Switzerland security reports

S

Swiss Life

swisslife.ch

64

Swiss Life is a well-established financial services company based in Switzerland, with over 160 years of experience providing financial security, insurance, and pension solutions to individuals. The website targets individuals seeking self-determined financial security and offers a professional and consistent brand experience. The company operates in the finance sector and is positioned as a reputable enterprise with a strong market presence. The website is built on Adobe Experience Manager CMS and incorporates modern web technologies including Adobe Helix RUM for performance monitoring and OneTrust for cookie consent management. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enabled and cookie consent implemented, but lacks explicit security headers and published security policies. No privacy policy or terms of service were found in the provided content, which impacts privacy compliance scoring. The domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness. Overall, the website is professional, secure, and credible, but could improve transparency around privacy and security policies.

BRUGG Pipes is a globally recognized specialist in flexible and rigid pipe systems, serving sectors such as energy, industrial manufacturing, and transportation. The company offers a comprehensive portfolio of pipe solutions for applications including district heating, cooling, industrial plants, tank stations, and cryogenic uses. As part of the BRUGG Group, it holds a strong market position with a focus on safety, quality, and environmental protection. The website reflects a mature digital presence with multilingual support and detailed product and service information. Technically, the website is built on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and eTracker. It employs a cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers could be enhanced. Security posture is solid with HTTPS enforced and no evident vulnerabilities or exposed sensitive data. However, the absence of a security.txt file and incident response contacts suggests room for improvement in transparency and readiness. The WHOIS data is unavailable, possibly due to privacy protection or recent domain registration, which slightly reduces trust but is mitigated by the professional website content and branding. Overall, BRUGG Pipes presents a professional and trustworthy online presence aligned with its industry leadership. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving incident response visibility to further strengthen trust and compliance.

S

Sally & Friends AG

hisally.ch

59

Sally & Friends AG is a Swiss-based company specializing in branding, digital marketing, development, design, and event management services. The company positions itself as a strategic partner for startups, SMEs, and large enterprises aiming to elevate their events and digital presence. Their key services include customer experience design, product engineering, digital growth and marketing, and event management. The website showcases a strong client portfolio, indicating a reputable market position within the media and technology sectors in Switzerland. Technically, the website is built using modern technologies such as Next.js and React, with Contentful as the CMS and Vimeo for video hosting. The site is well-optimized for performance and mobile devices, featuring professional design and clear navigation. However, there is room for improvement in security practices, particularly the implementation of security headers and publishing security policies. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, the absence of privacy and cookie policies, as well as incident response information, indicates compliance gaps. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website presents a professional and trustworthy business front with excellent content quality and business credibility. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing incident response and security policies to strengthen trust and regulatory adherence.

Mercedes-Benz Schweiz AG operates the official Mercedes-Benz website for Switzerland, offering a comprehensive range of luxury vehicles including sedans, SUVs, coupes, and electric models. The company provides extensive services such as new and used car sales, leasing, financial services, vehicle configurators, and after-sales support. The website reflects a strong market position as a premium automotive brand with a clear focus on customer experience and digital engagement. Technically, the site leverages modern frameworks like Vue.js and is built on Adobe Experience Manager, ensuring a performant, mobile-optimized, and accessible platform. Security posture is robust with HTTPS, consent management, and data protection officer contacts clearly provided, although explicit security policy and vulnerability disclosure pages are absent. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and Swiss data protection laws.

S

Stiftung Corymbo

corymbo.ch

52

Stiftung Corymbo is a Swiss non-profit foundation serving as an umbrella and funding foundation to support philanthropic activities, particularly in social, cultural, and ecological projects both within Switzerland and internationally. The website positions the foundation as a trusted partner for impactful philanthropy, offering services to manage individual foundation funds under its umbrella. The organization targets non-profit entities and philanthropic partners seeking structured support for their initiatives. Technically, the website is built on WordPress using the Enfold theme and Yoast SEO plugin, indicating a mature digital infrastructure with good SEO and mobile optimization. The presence of Google Analytics shows moderate user tracking, balanced with a comprehensive cookie consent mechanism that complies with GDPR requirements. Security-wise, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data, though it lacks explicit security policy or incident response pages. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission, with room for improvement in publishing security and incident response information.

S

Schweizerische Interpretenstiftung SIS

interpretenstiftung.ch

50

The Schweizerische Interpretenstiftung SIS is a Swiss cultural foundation established in 1989 that supports performing artists in music, theater, and dance through project funding. It is funded primarily by contributions from Swiss performers via the SWISSPERFORM collecting society. The website serves as an informational and application portal for artists seeking funding and support, providing clear contact details and multilingual content. Technically, the site is built on WordPress with WPBakery Page Builder and uses standard web technologies including jQuery and Gravity Forms for data collection. The site is mobile optimized and well structured, though it lacks some advanced accessibility features and cookie consent mechanisms. Security posture is solid with HTTPS enforced, but could be improved by adding security headers and explicit incident response policies. Overall, the domain registration and WHOIS data align well with the foundation's identity, indicating a trustworthy and legitimate organization.

P

Pro Helvetia - Swiss Arts Council

prohelvetia.ch

73

Pro Helvetia - Swiss Arts Council is a government-funded cultural institution dedicated to supporting and promoting the arts in Switzerland and internationally. The organization provides funding, cultural exchange, and connection services to artists and cultural institutions. The website reflects a mature digital presence with multilingual support and comprehensive content tailored to its target audience of artists and cultural stakeholders. Technically, the site is built on WordPress with modern plugins for cookie consent, multilingual content, and analytics, hosted behind Cloudflare for security and performance. Security posture is strong with HTTPS, security headers, and bot protection, though it lacks a dedicated security policy or incident response page. Privacy compliance is robust, with clear GDPR-aligned policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned as a national cultural institution.

T

t. Theaterschaffen Schweiz

kuenstlerboerse.ch

45

The Schweizer Künstlerbörse website represents a well-established Swiss cultural event organized by t. Theaterschaffen Schweiz, serving as a key networking and presentation platform for the Swiss theater scene. The site effectively targets artists, theater organizers, agencies, and media professionals, providing event information, application forms, and multimedia content. The business model is non-profit, focusing on cultural promotion and professional networking within the Swiss arts sector. Technically, the site is built on WordPress with a modern tech stack including Bootstrap, jQuery, and multilingual support via WPML, ensuring good mobile optimization and SEO. Security posture is adequate with HTTPS and reCAPTCHA, but could be improved by adding security headers and a cookie consent mechanism. Overall, the site is professional, trustworthy, and compliant with basic GDPR requirements, though some privacy enhancements are recommended.

S

Solothurner Filmtage

solothurnerfilmtage.ch

57

Solothurner Filmtage is a well-established Swiss film festival dedicated to showcasing Swiss cinema and supporting filmmakers. The website serves as a comprehensive platform for festival programming, industry offerings, media information, and ticketing services. It targets film professionals, media representatives, and the general public interested in Swiss film culture. The business model revolves around event organization, cultural promotion, and partnerships with sponsors and media entities. Technically, the website employs modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is strong with HTTPS and security headers, though it lacks visible cookie consent mechanisms and a published security policy. Overall, the site is professional, trustworthy, and compliant with GDPR in terms of privacy policy availability, but could improve transparency on cookie usage and incident response.

Z

Zurich Film Festival

zff.com

60

The Zurich Film Festival (ZFF) is a well-established non-profit cultural organization that hosts an internationally recognized film festival in Zurich, Switzerland. The website serves as a comprehensive platform for festival information, ticket sales, event schedules, and merchandise. It targets film enthusiasts, industry professionals, and cultural supporters, offering a rich program of auteur films, side events, and exclusive memberships. The festival enjoys strong partnerships with reputable brands such as UBS, Mercedes-Benz, and NZZ, reinforcing its market position. Technically, the website is built on modern frameworks including Next.js and React, with integration of Shopify for e-commerce and DatoCMS for content management. It leverages Cloudflare DNS and CDN services, ensuring fast performance and good mobile optimization. The site implements privacy compliance mechanisms such as Cookiebot for cookie consent and maintains comprehensive legal documentation. Analytics and marketing tools like Google Analytics, Facebook Pixel, and Google Tag Manager are used with user consent. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and employs cookie consent for privacy. However, DNSSEC is not enabled, and no explicit security.txt or incident response contacts are published. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is strong but could be improved with additional DNS security and public vulnerability disclosure. The overall risk assessment is low, with the website demonstrating professionalism, trustworthiness, and compliance with GDPR. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security headers. These steps will further strengthen the site's security and trustworthiness for users and partners.

Zillian S.A. operates the website promoting JACKET™, an innovative advertising technology platform focused on delivering high-impact digital advertising formats with programmatic readiness. The company positions itself as a global adtech innovator, offering fully integrated services from creative development to campaign activation, targeting brands and marketing professionals. The website is multilingual, professionally designed, and provides clear contact channels including a consent-enabled contact form. Technically, the site uses modern web technologies including jQuery and Google Analytics, with good mobile optimization and accessibility features. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a comprehensive privacy policy and legitimate interest assessment documents, though cookie consent is missing. Overall, the site is professional and trustworthy but would benefit from enhanced security and compliance transparency.

I

IUCN

iucnleadersforum.org

71

The IUCN Leaders Forum website serves as a professional platform for promoting the 2024 edition of the IUCN Leaders Forum event, focusing on innovation and conservation. It is backed by the International Union for Conservation of Nature (IUCN), a well-established global environmental organization. The site provides comprehensive event details, speaker profiles, and multimedia content, targeting environmental leaders, policymakers, and sustainability professionals worldwide. The business model is non-profit, centered on convening stakeholders to advance nature-positive solutions. Technically, the website is built on Drupal 9 with Bootstrap 4, leveraging modern web technologies and performance optimizations such as lazy loading and responsive design. It integrates multiple marketing and analytics tools, including Google Tag Manager, LinkedIn Insights, and Twitter tracking, all managed with a clear cookie consent mechanism ensuring GDPR compliance. The site is hosted with Cloudflare DNS and secured with HTTPS, although DNSSEC is not enabled. From a security perspective, the website demonstrates good practices with HTTPS enforcement, domain locking, and cookie consent. However, there is room for improvement by enabling DNSSEC and publishing explicit security policies and vulnerability disclosure information. No critical vulnerabilities or security issues were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively supports the IUCN's mission to foster collaboration and innovation in environmental conservation through its Leaders Forum event.

R

Rieker Holding AG

rieker.com

67

Rieker Holding AG is a well-established European footwear manufacturer with a history spanning approximately 150 years. The company operates globally under the brands Rieker and remonte, offering fashionable shoes that emphasize comfort and functionality. Their business model includes manufacturing, retail through online shops, and a dedicated B2B portal for dealers. The website reflects a mature digital presence with multilingual support and clear navigation, targeting consumers seeking quality leisure footwear. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Google Tag Manager, Cookiebot for consent management, and Google reCAPTCHA for bot protection. The site is mobile-optimized, accessible, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be improved. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring detailed cookie declarations and GDPR-aligned policies. The extensive use of third-party analytics and advertising pixels indicates a comprehensive marketing strategy with good transparency. Overall, the website presents a professional, trustworthy, and secure digital front for Rieker Holding AG. The lack of WHOIS data for the subdomain limits domain registration verification but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security and compliance.

T

t. Theaterschaffen Schweiz

tpunkt.ch

10

t. Theaterschaffen Schweiz is a Swiss non-profit organization representing the interests of professional independent theater actors across Switzerland. The website serves as an information and service portal offering consultations, services, funding, and discounts to its members. It is supported by the Swiss Federal Office of Culture and maintains a presence through various regional groups. The organization targets professional theater practitioners and cultural stakeholders within Switzerland. Technically, the website is built on Craft CMS, uses jQuery and Underscore.js, and integrates Google Analytics for visitor tracking. The site is mobile-optimized with a moderate performance profile and basic accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

I

International Union for Conservation of Nature and Natural Resources (IUCN)

iucn.org

71

IUCN is a globally recognized non-profit organization dedicated to nature conservation and sustainable development. It operates as the world's largest environmental network, providing scientific data, policy guidance, and direct conservation efforts. The website reflects a mature digital presence with comprehensive content, multilingual support, and clear navigation tailored to a diverse audience including governments, NGOs, and the public. Technically, the site is built on Drupal 10, uses modern tracking and consent management tools, and is hosted with reputable providers ensuring good performance and security. Security posture is strong with HTTPS, domain locking, and cookie consent, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the site is trustworthy, professional, and compliant with privacy regulations.

UEFA.com is the official digital presence of the Union of European Football Associations, the governing body for football in Europe. The website serves as a comprehensive platform for football fans, media, and stakeholders, offering news, live scores, video content, and detailed information about UEFA's competitions and initiatives. UEFA holds a leading position in European and global football, organizing prestigious tournaments such as the UEFA Champions League and UEFA EURO. The site targets a broad audience including football enthusiasts, clubs, and national associations. Technically, the website employs modern web technologies including React, integrates multiple analytics and marketing tools such as Google Analytics and OneTrust for cookie consent, and uses secure HTTPS protocols with strong security headers. The site is well-optimized for mobile devices and accessibility, providing a fast and user-friendly experience. From a security perspective, UEFA.com demonstrates good practices with HTTPS enforcement, security headers, and privacy compliance mechanisms. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not publicly available, representing areas for improvement. The absence of WHOIS data for the domain is noted but does not detract from the site's legitimacy given the strong branding and official nature. Overall, UEFA.com presents a professional, secure, and trustworthy platform with excellent content quality and technical implementation. Strategic recommendations include enhancing transparency around security policies and incident response, publishing vulnerability disclosure details, and providing data protection officer contact information to further strengthen trust and compliance.

G

Goyer

groupegoyer.ch

58

Groupe Goyer is a well-established Swiss company specializing in the design, manufacturing, and installation of custom façades since 1931. The company operates an industrial process covering conception to installation, ensuring quality, timely delivery, and safety. Their market position is strong within the European construction and manufacturing sectors, supported by certifications such as ISO 45001 and ISO 14001. The website reflects a professional and consistent brand image with multilingual support, targeting construction professionals and industrial clients. Technically, the site is built on WordPress with modern plugins and SEO tools, delivering good performance and accessibility. Security posture is solid with HTTPS and security headers, though explicit security policies and incident response information are lacking. Privacy compliance is basic with a privacy policy present but no explicit GDPR confirmation. Overall, the site is trustworthy and professionally maintained.

B

Botnation AI

botnation.ai

63

Botnation AI is a well-established technology company specializing in no-code chatbot creation platforms enhanced with AI capabilities. Founded in 2017 and registered in Switzerland, the company offers a SaaS model targeting businesses and agencies seeking to deploy conversational AI solutions across multiple channels such as websites, social media, and messaging apps. Their platform emphasizes ease of use, integration with CRM and APIs, and includes live chat features for seamless human handover. The website demonstrates a mature digital presence with comprehensive content, strong branding, and multiple certifications including GDPR, PCI-DSS, and ISO standards, reinforcing their commitment to security and compliance. Technically, the website is hosted on AWS infrastructure with a modern tech stack including JavaScript and jQuery, optimized for performance and mobile responsiveness. SEO and accessibility are well addressed with structured data and meta tags. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though improvements could be made by enabling DNSSEC and adding security headers. Privacy compliance is mostly met, but the absence of a cookie consent mechanism and incident response contacts are notable gaps. Overall, Botnation AI presents a trustworthy and professional online presence with a clear business model and strong market positioning in the chatbot technology sector. The site is safe for general audiences and free from adult or questionable content. Strategic recommendations include enhancing privacy controls, improving DNS security, and publishing incident response details to further strengthen trust and compliance.

UEFA.com is the official digital presence of the Union of European Football Associations, the governing body for football in Europe. The website serves as a comprehensive platform for European football fans, stakeholders, and media, providing news, live scores, video content, and detailed information about UEFA's competitions and initiatives. It holds a strong market position as the authoritative source for European football, supported by consistent branding and extensive content offerings. Technically, the site employs modern web technologies including React, Google Analytics, and Microsoft Application Insights, ensuring a fast, responsive, and accessible user experience across devices. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, though the absence of publicly available WHOIS data limits full domain registration verification. Overall, UEFA.com demonstrates a mature digital infrastructure with strong privacy compliance and business credibility, making it a trusted resource in the sports domain.

M

meetnlearn s.r.o.

meetnlearn.ch

44

meet'n'learn.ch is a well-established Swiss online platform that connects students with private tutors for personalized and flexible tutoring services. The website offers a comprehensive range of services including tutor search, homework help, and both online and in-person tutoring. It targets students and tutors primarily in Switzerland but is part of a broader network with presence in multiple European countries. The platform emphasizes quality through user reviews, partner endorsements, and transparent policies. Technically, the site employs modern frameworks such as Bootstrap and React, integrates Google and Facebook analytics, and maintains good SEO and accessibility standards. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Fondation Hélène et Victor Barbour is a Swiss non-profit foundation dedicated to supporting social, educational, wildlife, church, and cultural initiatives primarily in Geneva. The website presents a clear focus on philanthropy with well-structured content and a professional design that targets a general audience interested in charitable activities. The foundation operates with a small organizational footprint and provides contact details including a physical address and phone number, enhancing trustworthiness. Technically, the website uses a custom-built frontend leveraging common JavaScript libraries such as jQuery, Modernizr, and GreenSock for animations, along with Google Analytics for visitor tracking. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS or hosting provider information is evident, suggesting a bespoke solution. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. No forms or incident response policies are present, and no vulnerability disclosure mechanisms are found. The WHOIS data indicates privacy protection for the domain registrant, which is typical for small non-profits and does not raise immediate concerns. Overall, the website is functional, professional, and trustworthy for its intended philanthropic purpose but would benefit from enhanced security practices, privacy compliance improvements, and more transparent data protection measures.

F

Accueil - Festival Salamandre

festival-salamandre.org

60

The Festival Salamandre website represents a nature festival event held in Switzerland, targeting a general audience interested in environmental and outdoor activities. The site is built on WordPress and uses modern web technologies such as Bootstrap, jQuery, and FontAwesome, with tracking via Facebook Pixel and Plausible Analytics. The website is well-designed, mobile-optimized, and provides a good user experience with clear event information. However, the absence of visible contact information, privacy policy, and terms of service pages limits its compliance and trustworthiness. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks security headers and incident response contacts. WHOIS data is unavailable due to a malformed request, which reduces domain trust and legitimacy assessment. Overall, the site is functional and professional but could improve in compliance and security transparency.

I

International Social Security Association

issa.int

65

The International Social Security Association (ISSA) operates a professional and authoritative website serving as a global network for social security organizations. The site offers comprehensive member services, including guidelines, training, awards, and publications, targeting social security professionals and government agencies worldwide. The website is built on Drupal 10, leveraging modern web technologies and analytics tools with privacy-conscious configurations. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting ISSA's position as a leading international organization in social security.

D

Divio AG

django-cms.org

10

django CMS is an established open-source enterprise content management system built on the Django framework, supported by the django CMS Association and backed by Divio AG. It targets enterprise marketers, digital agencies, developers, and educational institutions, offering a scalable, secure, and flexible CMS solution with extensive community and expert support. The platform holds a strong market position, evidenced by multiple industry awards and adoption by notable organizations such as NASA and National Geographic. Technically, the website employs a modern technology stack including Python, Django, jQuery, and integrates analytics tools like Google Analytics, Hotjar, and Segment. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with a professional design and clear navigation. HTTPS is enforced, and cookie consent mechanisms are implemented, reflecting good privacy compliance. From a security perspective, the site demonstrates good practices such as HTTPS usage and cookie consent but lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to privacy protection, which is justified for this type of open-source project. Overall, django CMS.org presents a trustworthy, professional, and technically sound web presence with strong community and business credibility. Strategic improvements in security transparency and policy publication would further enhance its security posture and user trust.

R

RTP GmbH

rtp.ch

57

RTP GmbH is a Swiss-based web agency specializing in custom website development, e-commerce solutions, and web application hosting, primarily using TYPO3, Neos CMS, and Shopware. Positioned as a strategic software partner, RTP serves businesses, agencies, and organizations with tailored digital solutions that enhance operational efficiency and market competitiveness. Their portfolio and client testimonials reflect a strong reputation and a focus on long-term partnerships. Technically, the website leverages modern PHP frameworks and open-source CMS platforms, ensuring scalability and flexibility. The site is well-optimized for performance and mobile responsiveness, with structured data enhancing SEO. Analytics are implemented via Matomo, indicating a privacy-conscious approach to user tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a dedicated security or incident response policy. No vulnerabilities or suspicious domains were detected. The WHOIS data is transparent and consistent with the business claims, reinforcing legitimacy. Overall, RTP GmbH demonstrates a mature digital presence with strong business credibility and technical competence. Strategic improvements in security policy transparency and header implementation could further enhance their security posture and trustworthiness.

O

Open Net Sàrl

open-net.ch

52

Open Net Sàrl is a specialized Swiss company focused on Odoo ERP integration and hosting services, holding a leading market position as the top Odoo integrator in Switzerland with over 15 years of experience. Their business model revolves around providing modular ERP solutions tailored to client needs, complemented by innovative applications such as Mosaïk, CryptoSync, and CO₂ accounting. The company targets businesses seeking efficient and scalable ERP solutions with a strong emphasis on local presence and ecological commitment. Technically, the website is built on a modern Nuxt.js framework with Tailwind CSS, ensuring fast performance, excellent mobile optimization, and good accessibility. The use of Google Tag Manager indicates moderate analytics and tracking capabilities. SEO and content quality are high, with clear navigation and professional design. From a security perspective, the site enforces HTTPS, includes essential security headers, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are areas for improvement. Privacy compliance is adequate with comprehensive privacy and terms policies, though cookie consent mechanisms could be enhanced. Overall, the website and business present a low-risk profile with strong credibility and professionalism. Strategic recommendations include enhancing security transparency, adding incident response contacts, and implementing explicit cookie consent to improve privacy compliance and user trust.

M

Mary's Meals Schweiz

marysmeals.ch

72

Mary's Meals Schweiz is a medium-sized non-profit organization dedicated to providing daily school meals to children in impoverished regions worldwide. The website serves as a localized Swiss portal within a global network, offering detailed information about their mission, impact, and ways to contribute. The organization has a strong market position with over 3 million children served daily across 16 countries. Technically, the site is built on Drupal 10, employs modern web technologies, and integrates privacy-compliant tracking and consent mechanisms. Security posture is strong with HTTPS enforced and standard security headers present, though there is room to improve by publishing explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and well-optimized for mobile and accessibility standards.

Y

YAPEAL

yapeal.ch

68

YAPEAL is a Swiss FinTech company providing embedded finance and digital business account solutions, licensed by FINMA. The website presents a professional and modern digital platform targeting businesses seeking integrated financial services such as business accounts, cards, and payment solutions. The technical infrastructure is built on Umbraco CMS with modern JavaScript and CSS technologies, and includes cookie consent management via Cookiebot. Security posture is strong with HTTPS and security headers properly implemented, though explicit privacy and terms policies are not found on the main site. Contact is primarily via forms and demo booking links, with no direct emails or phone numbers visible. Overall, the website reflects a credible and trustworthy FinTech business with good digital maturity.

H

Hoop Corporate Services SA

hoop.swiss

48

Hoop Corporate Services SA operates a fully digital platform specialized in company formations and modifications within Switzerland. Targeting fiduciary firms, law offices, notaries, and corporate legal departments, Hoop streamlines traditionally complex and time-consuming processes by offering a 100% digital workflow including rapid capital deposit account setup via Yapeal. The company positions itself as a unique Swiss solution combining technology with compliance and efficiency. Technically, the website leverages modern frameworks such as Next.js and React, integrates analytics tools like Matomo and Google Analytics, and is hosted on a Swiss cloud infrastructure certified to ISO 27001 standards. Security posture is strong with HTTPS enforcement and secure cloud storage, though explicit security headers could be improved. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, Hoop demonstrates a mature digital presence with strong business credibility and technical sophistication.

A

Association Permaculture Romande

permaculture.ch

60

Association Permaculture Romande is a Swiss non-profit organization dedicated to promoting permaculture practices in the French-speaking region of Switzerland. The website serves as a community hub offering news, events, educational resources, and a directory for permaculture practitioners. The organization targets individuals passionate about sustainable agriculture and ecological design, fostering collaboration and knowledge sharing. Technically, the website is built on Ruby on Rails with modern front-end components and uses Piwik/Matomo for analytics, reflecting a moderate level of digital maturity. Security measures include HTTPS and CSRF protection, but lack advanced security headers and published policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-maintained, but could improve in privacy transparency and security hardening.

E

Ecodev

ecodev.ch

66

Ecodev is a Swiss-based web agency specializing in custom web and application development as well as IT infrastructure services, with a strong ethical and sustainable approach. The company has a solid market position in the Suisse romande region, backed by 20 years of experience. Their website showcases key projects and team members, reflecting a professional and human-centered business model. Technically, the site is built on a modern Angular framework, optimized for performance and mobile devices, with good SEO and accessibility practices. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and professional, supporting the company's credibility in the technology sector.

P

Public Eye

publiceye.ch

61

Public Eye is a Swiss non-profit organization dedicated to fighting global injustices linked to Switzerland through research, advocacy, and campaigning. The website presents a professional and consistent brand focused on human rights and global justice issues, targeting a general audience interested in these topics. The organization offers publications, events, and investigative reports as key services. Technically, the website is built on TYPO3 CMS, hosted likely by RTP GmbH, and uses Matomo for analytics along with a cookie consent mechanism. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS and cookie consent, though explicit security policies and headers could be improved. WHOIS data aligns well with the organization's claims, indicating legitimacy. Overall, the site is trustworthy and professionally maintained.

K

Knoppers

knoppers.ch

67

Knoppers is a well-established confectionery brand operating under the parent company Storck, targeting general consumers with a focus on product information and marketing for their wafers, bars, and goodies. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities.

V

Vorwerk

vorwerk.ch

71

Vorwerk.ch is a retail-focused website offering Thermomix TM7 kitchen appliances and Kobold VK7 vacuum cleaners primarily targeting consumers in Switzerland. The site emphasizes free consultation services and positions itself as a recognized brand in household appliances. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and third-party services such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The security posture is strong with HTTPS enforced and cookie consent implemented, though explicit privacy policies and incident response contacts are not found in the provided content. Overall, the website is professional, user-friendly, and trustworthy, with moderate tracking and advertising practices aligned with industry standards.

Edisun Power Europe AG is a Swiss-based publicly listed company specializing in the financing and operation of solar power plants across Europe. Established in 1997, it has grown to become a pioneer in medium to large-scale photovoltaic projects, contributing significantly to the renewable energy sector and the energy transition. The company targets investors and stakeholders interested in sustainable energy solutions, leveraging its broad European presence and expertise. Technically, the website is built on Concrete CMS with modern frontend technologies such as Vue.js and Bootstrap, providing a good user experience with mobile optimization and basic accessibility features. The site employs Google Tag Manager for analytics and includes a GDPR-compliant cookie consent mechanism. Security-wise, the website enforces HTTPS and uses cookie consent but lacks explicit security headers and detailed security policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the business information and public listing support its credibility. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and clearer domain registration transparency.

The Fondation Charles Léopold Mayer pour le Progrès humain (FPH) is a Swiss non-profit foundation established in 1982, dedicated to supporting civil society organizations advocating for social and ecological transition. Funded by the estate of Charles Léopold Mayer, the foundation operates with a long-term vision to promote participatory, fair, and sustainable societal development. The website presents clear information about the foundation's history, aims, and governance, targeting philanthropic partners and civil society actors. Technically, the website is built using the SPIP CMS with custom CSS and JavaScript, including Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some improvements could be made in accessibility and SEO optimization. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, no explicit security headers or incident response policies are visible, and cookie consent mechanisms are absent, which could be improved for better GDPR compliance. Overall, the security posture is moderate with room for enhancement. The domain WHOIS data aligns well with the website content, showing a consistent and legitimate registration for a Swiss foundation. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

S

Storck (Schweiz) GmbH

storck.ch

66

Storck (Schweiz) GmbH operates a professional and well-structured website focused on confectionery products and brand promotion in Switzerland. The company presents multiple well-known brands and provides comprehensive information about product quality, corporate values, and career opportunities. The website is built on TYPO3 CMS and uses modern JavaScript libraries, ensuring a good technical foundation and user experience. Privacy and cookie policies are implemented with a consent mechanism, reflecting compliance with GDPR requirements. However, explicit contact emails and phone numbers are not directly listed, relying instead on contact forms. Security posture is generally good with HTTPS and cookie consent, but lacks visible security headers and explicit security policies or incident response information. WHOIS data aligns well with the website content, confirming legitimacy and trustworthiness. Overall, the site is professional, secure, and compliant, suitable for its target audience.

S

Somfy

somfy.ch

69

Somfy is a well-established company specializing in motorized shading products and smart home automation solutions, targeting both private customers and professional partners. The website reflects a mature digital presence with comprehensive product offerings, multilingual support, and clear navigation tailored for the Swiss market. The company leverages modern web technologies and performance monitoring tools to ensure a fast and responsive user experience. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, although some security headers could be enhanced. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

F

Free-Solutions Sàrl

free-solutions.ch

46

Free-Solutions Sàrl is a Swiss technology company specializing in vocal artificial intelligence solutions, notably offering the first Swiss vocal AI assistant accessible via their website. Their market position is that of an innovative niche player focusing on AI voice technology and hosting services. The website is built on the Jive Clearspace platform and uses standard web technologies including JavaScript and TinyMCE. While the site is functional and presents professional content with good design and navigation, it lacks comprehensive privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Google Analytics is used for user tracking without visible consent mechanisms, indicating privacy compliance gaps. Overall, the site is safe and suitable for a general audience, with no adult or explicit content detected.

R

re:cap global investors ag

re-cap.ch

51

re:cap global investors ag is an established Swiss investment advisory and asset management firm specializing in renewable energy investments. With over 15 years of experience and a presence in seven European countries, the company offers services including investment advisory, asset management, transaction consulting, project development, and project sales. Their market position is strong, supported by a significant asset portfolio and investment volume. The website reflects a professional and modern digital presence built on WordPress with Elementor and Astra theme, optimized for SEO and mobile devices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR.

G

Gewerbeverein Muhen

gewerbe-muhen.ch

52

Gewerbeverein Muhen is a local business association based in Muhen, Canton Aargau, Switzerland, representing trade, crafts, services, and industry sectors. The website serves as an information hub for members and the local community, providing news, event listings, member directories, and resources to support local businesses. The association appears well-positioned within its local market, focusing on community engagement and business networking. Technically, the website uses a custom CMS by naviti GmbH, leveraging common JavaScript libraries such as jQuery and Font Awesome for UI elements. While the site is functional and provides essential features like cookie consent and privacy policy, there is room for improvement in mobile optimization and accessibility. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Overall, the site is trustworthy and professional, with a clear focus on local business support.

K

KreativMedia

kreativmedia.ch

66

KreativMedia is a Swiss-based web hosting provider specializing in classic web hosting, domain registration, email services, reseller hosting, and cloud server solutions. The company targets resellers, agencies, and businesses seeking reliable Swiss hosting infrastructure. Their market position is that of a focused regional provider with a comprehensive portfolio of hosting and domain services, supported by professional service offerings such as migration and SSL certificates. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Performance is moderate with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of a cookie consent mechanism and published security policies are noted gaps. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

N

naviti GmbH

naviti.ch

10

naviti GmbH is a Swiss-based small technology company specializing in web design, webshop development, and custom software solutions primarily targeting private clients, SMEs, industries, foundations, and associations within the region of Kanton Aargau. Their business model focuses on affordable, customized digital solutions using their proprietary CMS platform navitiCms, complemented by training, support, and hosting coordination services. The company positions itself as a regional web agency emphasizing transparency, customer involvement, and modern technology.

C

Color Library

colorlibrary.ch

44

Color Library is a specialized technology service provider focused on automated color separation for printing devices. The website presents a professional and consistent brand image, targeting printing professionals and businesses requiring advanced color profiles. The business operates primarily in Switzerland and leverages WordPress CMS with integrated payment processing via Stripe. The technical infrastructure includes modern JavaScript libraries and tracking tools such as Google Analytics and Google Tag Manager, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and no exposed sensitive data; however, the absence of security headers and published security policies suggests room for improvement. Privacy compliance is weak due to missing privacy and cookie policies, which could pose regulatory risks. Overall, the website is functional and professional but would benefit from enhanced transparency and security documentation.

S

SuperOffice

superoffice.ch

73

SuperOffice is a well-established enterprise-level CRM software provider based in Switzerland, offering cloud-based solutions to help businesses build and monetize sustainable customer relationships. The company targets B2B clients, particularly sales and marketing teams, and maintains a strong market position in Europe with multiple localized domains. The website demonstrates good content quality, professional design, and clear navigation, supporting a positive user experience. Technically, the site leverages modern Microsoft ASP.NET Core technology hosted on Azure, integrates with HubSpot for forms, and uses Google Maps API and Microsoft Application Insights for telemetry, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although no dedicated security policy or incident response page was found. Privacy compliance is robust with GDPR-aligned policies and detailed cookie disclosures. Overall, the site is trustworthy and professionally maintained, with minor recommendations to enhance security transparency and incident response readiness.

T

Tender Service Schweiz

tender-service.ch

65

Tender Service Schweiz operates as a leading European provider of public tender information and consulting services, targeting both large enterprises and SMEs. The company offers a comprehensive database of public tenders, combined with personalized consulting and advanced analytical tools to help clients win contracts efficiently. Their market position is strong, supported by over 20 years of experience and a broad service portfolio including market intelligence and tender forecasting. Technically, the website is built on modern Angular framework with PrimeNG components, supported by analytics tools such as Google Analytics and Microsoft Clarity, and hosted with good performance and mobile optimization. Security posture is solid with HTTPS enforced and appropriate security headers, though the absence of explicit privacy and terms of service pages slightly reduces compliance maturity. Overall, the website is professional, trustworthy, and well-structured, though improvements in transparency and contact information would enhance user trust and regulatory compliance.

O

Offline Online

offline-online.ch

50

Offline Online is a niche online journal affiliated with ECAL, focusing on art, design, and cultural content. The website offers interviews, portfolios, workshops, exhibitions, and travel reports primarily in French, targeting a general audience interested in creative fields. The business model centers on content publishing and cultural journalism with a small-scale operation linked to an educational institution. Technically, the site is built on WordPress with a modern tech stack including jQuery, FullPage.js, Bootstrap, and performance optimizations via WP Rocket. It is mobile-optimized and SEO-friendly but lacks some accessibility features. Security posture is solid with HTTPS and local Matomo analytics, but missing security headers and explicit policies reduce compliance maturity. No privacy or cookie policies are found, and contact information is not clearly provided, which impacts trust and privacy compliance scores. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

E

ECAL/Ecole cantonale d’art de Lausanne

ecal-typefaces.ch

55

ECAL Typefaces is a digital platform operated by the Ecole cantonale d’art de Lausanne (ECAL), showcasing typefaces created by students and alumni. The website serves as a resource for designers and educators, offering previews, licensing information, and stories related to typography. The platform leverages WordPress with WooCommerce for e-commerce functionality, supported by SEO and performance optimization plugins. The site is well-structured, mobile-optimized, and uses HTTPS with a cookie consent mechanism, reflecting a mature digital presence. Security measures include Google reCAPTCHA and Matomo analytics, though some improvements in security headers and plugin dependencies are recommended. Overall, the website is trustworthy, professionally maintained, and aligned with the educational mission of ECAL.

E

ECAL/Ecole cantonale d’art de Lausanne

ecal-shop.ch

47

ECAL Shop is the official e-commerce platform of the Ecole cantonale d’art de Lausanne (ECAL), specializing in selling art and design publications, limited edition art prints, objects, and collaborations created by students, graduates, and affiliated designers. The website targets art enthusiasts, collectors, and the general public interested in contemporary art and design products. It operates as a niche educational retail platform with a clear focus on quality and exclusivity. The platform supports multilingual access (French and English) and integrates modern e-commerce functionalities via WooCommerce. Technically, the website is built on WordPress with WooCommerce, enhanced by Bootstrap for responsive design, and uses several modern libraries such as jQuery, Slick Carousel, and FontAwesome. SEO is managed through Yoast SEO, and multilingual support is provided by WPML. Performance is moderate with caching via WP Rocket. The site is mobile-optimized and accessible with a clear navigation structure. From a security perspective, the site enforces HTTPS and uses Matomo analytics with privacy considerations. Cookie consent is implemented, and no sensitive data is exposed in the HTML. However, explicit security headers are not detected, and no formal security or incident response policies are published. There are no detected vulnerabilities or suspicious elements, indicating a generally secure posture suitable for its business model. Overall, ECAL Shop presents a professional, trustworthy, and well-maintained online presence aligned with its educational and artistic mission. Strategic improvements could include enhancing security headers, publishing a security policy, and adding incident response contacts to strengthen trust and compliance further.

É

École cantonale d'art de Lausanne (ECAL)

ecal.ch

58

The École cantonale d'art de Lausanne (ECAL) is a prestigious Swiss higher education institution specializing in art and design, with a history dating back to 1821. The website serves as a comprehensive portal for prospective and current students, showcasing detailed program offerings, events, projects, and institutional information. The institution holds a strong market position in art and design education within Switzerland and internationally. Technically, the website employs modern tracking and analytics tools such as Google Analytics and Hotjar, integrates multimedia content via Vimeo, and uses responsive design principles to ensure accessibility across devices. Security posture is solid with HTTPS enforced and CSRF protections in place, though explicit security headers and published security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but lacking a dedicated privacy policy or terms of service pages. Overall, the site is professional, trustworthy, and well-maintained, reflecting the institution's reputation.