiss Quality Hotels certification, enhancing its market credibility. The website is professionally designed with good content quality and clear navigation, supporting a positive user experience. Technically, the site is built on WordPress with modern libraries and plugins, including analytics and cookie consent tools, ensuring compliance and performance. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though it lacks explicit security policies or incident response information. Overall, the domain registration aligns well with the business profile, indicating legitimacy and trustworthiness.

C

Centurion Towerhotel

centurion-towerhotel.ch

60

Centurion Towerhotel is a modern lifestyle hotel located in Windisch-Brugg, Switzerland, offering 66 design-focused rooms and apartments alongside a high-quality restaurant, Ignis Grill & Wine. The hotel targets business travelers, tourists, and event organizers, providing accommodation, dining, and event hosting services. The website reflects a professional and consistent brand image, supported by clear contact information and trust signals such as Swiss Quality Hotels certification and integrated customer reviews. Technically, the site is built on WordPress with modern libraries and plugins, including Matomo analytics and Google reCAPTCHA, ensuring a good balance of functionality and security. Security posture is strong with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, although security headers could be improved. Overall, the site is compliant with GDPR and offers a positive user experience with good mobile optimization and SEO practices.

A

AARGAUHOTELS

aargauhotels.ch

59

AARGAUHOTELS is a regional hospitality group in Switzerland operating multiple hotels and gastronomy establishments primarily in the Aargau region and Tessin. The website presents a professional and well-structured digital presence with comprehensive information about their hotels, restaurants, offers, and career opportunities. The business targets guests seeking quality accommodation and dining experiences with a focus on regional products and sustainable practices. Technically, the site is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Matomo, and Google Analytics 4, ensuring good digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy, privacy compliant, and provides clear contact information and business transparency.

A

Aargauische Industrie- und Handelskammer (AIHK)

aihk.ch

47

The Aargauische Industrie- und Handelskammer (AIHK) is a regional chamber of commerce based in Switzerland, focused on connecting businesses with political stakeholders and supporting economic policy representation. Their key services include networking, advocacy, and business support within the Aargau region. The website is built on TYPO3 CMS and uses standard web technologies such as jQuery, Bootstrap, and FontAwesome, indicating a moderate level of digital maturity. The site is mobile optimized and presents content relevant to its target audience of companies and political entities. Security posture is limited based on the provided data, with no detected security headers or explicit incident response policies. Privacy and cookie policies are absent, which may impact compliance with GDPR. Overall, the website is professional and trustworthy, but improvements in security and privacy compliance are recommended.

S

SwissPass

swisspass.ch

57

SwissPass operates as a leading Swiss mobility and leisure platform, providing users with access to public transportation and partner offers. The website is professionally designed, multilingual, and targets the general public and travelers within Switzerland. It integrates modern web technologies such as Angular and Adobe DTM for analytics and marketing, ensuring a contemporary digital presence. The platform emphasizes user privacy with a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit incident response contacts are absent. Overall, the website demonstrates a mature and trustworthy digital infrastructure suitable for its business domain.

T

Ticketcorner Live Club

live-club.ch

61

Ticketcorner Live Club is a membership-based event ticketing platform operated by Ticketcorner AG, Switzerland. It offers members early access to tickets, discounts, and exclusive offers primarily targeting Swiss and European customers. The website is multilingual and professionally designed, providing clear navigation and relevant content about membership benefits and event offers. The technical infrastructure is based on Squarespace CMS with integrations such as Google Tag Manager and Consentmanager.net for cookie compliance. Security posture is strong with HTTPS and HSTS enabled, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR requirements.

T

tipic.swiss

tipic.ch

68

tipic.swiss is a small Swiss digital agency specializing in web development and graphic design, primarily serving clients in the Graubünden region. The company offers a range of digital and print services, emphasizing accessible technology solutions and professional design. Their website showcases a portfolio of selected projects and client logos, indicating a solid regional presence and trusted partnerships. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Lottie animations. The site is well-optimized for performance, mobile responsiveness, and SEO, with a clean and professional design. Cookie consent and privacy policies are implemented, reflecting awareness of privacy compliance requirements. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism but lacks explicit security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected, which is common and justified for this business type. No suspicious indicators or vulnerabilities were detected in the provided content. Overall, tipic.swiss presents a trustworthy and professional digital presence with good technical maturity and privacy compliance. Strategic improvements in security headers and incident response transparency could further enhance their security posture and trustworthiness.

T

Trimarca AG

trimarca.ch

64

Trimarca AG is a well-established Swiss advertising and design agency founded in 1978, specializing in strategic marketing, brand concepts, and campaign development. The company targets businesses seeking creative and effective advertising solutions, primarily in the Graubünden region. Their website reflects a mature market position with a consistent brand image and a professional digital presence. Technically, the site is built on Webflow, leveraging modern web technologies and integrating analytics and consent management tools, ensuring good performance and compliance with privacy regulations. Security posture is solid with HTTPS, security headers, and no visible vulnerabilities, though the absence of a formal security policy or vulnerability disclosure page suggests room for improvement. Overall, the website and business information align well with the WHOIS data, indicating a trustworthy and credible entity.

O

OSTWIND

ostwind.ch

56

OSTWIND is a regional public transport tariff association serving multiple Swiss cantons and Liechtenstein, uniting 30 transport companies under a unified zonal fare system. The website provides comprehensive information on ticketing, subscriptions, customer service, and travel tips, targeting public transport users in the region. The digital infrastructure employs modern web technologies including web components and embedded video content, with Google Tag Manager for analytics and marketing. The site is well-designed, mobile-optimized, and accessible, offering a positive user experience. Security posture is good with HTTPS enforced, but could be improved by adding standard security headers and publishing explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, OSTWIND’s website is professional and trustworthy, serving its audience effectively with room for security and compliance enhancements.

Golf & Country Club Neuchâtel is a regional golf club located in Switzerland, offering an 18-hole golf course, driving range, teaching, competitions, pro-shop, and restaurant services. The website is built on Drupal 10 and integrates Google Analytics and Google Tag Manager for visitor tracking. A cookie consent mechanism is implemented using CookieYes, providing users with detailed control over cookie categories. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact information is visible on the main pages. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the website presents a professional and user-friendly experience suitable for its target audience of golf enthusiasts and local visitors.

Golf Lipperswil AG operates a well-established 4-star superior 27-hole golf course located in the canton of Thurgau, Switzerland. The website presents a comprehensive overview of the club's offerings including golf facilities, academy programs, restaurant services, and membership options. The business targets golf enthusiasts and visitors seeking quality golfing and hospitality experiences. The site is built on TYPO3 CMS, featuring modern web technologies and a cookie consent mechanism, reflecting a moderate to good level of digital maturity. Security posture is solid with HTTPS enforced and session management for members, though security headers and incident response policies are absent. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, user-friendly, and trustworthy, with no signs of malicious content or blocking mechanisms.

G

Golfclub Engelberg-Titlis

golfclub-engelberg.ch

68

Golfclub Engelberg-Titlis operates a well-established 18-hole golf course located in Engelberg, Switzerland, offering a blend of sport and nature with a mild mountain climate. The club targets golf enthusiasts including guests, members, juniors, and seniors, providing services such as golf lessons, tournaments, a pro shop, and seasonal restaurant facilities. The website reflects a strong community focus and regional market position, supported by a GEO certification that underscores environmental and operational standards. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies with good SEO and mobile optimization. Security posture is robust with HTTPS, security headers, and secure login forms, though explicit security policies and incident response contacts are absent. Privacy compliance is addressed through a cookie consent mechanism and a privacy information page, indicating GDPR awareness. Overall, the site is professional, trustworthy, and content-rich, supporting the club's business credibility and member engagement.

G

Golfclub Heidental

golfheidental.ch

69

Golfclub Heidental is a Swiss golf club offering a quality golf course, tournaments, member services, and hospitality including a restaurant. The website is built on TYPO3 CMS with modern web technologies and provides a good user experience with responsive design and clear navigation. Contact information and member login functionality are prominently available. The site uses an external cookie consent service to manage privacy compliance. Security posture is good with HTTPS and secure forms, but lacks explicit security policies and vulnerability disclosure information. WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website is professional and trustworthy but could improve privacy and security transparency.

G

Golfclub Gstaad-Saanenland

golfclubgstaad.ch

47

Golfclub Gstaad-Saanenland is a small, regionally focused golf club located in Switzerland, offering an 18-hole golf course and associated services such as a pro shop, restaurant, and training facilities. The club positions itself as a premium natural golf experience with scenic views and a tranquil environment. The website is built on WordPress with modern technologies and multilingual support, providing a good user experience and SEO optimization. Security posture is solid with HTTPS and cookie consent implemented, though some security headers and policies are missing. Contact information and business partner details are clearly presented, enhancing credibility. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

H

Hochparterre Bücher

hochparterre-buecher.ch

66

Hochparterre Bücher is a specialized architecture bookstore based in Zürich, Switzerland, offering a curated selection of architecture, landscape, and furniture design books. The website serves as an e-commerce platform targeting architects, students, and design enthusiasts, positioning itself as a niche leader in the Swiss market. The business model focuses on retail sales supported by events and a newsletter to engage its audience. Technically, the website is built on Magento with modern JavaScript libraries such as jQuery, Prototype.js, and Algolia for search functionality, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and CSRF protections in place, though it lacks some advanced security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the website is professional, trustworthy, and well-maintained, with transparent contact information and a consistent brand presence.

S

Stiftung für die Auszeichnung guter Bauten im Kanton Zürich

architekturpreis.ch

51

The website architekturpreis.ch represents the Stiftung für die Auszeichnung guter Bauten im Kanton Zürich, a foundation dedicated to awarding exemplary architectural projects within the Canton of Zurich. It serves as a platform to promote architectural quality, sustainability, and public engagement through awards and a public voting system. The foundation has a long-standing history of about 25 years, positioning itself as a reputable entity in the regional real estate and architectural sector. Technically, the website is built on WordPress with Elementor and uses modern plugins such as Formidable Forms and interactive 3D flipbook features. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security is well-managed with HTTPS and Google reCAPTCHA integration, although some security headers and explicit privacy and cookie policies are missing, indicating room for compliance improvement. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. However, the absence of privacy and cookie policies and lack of incident response contacts are notable gaps. The WHOIS data aligns well with the website's claims, showing consistent registration details and domain age appropriate for the foundation's history. Overall, the website is trustworthy, professionally maintained, and serves its purpose effectively. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact information to improve compliance and user trust.

B

Dein City-Guide & Stadt-Magazin mit Aktivitäten für Basel | BaselLive

basellive.ch

57

BaselLive.ch is a local media platform serving as a city guide and lifestyle magazine for Basel, Switzerland. It provides curated content including event listings, cultural stories, shopping guides, and culinary tips targeting residents and visitors interested in exploring Basel. The platform leverages social media channels and newsletters to engage its audience and promote city activities. Technically, the website uses modern web technologies with JavaScript modules, CSS, and integrates advertising via AdButler and analytics through Plausible and Google Tag Manager. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site enforces HTTPS and uses asynchronous script loading but lacks explicit security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided, and no vulnerability disclosure or incident response information is found. Overall, the website is safe, trustworthy, and well-positioned as a local media outlet but would benefit from enhanced privacy compliance and security transparency.

R

Ringier Magazine AG

boleromagazin.ch

63

Bolero is a Swiss online magazine operated by Ringier Magazine AG, focusing on fashion, culture, beauty, and premium lifestyle content targeted primarily at women with style. The website is professionally designed with consistent branding and good content quality, serving as a reputable media outlet within the Swiss market. The technical infrastructure leverages modern web technologies including Ring Publishing CMS, Google Tag Manager, and OneTrust for cookie compliance, ensuring a moderate to good performance and user experience across devices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly available. Overall, the website demonstrates a solid digital maturity with good SEO and advertising transparency. The domain registration is privacy protected but consistent with the brand's legitimacy. No adult or questionable content is present, making it safe for general audiences.

A

Annabelle

annabelle.ch

66

Annabelle.ch is a Swiss lifestyle and women's magazine website offering content on fashion trends, interior inspiration, travel tips, beauty stories, and social opinion pieces. The site targets a general audience interested in lifestyle and culture, positioning itself as an established media brand in Switzerland. Technically, the website is built on WordPress with modern integrations such as Yoast SEO Premium, Google Tag Manager, Microsoft Clarity, and Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities, although explicit privacy and terms of service pages are missing. Overall, the site demonstrates good professionalism and trustworthiness but could improve compliance transparency and contact accessibility.

A

Association de promotion mybuxi

adp-mybuxi.ch

51

Association de promotion mybuxi is a Swiss non-profit organization dedicated to promoting and expanding the demand-responsive transport service called mybuxi across rural Switzerland. Founded in 2019, the association supports operational deficits in structurally weak regions and funds technical development to enable mobility for people without private cars. The website is professionally designed using WordPress with Elementor and Yoast SEO, providing clear information about membership, projects, and the mission. The target audience includes Swiss rural communities, private individuals, and companies interested in sustainable mobility solutions. The organization positions itself as a niche promoter of innovative transport services with a growing footprint in Switzerland.

T

Tag der Demokratie

democracyday.ch

49

The website democracyday.ch serves as an informational and campaign platform dedicated to promoting democracy awareness in Switzerland. It targets the general public interested in civic engagement and democratic participation. The site provides multilingual content, event mapping, idea sharing, and partnership information, positioning itself as a niche non-profit campaign platform. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery, Foundation, and Isotope for layout and interactivity. It integrates Google Analytics and Facebook SDK for tracking and marketing purposes. The site is mobile optimized and shows moderate performance with basic SEO and accessibility features. Security-wise, the site enforces HTTPS and avoids exposing sensitive data but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information and incident response details are absent, which limits user trust and compliance. Overall, the site is functional and professional but could improve in privacy, security, and user engagement aspects.

B

Boussole21

boussole21.ch

52

Boussole21 is a Swiss government-supported online tool designed to assist project managers and organizations in evaluating the sustainability of their projects using a comprehensive set of 20 criteria. The platform offers a user-friendly interface with collaborative and modular features, enabling users to generate understandable and detailed sustainability reports. The website is professionally designed, mobile-optimized, and consistent with its branding, reflecting a niche but important role in sustainable development assessment within Switzerland. Technically, the site employs modern frontend technologies including jQuery, Bootstrap, and TinyMCE, built on a custom CMS likely using Laravel Blade templates. Performance is moderate with good mobile responsiveness, though accessibility and SEO optimizations are basic. Security practices include HTTPS usage but lack visible security headers and cookie consent mechanisms, indicating room for improvement in compliance and protection. From a security perspective, the website shows no signs of blocking or WAF interference, no exposed sensitive data, and no detected vulnerabilities. However, the absence of cookie policies, security headers, and incident response information suggests a moderate security posture. WHOIS data aligns well with the website's Swiss government affiliation, supporting legitimacy and trustworthiness. Overall, Boussole21 presents a trustworthy and professional online presence with a clear business focus but would benefit from enhanced privacy compliance, security hardening, and more transparent contact and incident response information to strengthen user trust and regulatory adherence.

V

Verein Hauptstadtregion Schweiz

hauptstadtregion.ch

41

The Verein Hauptstadtregion Schweiz is a regional non-profit association uniting five Swiss cantons and multiple municipalities to strengthen the capital region as an innovative living and economic space. The website presents a clear focus on seven key thematic areas including political center development, healthcare, smart infrastructure, food and nutrition clusters, economic and spatial development, transport, and bilingualism. The site is built on TYPO3 CMS with modern JavaScript libraries and includes a cookie consent mechanism compliant with GDPR. Social media presence on Twitter and LinkedIn supports outreach and transparency. Security posture is solid with HTTPS and anonymized analytics, though some security best practices like security headers and incident response contacts could be improved. Overall, the site is professional, trustworthy, and well-structured for its target audience of regional stakeholders and citizens.

I

IG Rottaler Ernte

erntefest.ch

47

The website erntefest.ch represents the IG Rottaler Ernte, a small regional organization dedicated to organizing the annual Rottaler Erntefest, a cultural and culinary event celebrating the Rottaler region in Switzerland. The site provides information about the event, its history, partners, and sponsors, targeting local audiences interested in regional traditions and products. The business model is community and non-profit focused, emphasizing regional culture and local product promotion. Technically, the website is built with basic HTML, CSS, and JavaScript without a detected CMS or advanced frameworks. It offers moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is minimal with no detected HTTPS enforcement or security headers, and no incident response or vulnerability disclosure information is provided. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is trustworthy and consistent with its regional cultural mission but would benefit from improved security and privacy practices.

V

Vogelschutz Aarwangen

vogelschutzaarwangen.ch

51

Vogelschutz Aarwangen is a small Swiss non-profit organization dedicated to the protection of birds and nature in the Aarwangen region and surrounding municipalities. The organization relies on volunteer efforts to maintain natural habitats and promote biodiversity through conservation activities and educational programs. The website serves as an informational and community engagement platform, presenting the organization's mission, activities, and local events. Technically, the website is built on Joomla CMS using modern web technologies such as Bootstrap 5 and jQuery. It is mobile responsive and includes structured data for SEO enhancement. However, the site lacks explicit privacy and cookie policies, and no social media or direct contact emails are provided on the homepage, which limits user engagement and compliance transparency. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, but it lacks important security headers and formal security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is moderate but could be improved with additional headers and compliance documentation. The overall risk is low given the nature of the organization and content, but compliance gaps related to privacy and cookie policies should be addressed to meet GDPR and best practice standards. Enhancing transparency and security measures will improve trust and user confidence.

N

NaturDienst Bieri

naturdienst.ch

37

NaturDienst Bieri is a small, locally focused nature conservation and biodiversity consulting firm founded in 2022 by Markus Bieri in Richenthal, Switzerland. The company offers services including biodiversity promotion consulting, nature excursions, sensitization courses, and educational programs. The website is professionally designed using WordPress with the Divi theme and includes structured data for SEO. It provides clear contact information and promotes upcoming events and offerings related to nature conservation. Technically, the site uses modern web technologies and integrates Google Analytics and Tag Manager for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, accessible, and well-aligned with the business's stated mission and services.

Ostschweizer Gästekarte GmbH operates a regional guest card service called 'Oskar' that provides tourists in Eastern Switzerland with access to free public transportation on the Ostwind network and discounts or free entry to various leisure activities. The company partners with local accommodations to issue these cards, targeting travelers seeking convenient and cost-effective regional travel and experiences. The website is professionally designed with a clear focus on user experience, offering multilingual support (German and English) and interactive features such as hotel booking forms and image sliders showcasing regional attractions. The business maintains a consistent brand presence and provides comprehensive legal and privacy documentation, reflecting a mature approach to compliance and customer trust.

M

Meilenweiss

meilenweiss.ch

51

Meilenweiss is a Swiss-based company offering an annual ski pass that grants access to multiple ski resorts and leisure activities. The website is built on WordPress with WooCommerce for e-commerce functionality, integrating payment processing via Saferpay. The digital infrastructure includes modern tracking tools such as Google Tag Manager and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of secure payment plugins, but lacks important security headers and formal policies such as privacy and cookie consent, which are critical for GDPR compliance. Overall, the website is professionally designed and mobile-optimized, targeting winter sports enthusiasts in Switzerland. However, the absence of privacy and security policies and contact information represents compliance and trust gaps that should be addressed.

T

Ticketcorner AG

ticketcorner.ch

10

Ticketcorner AG operates a leading online ticket sales platform in Switzerland, offering tickets for a wide range of events including concerts, sports, theater, circus, and ski resorts. The website is professionally designed with excellent navigation and localized language support, targeting event attendees primarily in the Swiss market. The business model focuses on e-commerce ticket sales with a strong market position in the region. Technically, the site uses modern web technologies such as jQuery, Google Tag Manager, and a consent management platform to ensure GDPR compliance and effective marketing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant, and well-optimized for its audience.

A

Aargauische Kantonalbank

akb.ch

29

Aargauische Kantonalbank is a leading financial services provider operating primarily in the Canton of Aargau and the Olten-Gösgen-Gäu region in Switzerland. The website reflects a professional banking institution offering a range of financial products and customer support services. The company maintains a strong market position as a regional bank with a clear focus on its local clientele. The digital presence is built on a modern technical infrastructure leveraging Liferay CMS, React, and Clay UI components, ensuring a responsive and user-friendly experience. Integration with Google Tag Manager and Jentis Analytics indicates a mature approach to user behavior tracking and marketing analytics. Security posture is robust with HTTPS enforcement, script nonce usage, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for a financial institution.

PostBus Ltd operates a comprehensive regional and local bus transportation network throughout Switzerland, providing essential public transit services, special trips, and leisure excursions. The company maintains a professional and user-friendly website that supports multiple languages and offers extensive customer service resources, including ticket purchases and lost property services. The website reflects a mature digital infrastructure with modern technologies such as Google Tag Manager, Coveo search integration, and Usercentrics consent management, indicating a high level of digital maturity and compliance with privacy regulations. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the website and domain registration data align well, confirming the legitimacy and trustworthiness of the business.

A

Aargau Verkehr AG (AVA)

aargauverkehr.ch

61

Aargau Verkehr AG (AVA) is a regional public transportation company operating in the Aargau region of Switzerland. The company provides transit schedules, operational updates, and ticketing services primarily targeting local commuters and travelers. The website is professionally designed using Joomla CMS with Helix Ultimate framework and integrates modern web technologies such as Bootstrap and jQuery. It features a cookie consent mechanism compliant with GDPR and uses Google Analytics for traffic analysis. Security posture is good with HTTPS enforced and CSRF protections in place, though additional security headers could enhance protection. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a credible and established transportation service provider with a solid digital presence.

T

Tarifverbund A-Welle

a-welle.ch

10

Tarifverbund A-Welle operates as a regional public transportation tariff association in Switzerland, providing ticketing, subscriptions, zone plans, and travel information services primarily for the A-Welle region. The website is professionally designed and targets general public users including commuters and travelers within the region. The business model focuses on facilitating public transport access through digital and physical ticketing solutions, supported by partnerships such as SwissPass. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a moderate to good performance profile. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

W

Work Life Aargau

worklifeaargau.ch

9

Work Life Aargau is a regional employment and lifestyle platform focused on the canton of Aargau in Switzerland. It serves as a portal connecting job seekers with employers, providing job listings, employer profiles, career advice, and lifestyle content to promote the region as an attractive place to live and work. The website is supported by regional government and partner institutions, reflecting a strong local market position in public sector employment promotion. Technically, the website employs modern web technologies including React and Material-UI components, integrates multiple third-party analytics and advertising services such as Google Analytics, Facebook Pixel, and Adform, and uses HTTPS to secure communications. The design is professional and mobile-optimized, offering a good user experience with clear navigation and relevant content sections. From a security perspective, the site benefits from HTTPS and asynchronous loading of tracking scripts but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms, which poses compliance risks under GDPR. Overall, the website is legitimate and trustworthy with a strong regional government backing but should improve privacy transparency and security policy disclosures to enhance compliance and user trust.

A

Aargau Tourismus AG

akb-freizeitportal.ch

54

The AKB Freizeitportal is a regional leisure and tourism platform operated in partnership with Aargau Tourismus AG and supported by the Aargauische Kantonalbank. It offers discounted leisure experiences, event information, and a newsletter service targeting residents and visitors of the Aargau region in Switzerland. The website is built on the nopCommerce platform, leveraging modern front-end technologies and analytics tools such as Google Tag Manager and Plausible Analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though some improvements in HTTP security headers and incident response disclosures are recommended. Overall, the site presents a professional, trustworthy, and user-friendly experience with clear business legitimacy and no suspicious content.