Switzerland security reports

L

Les communes genevoises

geneve-communes.ch

52

Les communes genevoises website serves as an official informational platform representing the 45 communes of the Geneva canton in Switzerland. It provides comprehensive information about the diverse public services offered by the communes, including childcare, education, sports, culture, public safety, and infrastructure maintenance. The site targets residents and citizens of Geneva, aiming to increase awareness and transparency of municipal activities. Technically, the website is built on Drupal 10 with Bootstrap 5, uses Matomo for analytics with privacy-conscious settings, and integrates modern web fonts and icons. The design is professional, mobile-optimized, and accessible, providing a good user experience. Security posture is solid with HTTPS and privacy-respecting analytics, but lacks explicit privacy and cookie policies, and contact information is not clearly presented. Overall, the site is trustworthy and legitimate, aligned with its government sector role, but could improve privacy compliance and user contact options.

D

dema dent

demadent.ch

62

dema dent is a Swiss-based dental services platform focused on providing brokerage for dental practices and offering dental seminars. The website targets dental professionals within Switzerland, offering a marketplace and educational resources. The business operates in the healthcare sector with a regional focus and a small company size. Technically, the website employs modern JavaScript libraries, Cookiebot for GDPR compliance, and Google Tag Manager for analytics, indicating a moderate level of digital maturity. The site is mobile optimized and uses HTTPS with appropriate security headers, reflecting a good security posture. However, explicit security and incident response policies are not publicly available, which could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with extensive use of tracking and marketing tools typical for its industry.

A

adfocus GmbH

getback.ch

45

Getback, operated by adfocus GmbH, is a Swiss-based technology company specializing in conversion optimization and web-push notification services tailored for e-commerce platforms. The company offers a SaaS solution that tracks user behavior on online shops and delivers targeted campaigns to increase conversion rates and customer engagement. Their market position is supported by a portfolio of reputable clients including Ikea, Tchibo, and Jumbo, indicating strong industry trust and relevance. The website is professionally designed, multilingual, and provides comprehensive information about their services and benefits. Technically, the website is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, and integrates Google Analytics and Tag Manager for user tracking and performance analysis. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, HTTPS is enforced with anonymized IP tracking in analytics, and anti-spam measures are implemented in forms. However, explicit security headers and cookie consent mechanisms are lacking, representing areas for improvement. Overall, the security posture is solid but could be enhanced by adopting additional HTTP security headers and publishing formal security policies. Privacy compliance is adequate with a clear privacy policy, but cookie consent is missing. The domain registration is transparent and consistent with the business identity, reinforcing legitimacy. There are no indications of malicious content or blocking mechanisms, allowing full access to the site. Strategically, Getback is well-positioned in the e-commerce marketing technology sector with a clear value proposition and trusted client base. Enhancing security and privacy features would further strengthen their market credibility and compliance posture.

S

Swiss Solidarity

swiss-solidarity.org

59

Swiss Solidarity is a well-established Swiss humanitarian non-profit organization founded in 1946, focused on raising funds and providing aid to people in need both in Switzerland and internationally. The organization operates multiple fundraising campaigns and partners with local and international NGOs to ensure efficient and transparent use of donations. The website is professionally designed, mobile-optimized, and provides comprehensive information about campaigns, donation methods, and organizational values. Technically, the site uses TYPO3 CMS and integrates modern analytics and marketing tools such as Google Tag Manager and Microsoft Clarity. Security posture is good with HTTPS enforced and secure forms, though some security headers could be improved. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. The WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the website presents a trustworthy and professional image with a high level of content quality and user experience.

C

Catena della Solidarietà

catena-della-solidarieta.ch

57

Catena della Solidarietà is a well-established Swiss humanitarian non-profit organization founded in 1946, focused on mobilizing national solidarity to provide aid in Switzerland and worldwide. The website effectively communicates its mission, ongoing campaigns, and donation opportunities, supported by partnerships with major Swiss media such as SRG SSR. Technically, the site is built on TYPO3 CMS with modern analytics and tracking tools, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security and incident response policies are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, making it a credible platform for donors and partners.

G

Glückskette

glueckskette.ch

59

Glückskette is a well-established Swiss humanitarian foundation founded in 1946, dedicated to providing aid worldwide and within Switzerland through fundraising campaigns and partnerships. The organization enjoys a strong market position as the largest private humanitarian aid foundation in Switzerland, with transparent and efficient use of donations. Their website reflects a professional and trustworthy image, targeting donors, volunteers, companies, and schools. Technically, the site is built on TYPO3 CMS with modern frameworks and includes consent management and analytics tools, ensuring good performance and accessibility. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and vulnerability disclosures are absent. Overall, Glückskette demonstrates high business credibility and digital maturity, with recommendations to enhance security transparency and incident response readiness.

The website serves as the Central Business Name Index for Switzerland, providing an official and authoritative platform for searching registered business names. It is operated under the Swiss Federal Government, targeting businesses, legal entities, government agencies, and the public who require access to official business registration data. The site is positioned as the primary source for such information in Switzerland, offering key services such as business name search and entity information lookup. Technically, the website employs modern frontend technologies, including Angular Material components and web fonts, ensuring a responsive and accessible user experience. Performance is moderate with good mobile optimization and basic SEO practices. The site is secured with HTTPS, but lacks explicit security headers and advanced privacy compliance features. From a security perspective, the site demonstrates a solid posture with encrypted connections and no detected vulnerabilities or exposed sensitive data. However, it lacks published privacy policies, cookie consent mechanisms, and incident response information, which are important for full compliance and user trust. No advertising or tracking technologies were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy and professional, reflecting its government affiliation and authoritative role. Strategic improvements in privacy compliance and security headers would enhance its security posture and user confidence.

Art Screen TV is a Swiss-based company specializing in representing contemporary artists and sponsoring prestigious international art events such as the Florence Biennale. The website serves primarily as an informational platform showcasing the company's partnerships, artist roster, and upcoming events. Technically, the site is built with basic HTML and CSS, leveraging external fonts and icon libraries, and hosted by Infomaniak Network SA, a reputable Swiss hosting provider. The website is accessible via HTTPS but lacks advanced security headers and DNSSEC, indicating room for improvement in security posture. Privacy and cookie policies are absent, which may impact compliance with GDPR and user trust. Overall, the site is functional but basic, with limited interactive features and minimal tracking or analytics.

V

VIBRACION LATINA - Escuchar la radio en vivo

vibracionlatina.com

44

Vibracion Latina is a small, niche online radio station focused on streaming Latin music live to Spanish-speaking audiences, primarily in Switzerland's Valais region. The website promotes mobile applications on iOS and Android platforms and maintains active social media channels to engage listeners. The business model revolves around media streaming supported by advertising and promotional content. Technically, the site uses jQuery and jPlayer for audio streaming and integrates third-party widgets such as Elfsight's Instagram feed. Hosting is provided by Infomaniak Network SA, a reputable Swiss hosting provider. Security posture is basic with HTTPS enabled but lacks important security headers and DNSSEC. Privacy compliance is weak, with no visible privacy or cookie policies, which is a compliance risk. Overall, the site is functional and provides a good user experience but requires improvements in security and privacy practices to enhance trust and compliance.

A

Agence MiNT

agence-mint.ch

57

Agence MiNT is a Swiss-based full-service communication agency specializing in connecting client messages to their target audiences through effective and relevant communication strategies. Their offerings include strategy, identity, web development, digital communication, content creation, SEO, and social media training. The agency maintains a strong local presence in Fribourg with a medium-sized team and a portfolio of diverse client projects. Technically, the website is built on Drupal 10, leveraging modern web technologies and analytics tools such as Google Tag Manager and Google Analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, although formal security policies and incident response contacts are not published. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility, suitable for its target market.

V

Ville de Fribourg

ville-fribourg.ch

61

The Ville de Fribourg website serves as the official digital presence of the City of Fribourg, Switzerland, providing residents and visitors with comprehensive information about city administration, public services, cultural events, and news updates. The site is well-positioned as a trusted government portal with clear branding and multilingual support. Technically, it is built on Drupal 10, leveraging modern web technologies including Video.js for multimedia and Google Tag Manager for analytics. Security measures include HTTPS enforcement and Google reCAPTCHA integration for form protection, though some security headers and explicit policies are absent. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site demonstrates a solid security posture and professional digital maturity appropriate for a municipal government entity.

A

Agglomération Fribourg

agglo-fr.ch

46

Agglomération Fribourg is a public autonomous institution coordinating regional development for ten central cantonal communes in Switzerland. It focuses on territorial planning, mobility, environmental protection, economic and cultural promotion. The website is professionally designed using TYPO3 CMS and integrates modern analytics and consent management tools. Security posture is strong with HTTPS and Content Security Policy in place, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR cookie consent requirements.

E

Etat de Fribourg

fr.ch

64

The website www.fr.ch is the official online portal for the Canton of Fribourg, Switzerland, providing comprehensive information and services related to the cantonal administration. It serves residents and citizens by offering access to government services, news, legislation, and administrative procedures. The site is well-branded, multilingual, and designed for accessibility and mobile responsiveness. Technically, the site is built on Drupal CMS, utilizing modern web technologies including Matomo for analytics and Google reCAPTCHA for security. The infrastructure demonstrates good digital maturity with privacy-respecting analytics and cookie consent mechanisms. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact information, which could enhance trust and preparedness. No vulnerabilities or suspicious activities were detected. Overall, the site presents a low-risk profile with strong legitimacy as a government entity. Strategic recommendations include publishing explicit security and incident response policies, adding a vulnerability disclosure mechanism, and enhancing transparency on data retention. These steps would further strengthen the site's security posture and user trust.

B

Banque Cantonale du Fribourg

bcf.ch

58

Banque Cantonale du Fribourg (BCF) is a well-established Swiss cantonal bank providing a broad range of financial services including retail and private banking, asset management, and corporate banking primarily serving the canton of Fribourg and surrounding regions. The website reflects a professional and modern digital presence built on Nuxt.js with integrated user consent management, indicating a mature technical infrastructure. Security posture is strong with HTTPS enforcement, comprehensive security headers, and GDPR-compliant privacy and cookie policies. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations, supporting BCF's position as a reputable regional financial institution.

E

EQS Group AG

bkms-system.ch

57

The BKMS System website, operated by EQS Group AG, provides a compliance and whistleblowing platform targeted at businesses requiring secure reporting solutions. The current website content is minimal due to ongoing maintenance, limiting the availability of detailed information. The business is positioned as a specialized technology provider in compliance software, with a medium-sized presence in Switzerland. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS detected. The site lacks visible security headers, privacy policies, and contact information, which reduces its compliance and security posture. No analytics or tracking technologies are present, indicating minimal user tracking. From a security perspective, the site is accessible without WAF or blocking mechanisms, but it lacks important security best practices such as HTTPS enforcement visibility and security headers. The WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the site scores moderately due to limited content and missing compliance documentation. Strategic recommendations include adding comprehensive privacy and cookie policies, improving security headers and HTTPS enforcement, providing clear contact and incident response information, and enhancing technical SEO and accessibility to improve user experience and trust.

T

The StoryBoard Collective

storyboard-collective.org

59

The StoryBoard Collective is a Geneva-based philanthropic organization founded in 2020, dedicated to supporting documentary impact production and episodic storytelling. It operates through partnerships with cultural organizations, residencies, media experts, and festivals to build capacity and provide funding, focusing on underrepresented communities. The website reflects a professional and consistent brand image, with clear navigation and comprehensive content about its mission and initiatives. Technically, the site is built on Webflow, uses modern analytics and tracking tools, and implements privacy and cookie consent mechanisms aligned with GDPR standards. Security posture is good with HTTPS and anonymized analytics, though there is room for improvement in security headers and incident response documentation. Overall, the site is trustworthy and well-positioned within its niche philanthropic media sector.

M

Médecins Sans Frontières (MSF)

msf.ch

47

Médecins Sans Frontières (MSF) is a globally recognized humanitarian medical organization providing emergency aid to populations lacking access to healthcare due to conflicts, epidemics, or natural disasters. The website reflects a professional and consistent brand presence, targeting a general audience interested in humanitarian aid. The technical infrastructure is modern, leveraging Drupal 10 CMS, with integrated analytics and cookie consent management, indicating a mature digital presence. Security posture is solid with HTTPS and security headers properly configured, though explicit privacy policies and incident response contacts are not found, representing areas for improvement. Overall, the website is trustworthy and well-positioned for its non-profit healthcare mission.

H

Helvetas

helvetas.org

68

Helvetas is a well-established Swiss non-profit development organization focused on building capacity and providing aid in Africa, Asia, Latin America, and Eastern Europe. The organization offers key services including emergency response, water and sanitation, agriculture, climate action, democracy promotion, and vocational training. The website reflects a strong market position as a reputable NGO with a global footprint and a clear mission. Technically, the website employs modern frameworks such as Bootstrap and integrates Google Tag Manager and OneTrust for analytics and cookie consent, indicating a mature digital infrastructure. The site is mobile optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and security headers present, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain and website present high legitimacy and trustworthiness, despite the absence of detailed WHOIS data due to privacy protection. Strategic recommendations include publishing a security policy, incident response information, and a vulnerability disclosure policy to enhance transparency and security readiness.

C

Caritas Switzerland

caritas.ch

65

Caritas Switzerland is a well-established non-profit organization dedicated to humanitarian aid, development cooperation, and social services. The website reflects a strong market position as a leading Swiss charity with a clear mission and professional presentation. The technical infrastructure leverages modern web technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and security headers, although explicit security policies and incident response information are not prominently published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

A

Amnesty International Schweiz

amnesty.ch

66

Amnesty International Swiss Section operates as a non-profit organization dedicated to human rights advocacy within Switzerland. The website serves as a multilingual platform (English, German, French, Italian) providing information about campaigns, local groups, donation opportunities, and contact channels. It is positioned as a reputable national section of the global Amnesty International network, targeting the general public and supporters interested in human rights issues. Technically, the website is built on the Plone CMS platform, utilizing jQuery and Cookiebot for cookie consent management, and Piwik PRO for analytics. The site demonstrates moderate performance and good mobile optimization, with a clean and professional design. SEO and accessibility are adequately addressed, though accessibility could be improved further. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks publicly available security policies, incident response contacts, or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website presents a secure, professional, and trustworthy digital presence for Amnesty International's Swiss section, with room for improvement in formal security documentation and accessibility enhancements.

H

Hospice général

hospicegeneral.ch

61

Hospice général is a well-established Geneva-based public social service organization with a history spanning five centuries. It focuses on social inclusion, migrant integration, and senior citizen support, serving diverse community segments including youth, adults in difficulty, and retirees. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audiences. Technically, the site is built on Drupal 8, incorporates modern analytics and tag management tools, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high legitimacy and trust. Strategic improvements in security policy transparency and vulnerability disclosure would further strengthen the site's security maturity.

Wella International Operations Switzerland Sàrl operates a global hair care brand with a website that serves as a selector directing visitors to professional or retail product lines. The website is professionally designed with consistent branding and clear navigation, targeting both hair care professionals and retail consumers. The technical infrastructure includes Adobe DTM and AppMeasurement for analytics and tag management, alongside common libraries like jQuery and Bootstrap, indicating a mature digital presence. Security posture is moderate with no visible security headers in the provided data, and WHOIS information is unavailable, which is unusual but likely due to privacy protection for a well-known brand. Overall, the site is safe, compliant with privacy regulations, and trustworthy, though improvements in security headers and contact transparency are recommended.

M

Musikvertrieb AG

muve.ch

41

Musikvertrieb AG is a Swiss indie music distributor and record label founded in 1935, specializing in marketing national and international artists and labels such as PIAS and muve recordings. The company targets music industry professionals and consumers interested in indie music distribution. The website is built on WordPress using the Brooklyn theme and incorporates modern technologies including Google Analytics, Facebook Pixel, and reCAPTCHA, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and published security policies, indicating room for improvement. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy with a moderate risk profile.

The Schweizer Musik & Medien Verband (SMMV) is a Swiss music and media association founded in 1998, serving musicians, producers, studios, independent labels, and managements. It offers cost-saving services such as product coding (EAN, ISRC), website and booklet design, promotional materials, legal advice, and distribution partnerships. The website is built on Joomla CMS with Bootstrap and jQuery, featuring a professional design and moderate technical maturity. Contact information is clearly provided, including email, phone, physical address, and a contact form with integrated Google Maps. However, the site lacks privacy and cookie policies, and no security headers are detected, which are areas for improvement. Google Analytics is used for user tracking with event monitoring on downloads and outbound links.

Sir Robin Photography is a professional photography service based in Switzerland, specializing in a diverse range of photographic categories including corporate, events, weddings, portraits, artwork, journeys, and documentaries. The website serves as a portfolio showcasing the photographer's work and includes client testimonials and references, targeting individuals and businesses seeking high-quality photography services. The business operates primarily as a small-scale service provider within the media industry. Technically, the website is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery, Google Analytics, Google reCAPTCHA, and Photoswipe for image galleries. The site demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to protect its contact form, indicating a reasonable security posture. However, it lacks important security headers and formal security policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional and trustworthy, with clear contact information and social media presence. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process to enhance security and compliance.

A

Alice Authoring Art

authoringart.ch

45

Alice Authoring Art is a small Swiss-based service provider specializing in professional text quality assurance, offering individually crafted and carefully edited texts for companies, organizations, cultural creators, and private individuals. The website is built on WordPress using Elementor and integrates common analytics tools such as Google Analytics and Clicky Analytics. The technical infrastructure is modern and mobile-optimized, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of GDPR indicators. Contact information is limited to social media links without explicit emails or phone numbers. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

A

Appmulti AG

adon.ch

39

Appmulti AG is a Swiss media production company with over 25 years of experience, specializing in manufacturing CDs, DVDs, Blu-ray discs, USB sticks, and vinyl LPs. The company has taken over the customer base of Adon Production AG, which ceased operations in 2023. Their market position is strong within Switzerland, targeting musicians, filmmakers, and artists seeking physical media production services. The website reflects a professional and consistent brand image with clear service offerings and customer testimonials. Technically, the site is built on WordPress using the Divi theme and includes modern features like Google reCAPTCHA for form security. However, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced security. Overall, the site is trustworthy and well-positioned but could improve privacy compliance and security transparency.

I

IFPI Schweiz

ifpi.ch

65

IFPI Schweiz is a non-profit industry association representing music labels in Switzerland. The organization supports the interests of music labels in economic and legal matters, positioning itself as a key representative body within the Swiss music industry. The website is professionally designed using the Wix platform, providing relevant content targeted at music industry stakeholders. Technically, the site uses Wix's Thunderbolt framework with modern JavaScript polyfills and enforces HTTPS, ensuring a secure browsing experience. However, the site lacks explicit privacy, cookie, and security policies, which are important for compliance and user trust. Security practices include some cookie handling protections and JavaScript hardening, but no advanced security headers or incident response information are published. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

L

La Cour des comptes de Genève

cdc-ge.ch

51

La Cour des comptes de Genève is the official governmental audit institution serving the Geneva public sector. It provides audit, evaluation, and consultation services to improve public action performance. The website targets government officials, public stakeholders, and citizens interested in governance transparency. The institution holds a stable market position as the official audit authority in Geneva. Technically, the website is built on WordPress with modern frontend libraries such as Swiper.js and Fancybox, and uses Google Fonts and reCAPTCHA for security. The site is moderately performant and mobile-optimized with good SEO practices. Security posture is strong with HTTPS and reCAPTCHA, but lacks some security headers and explicit policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

A

Association des communes genevoises

acg.ch

54

The Association des communes genevoises (ACG) website serves as the official institutional platform representing all 45 communes within the canton of Geneva, Switzerland. It functions as a non-profit association dedicated to defending and promoting the interests of its member municipalities. The site provides information about the association's governance, affiliated entities, and news updates relevant to local government officials and stakeholders. The target audience primarily includes municipal authorities and local government representatives within the Geneva region. Technically, the website is built on Drupal 10 with Bootstrap 5 for responsive design and incorporates Matomo analytics for user tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The use of deferred and asynchronous script loading enhances page load efficiency. However, there is room for improvement in security headers and explicit privacy compliance mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. Nonetheless, it lacks visible security headers and published policies related to incident response or vulnerability disclosure. The absence of explicit privacy and cookie policies, as well as consent mechanisms, represents a compliance gap, particularly concerning GDPR requirements. Overall, the website is trustworthy and professionally maintained, reflecting its role as a government-related institutional entity. Strategic recommendations include implementing comprehensive privacy and cookie policies with consent management, enhancing security headers, and publishing incident response and vulnerability disclosure information to strengthen security posture and regulatory compliance.

The website silgeneve.ch serves as the official legislative and legal information portal for the canton of Geneva, Switzerland. It provides access to current laws, federal jurisprudence, and other legal documents relevant to the region. The site is operated by the Service de la législation under the Chancellerie d'Etat of the République et canton de Genève, positioning it as a trusted government resource for legal professionals and the public. Technically, the site employs a standard ASP.NET web forms architecture with jQuery and Bootstrap for frontend functionality and styling. The design is professional and mobile-optimized, though some accessibility and SEO features are basic. Performance is moderate, with no evident use of advanced CMS or modern frameworks. The site does not appear to use third-party analytics or advertising technologies, indicating a focus on privacy and minimal tracking. From a security perspective, the site uses HTTPS and standard ASP.NET security mechanisms but lacks visible security headers such as CSP or HSTS, which could enhance protection against common web attacks. No privacy or cookie policies are present on the login page, which is a compliance gap. Contact information is clearly provided with official government email and phone numbers, supporting business credibility. Overall, silgeneve.ch is a legitimate, government-operated website with good content quality and business credibility but could improve its privacy compliance and security posture by adding explicit policies and security headers. The risk level is low given the official nature and content safety, but enhancements in security best practices are recommended.

S

Saturnales

saturnales.ch

59

Saturnales is a well-established student association based in Geneva, Switzerland, with a history spanning over 120 years. The organization is composed of third-year students from medical, dental, and biomedical science faculties who organize annual events, including parties and social gatherings, targeting the student community and local attendees. Their business model revolves around event management, ticket sales, and merchandise offerings, positioning them as a key player in the local student event scene. The website reflects a consistent brand identity and provides essential contact information and social media links to engage their audience. Technically, the website is built using the Infomaniak Site Creator platform and leverages modern frontend technologies such as jQuery, Bootstrap, and animation libraries. Hosting is provided by Infomaniak, a reputable Swiss hosting provider. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. The cookie consent mechanism is implemented, indicating some level of privacy compliance. From a security perspective, the site enforces HTTPS and disables right-click on images to protect content. However, it lacks important security headers and does not provide explicit security policies or incident response contacts. No privacy policy or terms of service pages were found, which may impact compliance and user trust. Overall, the security posture is moderate but could benefit from enhancements in headers, policies, and transparency. The overall risk assessment is low to moderate, with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, improving accessibility, and enhancing transparency to build greater trust with users and comply with regulations.

R

Rock Altitude

rockaltitude.ch

48

Rock Altitude Festival is a well-established Swiss music festival brand focused on rock and hard music genres, with a history spanning 17 years. The website serves as a portal for festival information, photo galleries, volunteer coordination, and ticketing. The business model centers on event organization and community engagement within the music festival sector. The site targets rock music fans and festival attendees primarily in the French-speaking region of Switzerland. Technically, the website is built on WordPress using the Salient theme and WPBakery page builder, incorporating modern analytics and marketing tools such as Google Tag Manager and Facebook Pixel. The site is mobile optimized and SEO friendly but lacks some accessibility features and security headers. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies and lack of consent mechanisms. Overall, the website is professional and trustworthy but should address compliance and security best practices to enhance user trust and regulatory adherence.

Association Coup de Coeur is a small Swiss-based informational website focused on promoting the benefits of various massage therapies. The site provides detailed content about different massage types, their health benefits, and wellness applications, targeting a general audience interested in health and relaxation. The business model appears to be informational and promotional, likely supporting local massage services or practitioners indirectly. Technically, the website is built on WordPress with standard web technologies such as jQuery and MediaElement.js, and it shows good SEO practices and mobile optimization. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance, especially given its European location. Security posture is moderate with HTTPS enabled but missing important security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

E

EXPLORiT

explorit.ch

60

EXPLORiT is a multi-generational innovation and leisure center located in Yverdon, Switzerland, offering a variety of services including cinemas, exhibitions, kids' clubs, live music, dining, coworking spaces, and event venues. The website is professionally designed using WordPress and Elementor, supporting multilingual content primarily in French and German. The technical infrastructure includes modern plugins and tracking tools such as Google Analytics and Facebook Pixel, indicating a mature digital presence. Security posture is good with HTTPS enforced and use of reCAPTCHA, though explicit security policies and headers could be improved. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the site presents a trustworthy and professional business with room for enhanced privacy and security transparency.

J

JVAL Openair

jval.ch

46

JVAL Openair is a well-established regional music festival in Switzerland with a 20-year history, focusing on contemporary music and community engagement. The website provides detailed event programming, artist lineups, and volunteer information, targeting festival attendees and local cultural enthusiasts. Technically, the site is built on WordPress using modern plugins and themes, offering good mobile responsiveness and user experience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided, which could impact user trust and compliance. Overall, the site is professional and credible but would benefit from enhanced privacy compliance and security practices.

F

Fribourg International Film Festival

fiff.ch

53

Fribourg International Film Festival (FIFF) is a well-established non-profit cultural organization based in Switzerland, dedicated to promoting intercultural understanding through cinema. The festival emphasizes films that provoke reflection and discussion, targeting film enthusiasts, cultural communities, and educational institutions. The website reflects a mature digital presence with multilingual support, rich content, and clear navigation tailored to its audience. The business model relies on ticket sales, partnerships, and sponsorships, positioning FIFF as a significant player in the international film festival circuit. Technically, the site is built on Drupal 10 with modern web technologies and integrates analytics and marketing tools such as Google Analytics, Facebook Pixel, and Google Tag Manager. Security measures include HTTPS enforcement, secure forms with reCAPTCHA, and standard security headers, although formal security policies and incident response plans are not publicly documented. Privacy compliance is partially addressed with a comprehensive data protection policy but lacks a visible cookie consent mechanism. Overall, the website is professional, trustworthy, and safe for general audiences.

F

Festival du Film et Forum International sur les Droits Humains de Genève

fifdh.org

57

The Festival du Film et Forum International sur les Droits Humains de Genève (FIFDH) is a well-established non-profit cultural organization based in Switzerland, specializing in human rights advocacy through cinema and related events. The website serves as a comprehensive platform for festival information, educational programs, and professional Impact Days, targeting a broad audience including the general public, educators, and human rights professionals. The organization enjoys a strong market position as a leading human rights film festival with significant partnerships and sponsorships. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and CookieYes for compliance. It leverages Google Tag Manager and analytics tools for marketing and user insights. Hosting is provided by Infomaniak, a reputable Swiss provider. The site is optimized for performance, mobile responsiveness, and accessibility, with good SEO practices and structured data implementation. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms compliant with GDPR, and employs Google reCAPTCHA to mitigate bot activity. While security headers are not fully explicit in the HTML, the domain status and registrar information indicate a legitimate and secure domain registration. Minor improvements could include enabling DNSSEC and publishing explicit security and incident response policies. Overall, the website presents a professional, trustworthy, and user-friendly digital presence for the FIFDH organization, with strong compliance and security postures appropriate for a non-profit cultural entity.

V

Visions du Réel

visionsdureel.ch

54

Visions du Réel is a well-established international film festival based in Nyon, Switzerland, with a rich history dating back to 1969. The organization focuses on showcasing documentary cinema and offers a variety of services including film calls, industry networking, and public mediation. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern frameworks and libraries, optimized for performance and mobile use. Security measures such as HTTPS, security headers, and reCAPTCHA are implemented, though some privacy compliance aspects like cookie consent and detailed policies could be improved. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

P

Parc Aventure

parc-aventure.ch

48

Parc Aventure is a well-established adventure park operator in Switzerland, offering outdoor adventure experiences across multiple locations including Aigle, Sion, and Signal de Bougy. The company targets families, individuals, groups, schools, and corporate clients with a variety of adventure courses and event organization services. Their business model includes online ticket sales and group bookings, positioning them as a regional leader in the hospitality and leisure sector. The website reflects a mature digital presence built on WordPress with modern SEO and marketing tools integrated. Security posture is strong with HTTPS and security headers implemented, although privacy compliance could be improved with explicit GDPR details and cookie consent mechanisms. Overall, the site is professional, trustworthy, and user-friendly, supporting the company’s market position effectively.

C

CINE2520

cine2520.ch

46

CINE2520 operates as a local cinema and cultural event organizer based in La Neuveville, Switzerland. The website provides detailed programming, ticketing options, and event information primarily targeting French-speaking cinema enthusiasts. The business model revolves around film exhibition and community engagement through curated events and memberships. The site is well-branded and consistent, reflecting a small but professional operation founded around 2019.

M

Mountain Cart à Villars | Activité de descente fun en été en montagne | TVGD | Villars-Gryon-Les Diablerets

mountaincartvillars.ch

59

The website www.tvgd.ch/mountaincart/ presents a mountain cart activity located in Villars, Switzerland, offering a 5 km downhill summer experience suitable for groups and children aged 12 and above. The site targets outdoor enthusiasts and families seeking fun mountain activities during the summer season. The business appears to be small-scale and focused on tourism and recreational services in the mountain sports sector. Technically, the website is built using modern frontend technologies including Gatsby, React, and Tailwind CSS, which provide a good user experience and mobile optimization. However, the site lacks critical privacy and security features such as privacy policies, cookie consent mechanisms, and security headers, which impacts its overall security posture. No contact information or incident response details are provided, limiting direct communication channels for users or security reporting. Overall, the website is functional and content-rich for its niche but requires improvements in security and compliance to enhance trust and regulatory adherence.

K

Korso Kino Bar Bier

korso.ch

52

Korso Kino Bar Bier is a small hospitality and cultural venue based in Switzerland, offering cinema screenings, events, and food and beverage services such as bar and pizza. The website is professionally designed using WordPress with the Divi theme and includes multilingual support for French and German. The business targets a general audience interested in cultural and entertainment activities in the Fribourg region. Technically, the site uses modern web technologies and SEO best practices but lacks some security headers and explicit privacy and cookie policies. Security posture is good with HTTPS enforced and no visible vulnerabilities, but privacy compliance is weak due to missing policies and consent mechanisms. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

A

Auto-École FUN DRIVE - Genève

fun-drive.ch

48

Auto-École FUN DRIVE - Genève is a well-established driving school based in Geneva, Switzerland, with nearly three decades of experience. The company offers a range of services including car and motorcycle driving lessons, first aid courses, and sensitization programs. Their market position is strong locally, supported by a history of over 3000 driving licenses obtained and experienced, federally certified instructors. The website reflects a professional and consistent brand image targeting individuals seeking driving education in the Geneva area. Technically, the site is built on WordPress with modern plugins and tools such as Google reCAPTCHA and GDPR compliance mechanisms, hosted by Net Oxygen. While the site performs moderately well with good mobile optimization and SEO, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS and cookie consent management, but the contact form misconfiguration and lack of explicit security headers are areas to address. Overall, the website is trustworthy and compliant with GDPR, though it lacks explicit security and incident response policies. Strategic recommendations include fixing the contact form, enhancing security headers, and publishing security policies to improve trust and compliance.

A

Association Cinéma Colisée

colisee.ch

50

Cinéma Colisée is a small non-profit cultural association operating a cinema venue in Couvet, Switzerland. The website serves as an information portal for film screenings, subscriptions, and cultural events targeting the local community and cinema enthusiasts. The business model focuses on community engagement through film and cultural programming. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and reCAPTCHA for spam protection. The site is mobile optimized and uses SEO best practices via Yoast SEO. Security posture is moderate with HTTPS enforced and reCAPTCHA integration; however, it lacks security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security hardening.

Cinéma Palace – Bévilard is a small local cinema in Switzerland offering film screenings and cultural events, including special programming for its 30th anniversary. The website provides detailed film schedules and promotes cultural activities, targeting general audiences interested in cinema and culture. The technical infrastructure uses common web technologies such as jQuery, Foundation CSS, and Google Analytics, indicating a moderate level of digital maturity. However, visible PHP warnings and lack of security headers suggest areas for improvement in security and error handling. Privacy and cookie policies are absent, which may impact compliance with GDPR and user trust. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures.

C

CanSearCH

cansearch.ch

47

CanSearCH is a Swiss non-profit foundation dedicated to excellence in pediatric cancer research based in Geneva. The organization focuses on funding research projects, raising awareness, and engaging donors through events and initiatives. The website reflects a professional and consistent brand image with multilingual support, targeting donors, researchers, and the general public interested in childhood cancer. The foundation has been active since 2011, with a well-established digital presence including newsletters, donor spaces, and social media integration. Technically, the website is built on WordPress using the Avada theme and several plugins for events, donations, and multilingual content. It integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel, and uses Google reCAPTCHA for form security. Security posture is good with HTTPS enforced and no exposed sensitive data, though advanced security headers and vulnerability disclosure mechanisms are lacking. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

V

Votre cinéma à Porrentruy

cinemajoie.ch

44

Votre cinéma à Porrentruy operates as a local cinema and cultural venue in Porrentruy, Switzerland, providing film screenings, events, and ticketing services. The website is built on WordPress with modern plugins for event management and ticket sales, targeting local audiences interested in cinema and cultural programming. The business model revolves around ticket sales, memberships, and community events, positioning itself as a key cultural hub in the region. Technically, the site uses a mature CMS platform with integrations for ticketing and social media, offering a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS and security headers, though privacy compliance is lacking due to missing policies. Overall, the site is trustworthy and professionally maintained, though improvements in privacy and incident response transparency are recommended.

C

Cinéma CityClub Pully

cityclubpully.ch

47

Cinéma CityClub Pully is a small local cinema and cultural venue located in Pully, Switzerland, offering film screenings, concerts, thematic projections, and event hosting. The website serves as an information portal for upcoming events and ticketing via a partner platform. The target audience is general public interested in culture and cinema. The business operates primarily in the hospitality sector with a focus on entertainment and community engagement. Technically, the website uses jQuery and FontAwesome for UI elements and has a moderate performance and good mobile optimization. However, it lacks advanced security headers and privacy compliance documentation. No forms or direct contact details are provided on the main page, limiting direct user engagement and transparency. Social media presence is active across major platforms, enhancing outreach. Security posture is basic with no HTTPS or security headers explicitly confirmed in the HTML content. Overall, the website is functional and professional but could improve in privacy, security, and contact transparency.

C

Cinélux

cinelux.ch

51

Cinélux is a small non-profit cultural cinema association based in Geneva, Switzerland, focused on providing film screenings, special events, and educational programs. The website reflects a well-established local cultural institution with a strong community orientation and partnerships with cultural organizations. Technically, the site is built on WordPress with a modern tech stack including Bootstrap and jQuery, delivering a good user experience with responsive design and clear navigation. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit incident response information. Privacy compliance is good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.