Switzerland security reports

reformiert.jobs operates as a specialized online job portal dedicated to employment opportunities within the church sector in Switzerland. It serves both job seekers and employers by providing a platform for job listings, newsletter subscriptions, and educational course promotions. The website is positioned as a leading niche portal in its market segment, focusing on ecclesiastical work and related services. The content is primarily in German and targets a Swiss audience interested in church-related employment and professional development. Technically, the website is built on WordPress, utilizing standard web technologies such as HTML5, CSS3, and JavaScript, with Google Fonts integration. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate, and the site includes mechanisms to clean tracking parameters from URLs, enhancing user privacy. However, explicit security headers are not evident in the provided data, and no cookie consent banner is present despite GDPR relevance. From a security perspective, the site uses HTTPS and includes secure form inputs with consent checkboxes for newsletter subscriptions. There is no evidence of exposed sensitive data or vulnerable libraries in the analyzed content. The absence of a published security policy or incident response contacts suggests room for improvement in security transparency and readiness. Overall, the domain registration data aligns well with the website's purpose, indicating legitimacy and trustworthiness. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing explicit cookie consent mechanisms, publishing security policies, enhancing security headers, and improving accessibility. These steps will strengthen compliance, user trust, and security posture, supporting the site's continued role as a trusted niche job portal.

F

FC Zürich

fcz.ch

66

FC Zürich operates an official website serving as both an information portal and an e-commerce platform for club merchandise. The site targets football fans and customers interested in official FC Zürich products and club news. The business holds a strong market position as a leading Swiss football club with a professional digital presence. Technically, the website is built on the Shopify platform, leveraging modern web technologies and multiple analytics and marketing tools, including Google Analytics, Microsoft Clarity, and Facebook Pixel. The site employs a consent management platform (Usercentrics) to address privacy compliance. Security posture is solid with HTTPS enforced and no visible sensitive data exposure; however, some security headers are missing, and no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-branded, with room for improvement in privacy policy transparency and security header implementation.

G

Golf Sempach

golf-sempachersee.ch

63

Golf Sempach is a prominent golf resort located centrally in Switzerland, offering two championship 18-hole golf courses and a variety of related services including a performance center, academy, events, gastronomy, and an online shop. The website is professionally designed using TYPO3 CMS and integrates modern analytics tools such as Google Analytics and Matomo. It provides clear contact information and maintains a consistent brand presence with active social media channels. The site is fully accessible without any blocking or WAF challenges, indicating good digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in cookie consent and security policy disclosures. Overall, the business presents a trustworthy and professional online presence aligned with its market position as a leading golf resort in Switzerland.

G

Golf Kyburg

golf-kyburg.ch

65

Golf Kyburg is a premium golf club located near Zürich, Switzerland, offering an 18 Hole Championship Course and a range of services including memberships, events, seminars, golf academy courses, gastronomy, and an online shop. The club is part of the Leading Golf Courses of Switzerland, positioning it as a high-quality destination for golf enthusiasts and event attendees. The website is well-structured, professionally designed, and provides clear navigation and contact information, targeting golfers and hospitality clients in the region. Technically, the website is built on TYPO3 CMS and employs modern frontend technologies such as Slick Slider and GSAP TweenMax. It integrates multiple analytics platforms including Google Analytics, Google Tag Manager, and Piwik/Matomo, indicating a mature approach to user behavior tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and a cookie consent mechanism, which are important for GDPR compliance and user trust. No vulnerability disclosure or security.txt files are present. Overall, Golf Kyburg's website demonstrates a solid business and technical foundation with good security hygiene but could improve privacy compliance and transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing security headers to strengthen trust and compliance.

G

Golfclub Interlaken-Unterseen

interlakengolf.ch

52

Golfclub Interlaken-Unterseen is a regional golf club located in Switzerland, offering a scenic and accessible golf course embedded between two lakes. The club provides golf-related services including teetime reservations, tournaments, golf lessons, and hospitality through its restaurant and pro shop. The website reflects a well-established business with a focus on quality and sustainability, evidenced by certifications and partnerships. Technically, the site uses Joomla CMS with UIkit and Yootheme frameworks, delivering a good user experience with moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and privacy compliance mechanisms such as cookie consent. Overall, the domain registration and business information are consistent and trustworthy, supporting a positive legitimacy assessment.

G

Golf Küssnacht am Rigi

golfkuessnacht.ch

69

Golf Küssnacht am Rigi operates a premium 18-hole golf course located centrally in Switzerland, catering to golfers of all skill levels. The business integrates hospitality services including a panorama restaurant, golf academy, and golf shop, positioning itself as a regional leader with sustainability credentials such as GEO certification. The website is professionally designed, multilingual, and provides clear navigation and user engagement features such as tee time booking and newsletter subscription. Technically, the site is built on TYPO3 CMS with modern tracking and advertising tools, supported by a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and CAPTCHA protections, though formal security policies and incident response contacts are absent. Overall, the site reflects a mature digital presence aligned with its business goals and market expectations.

G

Golf Club Bad Ragaz

golfclubragaz.ch

44

Golf Club Bad Ragaz is a prestigious golf club located in Switzerland, offering an 18-hole championship golf course embedded in a scenic mountain and park environment. It operates as part of the Grand Resort Bad Ragaz, a leading European wellbeing and medical health resort. The club is recognized as a member of Leading Golf Courses and World of Leading Golf, emphasizing a commitment to quality and perfection. The website provides comprehensive information about the club's services, tournaments, golf shop, and restaurant, targeting golf enthusiasts and resort guests. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including jQuery, Matomo analytics, and Google Tag Manager. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and professional design. Hosting appears to be managed by bgm-hosting.de, and the site uses HTTPS with a good SSL configuration. From a security perspective, the site enforces HTTPS and uses standard analytics tools but lacks visible security headers and explicit cookie consent mechanisms, which are recommended for GDPR compliance. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, the Golf Club Bad Ragaz website is professional, trustworthy, and well-maintained, with minor recommendations to enhance privacy compliance and security posture.

P

Performancepreis Schweiz | Swiss Performance Art Award

performanceartaward.ch

59

The website www.performanceartaward.ch is dedicated to the Swiss Performance Art Award, presenting information primarily in French with multilingual support. It serves as a cultural platform to promote performance art in Switzerland, targeting artists and the general public interested in this art form. The site uses modern web technologies such as Next.js and React, indicating a contemporary digital infrastructure with moderate performance and good mobile optimization. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. No analytics or tracking scripts were detected, suggesting minimal user tracking. Overall, the security posture is moderate but could be improved with better policy disclosures and security best practices. The site content is safe for general audiences with no adult or explicit material detected.

P

Philippe Meyer Architecte

philippemeyer.ch

54

Philippe Meyer Architecte is a small Swiss architectural firm presenting its portfolio, projects, competitions, essays, and photography through a professionally designed Drupal-based website. The site targets architecture clients and collaborators, showcasing the firm's design capabilities and team. The technical infrastructure includes Drupal CMS and Matomo analytics with privacy-conscious settings such as Do Not Track enabled. The website is mobile optimized with moderate performance and basic accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. No direct contact emails or phone numbers are provided, only a contact form. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

A

Avant-Gouz

avant-gouz.com

44

Avant-Gouz is a small hospitality business operating cafés in Basel and Münchenstein, Switzerland, specializing in fresh, Mediterranean-inspired cuisine with a focus on healthy, vegan, and gluten-free options. The website provides detailed menus, contact information, and local press mentions, positioning Avant-Gouz as a reputable local café with a loyal customer base. Technically, the site is built on Drupal CMS and uses Wix DNS hosting, with moderate performance and good mobile optimization. However, it lacks advanced security headers and DNSSEC, and does not provide privacy or cookie policies, which are important for GDPR compliance. The security posture is moderate with room for improvement, especially in implementing security best practices and compliance documentation. Overall, the site is professional and trustworthy but could enhance its privacy and security measures to improve user trust and regulatory compliance.

I

iart AG

iart.ch

11

iart AG is a Swiss-based innovative studio specializing in media architecture, creative engineering, and interactive visitor experiences. The company serves corporate clients, cultural institutions, and architectural sectors, positioning itself as a leader in digital and interactive architectural solutions. Their business model focuses on designing and building digital media architectures that create engaging multisensory experiences. The website reflects a mature and professional organization with strong market presence, evidenced by prestigious awards and notable clients such as Fondation Beyeler and CERN. Technically, the website is built on modern frameworks including Nuxt.js and Vue.js, powered by Craft CMS. It features embedded multimedia content, responsive design, and SEO best practices. The site loads quickly and is optimized for mobile devices, indicating a high level of digital maturity. From a security perspective, the site enforces HTTPS, implements standard security headers, and includes a cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policy and incident response disclosures, which could enhance trust and compliance. Overall, the website demonstrates a high level of professionalism, security, and compliance, with a strong business credibility score. Strategic recommendations include publishing security policies, incident response information, and adding a security.txt file to facilitate vulnerability reporting.

S

Studio Lukas Raeber

lukasraeber.ch

48

Studio Lukas Raeber is a small architectural studio based in Switzerland, presenting a portfolio of architectural projects primarily through video and image content. The website serves as a digital showcase for their work, targeting potential clients and collaborators interested in architectural design. The business model is service-oriented, focusing on architectural design and project presentation. The site is built on Drupal CMS and features modern web technologies with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, but lacks security headers and formal privacy or cookie policies, which are recommended for compliance and trust. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is professional and safe, with no adult or questionable content detected.

Primarstufe Münchenstein operates as a primary education institution serving the Münchenstein community in Switzerland. The website provides comprehensive information about the school's organizational structure, locations, and services, targeting parents, students, and local stakeholders. The business model is that of a public educational institution focused on delivering primary and kindergarten education with additional online services for ease of access. Technically, the website is built using a modern JavaScript and CSS stack, leveraging Webpack for module bundling and an i-web CMS platform. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO is basic but functional, and the site includes proper meta tags and a consent mechanism for anonymized web statistics. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is adequate with a visible privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is trustworthy, professionally designed, and well-maintained, with a strong alignment between WHOIS registration data and the website content. There are no critical security or compliance issues, making it a reliable digital presence for the educational institution.

B

Basler Stadtbuch

baslerstadtbuch.ch

61

Basler Stadtbuch is a reputable digital cultural archive dedicated to preserving and presenting the historical memory of Basel since 1879. The website offers rich historical content including articles, dossiers, and daily historical events, targeting the general public interested in Basel's heritage. Technically, the site is built on Magnolia CMS and uses modern JavaScript libraries and analytics tools, providing a good user experience with mobile optimization and accessibility features. Security posture is strong with HTTPS and security headers, though explicit privacy and security policies are missing. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy compliance and incident response transparency.

D

Dachstiftung der Christoph Merian Stiftung

dachstiftung-cms.ch

57

The Dachstiftung der Christoph Merian Stiftung (DS-CMS) is a well-established non-profit foundation based in Basel, Switzerland, managing 35 sub-foundations to fund social, cultural, and natural projects in the region. It serves as an efficient vehicle for donors to implement their philanthropic goals. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience of donors and project applicants. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js, hosted likely by cyon AG, and uses Craft CMS for content management. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is adequate with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and credible, aligned with its parent organization Christoph Merian Stiftung.

H

Hogrefe AG

hogrefe.ch

66

Hogrefe AG is a reputable Swiss-based publishing company specializing in psychology, healthcare, and educational materials. Their website offers a broad range of products including books, psychological tests, eTesting platforms, seminars, and consulting services, targeting professionals and academics in these sectors. The company maintains a strong market position in Europe with a consistent brand presence and comprehensive service offerings. Technically, the website is built on TYPO3 CMS with modern front-end technologies like Tailwind CSS and integrates Google Tag Manager and Consent Manager for analytics and privacy compliance. Security posture is solid with HTTPS enforced and secure login mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is professional, well-structured, and compliant with GDPR requirements, reflecting a trustworthy and mature digital presence.

A

AAA Studio

aaastudio.ch

62

AAA Studio was a Swiss-based small design agency operating from 2019 to 2023, specializing in visual communication, graphic design, and digital spaces. The agency served clients primarily in the cultural and industrial sectors, collaborating with interdisciplinary partners to deliver complex and sustainable projects. Their business model focused on agile, project-based work with a strong emphasis on creative experimentation and client collaboration. Technically, the website is built on Drupal CMS with a moderate performance profile and good mobile optimization. However, the site lacks advanced security headers and privacy compliance documentation, which are areas for improvement. The security posture is moderate with no critical vulnerabilities detected but missing best practices. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and improving accessibility and compliance measures.

A

AAA Studio

alexkern.com

59

AAA Studio was a Swiss-based visual communication agency operating from 2019 to 2023, specializing in graphic design, digital spaces, and communication projects for cultural and industrial clients. The studio emphasized a collaborative and experimental approach to design, working closely with interdisciplinary partners. Their portfolio includes projects for notable clients such as Fondation Beyeler, Museum Tinguely, and Performance Art Awards Switzerland. The website is bilingual (German and English), professionally designed, and showcases a rich portfolio of projects with multimedia content including images and videos. Technically, the site is built on Drupal CMS with modern HTML5 and CSS3 standards, optimized for mobile devices with good SEO practices. However, there are gaps in privacy and security compliance, with no visible privacy or cookie policies, no security headers, and no incident response information. Contact information is clearly provided, enhancing business credibility. Overall, the site reflects a small but professional agency with a strong creative portfolio but could improve in security and privacy compliance.

Z

Zephir Software Design AG

zephir.ch

59

Zephir Software Design AG is a Swiss-based web agency specializing in web development services with a focus on innovative ideas and modern web technologies. The company targets businesses and organizations seeking professional web solutions, emphasizing Swiss quality and reliability. Their website showcases client references and projects, positioning them as a reputable regional player in the technology sector. Technically, the website uses modern JavaScript libraries such as fullPage.js and integrates privacy-friendly analytics via Plausible. The site is well-designed, mobile-optimized, and provides clear contact information, enhancing user experience and trust. However, the absence of privacy and cookie policies indicates a compliance gap that should be addressed. Security-wise, the site uses HTTPS but lacks visible security headers and incident response information, suggesting room for improvement in security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

K

Kanton Basel-Stadt, Fachstelle Integration und Antirassismus

hallo-baselstadt.ch

42

The website 'Hallo Baselstadt' is an official government portal managed by the Kanton Basel-Stadt, Fachstelle Integration und Antirassismus. It serves as an informational resource for newcomers to the Basel-Stadt canton, providing multilingual content on integration, social services, housing, education, and emergency contacts. The site targets immigrants and new residents, aiming to facilitate their integration and access to local services. The business model is public service-oriented, with no commercial activities, positioning it as a trusted government information source. Technically, the website is built using the Webflow CMS platform and incorporates modern JavaScript libraries such as jQuery and MediaElement.js. It employs Matomo analytics with IP anonymization, reflecting a privacy-conscious approach. The site is mobile-optimized and features a clear navigation structure with a comprehensive sitemap. However, some technical improvements are possible, including the addition of security headers and enhanced accessibility features. From a security perspective, the site uses HTTPS with a strong SSL configuration, ensuring secure data transmission. The use of Matomo with anonymized IPs is a positive privacy measure. However, the absence of explicit privacy and cookie policies, lack of security headers, and missing contact information for security incidents represent areas for improvement. No vulnerabilities or suspicious elements were detected in the provided content. Overall, the website demonstrates a solid foundation in content quality, business credibility, and technical implementation, but could enhance privacy compliance and security posture. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and providing clear contact channels for security and privacy concerns to strengthen trust and compliance.

L

Leading Golf Courses of Switzerland

leadinggolf.ch

44

Leading Golf Courses of Switzerland is a niche hospitality business focused on promoting a label that guarantees high-quality standards in golf sports within Switzerland. The website serves as a portal linking to partner golf clubs and provides contact information but lacks extensive content such as privacy or cookie policies. The target audience is golf players and enthusiasts seeking premium golf experiences in Switzerland. The business model revolves around association and promotion of leading golf courses, positioning itself as a quality assurance label in the Swiss golf market. Technically, the website is built with basic HTML and CSS without advanced frameworks or CMS detected. It shows moderate performance and basic mobile optimization but lacks modern security headers and explicit SSL/TLS configuration details. No analytics or tracking technologies are present, indicating minimal data collection and user tracking. From a security perspective, the site lacks visible security policies, privacy compliance documentation, and security best practices such as security headers or vulnerability disclosures. The contact information is clearly presented, but the absence of privacy and cookie policies indicates compliance gaps. No WAF or blocking mechanisms are detected, and the content is safe for general audiences. Overall, the website is functional and professional but would benefit from enhanced security measures, privacy compliance documentation, and improved technical modernization to strengthen trust and compliance posture.

Halbzeit is a small Swiss non-profit organization dedicated to combating racism, particularly within football culture. The website serves as a platform for news, event promotion, community engagement, and merchandise sales. It targets football fans and activists interested in social justice. Technically, the site is built on WordPress with common plugins and libraries, hosted likely by MyHostpoint, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal policies. No privacy or cookie policies are present, and contact information is not explicitly provided, which limits compliance and user trust. Overall, the site is professional and content-rich but would benefit from enhanced privacy, security, and contact transparency.

Radio1 AG operates a regional adult-oriented radio station based in Zürich, Switzerland, providing live radio streaming, podcasts, events, and promotional activities. The website is professionally designed with clear navigation and content targeted at mature audiences. The business maintains a consistent brand presence and provides transparent contact information, enhancing trust and credibility. Technically, the site uses modern web technologies such as jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers are absent and no formal security policy or incident response contacts are published. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

H

Hotel Krone Unterstrass

hotel-krone.ch

67

Hotel Krone Unterstrass is a small-sized, 4-star hospitality business located in the center of Zurich, Switzerland. The company offers hotel accommodation services with a focus on combining tradition and modernity, targeting travelers and business visitors. The website serves as the official online presence, featuring booking capabilities integrated with the iHotelier and TravelClick platforms. The site is professionally designed with good content quality, clear navigation, and multi-language support, enhancing user experience and accessibility. Technically, the website leverages modern web technologies and a specialized CMS from TravelClick, ensuring a stable and performant platform. Security posture is strong with HTTPS enforcement and content security policies, though additional headers and incident response information could improve the security maturity. Privacy compliance is addressed with visible cookie consent and a privacy policy, supporting GDPR adherence. Overall, the website demonstrates high business credibility and trustworthiness, with legitimate WHOIS registration data consistent with the business claims.

AVA Verlagsauslieferung AG is a Swiss-based logistics and distribution company specializing in media products, including books and music. Established in 1980, it serves over 300 publishers and approximately 3000 dealers, positioning itself as the largest barsortiment in Switzerland and a leading music retailer under the Musica Viva brand. The website reflects a business-focused approach with clear contact information and service descriptions targeting publishers, retailers, and private customers. Technically, the site uses a custom CGI backend with Bootstrap and jQuery on the frontend, offering moderate performance and basic mobile optimization. Security measures are minimal, with no visible security headers or cookie consent mechanisms, and no published security or incident response policies. Overall, the site is functional and professional but could benefit from enhanced security and privacy compliance.

K

Karl der Grosse

karldergrosse.ch

60

Karl der Grosse is a well-established cultural and hospitality venue located in Zurich, Switzerland, offering a diverse range of services including a bistro, event space rentals, and a rich program of cultural events. The venue is municipally affiliated, enhancing its credibility and market position as a key cultural hub. The website reflects a professional and consistent brand image targeting a general audience interested in culture, dining, and event participation. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers implemented, though some compliance aspects like cookie consent and security policies could be improved. Overall, the site is trustworthy and professionally maintained, with moderate tracking and marketing tools in use.

B

Balmer Bücherdienst AG

balmer-bd.ch

55

Balmer Bücherdienst AG is a Swiss-based classical publishing distribution company serving the book trade and resellers with products from domestic and international partner publishers. The company operates a B2B webshop and reporting portals to facilitate order placement and business analytics. Their market position is that of an established regional distributor with a focus on the Swiss book market. Technically, the website is built on Shopware CMS, uses modern web technologies, and integrates third-party search services. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not published. Privacy and cookie policies exist and indicate GDPR compliance. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy business presence online.

K

Katholisch Stadt Zürich

katholisch-zuerich.ch

9

Katholisch Stadt Zürich is a non-profit religious organization representing the Catholic community in Zurich, Switzerland. The website serves as a hub for 23 parishes, providing information and services related to Catholic life in the city. It targets local residents and members of the Catholic community, offering religious services and community engagement. The organization holds a strong market position as the largest Catholic entity in Zurich. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Smart Slider 3, indicating a moderate level of digital maturity. The site is mobile-optimized and uses common web technologies including jQuery and FontAwesome. SEO practices are well implemented, but accessibility features are basic. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks important security headers and formal privacy or cookie policies. Tracking pixels from Facebook and LinkedIn are present without visible consent mechanisms, indicating privacy compliance gaps. No incident response or security contact information is provided. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening to reduce risk and improve user trust.

L

Landis & Gyr Foundation

lg-stiftung.ch

55

The Landis & Gyr Foundation is a Swiss non-profit organization dedicated to supporting artistic and cultural projects, primarily focusing on professional and contemporary creative work by artists and writers within Switzerland. The foundation emphasizes collaboration with recognized organizations and has a regional interest in Zug and central Switzerland, while also supporting projects from non-urban areas across the country. The website reflects a niche cultural foundation with a clear mission and professional presentation, targeting artists and cultural entities. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Swiper.js and Leaflet.js, and uses Matomo for analytics, indicating a moderate level of digital maturity. Hosting and resources are served from computedby.com domains, suggesting a specialized hosting or development provider. The site is mobile-optimized and has good design quality, though accessibility and SEO optimizations are basic. From a security perspective, the site uses HTTPS and defers scripts for performance, but lacks visible security headers and does not provide privacy or cookie policies, which are compliance gaps. No contact information or incident response channels are explicitly provided, limiting transparency. The use of Matomo analytics suggests some privacy awareness, but absence of consent mechanisms reduces privacy compliance. Overall, the website is professional and trustworthy for its purpose but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve user trust and regulatory adherence.

M

mfsystem

mfsystem.ch

46

mfsystem is a Swiss-based manufacturer specializing in modular furniture systems including shelves, sideboards, wardrobes, and office furniture. The company emphasizes sustainability and customization, offering an online configurator for customers to design their own furniture. Their market position is that of a niche player focusing on quality and flexibility for both residential and commercial clients. Technically, the website is well-structured with modern web standards, mobile optimization, and HTTPS security. However, it lacks some advanced security headers and explicit privacy consent mechanisms. The security posture is solid but could be improved with better transparency on incident response and vulnerability disclosures. Overall, the website presents a professional and trustworthy image with good user experience and clear business focus.

B

bref Magazin

brefmagazin.ch

59

bref Magazin is a Swiss-based media publication focused on the Reformed Church community and cultural topics. The website offers subscription services, a shop, and a variety of articles targeting German-speaking audiences interested in religious and societal issues. The business operates as a niche media outlet with a small but dedicated audience. Technically, the site is built on WordPress with modern web technologies including WooCommerce for e-commerce, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and contact information for incident response are missing. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the site is trustworthy and professional but could improve transparency and compliance documentation.

Izet Sheshivari operates a niche creative business focused on print, digital media, design, photography, and curating exhibitions, with an emphasis on book publishing and sales via the partner site Boabooks. The website presents a professional portfolio and business overview but lacks comprehensive privacy, cookie, and security policies. The technical infrastructure is based on the Indexhibit CMS platform, with basic HTML and CSS, and HTTPS enabled. However, the site lacks modern security headers and advanced technical optimizations. Security posture is moderate but could be improved with better headers and policies. Overall, the website is safe, professional, and targeted at art and book enthusiasts, but it requires enhancements in privacy compliance and security best practices to improve trust and regulatory adherence.

V

Volksschule Langenthal

volksschule-langenthal.ch

59

Volksschule Langenthal is a public educational institution serving the Langenthal region in Switzerland. It operates multiple school centers and kindergartens, providing comprehensive primary and secondary education services. The website reflects a well-structured and professionally maintained digital presence, targeting parents, students, and community members. The institution emphasizes accessibility and user-friendly navigation, with clear contact channels and online service options. Technically, the website is built on the Swiss i-web.ch CMS platform, utilizing modern JavaScript modules and CSS with responsive design. The site includes interactive elements such as sliders and modals for contact, login, and search functionalities. Performance is moderate with good mobile optimization and accessibility features. Privacy compliance is addressed through visible privacy and cookie policies with consent mechanisms. From a security perspective, the site enforces HTTPS and includes secure login forms with password reset options. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain. Overall, Volksschule Langenthal's website demonstrates a solid digital maturity level appropriate for a public education institution, with good content quality, technical implementation, and business credibility. Strategic improvements in security policy transparency and security headers could further enhance its security posture.

eMovingCH is an official Swiss government digital service designed to facilitate the mandatory registration of address changes for residents moving within Switzerland. The platform provides a user-friendly online interface to fulfill legal obligations efficiently and at no additional cost compared to in-person registration. The service is supported by the Swiss Confederation, cantons, and municipalities, positioning it as a trusted and authoritative resource for residents. Technically, the website is built using modern web technologies including Angular 19.2.9 and Font Awesome 6 for UI elements. It employs Matomo analytics for user tracking, indicating a preference for privacy-conscious analytics solutions. The site demonstrates good mobile optimization and accessibility, with a clear language selection feature supporting multiple Swiss national languages plus English. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerabilities in the provided HTML content. However, security headers are not explicitly detected, and there is no visible security policy or incident response contact information published. The WHOIS data is privacy protected or restricted, which is typical for government domains in Switzerland, and does not raise immediate concerns. Overall, the website presents a professional, trustworthy, and functional government service with moderate technical maturity and good privacy compliance. Strategic improvements could focus on enhancing security headers, publishing security policies, and improving SEO metadata to further strengthen trust and operational resilience.

R

Refline AG

refline.ch

61

Refline AG is a Swiss-based company specializing in applicant tracking system software designed to streamline and optimize recruiting processes for a diverse clientele including start-ups, SMEs, public sector entities, and large companies. The company emphasizes Swiss development, data protection compliance (GDPR and Swiss laws), and user-friendly, modular software solutions. Their market position is strong with over 30,000 users and more than 20 years of experience. Technically, the website employs modern web technologies such as jQuery and Font Awesome, is mobile optimized, and hosted on Swiss cloud infrastructure. Security posture is good with HTTPS enforced and secure form handling, though lacking some advanced security headers and explicit incident response policies. The absence of WHOIS data reduces transparency but the professional presentation and comprehensive contact information support legitimacy. Overall, the website is well-designed, content-rich, and trustworthy, with minor improvements recommended in privacy compliance and security best practices.

C

Crossiety

crossiety.app

65

Crossiety is a Swiss-based technology company operating a community platform, as evidenced by the login page analyzed. The website uses modern web technologies such as Ruby on Rails, Turbolinks, and Pusher for real-time features, alongside Matomo for analytics. The platform appears to target a general audience with a focus on community engagement. The website is mobile optimized and presents a professional design with consistent branding, although content on the login page is minimal and lacks descriptive business information or policies. From a security perspective, the site enforces HTTPS and includes CSRF protection tokens, indicating a baseline security posture. However, the absence of security headers and explicit privacy or cookie policies suggests room for improvement in compliance and security best practices. No vulnerabilities or suspicious elements were detected in the provided content. The WHOIS data aligns well with the website's Swiss origin and business nature, supporting legitimacy. Overall, the website scores moderately well in technical implementation and security but scores low on privacy compliance and business transparency due to missing policies and contact information. Strategic improvements in these areas would enhance trust and compliance.

H

Hotzehuus-Verein

hotzehuus.ch

54

Hotzehuus-Verein is a small non-profit cultural association based in Switzerland, dedicated to preserving and promoting the local history of Illnau-Effretikon. The organization manages the historic Hotzehuus building, offering it for rental for events and cultural activities, and publishes annual yearbooks documenting local stories. The website reflects a community-focused business model with clear services and a strong local cultural emphasis. Technically, the website is built on Joomla CMS with Yootheme Pro templates, leveraging UIkit for UI components and Leaflet.js for interactive maps. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as adding security headers and enhancing accessibility features. From a security perspective, the site uses HTTPS with a valid SSL certificate and includes CSRF tokens in forms, indicating basic security hygiene. There are no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and lack of a security.txt file or incident response contacts suggest room for improvement in security posture and transparency. Overall, the website is trustworthy and professional, but it lacks formal privacy and cookie policies, which impacts GDPR compliance. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure mechanism to enhance security and compliance.

F

Foxtrail

foxtrail.ch

58

Foxtrail is a Swiss-based company specializing in interactive team and leisure experiences, combining elements of sightseeing, outdoor escape rooms, and scavenger hunts. The company targets a broad audience including friends, families, corporate teams, clubs, and school classes, offering over 60 trails across Switzerland. Their market position is strong within the hospitality and leisure sector, supported by a professional website with e-commerce capabilities for ticketing and merchandise. Technically, the site is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Sendinblue. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements could be made by adding security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

S

Stadt Illnau-Effretikon Abteilung Bildung

schule-ilef.ch

64

Schule Illnau-Effretikon is a public educational institution serving the Illnau-Effretikon region in Switzerland. The website provides detailed information about various school levels including kindergarten, primary, secondary, and vocational preparatory year programs. It targets parents, students, and educational stakeholders in the local community, offering services such as school information, supplementary care, online forms, news, and event agendas. The institution is positioned as a regional education provider under the city administration of Illnau-Effretikon. Technically, the website is built on the ICMS platform by i-web.ch, utilizing modern web technologies including JavaScript and Matomo analytics for user tracking with consent. The site is mobile-optimized and accessible, with a clear navigation structure and good SEO practices. Hosting appears to be Swiss-based, supporting performance and data privacy compliance. From a security perspective, the site enforces HTTPS and uses secure login forms. However, it lacks published formal security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a visible privacy policy and cookie consent mechanism, aligning with GDPR requirements. Overall, the website demonstrates a solid digital presence with good content quality, technical implementation, and business credibility. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen trust and compliance.

M

myblueplanet

myblueplanet.ch

51

myblueplanet is a Swiss non-profit climate movement dedicated to promoting sustainable and climate-friendly living among individuals, companies, schools, and authorities in Switzerland. The organization offers a variety of projects and initiatives such as ClimateActions 4 Companies, ClimateLab workshops, E-learning, and community engagement platforms like MyBlueTree and Give&Take. They maintain a strong partnership ecosystem including WWF Schweiz and actively engage their audience through multilingual content and social media channels. The website reflects a mature digital presence with clear navigation, professional design, and comprehensive content tailored to their target audience.

B

Bildungszentrum Limmattal

bzlt.ch

47

Bildungszentrum Limmattal is a vocational education center based in Zürich, Switzerland, specializing in logistics, recycling, and technology training. The institution offers foundational and continuing education programs targeting learners, students, and professionals in related sectors. The website reflects a well-structured educational service provider with clear contact information and a consistent brand presence. Technically, the site uses modern web technologies including Craft CMS, jQuery, and integrates Google Analytics and Tag Manager for user insights. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

G

Gemeinde Uitikon

uitikon.ch

57

The website www.uitikon.ch serves as the official digital presence of the municipality of Uitikon in Switzerland. It provides residents and visitors with comprehensive information about local government services, politics, events, and online administrative functions. The site is well-structured, user-friendly, and targets the local community effectively. It offers key services such as an online service portal (Online-Schalter), event listings, and contact details for municipal departments. The website is positioned as a trusted source for municipal information and e-government services in the region. From a technical perspective, the site employs modern web technologies including JavaScript modules, CSS variables, and integrates analytics tools like Matomo and Google Tag Manager. It uses HTTPS to secure communications and appears to be mobile-optimized with good accessibility features. The content is well-organized with clear navigation and responsive design elements, contributing to a positive user experience. Security-wise, the website benefits from HTTPS encryption and secure form handling but lacks explicit security headers and a published incident response or vulnerability disclosure policy. Privacy compliance is limited due to the absence of a visible privacy policy and cookie consent mechanism, which are recommended for GDPR adherence. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a solid digital infrastructure suitable for a local government entity, with room for improvement in privacy and security policy transparency. Strategic enhancements in these areas would strengthen trust and compliance, ensuring better protection for users and the municipality alike.

S

Stadt Rapperswil-Jona

mitwirken-rapperswil-jona.ch

65

The website mitwirken-rapperswil-jona.ch serves as the official digital participation platform for the city of Rapperswil-Jona, Switzerland. It enables citizens to engage with local government projects and provide feedback in a secure and user-friendly manner. The platform emphasizes ease of use, data privacy, and efficient communication between the municipality and its residents. The site currently has no active projects but maintains a professional and consistent presentation aligned with municipal branding. Technically, the website employs modern web technologies including React and ES modules, with assets hosted on AWS S3. It uses Font Awesome for icons and enforces a strict Content-Security-Policy to enhance security. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility features. From a security perspective, the platform demonstrates strong practices such as HTTPS enforcement, comprehensive security headers, and local data storage within Switzerland. However, it lacks a cookie consent mechanism and a dedicated security or incident response policy page. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professionally managed by the city government. Strategic recommendations include implementing cookie consent, publishing terms of service and security policies, and enhancing accessibility and SEO to improve compliance and user experience.

R

Region Rapperswil-Jona Tourismus

rapperswil-zuerichsee.ch

60

The website rapperswil-zuerichsee.ch serves as the official travel guide for the Rapperswil and Zurichsee region in Switzerland, providing comprehensive tourism information including events, accommodations, and local attractions. It targets tourists and visitors seeking regional insights and services, positioning itself as a key regional tourism portal. The business model focuses on tourism promotion and visitor engagement, supported by clear contact information and official branding. Technically, the site is built using modern web technologies including Nuxt.js and Tailwind CSS, with integrations for Google Tag Manager, Facebook Pixel, and a consent management platform ensuring GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS, employs standard security headers, and integrates cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response page, and no vulnerability disclosure mechanism is present, which could be areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a formal security policy, establishing an incident response contact, and considering a vulnerability disclosure page to enhance transparency and trust.

G

Gemeinde Schwyz

gemeindeschwyz.ch

65

Gemeinde Schwyz operates as the official municipal government website for the community of Schwyz, Switzerland. It provides residents and visitors with comprehensive information about local governance, services, events, and community resources. The site serves as a central hub for accessing online services such as the online counter, event listings, and administrative contacts, positioning itself as a trusted and authoritative source for municipal information. Technically, the website employs modern web technologies including responsive design, ES modules, and Matomo analytics for privacy-conscious user tracking. The use of the i-web CMS platform indicates a specialized content management system tailored for municipal websites. The site is well-optimized for mobile devices and accessibility, with clear navigation and structured content. From a security perspective, the website enforces HTTPS and uses secure form submissions for login. While no explicit security policy or incident response contacts are published, the site demonstrates good privacy compliance with visible privacy and cookie policies and consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected, and the domain registration aligns with the official municipal identity, supporting high trustworthiness. Overall, Gemeinde Schwyz presents a professional, secure, and user-friendly digital presence for the municipality. Strategic improvements could include publishing formal security policies and incident response information to enhance transparency and preparedness.

indico electronic AG is a Swiss-based technology company specializing in automation, embedded systems, and software solutions including database systems, PC software, visualization, and control systems. Established in 1989, the company holds certified partnerships with Siemens Automation & Drive and Saia®PCD, reflecting a strong market position in industrial automation. Their offerings include consulting, project management, software development, and system solutions tailored for industrial clients. The website is professionally designed using WordPress with SEO and cookie consent plugins, indicating a mature digital presence. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security and incident response policies are not published. Overall, the company demonstrates high legitimacy and trustworthiness with clear contact information and compliance with GDPR.

S

Stadt Kloten

kloten.ch

58

The Stadt Kloten website serves as the official digital portal for the municipality of Kloten, Switzerland. It provides comprehensive information and services to residents, businesses, and visitors, including online administrative services, event listings, political information, and community resources. The site targets a broad audience within the local community and supports multiple languages to accommodate diverse users. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Matomo for privacy-conscious analytics, and a modular JavaScript approach. The site is mobile-optimized and accessible, with clear navigation and structured content. Hosting appears to be local or regional, supporting good performance and reliability. From a security perspective, the site enforces HTTPS, includes several security headers, and encourages multi-factor authentication for user accounts. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism and a dedicated security or incident response policy page are areas for improvement to enhance compliance and transparency. Overall, the website presents a trustworthy and professional face for the city of Kloten, with strong business credibility and a solid technical foundation. Strategic enhancements in privacy compliance and security policy transparency would further strengthen its posture and user trust.

R

Regionalwerke AG Baden

regionalwerke.ch

41

Regionalwerke AG Baden is a regional energy utility company serving private households and businesses in the Baden region of Switzerland. They provide a comprehensive range of energy and water services including electricity, gas, water, heating, cooling, and e-mobility solutions. The company emphasizes renewable energy and sustainability, supported by certifications such as ISO/IEC 27001:2022 and ISO 9001. Their website reflects a professional and customer-focused approach with clear navigation, comprehensive service descriptions, and multiple customer engagement channels. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Siteimprove Analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security posture is strong with HTTPS enforced, IP anonymization in analytics, and ISO 27001 certification, although some security headers could be improved. Overall, the website and business demonstrate a mature digital presence with strong compliance to privacy regulations including GDPR. Contact information is transparent and easily accessible. No critical vulnerabilities or security issues were detected in the content. The domain registration data aligns well with the business identity, supporting legitimacy and trust. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and providing explicit data protection officer contact details to further strengthen trust and compliance.

R

Rapp AG

rapp.ch

63

Rapp AG is a leading Swiss planning and consulting group specializing in integrated design and sustainable development of living spaces and environments. The company offers a broad range of services including general planning, construction management, logistics, architecture, infrastructure, energy management, and mobility solutions. Their website reflects a mature business with a professional digital presence, supporting multiple languages to cater to a diverse audience. Technically, the site is built on Drupal 10 and incorporates modern tracking and consent management tools, indicating a reasonable level of digital maturity. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and terms of service documentation are missing, representing compliance gaps. Overall, the website and WHOIS data align well, confirming the legitimacy and credibility of the business.

L

Lutec GmbH

lutec.ch

69

Lutec GmbH is a Swiss-based company specializing in energy-efficient ventilation and climate technology solutions, focusing on central and residential ventilation systems. The company targets regional customers in Baselland, Switzerland, offering services including installation, maintenance, and servicing of ventilation and air conditioning systems. The website is built on the BaseKit CMS platform, hosted by Hoststar, and employs modern web technologies such as FontAwesome and PhotoSwipe for enhanced user experience. The site is mobile-optimized and provides a good level of content quality and navigation clarity, although explicit contact details and privacy policies are missing. Security-wise, the website uses HTTPS but lacks important security headers and explicit incident response or vulnerability disclosure information, indicating room for improvement in security posture and compliance. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the website and company.