Switzerland security reports

K

Karger Publishers

karger.com

74

Karger Publishers is a well-established scientific and medical publishing company with a domain registered since 1997, indicating a mature presence in the healthcare publishing sector. The website targets researchers, healthcare professionals, and academics by providing access to scientific journals and medical literature. The technical infrastructure leverages modern web technologies including jQuery, Google Tag Manager, and a consent management platform, hosted on Silverchair's platform and CDN, ensuring reliable content delivery and moderate performance. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit privacy documentation. Overall, the website presents a professional and trustworthy front with good content quality and user experience.

U

Universitätsspital Zürich

usz.ch

11

Universitätsspital Zürich (USZ) is a leading Swiss university hospital providing comprehensive medical care ranging from basic healthcare to advanced specialized treatments. It is one of the largest medical centers in Switzerland with a strong focus on research, education, and patient-centered services. The website reflects a professional and well-structured digital presence, targeting patients, healthcare professionals, researchers, and international patients. The hospital maintains a strong market position through its integration with academic institutions and its commitment to medical innovation. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium and Google Tag Manager. Cookie consent is managed via CookieYes, providing users with granular control over cookie categories. The site is hosted behind Cloudflare, enhancing security and performance. Mobile optimization and accessibility are well addressed, contributing to a positive user experience. Security posture is solid with HTTPS enforced and use of security-related cookies. However, the site could improve by implementing additional security headers and publishing explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the USZ website demonstrates a high level of professionalism, security awareness, and compliance, supporting its reputation as a trusted healthcare institution. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

LH Medical Management GmbH operates a specialized website focused on managing symposiums and seminars for the Swiss Society of Pathology (SGPath). The site provides detailed information about upcoming educational events, including an annual congress, targeting medical professionals in Switzerland. The business model centers on event management and educational services within the healthcare sector, positioning itself as a niche provider with a professional and consistent brand presence. The website content is relevant, well-structured, and designed to serve its target audience effectively. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, and Google Analytics, ensuring a responsive and moderately performant user experience. While the CMS is not explicitly identified, the site uses custom or proprietary solutions. Mobile optimization and basic accessibility features are present, though there is room for improvement in SEO and accessibility compliance. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and documented security policies or incident response contacts. Privacy compliance is addressed with visible privacy and cookie policies and a consent banner, indicating GDPR awareness. No critical vulnerabilities or exposed sensitive data were detected, resulting in a moderate security posture. Overall, the website is trustworthy and professional with a good balance of content quality, technical implementation, and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the site's security and user trust further.

7

7Plus-Gruppe.ch

7plus-gruppe.ch

10

7Plus-Gruppe.ch is an advocacy group representing over 10 specialized medical societies in Switzerland, focused on promoting a fair and reasonable outpatient remuneration model. The website serves as a platform to communicate their mission, publish official documents, and engage with healthcare policymakers and professionals. Technically, the site is built on WordPress using Elementor and Yoast SEO, providing a modern and responsive user experience with good SEO optimization. Security posture is adequate with HTTPS and secure login forms, but lacks advanced security headers and privacy compliance mechanisms such as cookie consent and privacy policies. Overall, the site is professional and trustworthy but could improve in privacy and security policy transparency.

Santhera Pharmaceuticals is a specialty pharmaceutical company based in Switzerland, focusing on the research, development, and commercialization of innovative medicines for patients with rare diseases, particularly neuromuscular conditions. The company targets patients, healthcare professionals, investors, and career seekers with a professional and well-structured website that provides comprehensive information about its services, research, and corporate governance. The website demonstrates a good level of digital maturity, employing modern technologies such as Google Tag Manager and OneTrust for analytics and cookie consent management. Privacy compliance is well addressed with clear policies and consent mechanisms in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The WHOIS data is unavailable, which slightly impacts trust but is common for privacy reasons in this sector. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations.

H

Hillrom

hillrom.ch

77

Hillrom is a leading medical technology provider specializing in connected care solutions and medical equipment for hospitals and healthcare providers. The company operates globally with a strong presence in Switzerland, supported by a professional and well-structured website that targets healthcare professionals and institutions. The website demonstrates a mature digital infrastructure leveraging Adobe Experience Manager, modern analytics, and consent management tools. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly visible. Overall, the website reflects a reputable enterprise with consistent branding and trustworthy business information.

A

Angelini Pharma Zug S.p.A.

angelinipharma.ch

72

Angelini Pharma Zug S.p.A. is a well-established pharmaceutical division of Angelini Industries based in Switzerland, with a history spanning over 100 years. The company operates internationally with a focus on mental health, epilepsy, and consumer healthcare, employing approximately 15 people at its Zug location and over 3,000 worldwide. The website reflects a professional and consistent brand image, targeting healthcare professionals, patients, and partners. The business model centers on pharmaceutical research, development, and commercialization, positioning Angelini Pharma as a leader in the European healthcare market. Technically, the website employs modern JavaScript libraries such as jQuery, Slick Carousel, and Magnific Popup, alongside Piwik PRO for analytics with privacy-conscious features. The site is mobile-optimized with good SEO and accessibility basics, hosted on secure HTTPS infrastructure. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. However, explicit security policies and incident response contacts are not published, and security headers are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious patterns, supporting the domain's legitimacy. Overall, Angelini Pharma's website demonstrates a strong business credibility and privacy compliance posture, with good technical implementation and security practices. Strategic improvements could focus on publishing dedicated security policies and enhancing security headers to further strengthen trust and compliance.

The Schweizerische Gesellschaft für Pathologie (SGPath) is a Swiss professional medical society dedicated to pathology. The organization focuses on continuing education, quality assurance, tariff negotiations, and networking for pathology specialists in Switzerland. The website serves as an information hub for members and interested professionals, providing event details, educational resources, and membership information. The society holds a strong position within the Swiss healthcare sector as a key professional body for pathologists. Technically, the website is built on a custom CMS platform utilizing jQuery and standard web technologies. It is served over HTTPS with good SSL configuration and moderate performance. The site is mobile-optimized and offers clear navigation and structured content. However, it lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and security enhancement. From a security perspective, the site demonstrates a solid baseline with HTTPS and secure form handling but lacks published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the organization's identity, supporting legitimacy and trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic improvements in privacy compliance and security posture would further enhance its credibility and user trust.

I

International Council of Nurses

icn.ch

66

The International Council of Nurses (ICN) is a globally recognized federation representing over 130 national nursing associations. The organization serves as the authoritative voice for nursing worldwide, focusing on policy advocacy, education, leadership development, and global health initiatives. Their website reflects a professional and comprehensive digital presence, targeting nursing professionals, healthcare policymakers, and global health stakeholders. The content is rich, multilingual, and well-organized, supporting their mission to advance nursing and health policy globally. Technically, the website is built on Drupal 10, leveraging modern web technologies including SVG graphics and asynchronous loading of analytics scripts such as Google Tag Manager and Plausible Analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and formalized privacy and cookie policies, which are important for compliance and user trust. No vulnerability disclosure or incident response information is present, indicating room for improvement in transparency and security maturity. Overall, the ICN website is a trustworthy and authoritative platform with strong business credibility and technical foundations. Strategic enhancements in privacy compliance and security best practices would further strengthen its posture and user confidence.

D

DACHCOM

dachcom.com

59

DACHCOM is a well-established full-service advertising and digital agency operating primarily in Switzerland, Germany, and Liechtenstein. They provide a broad range of marketing and communication services including branding, strategy, online marketing, social media, and digital solutions. The company holds reputable certifications and memberships such as Leading Swiss Agencies and partnerships with Google, Microsoft, and Pimcore, positioning them as a leading agency in their market segment. Their website is professionally designed, mobile-optimized, and rich in content, targeting businesses seeking comprehensive marketing solutions. Technically, the site uses modern analytics and consent management tools, with Pimcore as the CMS platform. Security posture is good with HTTPS and consent mechanisms in place, though some security headers and explicit security policies are missing. WHOIS data is unavailable, which slightly reduces trust but the professional web presence and certifications support legitimacy. Overall, the site is safe, business-focused, and trustworthy.

SCHILLER AG is a well-established Swiss medical technology company specializing in innovative diagnostic and emergency care products. The company targets healthcare professionals across various sectors including hospitals, general practice, paramedics, and public health. Their product portfolio includes diagnostics, emergency care and resuscitation devices, patient monitoring systems, diagnostic algorithms, and connectivity solutions. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to their audience. Technically, the site leverages modern JavaScript frameworks, consent management tools, and integrates Google Tag Manager for analytics, indicating a moderate to advanced digital infrastructure. Security-wise, the website enforces HTTPS, uses cookie consent mechanisms, and does not expose sensitive data, though it lacks explicit security policy and incident response pages. Overall, the domain registration data aligns well with the company's Swiss origin and history, supporting the site's legitimacy.

K

KeriMedical

kerimedical.com

50

KeriMedical is a specialized medical device company focusing on hand and wrist surgery implants, digital surgical planning solutions, and professional training workshops for surgeons. The company positions itself as a niche leader with advanced technology and strong ties to the Medartis Group, enhancing its market credibility. The website is professionally designed, multilingual, and optimized for performance and SEO, reflecting a mature digital presence. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS data suggests privacy protection or recent registration, common in medical sectors for privacy reasons. Overall, the site presents a trustworthy and professional image suitable for healthcare professionals and patients.

M

Medartis AG

medartis.com

65

Medartis AG is a Swiss-based medical device company specializing in precision-engineered osteosynthesis implants for skull and extremity surgeries. The company holds a strong market position in the healthcare sector, offering personalized implant services through its CMX platform and engaging in clinical research partnerships. The website is professionally designed using TYPO3 CMS, hosted on Azure DNS infrastructure, and demonstrates good digital maturity with mobile optimization and clear navigation. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though DNSSEC is not enabled, representing a minor security gap. Privacy policies are comprehensive and GDPR compliant. Overall, the website reflects a trustworthy and credible business with a medium-sized enterprise profile founded in 1998.

S

Steinemann Disinfection | CleanService Group AG

steinemann-disinfection.ch

51

Steinemann Disinfection, a division of CleanService Group AG based in Switzerland, specializes in advanced disinfection solutions targeting healthcare and related sectors. Their product portfolio includes automated 3D disinfection devices such as the CleanCube series, aimed at reducing infections through efficient environmental disinfection. The company positions itself as a niche provider with a focus on infection prevention in hospitals, veterinary clinics, fitness centers, and hospitality environments. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to B2B customers. Technically, the site is built on WordPress with modern plugins and supports multiple languages via ConveyThis translation. Performance and mobile optimization are adequate, though accessibility features could be enhanced. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks explicit security policies or incident response information. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

W

WAL International AG

wal.world

53

WAL International AG operates a digital legal services platform providing global access to lawyers, contract templates, legal knowledge, and digital courts. The platform targets individuals and businesses seeking accessible legal solutions worldwide, leveraging a web interface and mobile applications available on iOS and Android. The business model centers on connecting users with legal professionals and offering standardized legal documents, positioning WAL as a niche player in the legal tech industry with a medium-sized operational scale based in Switzerland. Technically, the website employs modern JavaScript modules, integrates Stripe for payment processing, and uses Google Identity Services for authentication. The platform is mobile-optimized and offers a professional user experience, though some technical enhancements such as improved accessibility and SEO could be beneficial. Hosting and CMS details are not explicitly disclosed. From a security perspective, the site enforces HTTPS and uses reputable third-party services for payments and authentication, indicating a solid baseline security posture. However, the absence of explicit security headers and a cookie consent mechanism suggests room for improvement in compliance and defense-in-depth strategies. The WHOIS data is privacy protected, which is typical for commercial entities, and no suspicious patterns were detected. Overall, WAL presents a credible and professional legal services platform with good technical and security foundations. Strategic enhancements in privacy compliance, security policy transparency, and contact information availability would further strengthen trust and regulatory adherence.

S

STALLERGENES AG

shop-stallergenes.ch

47

STALLERGENES AG operates an e-commerce platform specializing in allergy protection bedding products, primarily targeting dust mite allergy sufferers in Switzerland. The website presents a professional and consistent brand image, offering detailed product categories and educational content about dust mite allergies. The business model focuses on direct online sales with customer support and informational resources. Technically, the site is built on the PrestaShop CMS platform, utilizing modern JavaScript libraries and Google Analytics for tracking. The site is mobile optimized and provides a good user experience with clear navigation and responsive design. Security-wise, the website enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response information are not publicly available, which could be improved. Overall, the domain registration data aligns well with the website's claims, indicating a trustworthy and legitimate business presence.

S

Stallergenes AG

stallergenesgreer.ch

52

Stallergenes Greer Schweiz is a specialized pharmaceutical company focused on allergen immunotherapy and allergy management solutions in Switzerland. With over 20 years of market presence, it serves healthcare professionals, pharmacies, patient organizations, and allergy patients. The website reflects a professional and consistent brand image aligned with the parent Stallergenes Greer group. Technically, the site is built on Drupal CMS using established libraries such as jQuery, Bootstrap, and OwlCarousel, providing a moderate performance and good mobile optimization. Security posture is solid with HTTPS, captcha protections, and cookie consent mechanisms, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policy pages. Overall, the site is trustworthy, professional, and well-suited for its healthcare audience.

J

jackpots.ch

jackpot.ch

69

jackpots.ch is a Swiss-based online casino platform offering over 2,000 casino games with legal authorization in Switzerland. The website targets adult Swiss players, providing welcome bonuses and free spins to attract users. The platform uses modern web technologies including React and integrates multiple marketing and analytics tools such as Google Tag Manager, Hotjar, and Usercentrics for consent management. Security posture is strong with HTTPS and security headers properly implemented, although explicit privacy and terms of service pages are not detected in the provided content. The absence of clear contact information and incident response details suggests areas for improvement in transparency and compliance. Overall, jackpots.ch presents a professional and trustworthy online gambling service within its regulated market.

S

Stallergenes Greer

stallergenesgreer.com

64

Stallergenes Greer is a global biopharmaceutical leader specializing in allergen immunotherapy for the diagnosis and treatment of allergies. The company operates internationally with a strong presence in multiple countries and offers a comprehensive portfolio of allergy-related products and services. Their website reflects a professional and well-structured digital presence, leveraging modern web technologies such as Drupal 10 and Bootstrap 5 to deliver a responsive and accessible user experience. The site includes detailed corporate information, scientific research focus, and patient-oriented content, supporting their market position as a trusted healthcare provider. Security-wise, the website employs cookie consent mechanisms and external link warnings but lacks visible advanced security headers, indicating room for improvement in security hardening. The absence of WHOIS registration data introduces a minor trust concern, though the overall digital footprint and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving transparency around domain registration.

S

Swisspearl

swisspearl.com

61

Swisspearl is a Swiss-based manufacturer specializing in premium fiber cement products for building facades, roofs, interior cladding, and garden elements. The company positions itself as a leader in sustainable and innovative building materials with a heritage of over 100 years. Their website targets architects, designers, and contractors, offering detailed product information, consultation services, and sample ordering. The site is professionally designed, multilingual, and optimized for modern devices, reflecting a mature digital presence. Technically, the website employs multiple third-party marketing and analytics tools, including Google Tag Manager, Usercentrics for consent management, and visitor tracking services like TruConversion and RevealID. While HTTPS is used, explicit security headers and privacy policies are not clearly present in the provided content, indicating room for improvement in security posture and privacy compliance. The WHOIS data is unavailable or inconsistent, which raises some concerns about domain transparency but does not directly contradict the professional nature of the website. Overall, Swisspearl's digital infrastructure supports its business goals effectively but would benefit from enhanced privacy disclosures and security best practices.

V

Vereinigung Schweizerischer Assetmanagement- und Vermögensverwaltungsbanken (VAV - ABG)

vav-abg.ch

47

The Vereinigung Schweizerischer Assetmanagement- und Vermögensverwaltungsbanken (VAV - ABG) is a Swiss financial industry association representing asset management and wealth management banks. The website serves as an information and advocacy platform, providing publications, event information, and industry insights primarily in German with multilingual support. The organization positions itself as a key stakeholder in shaping regulatory and market conditions for Swiss financial institutions. Technically, the website employs modern web technologies including JavaScript libraries and Google Analytics for tracking, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced and email obfuscation implemented, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and well-aligned with its business purpose.

A

Asset Management Association Switzerland

am-switzerland.ch

73

The Asset Management Association Switzerland website serves as the official online presence of the representative industry organization for the Swiss asset management sector. It provides information about the industry, regulatory topics, events, and self-regulation guidelines. The site targets professionals and stakeholders within the Swiss financial services industry, emphasizing asset management. Technically, the website employs modern web technologies such as Bootstrap, Font Awesome, Google Fonts, and integrates Google Analytics and Tag Manager for analytics and tracking. The site is mobile-optimized with a clear navigation structure and professional design, reflecting a medium-sized organization's digital maturity. Security-wise, the website enforces HTTPS and uses Google reCAPTCHA for bot protection, but lacks some explicit security headers and formal privacy and cookie policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's claims, indicating a legitimate and trustworthy entity. The absence of contact emails and phone numbers in the provided content limits direct communication channels. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information to improve trust and compliance.

A

Association de Banques Privées Suisses (ABPS)

abps.ch

50

The Association de Banques Privées Suisses (ABPS) is a Swiss banking association representing 8 private banks with over 9800 employees worldwide. The organization focuses on advocacy and representation of its members' professional interests, aiming to maintain and develop optimal conditions for private and institutional wealth management in Switzerland. The website is professionally designed, multilingual, and provides relevant information about the association, its members, publications, and media presence. Technically, the site is built on WordPress with modern plugins and SEO tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and anti-bot measures on forms, though it lacks explicit security headers and incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or GDPR explicit statements. Overall, the site is trustworthy and credible, reflecting a legitimate and established financial association.

S

Swiss Finance Council

swissfinancecouncil.org

49

The Swiss Finance Council is a specialized advocacy organization established in 2013 that represents internationally active Swiss financial institutions in dialogue with European Union institutions. It aims to support an integrated Single Market and promote Switzerland's position in sustainable finance and financial policy. The website is professionally designed using Joomla CMS and modern UI frameworks, providing clear navigation, relevant content, and multilingual support. The technical infrastructure is mature with good mobile optimization and accessibility, though some security headers could be improved. The security posture is strong with HTTPS enforced and email cloaking implemented, but lacks explicit incident response or security policy disclosures. Overall, the website is trustworthy and compliant with privacy regulations, featuring cookie consent mechanisms and comprehensive privacy policies. However, the WHOIS data is incomplete and malformed, which slightly reduces domain trustworthiness and suggests a need for further verification.

V

Vetropack Group

vetropack.cz

59

Vetropack Group is a well-established glass packaging manufacturer focused on providing elegant and responsible solutions for the food and beverage industry. The company maintains strong customer relationships and operates a professional, multilingual website powered by TYPO3 CMS. The digital infrastructure includes modern analytics and cookie consent tools, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. The absence of WHOIS data for the domain introduces some uncertainty about domain registration legitimacy, but the overall professional presentation and related domains support the business credibility. Strategic recommendations include enhancing transparency with published security policies and incident response contacts, and improving WHOIS data visibility.

K

KKCG

kkcg.com

67

KKCG is a well-established investment and innovation group headquartered in Switzerland, operating across multiple sectors including entertainment, energy, technology, real estate, and diversified ventures. With a presence in over 40 countries and a significant EBITDA exceeding €1.5 billion, KKCG positions itself as a major multinational player leveraging its own resources to transform industries. The company maintains a professional and modern digital presence, utilizing advanced web technologies and analytics tools to engage its audience effectively. Social media integration and multilingual support further enhance its global reach. Security-wise, KKCG employs HTTPS, security headers, and reputable hosting and DNS providers, reflecting a strong security posture. However, the absence of an explicit privacy policy and security incident response information suggests areas for improvement in compliance and transparency. Overall, KKCG demonstrates a high level of business credibility and digital maturity, with recommendations to enhance privacy disclosures and formalize security policies to align with best practices.

B

bluesign technologies ag

bluesignguide.com

44

The website bluesignguide.com serves as a public database for bluesign® APPROVED textile articles, focusing on sustainable fabrics and trims manufactured with minimal environmental and social impact. It is positioned as a niche service supporting manufacturers, brands, and consumers interested in sustainable textile products. The site is branded consistently with bluesign technologies ag, a Swiss company known for its bluesign® certification. However, the domain WHOIS data is missing or indicates no registration, which raises concerns about domain legitimacy and requires further verification. Technically, the site uses modern Vue.js and Vuetify frameworks, providing a good user experience with moderate performance and mobile optimization. Security posture is moderate but lacks visible security headers and contact information, which are areas for improvement. Privacy compliance is supported by a comprehensive privacy policy and legal note, but no cookie consent mechanism is present. Overall, the site is professional and trustworthy in content but needs to address domain registration transparency and enhance security and privacy features.

T

TU – Théâtre de l’Usine

theatredelusine.ch

53

Théâtre de l'Usine (TU) is a well-established cultural institution based in Geneva, Switzerland, dedicated to supporting emerging performing arts through production, programming, and community engagement. With approximately 30 years of history, TU serves as a key local venue for artistic creation and events, targeting a general audience interested in theatre and cultural activities. The website reflects a professional and consistent brand presence, supported by partnerships with local government and hosting providers. Technically, the website is built on WordPress 6.8.3 with Bootstrap 5.3.2, leveraging plugins such as Booking-DB, Contact Form 7, and a newsletter system. The site is mobile-optimized, accessible, and moderately performant. Security measures include HTTPS enforcement and Google reCAPTCHA v3 integration, although some security headers are missing, and no explicit security or privacy policies are published. The security posture is solid but could be improved by adding security headers, publishing a security policy, and implementing GDPR-compliant privacy and cookie policies. No vulnerabilities or suspicious content were detected. WHOIS data confirms domain legitimacy with consistent registrant information and appropriate domain age. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

R

RAJAPACK

rajapack.ch

68

RAJAPACK is a leading European packaging solutions provider with a strong presence in Switzerland, offering a wide range of packaging materials and professional services. The company targets both business and private customers, emphasizing fast delivery and extensive product availability. The website reflects a mature e-commerce platform with multi-language support and regional adaptations. Technically, the site uses modern JavaScript libraries, an established e-commerce CMS (INTERSHOP), and integrates advanced analytics and marketing tools such as Google Tag Manager, AB Tasty, and Dynatrace. Security posture is solid with HTTPS enforcement, reCAPTCHA on sensitive forms, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable platform for customers.

G

Gold Interactive

goldinteractive.ch

44

Gold Interactive is a Zurich-based digital agency specializing in brand experience and business impact through innovative digital solutions. The company offers a comprehensive suite of services including strategy, design, and technology development, targeting businesses seeking digital transformation and enhanced user experiences. Their market position is supported by a professional website showcasing client projects and a clear service offering. Technically, the website employs modern web standards, integrates Google reCAPTCHA for form security, and uses tracking tools like FuseDeck and Calendly for marketing and scheduling. Security posture is strong with HTTPS enforced and secure form handling, though improvements can be made by adding explicit security headers and a cookie consent mechanism. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and no suspicious content.

W

Webnode AG

webnode.page

10

Webnode AG operates a well-established AI-powered website builder platform targeting small businesses, entrepreneurs, and individuals seeking easy-to-use website creation tools. Founded in 2008 and headquartered in Switzerland, the company offers a comprehensive suite of services including website templates, domain registration, e-commerce capabilities, and email hosting. The platform supports multiple languages and emphasizes user-friendly design and AI assistance to accelerate website creation. Technically, Webnode leverages modern web technologies including Google Tag Manager, reCAPTCHA, and Amazon Cloudfront CDN, ensuring good performance, mobile optimization, and accessibility compliance. Security posture is strong with HTTPS enforcement and bot protection, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with user consent mechanisms. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency, but overall the website and business present a professional and trustworthy front. Strategic recommendations include enhancing public security documentation and improving domain registration transparency to bolster trust further.

G

Galledia AG

galledia.ch

51

Galledia AG is a Swiss media company providing integrated services across print, digital, publishing, and event management sectors. Positioned as a significant regional player, it serves both large enterprises and SMEs with tailored communication solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on Drupal 9 with modern JavaScript libraries, offering good mobile optimization and accessibility. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence. Strategic improvements in security headers and privacy compliance would enhance overall risk posture.

M

Model Group

modelgroup.com

71

Model Group is a Swiss-based large manufacturing company specializing in packaging solutions and services. Their website presents a professional and comprehensive overview of their offerings, including product packaging, transport packaging, promotional packaging, and e-commerce packaging. They provide end-to-end services from consulting and design to production, logistics, and recycling. The company targets businesses requiring high-quality packaging solutions across multiple industries. Technically, the website is built on Adobe Experience Manager, integrates Google Analytics and Adobe marketing tools, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. WHOIS data is missing, which raises some legitimacy concerns, but the website content and branding are consistent and professional. Overall, the site is trustworthy and well-maintained, with room for improvement in transparency of security and incident response information.

W

Webnode AG

webnode.com

72

Webnode AG operates a well-established website builder platform targeting individuals and small to medium businesses globally. The company offers a freemium SaaS model with AI-powered website creation, domain registration, e-commerce capabilities, and email hosting. Their market position is strong with over 50 million websites created, supported by a consistent brand and multilingual presence. Technically, the website leverages modern JavaScript frameworks, Google analytics and tag management, and cloud CDN hosting to deliver fast, mobile-optimized, and accessible user experiences. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security headers and incident response policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, though WHOIS data is privacy protected, which is justified for this business type.

O

OETI

oeti.biz

53

OETI is an established international testing and certification institute specializing in OEKO-TEX® certifications, PPE, flooring technology, and interior design materials. Founded in 1967 and part of the TESTEX Group, it offers a broad portfolio of services including consulting, testing, certification, and training. The website reflects a mature business with a strong market position and global presence, supported by multilingual content and official OEKO-TEX® representation. Technically, the website employs modern web technologies such as Google Tag Manager and TermsFeed cookie consent scripts, with good mobile optimization and accessibility features. The site is served over HTTPS with no visible security vulnerabilities or exposed sensitive data. Cookie consent and privacy policies are implemented in compliance with GDPR, enhancing user privacy and trust. Security posture is solid but could be improved by adding explicit security policies, incident response contacts, and security headers. The absence of WHOIS data limits domain registration trust analysis, but the professional content and social media presence support legitimacy. Overall, the site is secure, professional, and trustworthy with minor areas for enhancement. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, enhancing HTTP security headers, and considering a vulnerability disclosure policy to further strengthen security and trust.

W

Webnode AG

webnode.cz

69

Webnode AG operates a multilingual SaaS platform enabling users to create websites easily, including AI-assisted website generation. The company targets small businesses, individuals, and hobbyists with a freemium model and premium services such as domain registration, e-commerce, and email hosting. The platform is well-established with over 50 million websites created. Technically, the website leverages modern web technologies including AngularJS, Google Analytics, Google Ads, and Cloudfront CDN, ensuring fast performance and good mobile optimization. Security posture is strong with HTTPS, reCAPTCHA, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly impacts trust but the overall brand presence and content quality indicate legitimacy. Strategic recommendations include publishing security policies, improving WHOIS transparency, and enhancing vulnerability disclosure.

4

42 Lausanne

42lausanne.ch

54

42 Lausanne is a free computer science school based in Lausanne, Switzerland, offering tuition-free education open to all without diploma requirements. The website serves as an informational platform for prospective students and the community, highlighting its innovative educational approach. The technical infrastructure is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and CookieYes for cookie consent management. The site uses modern web technologies including jQuery and Font Awesome for enhanced user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, there is room for improvement by adding security headers and formal security policies. No privacy policy or terms of service were detected, which could be a compliance gap. Overall, the website is professional, well-branded, and trustworthy, with a moderate AI score reflecting good content quality and business credibility but some privacy compliance shortcomings.

H

HotellerieSuisse

hotelleriesuisse.ch

62

HotellerieSuisse is a prominent Swiss hospitality industry association providing a wide range of services including legal advice, classification, marketing, and education support to its members. The website is professionally designed, mobile-optimized, and built on TYPO3 CMS, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and privacy compliance evident through a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or security issues were detected. However, explicit contact information such as emails or phone numbers is not directly visible in the HTML content, which could be improved for better user engagement and trust. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its target audience.

M

Multi Digital

multidigital.ch

62

Multi Digital is a Swiss-based digital agency specializing in the development, programming, and implementation of web and software solutions tailored to regional, national, and international clients. The company emphasizes user-friendly, personalized digital experiences that support client strategies. As part of the Galledia Group, Multi Digital benefits from a strong regional presence and professional backing. The website reflects a modern, professional design with clear navigation and comprehensive service offerings including software development, e-commerce, marketing, and web design. Technically, the site uses modern frameworks like Bootstrap, integrates Google Tag Manager and Metricool for analytics and marketing, and employs a robust cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

S

SVGW

svgw.ch

63

SVGW is a Swiss professional association specializing in the water, gas, and heat sectors. It provides certifications, technical inspections, training, and regulatory information to industry professionals and companies. The website is well-structured with clear navigation and sector-specific content, targeting professionals in the Swiss energy industry. The association maintains an active presence on major social media platforms and offers multiple contact channels including email and phone. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and FontAwesome, and integrates Google Tag Manager for analytics. While the site is mobile-optimized and professionally designed, it lacks explicit privacy and cookie policies, which impacts its privacy compliance score. Security posture is moderate with HTTPS usage but missing security headers and vulnerability disclosure information. Overall, the site is trustworthy and professional but could improve privacy and security transparency.

S

SportAccord

sustainability.sport

48

The Sustainability.sport portal is a specialized online platform developed by SportAccord and in collaboration with the IOC, dedicated to aggregating and disseminating resources related to sustainability initiatives in sport. It serves a niche audience interested in environmental and social sustainability within the sports sector, offering news, case studies, guidelines, and event information. The platform is positioned as a trusted resource with a clear focus and professional presentation. Technically, the website is built on WordPress with modern frontend technologies including Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is mobile-optimized and demonstrates good SEO practices, though some accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks DNSSEC, security headers, and a cookie consent mechanism, which are areas for improvement. No incident response or security policy information is provided, which could be enhanced to improve trust and compliance. Privacy policy exists but is basic and does not explicitly confirm GDPR compliance. Overall, the website is credible and professionally maintained, with a moderate security posture and some compliance gaps. Strategic improvements in security headers, DNSSEC, privacy compliance, and incident response transparency would strengthen the platform's trustworthiness and regulatory adherence.

E

Educatius

educatius.ch

73

Educatius is a Switzerland-based educational services provider specializing in international high school placement programs. The company supports students worldwide in applying to high schools in the USA, UK, and other countries, positioning itself as a reputable facilitator in the international student exchange market. Their multi-country domain presence indicates a broad international footprint and a well-established brand in the education sector. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes SEO and analytics tools such as Yoast SEO, Google Tag Manager, and Facebook Pixel, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and integrates a GDPR-compliant cookie consent mechanism, though it lacks a dedicated security policy or incident response page. Overall, the site demonstrates good security hygiene and privacy compliance, with room for improvement in formal security disclosures and accessibility. The business credibility is strong, supported by transparent WHOIS data and consistent branding. The website content is safe for general audiences, focusing solely on educational services without any adult or questionable content.

H

Handicare Treppenlifte Schweiz

handicare-treppenlifte.ch

65

Handicare Treppenlifte Schweiz is a well-established company specializing in the manufacture and sale of stairlifts designed to enhance mobility and independence for elderly and mobility-impaired individuals in Switzerland. The company leverages a network of certified partners to provide personalized consultation, custom manufacturing, installation, and after-sales service. With over 130 years of history and more than 650,000 stairlifts installed worldwide, Handicare holds a strong market position supported by ISO certifications and a consistent brand presence. Technically, the website employs modern JavaScript libraries and tracking tools such as Google Analytics, Microsoft Clarity, and Hotjar, integrated via Google Tag Manager. The site is built on a custom CMS platform (Statichs) and demonstrates good mobile optimization, SEO practices, and user experience. Cookie consent mechanisms are robust and GDPR compliant, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements secure form validation. However, it lacks publicly available security policies and incident response contacts, which could be improved to enhance trust and compliance. No critical vulnerabilities or suspicious activities were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for Handicare Treppenlifte Schweiz. Strategic improvements in security transparency and accessibility could further strengthen its posture.

S

SportAccord

sportaccord.sport

52

SportAccord is a globally recognized organization dedicated to connecting International Sport Federations, cities, right holders, and businesses to shape the future of sport. The website reflects a professional and well-established entity with a strong market position in organizing major sports business conferences and events such as the SportAccord Convention and the International Federation Forum. The content is rich, relevant, and targeted towards sports industry stakeholders and leaders worldwide. Technically, the website is built on WordPress with modern plugins and integrates advanced analytics and consent management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and monitoring tools in place, though explicit security headers and a public security policy could enhance trust further. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website presents a credible and trustworthy digital presence for SportAccord.

The International Testing Agency (ITA) is a specialized organization dedicated to managing independent anti-doping programs for international sports federations, major event organizers, and other anti-doping bodies. Established in 2018 and based in Switzerland, ITA positions itself as a global leader in promoting fairness and integrity in sports through comprehensive testing, education, and regulatory compliance services. The website reflects a professional and authoritative presence with extensive information about their services, partnerships, and educational initiatives targeting athletes and sports organizations worldwide. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google reCAPTCHA, and SEO optimizations, hosted with Cloudflare DNS services. Security posture is solid with HTTPS and anti-bot protections, though some improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the site demonstrates high business credibility and trustworthiness, supported by partnerships with major sports and anti-doping organizations.

I

International Board on Books for Young People

ibby.org

51

The International Board on Books for Young People (IBBY) is a well-established non-profit organization dedicated to promoting children's literature and reading worldwide. The website reflects a professional and consistent brand presence, offering information about awards, activities, and global partnerships. The organization targets an international audience of educators, authors, and reading promoters. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and is mobile-optimized, though performance is moderate. Security posture is adequate with HTTPS and IP anonymization in analytics, but lacks explicit security headers and privacy/cookie policies. Overall, the site is trustworthy and credible, with clear contact details and social media presence, though improvements in privacy compliance and security hardening are recommended.

I

INTERMAPS AG & GmbH

intermaps.com

64

INTERMAPS AG & GmbH is a well-established media and technology company specializing in digital mapping and app development for the tourism and travel industries, particularly focusing on ski resorts and cable car operators. With a domain age dating back to 1997 and over 200 clients across 15 countries, the company holds a strong market position in its niche. Their product portfolio includes dynamic skimaps, mobile and desktop apps, data management solutions, and analytics tools tailored for the tourism sector. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and various plugins for enhanced user experience and interactivity. Google Analytics and Google Tag Manager are used for tracking, indicating a moderate level of user data collection. The site is mobile-optimized and well-structured, though some improvements in accessibility and SEO could be made. Hosting and domain registration are stable, with no privacy protection but lacking DNSSEC. From a security perspective, the site uses HTTPS but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response plan suggests room for maturity in security governance. GDPR compliance is partially indicated by the presence of a privacy policy, but cookie consent is missing. Overall, the website is professional, trustworthy, and business-focused with a good security posture but some compliance and security best practices gaps. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security policies to enhance trust and compliance.

I

intermaps AG

iski.cc

55

iSKI is a well-established digital platform and mobile app focused on providing comprehensive skiing information and community engagement for winter sports enthusiasts worldwide. Owned by intermaps AG, the platform offers live ski resort data, GPS tracking, ski journal analytics, and gamified competitions such as the iSKI Trophy. The website demonstrates a strong market position with over one million community members and partnerships with numerous ski resorts and brands. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics with privacy-conscious configurations such as IP anonymization and cookie consent mechanisms. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy and professionally managed, supporting a medium-sized technology business in the winter sports sector.

W

World Meteorological Organization

wmo.int

68

The World Meteorological Organization (WMO) is a specialized agency of the United Nations focused on weather, climate, and water resources. It serves as the UN's scientific voice on atmospheric and climate matters, providing authoritative data, early warning systems, and international coordination. The website reflects a large, well-established government/non-profit entity with a global mandate and a strong market position as the leading meteorological authority. The content is professionally curated, targeting governments, researchers, and the public interested in climate and weather. Technically, the website is built on Drupal 10, leveraging modern analytics and tracking tools such as Google Tag Manager, Microsoft Clarity, and Hotjar. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but could be improved by adding explicit security headers and a content security policy. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms, which is a notable gap for a global organization. Contact information is not explicitly provided in the visible content, which may impact user trust and accessibility. Overall, the site is trustworthy and authoritative but should enhance privacy disclosures and contact transparency to improve compliance and user confidence.

I

International Ski and Snowboard Federation

fis-ski.com

11

The International Ski and Snowboard Federation (FIS) operates as the global governing body for skiing and snowboarding disciplines, overseeing thousands of events annually. The website serves as a comprehensive platform for event calendars, live results, athlete biographies, news, and multimedia content, targeting sports fans, athletes, and media professionals worldwide. The organization holds a strong market position as the authoritative entity in winter sports governance. Technically, the website is built on modern frameworks such as Next.js and React, supported by a CMS (Storyblok) and integrated with analytics and consent management tools like Google Tag Manager and Cookiebot. The site demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates cookie consent mechanisms, indicating a robust security posture. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, the website is professional, trustworthy, and compliant with privacy regulations such as GDPR. It effectively supports the organization's mission and audience needs, with recommendations focusing on enhancing transparency around security policies and incident response.