Switzerland security reports

S

Stamm Bau AG

stamm-bau.ch

63

Stamm Bau AG is a well-established Swiss construction company with a history dating back to 1844. The company offers a comprehensive range of construction, renovation, and building services, consolidating 12 specialized trades under one roof. Their market position is strong as the largest construction company in their region, serving both private and commercial clients. The website reflects a professional business model focused on full-service project delivery from concept to maintenance. Technically, the website is built on Silverstripe CMS 5.2 and incorporates modern JavaScript libraries such as jQuery, Swiper, and Photoswipe. The site is mobile-optimized, well-structured, and SEO-friendly, with good performance and accessibility features. Privacy and cookie policies are implemented with consent mechanisms, and the site uses Google Analytics with compliance considerations. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, there is no explicit incident response contact or vulnerability disclosure policy visible. The domain registration is consistent with the business identity, showing a long history and legitimacy. Overall, the security posture is solid but could be enhanced with formalized incident response and disclosure policies. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with privacy regulations. Strategic recommendations include adding incident response contacts, publishing a vulnerability disclosure policy, and enhancing accessibility compliance to further strengthen security and trust.

The website www.muenchenstein.ch serves as the official online presence of the Einwohnergemeinde Münchenstein, the municipal government of Münchenstein, Switzerland. It provides comprehensive information and services for residents, families, seniors, foreign residents, and local businesses. The site offers access to administrative services, community news, event announcements, waste disposal information, and local project updates, positioning itself as a key resource for the local population. The business model is that of a governmental service provider focused on community engagement and service delivery. Technically, the website employs modern web technologies including Bootstrap for responsive design, Matomo for analytics, and ES modules for JavaScript. The site is mobile optimized and accessible, with good SEO practices and a clear navigation structure. The CMS used appears to be i-web, a specialized platform for municipal websites. Performance is moderate, with asynchronous loading of analytics scripts and modular JavaScript enhancing user experience. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security policy documentation, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy and consistency with the municipal identity. Overall, the website is a trustworthy, well-maintained municipal portal with good content quality and technical implementation. Strategic improvements include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

E

Eidgenössisches Institut für Geistiges Eigentum

ipi.ch

68

The Eidgenössisches Institut für Geistiges Eigentum (IGE) is the Swiss federal authority responsible for intellectual property rights including patents, trademarks, designs, geographical indications, and copyright. The website serves as a comprehensive portal for individuals, businesses, and IP professionals to access registration services, legal information, public registers, and educational resources. It maintains a strong market position as the central Swiss IP office with a clear government affiliation and authoritative content. The site offers multilingual support and a variety of online services to facilitate IP management. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Google Tag Manager for analytics and slick sliders for UI. The site is mobile optimized, accessible, and SEO friendly with a professional design and clear navigation. Hosting details are not explicit but the site uses HTTPS with good SSL configuration. Security best practices are partially implemented, with room for improvement in security headers and published security policies. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms such as security.txt. No vulnerabilities or suspicious domains were detected. The WHOIS data confirms the domain is legitimately registered to a Swiss federal entity, reinforcing trust. Overall, the website is highly professional, trustworthy, and compliant with privacy regulations such as GDPR. It effectively serves its target audience with relevant content and services. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure framework to further strengthen the security posture and trust.

E

Eidgenössisches Institut für Geistiges Eigentum

swissreg.ch

64

The website swissreg.ch is the official portal of the Swiss Federal Institute for Intellectual Property (Eidgenössisches Institut für Geistiges Eigentum). It serves as the authoritative source for intellectual property rights in Switzerland, including trademarks, patents, and design protections. The site targets businesses, legal professionals, inventors, and the general public seeking information and services related to intellectual property. As a government entity, it holds a strong market position as the official Swiss authority in this domain. Technically, the website employs modern web technologies such as Angular and Material Design components, ensuring a responsive and accessible user experience. The presence of Font Awesome icons and Dynatrace monitoring scripts indicates a mature digital infrastructure focused on usability and performance. The site is well-structured with good design quality and navigation clarity, optimized for mobile devices. From a security perspective, the site uses HTTPS and modern JavaScript frameworks, but lacks explicit security headers and detailed privacy or cookie policies. No forms or direct contact information were detected in the provided content, which limits user interaction and transparency in privacy compliance. The WHOIS data confirms the domain's legitimacy as a Swiss federal government asset, reinforcing trustworthiness. Overall, the website demonstrates a solid security posture and technical maturity appropriate for a government service portal. However, improvements in privacy compliance documentation and security header implementation are recommended to enhance user trust and regulatory adherence.

The website www.kulturplus1.ch is currently inaccessible due to a Cloudflare security challenge page that requires human verification before access. As a result, no business content, contact information, or policies are available for analysis. The site appears to be protected by Cloudflare's Turnstile captcha, indicating a focus on security but limiting visibility into the site's actual content and services. Without access to the underlying website content, it is not possible to assess the business model, market position, or technical infrastructure in detail. The security posture is difficult to evaluate beyond the presence of Cloudflare protection, and no compliance or privacy information is visible. Overall, the site is currently blocked for analysis, resulting in a low AI score and limited insights.

B

Bider & Tanner

biderundtanner.ch

45

Bider & Tanner is a prominent bookstore and music house based in Basel, Switzerland, operating both a physical store and an online shop. The website showcases a wide range of books, music CDs, vinyl records, and cultural event tickets, positioning itself as a key cultural hub in the region. The business targets general consumers interested in literature, music, and cultural products, leveraging a retail e-commerce model complemented by physical store presence. The company enjoys a strong market position as the largest bookstore in Basel's Bankenplatz area.

C

Christoph Merian Stiftung

cms-basel.ch

61

The Christoph Merian Stiftung is a well-established non-profit foundation based in Basel, Switzerland, focused on promoting social cohesion, cultural diversity, and environmental stewardship within the city. The foundation operates through project funding, real estate development, and managing cultural institutions such as a publishing house, museum, and gardens. Their website reflects a strong local presence and commitment to community engagement. Technically, the site is built on modern frameworks including Vue.js and Nuxt.js, powered by Craft CMS, and integrates Google Tag Manager for analytics. The site is performant, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and formal incident response policies. Privacy compliance is adequate with a comprehensive privacy policy but lacks an explicit cookie consent mechanism. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy organization.

E

Eidgenössisches Institut für Geistiges Eigentum

ige.ch

67

The Eidgenössisches Institut für Geistiges Eigentum (IGE) is the Swiss federal authority responsible for intellectual property rights including patents, trademarks, designs, geographical indications, and copyright. The website serves as a comprehensive portal for individuals, businesses, and IP professionals to access registration services, legal information, and educational resources. It holds a strong market position as the central Swiss government institution in this domain, offering key services such as public registers, online applications, and IP training through its IP Academy. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript frameworks and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Performance is moderate, suitable for a government portal with rich content. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy as a Swiss federal entity, enhancing trust. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its target audience with relevant content and services, though it could improve security posture by adding security headers and vulnerability disclosure information.

T

Testzentrale der Schweizer Psychologen – Hogrefe AG

testzentrale.ch

63

Testzentrale der Schweizer Psychologen – Hogrefe AG operates a professional website focused on the distribution of psychological test procedures, books, journals, and educational services primarily targeting psychologists and academic institutions in Switzerland. The website is well-positioned in the education sector, affiliated with the reputable Hogrefe Verlagsgruppe, and offers a range of services including eTesting platforms, seminars, and consulting. The business model is B2B and B2C, serving professionals and organizations in psychology and related fields. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Google Tag Manager and ConsentManager for cookie consent. The site demonstrates good digital maturity with structured data for SEO, mobile optimization, and secure HTTPS connections. However, some areas like explicit privacy policies and terms of service pages are missing, which could be improved for better compliance and user trust. From a security perspective, the site enforces HTTPS, uses secure login forms, and implements cookie consent mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data confirms the legitimacy of the domain registration, consistent with the business identity and location in Switzerland. Overall, the website presents a professional and trustworthy digital presence with moderate to good scores in content quality, technical implementation, security posture, and business credibility. Strategic improvements in privacy compliance and security policy transparency are recommended to enhance trust and regulatory adherence.

T

Tellpass

tellpass.ch

67

Tellpass.ch is a professionally designed website offering multi-day travel tickets for the Central Switzerland region, enabling flexible travel by bus, train, ship, and mountain railways. The site targets tourists and local travelers seeking convenient access to regional attractions and transportation. The business operates in the transportation and hospitality sectors, providing ticket sales and related services such as vouchers and hotel packages. Technically, the site uses modern JavaScript libraries, SVG graphics, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent, respectively. The website is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS and cookie consent but lacks published privacy policies, terms of service, and incident response information, which are recommended for compliance and trust. WHOIS data aligns with the business's regional focus and shows no privacy protection, supporting legitimacy. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

S

Schnarwiler AG

schnarwiler.ch

57

Schnarwiler AG operates a well-established e-commerce platform specializing in health, beauty, wellness, and sleep products, with a strong Swiss heritage dating back to 1987. The company holds exclusive general representations of top brands and targets consumers seeking natural and high-quality wellness products. The website is professionally designed, multilingual, and offers a comprehensive product catalog with clear navigation and user-friendly features such as customer accounts and shopping carts. Technically, the site is built on Magento 2, leveraging modern JavaScript libraries and third-party services including Google Analytics and Facebook Pixel for marketing and analytics. The infrastructure supports mobile optimization and basic accessibility, with moderate performance. Security is robust with HTTPS enforced and a Content Security Policy in report-only mode, although further enhancements are recommended. From a security perspective, the website demonstrates good practices including secure forms and no exposed sensitive data. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. Privacy compliance is strong, with clear cookie consent mechanisms and GDPR-aligned privacy policies. Overall, Schnarwiler AG presents a trustworthy and professional online presence with a solid business model and technical foundation. Strategic improvements in security policy transparency and enhanced security headers would further strengthen their posture.

V

VIZUAL Grafik und Code GmbH

vizual.ch

51

VIZUAL Grafik und Code GmbH is a Swiss-based agency specializing in visual and digital communication, offering services in graphic design, user-friendly websites, and practical applications. The company positions itself as a niche provider focusing on the harmonious integration of form, content, and functionality, targeting businesses and organizations seeking professional digital communication solutions. The website is built on TYPO3 CMS and incorporates modern web technologies such as jQuery, GSAP, and Flickity, reflecting a moderate to advanced digital maturity. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and explicit incident response policies are absent. Privacy compliance is basic with a privacy policy present but lacking a cookie consent mechanism. Overall, the website and domain registration data indicate a legitimate, professional small agency with a solid online presence.

S

Sophie und Karl Binding Stiftung

preis-biodiversitaet.ch

11

The Sophie und Karl Binding Stiftung operates the Binding Preis für Biodiversität, a prestigious Swiss environmental award recognizing projects that promote biodiversity in urban and settlement areas. The foundation targets project teams and decision-makers engaged in sustainable infrastructure development, aiming to foster biological diversity and raise public awareness. The website is professionally designed, multilingual, and provides comprehensive information about the award, past winners, and submission processes. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. Security posture is solid with HTTPS and secure form handling, though it lacks some advanced security headers and a cookie consent mechanism. Contact information is clear and includes email, phone, and physical address, enhancing trust. Overall, the site reflects a mature digital presence suitable for a non-profit environmental foundation.

L

Le Caquelon

fondue-gondel.ch

49

Le Caquelon is a Swiss hospitality business specializing in unique fondue dining experiences hosted in gondolas and mountain huts. The company operates seasonal event locations such as Adväntsgass and Walzwerk in Münchenstein, targeting general audiences seeking memorable social dining occasions. Their market position is niche, leveraging themed dining concepts to differentiate from traditional hospitality offerings. The website is built on WordPress with modern plugins and demonstrates good digital maturity with responsive design and integrated spam protection via Google reCAPTCHA. Security posture is solid with HTTPS and basic best practices, though improvements in security headers and privacy compliance (cookie consent) are recommended. Overall, the site is professional, trustworthy, and well-branded, supported by active social media and local partnerships.

Bazar de Noël is a community-driven event organizer hosting an annual Christmas market at the Walzwerk industrial area in Switzerland. The event showcases local artisans, cultural activities, and social engagement, attracting a general audience interested in holiday festivities and local craftsmanship. The website is built on WordPress with Elementor, reflecting a moderate level of digital maturity with good design and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve in compliance and security transparency.

S

SF Urban Properties AG

sfurban.ch

54

SF Urban Properties AG is a Swiss real estate company founded in 2001 and publicly listed on the SIX Swiss Exchange since 2012. The company focuses on managing rental properties and selling condominium units in prime urban locations, primarily Zurich and Basel. Their business model combines stable rental income with value creation through property sales, targeting investors and shareholders seeking attractive returns. The website reflects a mature digital presence built on TYPO3 CMS, with good mobile optimization and clear navigation. Integration of marketing and analytics tools like Pardot and Google Tag Manager indicates a modern approach to digital engagement. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though no explicit security policy or incident response contacts are published. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its investor and client audience effectively.

Bloomlight Productions GmbH is a Swiss-based creative company specializing in biography, literature, film, coaching, and moderation. The company targets cultural and educational audiences, offering a range of services including film production, performances, podcasts, exhibitions, and project coaching. Their market position is niche, focusing on storytelling and cultural projects with a small company size. The website is professionally designed using the Contao CMS and modern web technologies, providing good user experience and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms are areas for improvement. Contact information is clearly presented, enhancing business credibility. Overall, the website reflects a trustworthy and legitimate entity with a focus on cultural media production.

The Schweizerische Gemeinnützige Gesellschaft (SGG SSUP) is a Swiss non-profit organization dedicated to promoting social cohesion within Switzerland. The website serves as an informational platform highlighting current topics relevant to their mission. The organization maintains a consistent brand presence across multiple social media channels and employs structured data to enhance search engine visibility. The business model focuses on community engagement and social welfare, targeting the general Swiss public. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for optimization and Gravity Forms for user interactions. Cookiebot is implemented for cookie consent management, complemented by Google Consent Mode to respect user privacy preferences. The site uses modern technologies including CDN services for images and analytics tools for visitor insights. Performance and mobile optimization are adequate, though accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent blocking mechanisms, which are positive indicators. However, the absence of explicit privacy policy and terms of service pages, as well as lack of published security policies or incident response contacts, represent compliance and transparency gaps. No critical vulnerabilities or malware were detected, and the domain registration details align well with the organization's profile, supporting legitimacy. Overall, the website presents a professional and trustworthy front for a small non-profit entity. Strategic improvements in privacy documentation, security headers, and contact transparency would enhance compliance and user trust. The current risk level is moderate with no immediate critical issues identified.

Z

Zum Isaak Gastronomie und Kultur

zum-isaak.ch

48

Zum Isaak is a small hospitality business operating a restaurant located at Münsterplatz 16 in Basel, Switzerland. The website presents a professional and well-structured digital presence focused on promoting their culinary and cultural offerings including lunch, dinner, and event hosting services. The business targets a general audience, primarily local and visitors to Basel, emphasizing tradition and quality dining experiences. The website is built on WordPress using modern plugins such as Elementor and Yoast SEO, ensuring good SEO and user experience. The site is mobile optimized and includes a cookie consent mechanism compliant with GDPR requirements. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and explicit security policies are absent. Overall, the website reflects a trustworthy and legitimate business with clear contact information and transparent privacy practices.

S

Soziales Basel

sozialesbasel.ch

65

Soziales Basel operates as a local government/non-profit platform providing comprehensive information and referral services for social institutions and support offers in Basel-Stadt, Switzerland. The website targets residents seeking assistance in areas such as education, work, finance, health, housing, migration, and emergencies. It is positioned as a trusted local resource with partnerships from recognized organizations and government entities. Technically, the site employs modern web technologies including htmx and Sprig components, with responsive design and good accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the site is professional, trustworthy, and well-aligned with its mission, with room for improvement in security policy transparency and technical hardening.

G

GGG Wegweiser

ggg-wegweiser.ch

46

GGG Wegweiser is a non-profit organization based in Basel, Switzerland, providing comprehensive social advice and support services to residents of all ages and backgrounds. The website serves as an information hub offering guidance on social issues, assistance with document writing, and referrals to specialized services. It is affiliated with GGG Basel and partners with the social offers database sozialesbasel.ch to extend its reach. The organization emphasizes accessibility and personal support, offering free services to the community. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, ensuring a modern and SEO-optimized platform. It employs Google reCAPTCHA v3 for bot protection and uses standard web technologies such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS with good SSL configuration and includes reCAPTCHA for form protection. However, explicit security headers are not evident in the HTML content, and there is no visible security policy or incident response contact information. Privacy compliance is partially addressed with a privacy policy and terms of service, but no cookie consent mechanism was detected. Overall, the website presents a trustworthy and professional front for a local social service organization, with minor gaps in security and privacy compliance that could be improved to enhance user trust and regulatory adherence.

G

GGG Voluntas

ggg-voluntas.ch

51

GGG Voluntas is a Swiss non-profit organization specializing in healthcare consultation services, particularly focusing on patient advance directives, health planning, and accompaniment services for the sick at home. The organization targets elderly individuals, patients, and caregivers primarily in Basel, Switzerland. Their website presents a professional and consistent brand image with clear navigation and relevant content including podcasts and interviews that enhance their community engagement. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Plyr.js for media playback, with hosting of audio content on Amazon S3. Analytics are handled via privacy-focused Plausible Analytics, reflecting a commitment to user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not published. Overall, the site is well-structured, mobile-optimized, and trustworthy, though improvements in cookie consent and formal security disclosures are recommended.

G

GGG Migration

ggg-migration.ch

50

GGG Migration is a Swiss non-profit organization based in Basel that provides comprehensive migration-related consulting and support services. Their multilingual offerings, including online consultations, tax declaration assistance, and intercultural mediation, position them as a trusted community resource. The website reflects a professional and consistent brand image with clear contact information and testimonials, enhancing trustworthiness. Technically, the site is built on WordPress with modern plugins and a responsive design, though some improvements in security headers and privacy compliance could be made. Security posture is good with HTTPS enabled and no visible vulnerabilities, but explicit security policies and incident response contacts are absent. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy.

G

GGG Benevol

ggg-benevol.ch

54

GGG Benevol is a well-established non-profit competence center for volunteer work based in Basel, Switzerland, operating since 1992. The organization facilitates volunteer engagement by connecting volunteers with social projects and organizations in need. Their website clearly targets volunteers and organizations in Basel, offering services such as volunteer job listings, project information, and consultation. The site is professionally designed with consistent branding and provides multiple contact channels including email, phone, and social media. Technically, the website is built on Drupal CMS with modern JavaScript libraries and includes a newsletter subscription powered by Mailfino. The site is mobile-optimized and SEO-friendly, with good performance and accessibility features. Security-wise, HTTPS is enforced and no sensitive data is exposed. However, there is no published security policy or incident response information, and no cookie consent mechanism despite the absence of cookies, reflecting a privacy-conscious approach. Overall, the domain registration details align well with the website content and business claims, indicating high legitimacy and trustworthiness.

M

Merkur Druck AG

merkurdruck.ch

52

Merkur Druck AG operates as a medium-sized Swiss company specializing in sustainable printing products, creative media project design, and innovative digital solutions. The company targets businesses and organizations seeking environmentally conscious and creative media services. Their market position appears established within the regional manufacturing and media sectors, supported by a professional and consistent online presence. Technically, the website is built on WordPress using the Divi theme, enhanced with modern analytics tools such as Matomo and Microsoft Clarity, and SEO optimizations via Rank Math. The site demonstrates good mobile optimization and user experience, though performance is moderate. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies, which should be addressed to meet GDPR standards. Overall, the website is professional and trustworthy, with room for improvement in privacy and security transparency.

InfoSpace is a small cultural collective and exhibition platform based in Basel, Switzerland, collaboratively run by multiple art collectives and organizations. It offers a public program of exhibitions, talks, and events focused on contemporary art and collective practices. The website serves as an information hub and event calendar for the local cultural community. Technically, the site is built with standard HTML and CSS, includes a Mailchimp newsletter subscription form, and is mobile responsive with good accessibility features. However, it lacks advanced technical frameworks or CMS integration. Security posture is moderate with HTTPS usage implied but no visible security headers or published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professionally presented but would benefit from improved compliance and security practices.

The website karinborer.ch serves as the professional portfolio for artist Karin Borer, based in Basel, Switzerland. It primarily showcases her exhibitions, collaborations, and artist editions, targeting art enthusiasts, galleries, and cultural institutions. The site positions Karin Borer as an active artist with a regional and international presence, supported by partnerships with galleries and museums. Technically, the website is built with standard HTML and CSS, including custom fonts, and is mobile responsive with a moderate performance profile. However, it lacks advanced frameworks, CMS, or analytics integrations. Security posture is minimal with no detected security headers or privacy policies, and no explicit HTTPS confirmation from the provided data. The site does not implement cookie consent or terms of service, which are important for compliance. Overall, the domain registration aligns well with the website content, indicating legitimacy and trustworthiness. Strategic improvements in security and privacy compliance would enhance the site's professional standing and user trust.

C

cpress

cpress.ch

43

cpress is a small independent media publisher based in Switzerland, founded in 2014 by Christof Nüssli and Christoph Oeschger. The company focuses on publishing books and films, targeting a general audience interested in niche media content. The website reflects this business model with clear navigation to books and films sections and news updates about upcoming releases and events. The market position appears to be that of a specialized publisher serving a focused community rather than a mass-market player. Technically, the website is built using standard HTML5, CSS3, and JavaScript without reliance on major CMS or frameworks. The site is moderately optimized for performance and mobile use, though accessibility and SEO features are basic. No advanced analytics or advertising technologies are detected, indicating a minimalistic digital footprint. From a security perspective, the site lacks published privacy, cookie, or terms of service policies, and no security headers are detected. There is no visible contact information for security incidents or data protection officers. The domain registration data is consistent with the business claims, showing no privacy protection and a domain age matching the founding year, which supports legitimacy. Overall security posture is moderate but could be improved by implementing standard compliance and security best practices. The overall risk is low given the nature of the business and content, but the lack of privacy and security policies and contact information could impact trust and compliance with regulations such as GDPR. Strategic improvements in these areas would enhance the company's security posture and user trust.

C

Ciao Press

ciaopress.com

54

Ciao Press is a small Swiss-based independent publisher specializing in art, contemporary photography, illustration, and design books. Founded by Nicolas Polli in late 2017, the company focuses on producing limited edition, high-quality printed books that appeal to art enthusiasts and collectors. The website presents detailed information about their publications, including edition sizes, ISBNs, and pricing, reflecting a niche market positioning. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and the Flickity carousel for image galleries. It is hosted by Infomaniak Network SA, a Swiss hosting provider, and uses HTTPS for secure connections. However, DNSSEC is not enabled, and no security headers were detected, indicating room for improvement in security hardening. The site lacks privacy and cookie policies, which are important for GDPR compliance, and no incident response or vulnerability disclosure information is provided. Contact information is limited to a single email address, with no phone or physical address listed. Overall, the website is professionally designed with good content relevance and user experience but could enhance its security posture and privacy compliance to build greater trust and meet regulatory requirements.

Boabooks is a small Swiss-based art book publisher and bookstore located in Geneva. The website showcases their catalogue of artist books, exhibition announcements, and provides contact details for visitors. The business targets art enthusiasts and collectors interested in niche artist publications. Technically, the website uses basic web technologies including jQuery and custom scripts, served over HTTPS, but lacks advanced security headers and privacy policies. No forms or tracking scripts are present, indicating minimal data collection. The absence of WHOIS data raises concerns about domain registration legitimacy, though the website content and contact information suggest a legitimate small business. Security posture is moderate with room for improvement in headers and compliance documentation. Overall, the site is functional and professional but would benefit from enhanced privacy and security measures.

About Books is a specialized retail business operating an e-commerce platform focused on art and architecture publications. The website presents a well-structured catalog of niche books and artist editions, targeting art collectors, architects, and design enthusiasts primarily in Switzerland and Europe. The business model centers on direct online sales using WooCommerce on a WordPress platform. Technically, the site employs modern web technologies and plugins, ensuring a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers are missing and privacy compliance policies are absent. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

K

Kesselhaus Josephsohn

kesselhaus-josephsohn.ch

50

Kesselhaus Josephsohn is a small cultural institution based in Switzerland that operates as a museum, gallery, and exhibition space dedicated to the works of Hans Josephsohn. The website serves as a digital presence showcasing their exhibitions, artworks, and related events, targeting art enthusiasts and the general public interested in cultural activities. The business model revolves around art exhibition and gallery services, with a niche market position in the cultural sector. Technically, the website employs modern JavaScript frameworks such as Vue.js and uses lazy loading techniques for images to optimize performance. It integrates Matomo analytics for user tracking, indicating a moderate level of digital maturity with some privacy considerations. However, the site lacks comprehensive SEO and accessibility features and shows only basic mobile optimization. From a security perspective, the website is accessible without WAF or blocking mechanisms, but it lacks important security headers and does not display privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are provided, limiting transparency and trust. The SSL configuration could not be verified from the provided data, which is a potential risk. Overall, the website is functional and professionally designed but requires improvements in security posture, privacy compliance, and contact transparency to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, and providing clear contact information for users and security incidents.

S

Stiftung Sitterwerk

sitterwerk.ch

51

Stiftung Sitterwerk is a Swiss non-profit cultural foundation dedicated to supporting the arts through its art library, material archive, atelier house, and various cultural events and publications. The foundation targets artists, researchers, and the general public interested in cultural and artistic activities. The website reflects a well-structured and professionally designed platform using modern technologies such as Vue.js and Matomo analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is safe, trustworthy, and provides clear contact information, but could enhance compliance and security transparency.

OBST&GEMÜSE jam GmbH is a Swiss-based small business specializing in the retail and repair of cargobikes, racing bikes, and related accessories. The company operates both a physical showroom in Basel and an online shop serving customers across Switzerland. Their business model focuses on urban mobility solutions, targeting customers interested in lightweight, high-performance freight and cycling products. The website is professionally designed with clear navigation and good mobile optimization, reflecting a solid digital presence. Technically, the website is built on the Odoo CMS platform, utilizing modern web technologies such as FontAwesome for icons and Pannellum for 360-degree panorama views. The site integrates Google Analytics and various marketing tools, including Facebook Pixel and Hotjar, to monitor user engagement and optimize marketing efforts. Performance is moderate with good SEO practices and basic accessibility features. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, indicating attention to secure data handling. However, no explicit security headers were detected, and there is no published security policy or incident response contact information. Privacy compliance is strong, with a comprehensive privacy policy, cookie consent mechanism, and GDPR-aligned data processing disclosures. Overall, the website presents a trustworthy and professional front for the business with minor areas for security enhancement. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in security headers and incident response transparency would further strengthen the security posture.

F

FLINC CYCLES

flinccycles.com

43

FLINC CYCLES is a small Swiss-based company specializing in compact cargo bicycles designed for urban customers who need versatile transport solutions. The website presents a professional and consistent brand image with clear product information, a journal, and an online shop. The business model focuses on direct sales and customer engagement through test rides and detailed product specs. Technically, the site uses modern JavaScript frameworks such as Alpine.js and Flickity for UI components and employs Plausible Analytics for privacy-conscious visitor tracking. Hosting is provided by hosttech.ch, a Swiss hosting provider, ensuring local infrastructure. Security posture is generally good with HTTPS enforced and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism is present. Overall, the site is trustworthy, well-designed, and suitable for its target audience.

V

von Bartha

vonbartha.com

49

von Bartha is a well-established Swiss art gallery specializing in contemporary and modern art, operating since 1970 with locations in Basel and Copenhagen. The gallery represents a diverse roster of artists and hosts exhibitions, fairs, and publishes related materials. The website reflects a professional and polished digital presence, leveraging modern web technologies such as Nuxt.js and Vue.js, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS and no obvious vulnerabilities, though improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Overall, the website is trustworthy and serves its target audience effectively.

T

THE STAEGER COLLECTION

staeger-collection.com

59

The Staeger Collection is a niche, Basel-based organization dedicated to the preservation and exhibition of vintage bicycles. The website serves primarily as a showcase for their collection, targeting cycling enthusiasts, collectors, and historians. The business model appears non-commercial, focusing on cultural heritage and education. Technically, the site is built on Squarespace, leveraging modern web fonts and standard web technologies, delivering a moderate performance and good mobile experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance features. The absence of WHOIS registration data is a notable concern, potentially impacting domain trustworthiness. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

Z

Zürcher Hochschule der Künste

zhdk.ch

61

Zürcher Hochschule der Künste (ZHdK) is a large, accredited Swiss art university offering a wide range of Bachelor and Master programs in art education, design, film, fine arts, music, dance, theatre, and transdisciplinary studies. The institution is well positioned as one of Europe's largest art universities, targeting students interested in creative and cultural disciplines. The website reflects a mature digital presence with multilingual support and structured data for SEO. Technically, the site uses modern frameworks such as Astro and integrates Piwik analytics, indicating a commitment to performance and data insights. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. Privacy compliance is partial, with a comprehensive privacy policy but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well maintained.

M

MOULURE MAGAZINE

mouluremagazine.ch

49

MOULURE MAGAZINE is a small interdisciplinary art and design collective based in Switzerland, providing a platform for artists and designers to share their creative processes and works. The website serves as an online magazine and includes an online shop, targeting artists, designers, and art enthusiasts. The platform is hosted on Cargo Collective and integrates Stripe for payment processing. The technical infrastructure is modern and functional, with good mobile optimization and a clean design. Security posture is adequate with HTTPS and secure payment integration, but lacks advanced security headers and formal privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security practices.

The website represents the Institute Experimental Design and Media Cultures (IXDM), part of the Basel Academy of Art and Design FHNW in Switzerland. It focuses on experimental design, media cultures, and related publishing activities. The site targets students, academics, and professionals interested in media and design culture. The business model is educational and research-oriented, with a niche market position within the academic sector. Technically, the site is built on WordPress 6.8.3 using modern JavaScript and Google Analytics for tracking. The site is moderately performant and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

C

Cartoonmuseum Basel

cartoonmuseum.ch

62

The Cartoonmuseum Basel is a specialized cultural institution in Switzerland dedicated exclusively to the art of narrative drawing, including cartoons, comics, and graphic novels. It holds a unique market position as the only Swiss museum focused on this art form, offering exhibitions, educational programs, events, and a shop. The website reflects a professional and well-structured digital presence, targeting art enthusiasts, educational institutions, and the general public interested in narrative art. The museum operates as a non-profit entity with a clear focus on cultural education and community engagement. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with Craft CMS likely used as the content management system. It demonstrates good performance, mobile optimization, and accessibility. The site uses Google Analytics for visitor tracking and Campaign Monitor for newsletter management. Security best practices are observed, including HTTPS enforcement and secure form handling, although there is room for improvement in cookie consent mechanisms and explicit security policy disclosures. From a security standpoint, the site has a solid posture with appropriate security headers and no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms the legitimacy of the domain registration, matching the museum's identity and location in Switzerland. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Privacy compliance is adequate with a comprehensive privacy policy, though cookie consent could be enhanced. Overall, the Cartoonmuseum Basel website is a trustworthy, professional, and well-maintained digital asset supporting the museum's mission. Strategic recommendations include implementing explicit cookie consent, publishing a security and incident response policy, and considering a vulnerability disclosure statement to further enhance trust and compliance.

The website tott.ch serves as an online presence for Thomas Ott, a Swiss comic artist and cartoonist. The site primarily functions as a portfolio or promotional platform showcasing his artistic work. The content is minimal on the main domain and is delivered via a frameset loading content from an external domain (trinity.ch). The business model is focused on artist promotion and engagement with fans and art enthusiasts. The site targets a niche audience interested in comics and graphic art, with a small-scale operation based in Switzerland. From a technical perspective, the website uses a legacy frameset structure, which is outdated and limits mobile optimization and accessibility. There is no evidence of modern CMS or frameworks, and no analytics or tracking scripts were detected. The hosting appears to be provided by trinity.ch. SEO and accessibility are poor due to minimal content and lack of meta descriptions or structured data. Security posture is weak, with no visible security headers or policies, and no HTTPS confirmation in the provided data. There are no privacy, cookie, or terms of service policies, and no contact or incident response information. The WHOIS data is consistent with the website's Swiss artist identity, indicating legitimacy. Overall, the site lacks modern security and privacy compliance features, which could expose it to risks and reduce user trust. Recommendations include implementing HTTPS, adding privacy and cookie policies, improving mobile responsiveness and accessibility, and providing clear contact and incident response information to enhance trust and compliance.

H

Heissi Schnitte – Catering

heissi-schnitte.ch

51

The website heissi-schnitte.ch appears to represent a small Swiss business, likely in the bakery or food sector, based on the domain and language context. The site is built on WordPress using the Elementor page builder, indicating a moderate level of digital maturity with a focus on visual presentation. The content is primarily in German (Switzerland) and is business-oriented but lacks detailed business information, contact details, and formal policies such as privacy or cookie policies. Technically, the site uses HTTPS, which is a positive security indicator, but lacks important security headers and formal privacy compliance mechanisms. No analytics or tracking scripts were detected, suggesting minimal user tracking. The absence of contact information and security policies reduces the overall trust and compliance posture. The domain WHOIS data is consistent with the website's Swiss origin and shows no privacy protection, supporting legitimacy. Overall, the website is functional and visually adequate but requires improvements in privacy, security, and business transparency to enhance trust and compliance.

S.P.A is a small artisanal wine producer and retailer located in Basel, Switzerland, offering handcrafted wines through an online shop and local presence. The business emphasizes honest and artisanal wine production with a community focus. The website uses modern web technologies including Craft CMS, Snipcart for e-commerce, and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enforced and an age verification gate for alcohol sales, but lacks security headers and explicit privacy or cookie policies. No contact emails or phone numbers are explicitly provided, which may impact user trust and compliance. Overall, the website is legitimate and trustworthy but could improve privacy compliance and security practices.

Stretcher is a small, artist-run exhibition project based in Basel, Switzerland, founded in 2023 by artists Karin Borer and Daniel Kurth. The project focuses on contemporary art exhibitions, artist editions, readings, and collaborative art events, operating within the InfoSpace collective art community. The website provides detailed program information, contact details, and event schedules, targeting a general audience interested in contemporary art. Technically, the website is built with standard HTML and CSS, uses Google Fonts, and integrates a newsletter subscription via Mailchimp. The site is mobile-optimized with good navigation and content relevance but lacks advanced technical frameworks or CMS. Security posture is moderate with no explicit HTTPS or security headers information available, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

M

Moritz Schermbach

moritzschermbach.ch

42

Moritz Schermbach is a Swiss-based professional photographer specializing in photography and cinematography services including still lifes, portraits, fashion, and landscapes. The website serves as a portfolio showcasing artistic works primarily targeting a general audience interested in visual arts. The business operates on a small scale with a niche local market focus in Basel, Switzerland. Technically, the website employs older versions of jQuery and Bootstrap frameworks, alongside Google Analytics and Tag Manager for visitor tracking. The site is mobile responsive and has a moderate performance profile but lacks modern CMS or advanced frameworks. Security posture is basic with no visible security headers or HTTPS enforcement details in the provided content. Privacy compliance is minimal with no privacy or cookie policies present, and no GDPR compliance indicators. Contact information is limited but present in meta tags. Overall, the site is functional and professional but requires improvements in security, privacy, and technology modernization to enhance trust and compliance.

P

Palazzina

palazzina.ch

63

Palazzina is a small cultural venue based in Switzerland specializing in contemporary art exhibitions and cultural events. The website serves as a platform to showcase recent and upcoming exhibitions, book launches, and other artistic activities primarily located in Basel. The target audience includes art enthusiasts, local visitors, and artists. The business model appears to be non-profit or cultural organization focused on community engagement through art. Technically, the website is built with standard HTML, CSS, and JavaScript, likely using a custom CMS. It is mobile optimized with moderate performance and basic SEO and accessibility features. The site uses HTTPS and includes CSRF tokens in forms, indicating some security awareness. However, it lacks security headers and privacy/cookie policies, which are important for compliance and security. From a security perspective, the site has a good SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of privacy and cookie policies and security headers are notable gaps. No incident response or vulnerability disclosure information is provided. The site does not appear to use analytics or tracking services, minimizing privacy risks. Overall, the website is professional and trustworthy with a moderate security posture. Strategic improvements in privacy compliance, security headers, and incident response readiness would enhance its security and compliance standing.

HUMBUG is a cultural venue based in Basel, Switzerland, focusing on queer, feminist, and alternative cultural events. The website provides a comprehensive program of past and current events, showcasing a vibrant community engagement. Technically, the site uses standard web technologies including Google Analytics and Tag Manager for tracking, but lacks advanced security headers and privacy policies. The absence of WHOIS data limits domain trust assessment, though the content and event listings indicate a legitimate operation. Security posture is moderate with room for improvement in privacy compliance and security best practices.

M

Merkur Druck AG

merkurmedien.ch

52

Merkur Druck AG is a Swiss-based company specializing in sustainable printing products, creative media project design, and innovative digital solutions. Positioned as a regional leader in manufacturing and media services, the company targets businesses seeking environmentally responsible and creative media services. The website reflects a professional and consistent brand image with clear contact information and a focus on sustainability. Technically, the site is built on WordPress using the Divi theme, integrating modern analytics tools such as Microsoft Clarity and Matomo, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and incident response disclosures. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices to meet modern compliance standards.

P

ProgrammZeitung Verlags AG

proz.online

70

PROZ.online is a regional cultural media platform operated by ProgrammZeitung Verlags AG, founded in 2022, focusing on providing comprehensive event listings, exhibitions, and magazine content for the Basel area. The website serves a culturally engaged audience interested in arts, theater, music, and literature. It offers subscription services, event submissions, and advertising opportunities, positioning itself as a key local media resource with support from Swiss cultural institutions. Technically, the site uses the open-celements CMS with a modern JavaScript stack including jQuery, Prototype.js, and Matomo analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks DNSSEC and explicit security headers. No incident response or security policy is published, which could be improved. Overall, the domain registration is consistent and transparent, supporting the legitimacy of the business.