Switzerland security reports

werk.ARCHITEKTEN is a Swiss architecture cooperative specializing in architecture, urban planning, and sustainable building projects. The firm emphasizes responsible resource use and high architectural quality tailored to client needs. Their collaborative approach includes partnerships with experts in related fields and engagement in academic teaching and quality assurance processes. The website reflects a professional and regionally focused architecture practice with clear contact information and a cookie consent mechanism ensuring GDPR compliance. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with responsive design and basic accessibility features. The site is served over HTTPS with no detected blocking or WAF interference, indicating good digital maturity. However, security headers are not explicitly present, and no formal security or incident response policies are published. From a security perspective, the site benefits from HTTPS and cookie consent but lacks advanced security headers and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website presents a secure, professional, and compliant digital presence suitable for a small architecture cooperative. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance the security posture and user trust.

C

Centre Artistique du Lac

centre-artistique-du-lac.ch

52

Centre Artistique du Lac is a multidisciplinary artistic education and creation center based in Geneva, Switzerland. Founded in 2019, it offers training and workshops in music, dance, theatre, painting, and other artistic disciplines. The website reflects a professional and consistent brand presence targeting artists and students interested in artistic development. The business operates primarily as a small educational institution with a local/regional market focus. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Contact Form 7, integrating Google reCAPTCHA for form security. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS and anti-bot measures but lacks some HTTP security headers and formal incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professionally maintained, with room for improvement in compliance and security best practices.

L

Le Point d’Interro

pointdinterro.org

51

Le Point d’Interro is a small non-profit community center based in Collonge-Bellerive, Switzerland, focused on providing socio-cultural and educational activities primarily for children and adolescents aged 8 to 16. Founded in 1990, it promotes values such as respect, solidarity, and citizenship through group activities, room rentals, and events. The website reflects a well-maintained digital presence with clear contact information and a professional design. Technically, it is built on WordPress using modern plugins and themes, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and secure form handling, though it lacks some security headers and explicit privacy and cookie policies. Overall, the domain registration data aligns well with the website content, supporting its legitimacy and trustworthiness.

R

Redcare Apotheke

redcare-apotheke.ch

73

Redcare Apotheke is a well-established online pharmacy serving the Swiss market, offering a wide range of health, beauty, and wellness products. It operates under the parent company Shop Apotheke Europe N.V., positioning itself as a trusted and certified provider with strong customer service and secure transaction processes. The website demonstrates a mature digital infrastructure using modern web technologies such as React and Next.js, ensuring good performance and mobile optimization. Security posture is robust, supported by ISO certifications and secure payment options, although explicit incident response contacts and vulnerability disclosure mechanisms could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

M

Migros Group

migros-engagement.ch

75

The website engagement.migros.ch is a professionally designed platform representing the social engagement arm of the Migros Group, a leading Swiss enterprise. It focuses on promoting and funding cultural, community, health, education, climate, and technology initiatives. The site targets a broad audience interested in social projects and funding opportunities, positioning itself as a trusted non-profit resource under the Migros brand. Technically, the site uses modern JavaScript libraries, Google Analytics, Facebook Pixel, and OneTrust for cookie consent, indicating a mature digital infrastructure likely powered by Adobe Experience Manager. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security policies and vulnerability disclosures are absent. The site shows no signs of adult or unsafe content and is fully accessible without WAF or blocking mechanisms. Overall, the domain registration and website content align well, reflecting high legitimacy and trustworthiness.

F

filmfriend

filmfriend.ch

58

filmfriend.ch is a Swiss-based streaming platform offering feature films, documentaries, and kids movies accessible via library cards. The service targets a general audience including families, providing ad-free content on multiple devices. Technically, the website is built on Angular 18.2.8 and uses CDN hosting for content delivery, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS and secure forms, but lacks explicit privacy and cookie policies. No contact or incident response information is provided, which could impact user trust and compliance. Overall, the platform is professional and trustworthy with room for improvement in privacy compliance and transparency.

V

Verkehrsbetriebe Biel

vb-tpb.ch

61

Verkehrsbetriebe Biel (VB) operates as a regional public transportation provider in Switzerland, primarily serving the Biel area with bus, trolleybus, and cable car services. The website offers comprehensive information on schedules, tickets, and current operational updates, targeting local commuters and residents. The company maintains a consistent brand presence and active social media channels to engage its audience. Technically, the website employs modern JavaScript frameworks such as Vue.js and jQuery, alongside libraries like Axios and Slick Carousel, indicating a contemporary and interactive user experience. The use of Wagtail CMS is evident, supporting content management and digital maturity. Performance and mobile optimization are good, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not visible, and no vulnerability disclosure or security.txt files are present. Tracking technologies include Google Analytics and Facebook Pixel, with moderate user tracking levels balanced by privacy compliance. Overall, the website is professional, trustworthy, and well-suited for its public transportation business model. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its posture and user trust.

C

City of Biel/Bienne

biel-bienne.ch

76

The City of Biel/Bienne's official website serves as a comprehensive digital portal providing residents, businesses, and tourists with essential information about the city's services, events, tourism, and administration. The site is multilingual, supporting German, French, English, and an Easy Read version, reflecting the city's bilingual nature and commitment to accessibility. The business model is that of a government municipal service, positioning itself as the authoritative source for city-related information and services. Technically, the website employs a modern tech stack including jQuery, jQuery UI, Flickity, FancyBox, and a proprietary govis CMS framework. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses a robust cookie consent mechanism compliant with GDPR, and analytics are handled via Matomo, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and employs cookie consent with categorized cookies. However, it lacks explicit security headers and a published incident response or vulnerability disclosure policy. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns with the website's government identity, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements include implementing security headers, publishing an incident response policy, and adding a vulnerability disclosure mechanism to further enhance security posture and transparency.

P

Partners For A New Economy

p4ne.org

54

Partners For A New Economy (P4NE) is a small, international philanthropic fund focused on redesigning economic systems to better serve people and nature. Founded in 2015 and hosted by the Swiss Philanthropy Foundation, P4NE collaborates with multiple funding partners to support systemic change initiatives primarily in Europe. The website reflects a professional and consistent brand presence, providing clear information about their mission, grant-making activities, and field-building efforts. Technically, the site is built on WordPress with modern plugins and analytics tools, hosted by Infomaniak, and optimized for mobile and SEO. Security posture is good with HTTPS enabled and cookie consent mechanisms in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is strong with comprehensive policies and GDPR-aligned consent. Overall, the domain registration and hosting details align well with the organization's claims, supporting legitimacy and trustworthiness.

L

Lidl Schweiz

lidl.ch

78

Lidl Schweiz operates as a major retail supermarket chain in Switzerland, offering a wide range of grocery products and weekly promotions. The website www.lidl.ch serves as an information portal for customers, providing access to current offers and company information. The business is part of the Schwarz Gruppe, a large international retail group, and holds a strong market position in the Swiss retail sector. The site targets general consumers seeking affordable supermarket products. Technically, the website employs modern JavaScript frameworks, integrates third-party services such as YouTube and Kameleoon for marketing and analytics, and uses OneTrust for cookie consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS, uses standard security headers, and manages user consent for tracking scripts, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, with minimal security or privacy concerns detected.

F

FRESSNAPF

maxizoo.ch

70

Fressnapf is a large Swiss-based e-commerce retailer specializing in pet products, serving pet owners with a broad range of animal-related goods. The website is professionally designed with good user experience and mobile optimization, leveraging common marketing and analytics technologies such as Adobe Tag Manager and Facebook Connect. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are critical for compliance and security assurance. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website presents a moderate risk profile with room for improvement in security and privacy compliance.

D

Dosenbach

dosenbach.ch

69

Dosenbach is a well-established Swiss retailer specializing in footwear, accessories, and sports articles for the whole family. The website targets a broad general audience with a focus on affordable fashion and convenience, including in-store returns. It operates under the parent company Deichmann SE, a major player in the European footwear market. The site demonstrates a consistent brand presence and good content quality, supporting its retail business model effectively. Technically, the website uses modern web technologies such as Angular framework, web fonts, and structured data (JSON-LD) to enhance SEO and user experience. The site is mobile-optimized and shows good performance characteristics, although some accessibility features could be improved. Security-wise, the website enforces HTTPS and uses best practices like crossorigin attributes for fonts and a manifest file for progressive web app capabilities. However, it lacks explicit security headers and visible privacy or cookie policies, which are important for compliance and user trust. No incident response or vulnerability disclosure information is present, which could be a gap in security transparency. Overall, the domain registration data aligns well with the website's business claims, indicating legitimacy and trustworthiness. The absence of privacy and cookie policies, as well as contact information, slightly reduces the overall compliance and user confidence scores. Strategic improvements in these areas would enhance the website's security posture and regulatory compliance.

C

Collombey Centre

collombeycentre.com

52

Collombey Centre is a retail shopping center located in Collombey-Muraz, Valais, Switzerland, established in 2013. The website serves as an informational portal for the shopping center, offering visitors details about the various retail stores and services available. The site is primarily in French and targets local shoppers and visitors in the region. Technically, the website is built on WordPress, utilizing modern libraries such as Bootstrap, jQuery UI, and Font Awesome, with SEO optimization handled by the Yoast SEO plugin. Cookie consent is managed through tarteaucitron.io, indicating attention to privacy compliance, although no explicit privacy policy or terms of service pages were found.

I

International Security Ligue

international-security-ligue.org

57

The International Security Ligue is a well-established global organization representing leading private security companies since 1934. It focuses on enhancing professionalism, advocating for fair market conditions, and providing research and resources to the private security industry worldwide. The organization targets security companies, government agencies, and industry stakeholders, positioning itself as a key voice and forum for collaboration in the security sector. Technically, the website is built on the Webflow platform using modern web technologies and minimal tracking, delivering a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information support legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy transparency.

C

Commune de Veyrier

veyrier.ch

40

The website for Commune de Veyrier serves as the official digital presence of the local government in Switzerland, providing residents and visitors with comprehensive information about municipal services, cultural events, administrative procedures, and territorial planning. The site targets local community members and stakeholders, offering a broad range of public service information in a well-structured and professionally designed format. The business model is that of a governmental public service entity, focusing on transparency and community engagement. Technically, the website is built on WordPress with WooCommerce plugins, leveraging common web technologies such as jQuery and integrating analytics tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site demonstrates good mobile optimization and navigation clarity, although some technical improvements could enhance accessibility and SEO further. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible security headers and a formal security policy or incident response contact. Privacy compliance is limited, with no detected privacy or cookie policies and no consent mechanisms, which poses compliance risks under GDPR and related regulations. Overall, the website is trustworthy and professional, reflecting its governmental nature, but would benefit from enhanced privacy and security disclosures to improve compliance and user trust. Strategic recommendations include implementing privacy and cookie policies, adding security headers, publishing a security.txt file, and providing clear contact information for security incidents.

M

Mairie de Versoix

versoix.ch

41

The website www.versoix.ch is the official digital presence of the City of Versoix, Switzerland, serving as a municipal government portal. It provides residents and visitors with comprehensive information on local news, events, administrative services, public projects, and community resources. The site targets local citizens and stakeholders, positioning itself as a trusted source for municipal information and services. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as jQuery and Flickity, and integrates third-party services like Google Tag Manager, Google reCAPTCHA, and social media SDKs. The site is mobile-optimized and features good navigation and content structure, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professionally designed and trustworthy, with a strong business credibility score. However, improvements in privacy compliance and security headers are recommended to enhance user trust and regulatory adherence.

V

Ville de Vernier

vernier.ch

52

Ville de Vernier operates as the official municipal government website for the city of Vernier, Switzerland, serving approximately 37,000 residents. The site provides comprehensive information on local administration, practical services, cultural activities, news, and events, targeting a broad audience including seniors, youth, families, new inhabitants, associations, and enterprises. The business model is centered on public service delivery and community engagement, positioning itself as a trusted local authority. Technically, the website is built on Drupal 10, leveraging modern JavaScript frameworks like Alpine.js and privacy-focused analytics via Plausible. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. The infrastructure reflects a mature digital presence suitable for a government entity. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated incident response contact, which are recommended best practices. Privacy compliance is partial, with a basic privacy policy present but no cookie consent mechanism, potentially impacting GDPR adherence. Overall, the website presents a low-risk profile with strong business credibility and technical implementation. Strategic improvements in privacy compliance and security hardening would enhance trust and regulatory alignment.

C

Commune de Vandœuvres

vandoeuvres.ch

46

The website www.vandoeuvres.ch serves as the official online presence for the Commune de Vandœuvres, a local government entity in Switzerland. It provides residents and visitors with practical information, news, event announcements, and access to municipal services such as room rental and contact details. The site targets local citizens and stakeholders interested in community affairs. Technically, the site is built on WordPress 6.8.3, leveraging modern libraries such as jQuery, Foundation CSS, and Leaflet.js for mapping. It integrates anti-spam and bot detection tools and uses Piwik for analytics, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and employs anti-spam measures but lacks explicit security headers and published security policies, representing areas for improvement. Privacy compliance is limited due to the absence of privacy and cookie policies, which is a notable gap given GDPR requirements. Overall, the site is professional, trustworthy, and well-maintained but would benefit from enhanced privacy and security disclosures.

M

Mairie de Troinex

troinex.ch

55

The website troinex.ch serves as the official digital presence for the commune of Troinex in Switzerland, providing residents and visitors with comprehensive information about municipal services, local news, events, environmental initiatives, and administrative procedures. The site targets local citizens and stakeholders, offering a user-friendly platform to access government resources and community updates. The business model is that of a government entity focused on public service and community engagement. Technically, the website is built on WordPress CMS, utilizing modern web technologies such as Bootstrap for responsive design, Gravity Forms for data collection, and analytics tools including Matomo, Google Analytics, and Facebook Pixel. The site demonstrates good digital maturity with mobile optimization, accessibility features, and SEO best practices, although hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and uses nonce tokens in forms to prevent CSRF attacks. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for enhanced protection. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, troinex.ch is a trustworthy and professional government website with high content quality and user experience. It complies with GDPR requirements and provides clear contact information. Strategic recommendations include publishing a dedicated security policy, incident response details, and adopting additional security headers to strengthen the security posture further.

C

Commune de Russin

russin.ch

50

Commune de Russin is a small local government entity in the Canton of Geneva, Switzerland, serving approximately 540 residents. The website provides comprehensive community information, local news, administrative services, and tourism details. It is built on WordPress with common plugins and libraries, offering a functional and user-friendly experience. The site is well-branded and consistent with its government role, targeting residents and visitors. Technically, the site uses modern web technologies but lacks advanced security headers and privacy compliance features. Security posture is moderate with HTTPS enabled but missing some best practices. Overall, the website is trustworthy and professional but could improve privacy and security policies to enhance compliance and user trust.

The website www.puplinge.ch serves as the official online presence for the Commune de Puplinge, a local government entity in Switzerland. It provides municipal information, community news, and administrative services targeted primarily at residents and visitors of Puplinge. The site is designed with modern web technologies including Vue.js and Tailwind CSS, indicating a contemporary technical infrastructure with server-side rendering via Nuxt.js. The website is mobile-optimized and offers a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS, ensuring encrypted communications. However, the absence of security headers and lack of explicit privacy and cookie policies indicate areas for improvement in compliance and security posture. No forms or contact information were detected in the provided content, which may limit user engagement and support capabilities. Overall, the website reflects a trustworthy and professional government service portal with moderate technical maturity. Strategic enhancements in privacy compliance, security headers, and contact transparency would further strengthen its security and user trust profile.

The website www.presinge.ch serves as the official online presence for the Commune de Presinge, a small agricultural municipality in the canton of Geneva, Switzerland. It provides residents and visitors with community news, event calendars, administrative information, and local government services. The site targets local citizens and stakeholders interested in municipal affairs and community engagement. The business model is that of a local government entity focused on public service and information dissemination. Technically, the website employs a traditional web stack with jQuery, jQuery UI, Fancybox, and Flexslider libraries. The site appears to be custom-built or uses a non-mainstream CMS. Performance is moderate with basic mobile optimization and accessibility features. SEO is basic but sufficient for local government needs. No advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site lacks visible security headers and does not display a privacy or cookie policy, which are compliance gaps especially under GDPR. The use of an outdated jQuery version may pose some risk, though no immediate vulnerabilities are evident in the HTML. HTTPS status is unknown but assumed present given the official nature. No incident response or security contact information is provided. Overall, the website is trustworthy and professional, serving its purpose well for local government communication. However, improvements in privacy compliance, security headers, and modernization of the tech stack would enhance its security posture and user trust.

C

Commune de Perly-Certoux

perly-certoux.ch

49

The website perly-certoux.ch is the official online presence of the Commune de Perly-Certoux, a small municipality in the canton of Geneva, Switzerland. It serves as a comprehensive portal for residents and visitors, offering information on local administration, community life, cultural events, and municipal services. The site is well-structured with clear navigation and content relevant to its target audience, primarily local citizens and stakeholders. Technically, the website employs standard web technologies including Bootstrap, jQuery, Font Awesome, and Google Analytics for visitor tracking. It is powered by the iomedia platform, indicating a specialized CMS for municipal websites. The site is mobile-optimized and includes accessibility considerations, though some areas could be improved. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements a cookie consent banner compliant with GDPR. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the domain is legitimately registered to the municipality, enhancing trustworthiness. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements could focus on enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further strengthen the security posture.

The website www.onex.ch is the official digital presence of the Ville d'Onex, a municipal government entity in Switzerland. It provides information and services related to sports, education, social, and cultural infrastructure for approximately 19,000 residents. The site is primarily in French and targets local citizens and visitors. The business model is that of a government authority delivering public services and community information. The website demonstrates a consistent and professional brand image aligned with its municipal purpose. Technically, the site is built using modern web technologies including Nuxt.js and Tailwind CSS, with Google Tag Manager integrated for analytics. The site is mobile-optimized and performs moderately well. Security measures such as HTTPS and standard security headers are implemented, indicating a good security posture. However, there is a lack of explicit privacy and cookie policies, as well as no visible incident response or security contact information, which are areas for improvement. From a security perspective, the site shows no signs of vulnerabilities or malicious content. The WHOIS data confirms the domain is legitimately registered to the Ville d'Onex, consistent with the website's claims. The overall risk is low, but the absence of privacy compliance documentation and incident response details slightly reduces the trust score. Strategically, the website should prioritize publishing comprehensive privacy and cookie policies with consent mechanisms, establish clear security and incident response policies, and enhance accessibility features to meet compliance standards. These steps will improve user trust, legal compliance, and overall security posture.

C

Commune de Meyrin

meyrin.ch

48

The Commune de Meyrin website serves as the official digital presence for the municipal government of Meyrin, Switzerland. It provides comprehensive information about local administration, public services, cultural activities, environmental initiatives, and economic development. The site targets residents and visitors, offering clear navigation and relevant content in French. The business model is typical of a public sector entity focused on community engagement and service delivery. Technically, the site is built on Drupal 10, leveraging modern web standards and responsive design to ensure accessibility across devices. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security and incident response policies are not prominently published. Overall, the site demonstrates a mature digital infrastructure with good content quality and trust indicators, supporting its role as a reliable municipal resource.

M

Mairie de Meinier

meinier.ch

50

The website www.meinier.ch is the official online presence of the municipality of Meinier, Switzerland. It serves as a comprehensive portal for residents and visitors, offering information on local administration, community services, events, and contact details. The site is well-structured, primarily in French, and targets local citizens seeking municipal resources and updates. Technically, the site is built on Drupal 10, leveraging modern libraries such as Bootstrap Icons and Font Awesome, with Google Tag Manager integrated for analytics. The site demonstrates good mobile optimization and accessibility features, providing a positive user experience. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or detailed GDPR compliance information. Overall, the site is trustworthy and professional, suitable for its government function, but could improve in privacy and security transparency.

V

Ville de Lancy

lancy.ch

56

Ville de Lancy is the official municipal website for the city of Lancy, Switzerland, providing comprehensive information about the city's administration, cultural programming, social services, environmental initiatives, and community activities. It serves residents and visitors with relevant municipal services and event information. The website positions itself as a key information hub for the third largest commune in the canton of Geneva by population. Technically, the site is built on Drupal 10 with modern front-end frameworks such as Bootstrap and Swiper.js, ensuring good mobile optimization and accessibility. The site uses HTTPS and integrates tracking tools like Facebook Pixel and Google Tag Manager for analytics and marketing purposes. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but lacks publicly available privacy and cookie policies, security policies, and incident response information, which are important for compliance and trust. Overall, the website is professional, trustworthy, and well-maintained, but could improve privacy compliance and transparency.

C

Commune de Gy

mairie-gy.ch

58

The website www.mairie-gy.ch serves as the official online presence for the Commune de Gy, a small municipal government entity in Switzerland. It provides residents and visitors with access to local government services, news, events, and administrative resources. The site is well-structured, professionally designed, and optimized for mobile devices, reflecting a moderate level of digital maturity appropriate for a local government. The technical infrastructure leverages modern web technologies and a specialized CMS platform (i-web.ch), ensuring a functional and accessible user experience. Security posture is adequate with HTTPS enforced and secure login mechanisms, though there is room for improvement in implementing security headers and explicit security policies. Privacy compliance is addressed with clear privacy and cookie policies, including user consent mechanisms. Overall, the website demonstrates high business credibility and trustworthiness consistent with its public sector role.

F

filmkids+

filmkidsplus.ch

67

filmkids+ is a Swiss-based digital platform dedicated to providing children and youth with access to films, educational content about filmmaking, games, and community interaction features. The platform leverages WordPress with modern plugins and themes to deliver a rich multimedia experience. It positions itself as a niche educational and entertainment service with a focus on fostering creativity and learning in young audiences. Technically, the site uses a solid tech stack including WordPress, Elementor, Smart Slider 3, and Matomo analytics, ensuring a good balance between functionality and privacy. Security posture is adequate with HTTPS and privacy-respecting analytics, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, but contact and incident response information are limited. Overall, filmkids+ presents a trustworthy and professional platform with a strong focus on content quality and user engagement for its target audience.

S

Swiss Film School

swissfilmschool.com

49

Swiss Film School is a specialized educational institution based in Switzerland, focusing on film and acting training programs for various audiences including kids, teens, and professionals. The website presents a professional and consistent brand image with clear navigation and relevant content about their offerings. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and frameworks, hosted likely by Hostpoint AG. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is functional and trustworthy but could improve in compliance and security transparency.

Y

Yiannis Girod Informatique

ygi.ch

55

Yiannis Girod Informatique is a small, Geneva-based individual IT business with 25 years of experience specializing in IT training and WordPress website creation and maintenance. The company positions itself as a local expert and official partner of Infomaniak, targeting individuals, groups, and businesses seeking WordPress-related services and training. The website is professionally designed with clear navigation, good mobile optimization, and relevant content focused on WordPress and IT education. Technically, the site runs on WordPress CMS with modern plugins including Matomo for analytics and Complianz for GDPR cookie consent, hosted likely via Infomaniak. Security posture is strong with HTTPS enforced, consent-based tracking, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies in French, including user consent management. However, no explicit terms of service or security policy pages were found, and no direct contact emails or phone numbers are listed, only a contact form. Overall, the site is trustworthy, compliant, and professionally maintained, suitable for its niche market.

B

Buzz Com

buzzcom.ch

48

Buzz Com is a small, full-service communication agency based in Geneva, Switzerland, founded in 2004 and led by Stephen Hearnden. The agency offers a range of services including strategic planning, advertising, graphic design, and website development, leveraging a network of creative professionals in Switzerland. The website is currently in a 'Coming Soon' state with basic content describing the agency's services and contact information. Technically, the site is built on WordPress using the Avada theme and includes jQuery and Google Fonts. HTTPS is enabled, but there is a lack of security headers and privacy-related policies, which impacts the overall security and compliance posture. The site does not include analytics or advertising scripts, indicating minimal user tracking. Contact is facilitated via phone and a contact form. Overall, the website presents a basic but professional digital presence appropriate for a small agency.

C

Culture et Rencontre

culture-rencontre.ch

51

Culture et Rencontre is a small non-profit cultural and educational organization based in Lancy, Switzerland, offering a variety of adult group courses in languages, arts, culture, body wellness, and internet skills, alongside conferences and cinema programming for children. The organization is subsidized by local communes and the canton, positioning itself as a community-focused provider of cultural enrichment and lifelong learning. The website is built on WordPress with modern plugins and technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and GDPR-compliant cookie consent mechanisms, though some security headers could be improved. Contact information is clearly presented, enhancing trust and credibility. Overall, the site is professional, trustworthy, and well-aligned with its mission.

E

eMa - Ecole des Musiques Actuelles

ema.school

58

eMa - Ecole des Musiques Actuelles is a Geneva-based educational institution specializing in contemporary music education. The school offers a variety of programs tailored to different age groups and skill levels, including masterclasses, theoretical courses, and pre-professional curricula. It holds certification from the Geneva DIP, underscoring its legitimacy and quality standards. The website serves as a comprehensive portal for prospective and current students, providing detailed information about courses, events, and administrative matters. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Slick Carousel for interactive elements. It integrates Google Analytics and Facebook Pixel for analytics and marketing purposes, alongside a robust cookie consent mechanism compliant with GDPR. The site is mobile-optimized and features multilingual support via Google Translate, enhancing accessibility for a diverse audience. From a security perspective, the site enforces HTTPS and employs cookie consent best practices, though it lacks explicit security headers and incident response disclosures. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for this type of institution. Overall, the site demonstrates a solid security posture with room for improvement in header implementation and transparency. The overall risk assessment is low, with the website presenting a trustworthy and professional front for the institution. Strategic recommendations include enhancing security headers, publishing a formal security policy, and maintaining regular audits of third-party scripts to mitigate potential risks.

L'épicentre is a cultural center serving the Commune of Collonge-Bellerive in Switzerland, offering a variety of cultural programming including concerts, cinema, and theatre. The website supports ticket sales and subscription management through integrated plugins. The site is built on WordPress with a modern tech stack including SEO and GDPR compliance tools. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-optimized for its audience.

A

archives communales genevoises

archivescommunales.ch

60

The website archivescommunales.ch serves as an intercommunal archival portal for several Geneva municipalities, providing access to archival inventories and descriptions. It targets researchers, local officials, and citizens interested in municipal archives. The platform is built on Drupal CMS and leverages common JavaScript libraries such as jQuery, YUI, and Bootstrap, indicating a moderately modern technical infrastructure. The site offers multilingual support and a clear navigation structure, though mobile optimization and accessibility are basic. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No contact information or incident response policies are published, limiting transparency. The domain uses privacy protection for WHOIS data, which is justified given the public service nature of the site. No advertising or tracking technologies were detected, suggesting minimal user tracking. Overall, the website is functional and professionally presented with good content relevance and trust indicators appropriate for a government archival service. However, improvements in security headers, privacy compliance, and contact transparency would enhance its security posture and user trust. The risk level is moderate with no critical vulnerabilities detected in the provided data.

T

Théâtre le douze dix-huit

ledouzedixhuit.ch

49

Théâtre le douze dix-huit is a cultural venue based in Grand-Saconnex, Switzerland, offering a rich program of theatrical, cinematic, musical, and youth-oriented performances for the 2025-26 season. The website serves as an information and ticketing portal, linking to a partner ticketing platform. The business targets a general audience interested in arts and culture, operating as a small-sized institution with a local/regional focus. Technically, the website is built on WordPress using the Divi theme and Essential Grid plugin, with integrations for Google Analytics and Google Tag Manager. The site is hosted likely by Infomaniak, a Swiss hosting provider, and demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements are possible. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and formal privacy or cookie policies, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure or security.txt file indicates room for improvement in transparency and incident response readiness. Overall, the website is professional and trustworthy, with a solid business presence and technical foundation. However, it should enhance privacy compliance and security best practices to reduce risk and improve user trust.

L

LoryBau AG

lorybau.ch

45

LoryBau AG is a small Swiss construction company based in Vechigen, specializing in project accompaniment from concept to completion with a focus on quality and experience. The website presents a professional image with clear contact information and a localized market position. Technically, the site uses the Cmsbox CMS platform, integrates Google reCAPTCHA for bot protection, and employs Piwik/Matomo analytics for user tracking. However, it lacks explicit privacy and cookie policies, security headers, and terms of service, which are important for compliance and security. The site is accessible without WAF or blocking mechanisms and uses HTTPS with good SSL configuration. Overall, the security posture is moderate but could be improved with additional headers and policies. The website content is safe for general audiences and focused on construction services.

K

Kraftkeller Langnau i. E.

kraftkeller-langnau.ch

46

The website www.kraftkeller-langnau.ch represents a small local hospitality and fitness business based in Switzerland, offering event venue rental and gym services under the Kraftkeller Langnau and drehpunkt brands. The site content is minimal but focused on promoting their event space and gym facilities to the local community. Technically, the website uses modern JavaScript modules and the Livewire framework, with basic mobile optimization and navigation clarity. However, it lacks comprehensive SEO and accessibility features, and no structured data or meta tags are present to enhance search visibility. From a security perspective, the site employs a cookie consent mechanism indicating some privacy awareness, but it lacks visible security headers and published privacy or security policies. No contact information or incident response channels are provided, which limits trust and compliance posture. The absence of HTTPS enforcement details and security best practices suggests room for improvement in security hardening. Overall, the website is functional but basic, with moderate trustworthiness and limited business credibility signals. The lack of privacy and terms policies, contact details, and security disclosures are notable gaps. Strategic improvements in security, privacy compliance, and content richness would enhance the site's professionalism and user trust.

H

Helbling Holding AG

helbling.ch

53

Helbling Holding AG is a Swiss-based consultancy specializing in a broad range of services including business advisory, technology development, product lifecycle management, and sustainability consulting. The company positions itself as a trusted partner for businesses seeking innovation and sustainable growth, with a strong international presence including regional sites in Germany and the USA. The website reflects a mature digital infrastructure built on Neos CMS and Flow PHP framework, incorporating modern technologies such as Google Tag Manager and Usercentrics for consent management. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not published. Overall, the site is professional, well-structured, and compliant with GDPR, providing a positive user experience and clear business information.

M

MARIA DEGIORGI - Raumkonzepte, Bern

mariadegiorgi.ch

50

MARIA DEGIORGI is a small interior design and consulting business based in Bern, Switzerland, specializing in color and material consultations, residential consulting, interior architecture including construction supervision, and room styling. The website serves as a professional portfolio showcasing various projects and services targeted at a general audience interested in interior design. The business operates in a niche local market with a clear focus on quality and aesthetics. Technically, the website is built on WordPress, utilizing common technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is moderately optimized for performance and mobile use, with basic accessibility features and good SEO practices. HTTPS is properly configured, ensuring secure communications. From a security perspective, the site has implemented HTTPS and a cookie consent banner, indicating some awareness of privacy regulations. However, it lacks advanced security headers and formal privacy or security policies, which are areas for improvement. No forms or sensitive data collection mechanisms are present on the homepage, reducing immediate risk exposure. Overall, the website presents a professional and trustworthy image but would benefit from enhanced privacy compliance documentation, improved security headers, and more comprehensive contact information to strengthen user trust and regulatory adherence.

werk.ARCHITEKTEN Genossenschaft is a Swiss architectural cooperative specializing in architecture, urban planning, and sustainable building practices. With over two decades of experience, the firm offers comprehensive services ranging from new constructions to renovations, emphasizing resource responsibility and ecological sustainability. Their collaborative approach involves qualified partners across architecture, landscape architecture, engineering, and construction management, positioning them as a reputable regional player in the real estate and architectural sector. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, FontAwesome, and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements such as updating JavaScript libraries and implementing security headers could enhance security posture. From a security perspective, the site uses HTTPS and has implemented a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies or incident response information suggests room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the legitimacy of the business. Strategic recommendations include enhancing security headers, updating dependencies, and publishing security and incident response policies to strengthen trust and compliance.

H

Hof 3

hof3.ch

47

Hof 3 is a Swiss-based organization focused on sustainable agriculture through permaculture, cultural projects, and scenography services. The company operates a certified organic farm with diverse livestock and agroforestry initiatives, alongside a scenography division that designs and implements exhibitions for museums and institutions. The scenography business will be spun off into a dedicated agency, 'hof3 interaktiv', in 2025, indicating strategic business segmentation. The website is well-structured, primarily in German, and targets environmentally conscious individuals and cultural institutions within Switzerland. Technically, the site uses Concrete CMS with modern JavaScript libraries such as jQuery, Vue.js, and Bootstrap, providing a moderate level of digital maturity and mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security practices.

H

hof3 Interaktiv GmbH

hof3.com

50

hof3 Interaktiv GmbH is a Swiss-based agency specializing in scenography, communication, and design services. With approximately 20 years of experience, the company offers a comprehensive range of services including concept development, multimedia content creation, technical programming, and exhibit construction. Their clientele includes museums, NGOs, research institutes, and companies across Switzerland, positioning hof3 as a niche player with recognized industry awards. The website reflects a professional and consistent brand image, targeting organizations seeking specialized scenographic and communication solutions. Technically, the website is built on the Concrete5 CMS platform, utilizing jQuery and custom gallery plugins. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Hosting appears stable with a reputable registrar, though DNSSEC is not enabled. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response policies. From a security and compliance perspective, the site maintains GDPR compliance with a privacy policy available in German. However, cookie consent mechanisms and terms of service are absent. Contact information is clearly provided, enhancing business credibility. No signs of WAF blocking or malicious content were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, hof3.com presents as a trustworthy, professional agency website with solid business credibility and a good technical foundation. Security improvements such as enabling DNSSEC and adding security headers are recommended to enhance protection. Privacy compliance could be improved by implementing cookie consent mechanisms and publishing terms of service.

FREITAG is a Swiss-based company specializing in the design and retail of upcycled bags and accessories made from used and circular materials. The company positions itself as a niche sustainable fashion brand targeting environmentally conscious consumers seeking unique, durable everyday companions. The website reflects a medium-sized enterprise with a consistent brand identity and a focus on quality and sustainability. Technically, the site is built on modern frameworks such as Next.js and React, leveraging cloud services like Cloudinary for media and integrating analytics and chat support tools. Performance and mobile optimization are well addressed, providing a good user experience. Security posture is solid with HTTPS enforcement and standard security headers, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well handled with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the company's sustainable business model.

R

Ramseier Holzbau AG

ramseier-holzbau.ch

51

Ramseier Holzbau AG is a small Swiss company specializing in wood construction, interior finishing, and wood element construction, serving regional markets including Burgdorf, Emmental, Bern, Oberaargau, and Solothurn. The website presents a professional image with clear contact information and a focus on craftsmanship and sustainability. The technical infrastructure is based on the fuman CMS platform, utilizing modern JavaScript libraries such as Flickity for UI elements. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. From a security perspective, the website uses HTTPS and implements a cookie consent banner, indicating awareness of privacy regulations. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. Security headers are not detected in the provided data, suggesting room for improvement in hardening the site against common web threats. No suspicious or malicious content was found, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is a good representation of a small regional manufacturing business with moderate technical maturity and privacy compliance. Security posture is adequate but could be enhanced by adding formal policies and technical security headers. The site is safe for general audiences with no adult or questionable content detected.

M

Mairie de Soral

soral.ch

49

The website www.soral.ch serves as the official online presence for the Mairie de Soral, the municipal government of the Commune of Soral in Switzerland. It provides residents and visitors with information about local governance, community services, events, and practical resources. The site is well-structured with clear navigation and professional branding consistent with a small government entity. The content is primarily in French and targets local community members and stakeholders. Technically, the website is built on WordPress 6.8.2, utilizing common plugins such as Contact Form 7, The Events Calendar, and a booking plugin. It employs modern web technologies including jQuery, Bootstrap, and Google Fonts. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening to improve user trust and regulatory adherence.

C

Commune de Laconnex

laconnex.ch

56

The website www.laconnex.ch serves as the official online presence for the Commune de Laconnex, a local government entity in the Canton of Geneva, Switzerland. It provides residents and visitors with practical information, municipal news, political and social updates, local services, and community event agendas. The site targets the local population and stakeholders interested in the commune's administrative and social affairs. The business model is that of a governmental public service platform, focusing on transparency and citizen engagement. Technically, the website is built on the WordPress CMS platform, leveraging popular plugins such as Yoast SEO for search optimization, Events Calendar Pro for event management, and Complianz GDPR for privacy compliance. The site uses modern web technologies including jQuery and Matomo analytics for user tracking. The design is responsive and optimized for mobile devices, with good SEO and accessibility practices, though some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS with good SSL configuration and includes standard security headers. It employs cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improving security posture. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It effectively serves its purpose as a municipal information portal. Strategic recommendations include publishing a dedicated security policy, incident response information, and a vulnerability disclosure program to enhance transparency and security readiness.

S

Solidarité Ukraine, Genève

solidariteukraine.ch

54

Solidarité Ukraine, Genève is a small non-profit organization dedicated to supporting Ukrainian refugees in Geneva. The website provides hotline services, social and administrative assistance, accommodation offers, and volunteer engagement opportunities. It targets both refugees and local residents willing to help. The organization appears to be well-positioned locally with a clear humanitarian mission and bilingual content in French and Ukrainian. The website uses WordPress with a modern tech stack including Bootstrap and React vendor scripts, and employs SEO and multilingual plugins to enhance accessibility and reach. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and email obfuscation, but visible PHP warnings indicate minor backend issues that should be addressed. Privacy compliance is limited due to the absence of a privacy policy, though a cookie consent mechanism is present. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professional but could improve in security hygiene and privacy transparency.

I

Innovative Web AG

i-web.ch

62

Innovative Web AG is a Swiss-based company specializing in innovative eGovernment solutions tailored for cantons, municipalities, schools, institutions, and energy providers. The company positions itself as a leading provider in Switzerland, offering a comprehensive suite of online services, software modules, and web design tailored to public sector needs. Their business model focuses on B2G and B2B engagements, delivering integrated digital solutions that streamline government and institutional processes. The website reflects a mature and professional organization with multiple physical locations across Switzerland.