Switzerland security reports

N

Neo Neo

neoneo.ch

51

Neo Neo is a Swiss-based graphic design studio specializing in creative services including graphic design, type design, curating, and publishing. The website serves as a comprehensive portfolio showcasing projects from 2010 through 2024, highlighting a strong presence in cultural and artistic sectors. The business targets a general audience interested in high-quality graphic design and cultural projects. Technically, the website is built on WordPress with Yoast SEO plugin, indicating a moderate level of digital maturity and SEO awareness. The site is mobile optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy.

O

Office for Typography

officefortypography.ch

49

Office for Typography is a small, specialized design studio focusing on graphic design, type design, and font engineering with physical offices in Switzerland and Japan. The website presents a clean, minimalistic design that clearly communicates the company's core services and contact information. The business targets clients in need of professional typography and graphic design services, positioning itself as a niche player with an international footprint. Technically, the website is built with standard HTML5 and CSS3, without detectable CMS or advanced frameworks. The site is mobile-optimized and performs moderately well, though lacks advanced SEO and accessibility features. No analytics or tracking technologies are present, indicating a privacy-conscious approach or minimal digital marketing. From a security perspective, the site uses HTTPS (assumed from domain), but no security headers or policies are published. There are no forms or data collection points, reducing attack surface, but also no published privacy or cookie policies, which is a compliance gap. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices to enhance user trust and regulatory adherence.

S

Skala

skaladesign.ch

47

Skala is a Zurich-based graphic design and branding studio founded in 2022, specializing in creative services for institutions, brands, and individuals within culture, education, and business sectors. The website showcases a portfolio of diverse projects emphasizing visual identity, branding, and design innovation. The company positions itself as a niche creative agency with a consistent and professional brand image. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and Ajaxify, with Google Analytics integrated for user tracking. The site is mobile-optimized and demonstrates good performance and SEO practices. Security-wise, the site uses HTTPS with an excellent SSL configuration but lacks security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security posture. Overall, the website is professional and trustworthy with moderate risk due to missing privacy and security policy disclosures.

J

Johnson / Kingston

johnsonkingston.ch

47

Johnson / Kingston is a Swiss design studio founded in 2012, specializing in contemporary graphic design with a strong focus on the intersection of design and technology. Their services include digital publishing, typeface development, custom workflows, and identity design for cultural and educational institutions. The studio has received international recognition, including multiple Swiss Design Awards, and maintains a professional online portfolio showcasing their work and teaching activities. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, jQuery, and Swiper.js, delivering a fast and visually rich user experience optimized for mobile devices. Security-wise, the site lacks visible security headers and privacy/cookie policies, which are areas for improvement, but it does not collect user data or use tracking scripts, reducing risk exposure. The domain registration data is consistent with the business claims, indicating legitimacy and trustworthiness.

R

Raffinerie AG für Gestaltung

raffinerie.com

47

Raffinerie AG für Gestaltung is a well-established design agency based in Zürich, Switzerland, specializing in branding, digital, and editorial design services. The company has a strong portfolio featuring notable clients such as Helsana, Greenpeace, and Zürcher Kantonalbank, positioning itself as a reputable player in the media and creative design sector. The website reflects a professional and consistent brand image, targeting businesses and organizations seeking high-quality design solutions. Technically, the website is built on modern web technologies including HTML5, CSS3, JavaScript, and Alpine.js, hosted on infrastructure associated with Metanet AG. It is optimized for mobile devices and demonstrates good performance and accessibility standards. The use of Google Tag Manager and Vimeo embeds indicates a mature digital marketing and content delivery approach. From a security perspective, the site employs HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and security headers, which are recommended to enhance security posture. Privacy compliance is basic, with a cookie policy present but no active consent mechanism or detailed GDPR compliance indicators. No incident response or security policy pages were found. Overall, the website is trustworthy and professionally maintained, with minor improvements recommended in security headers and privacy compliance to strengthen its security and regulatory posture.

babyinktwice is a specialized graphic design and letterpress print studio founded in 2009 by Dafi Kühne, operating from Zürich and Glarus, Switzerland. The studio focuses on artisanal poster printing and design services for cultural, architectural, and artistic projects, complemented by educational workshops and university teaching engagements in Europe and the United States. The website serves as a portfolio and e-commerce platform showcasing a rich collection of letterpress posters and projects, many of which have received prestigious awards and nominations. Technically, the website is built on WordPress 6.2.8, utilizing common libraries such as jQuery and D3.js, and styled with Bootstrap CSS. The site is moderately performant and mobile-optimized, with good SEO practices but basic accessibility features. Security-wise, the site enforces HTTPS but lacks important security headers and published security policies, which could be improved to enhance protection and compliance. The security posture is adequate but could benefit from implementing security headers, publishing privacy and cookie policies, and establishing incident response contacts. No vulnerabilities or malicious content were detected. Overall, the site is trustworthy and professional but has room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies, adding security headers, establishing a vulnerability disclosure process, and enhancing incident response readiness to strengthen trust and compliance.

C

Chloé Pannatier

chloepannatier.ch

55

Chloé Pannatier's website is a professional graphic design portfolio showcasing a wide range of projects including poster designs, visual identities, and artworks for various clients and exhibitions. The site targets clients and collaborators in the creative industry, emphasizing detailed project descriptions and high-quality visuals. Technically, the site is built on WordPress with modern web technologies, featuring lazy loading and responsive design, providing a good user experience across devices. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is minimal, with no visible privacy or cookie policies. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

Alliance Graphique Internationale (AGI) is a well-established professional association dedicated to the world's leading graphic designers. The website serves as a digital archive and showcase for design history and member projects, targeting design professionals and enthusiasts globally. The organization is based in Switzerland and has maintained its domain since 2001, reflecting a stable and credible presence in the design community. The business model focuses on member networking and promoting graphic design excellence rather than commercial sales. Technically, the website employs a moderate technology stack including jQuery, Modernizr, Handlebars.js, and Fuse.js for search functionality, hosted with a reputable registrar and DNS provider. The site is mobile optimized with good SEO practices but lacks some modern security headers and privacy compliance features. Performance is moderate with room for improvement in accessibility and security hardening. From a security perspective, the site uses HTTPS and avoids exposing sensitive data but does not implement key security headers or privacy policies, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms are detected, and no vulnerabilities or suspicious content were found. The WHOIS data aligns well with the website's purpose and history, supporting legitimacy. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security headers, and incident response information to improve its security posture and regulatory adherence.

N

Neobanque

neobanque.ch

58

Neobanque.ch is a Swiss digital banking platform focused on providing modern, user-friendly financial services to individuals and businesses in Switzerland. The website presents a fintech-oriented business model with digital bank accounts and online payment services. The target audience is primarily Swiss residents and businesses seeking innovative banking solutions. The company appears to be a small fintech player with consistent branding and a basic but functional website. Technically, the website uses Unicorn Platform as its CMS and includes JavaScript libraries such as Weglot for multilingual support and Pinterest scripts. The site is moderately optimized for mobile devices and has a good design quality, though SEO and accessibility features are basic. No advanced analytics or tracking services are detected, indicating minimal user tracking. From a security perspective, the website lacks visible security headers and published privacy or cookie policies, which are critical for compliance and user trust. SSL configuration details are not available from the provided data, and no incident response or security contact information is provided. The WHOIS data is consistent with the business claims, showing no privacy protection or suspicious registration patterns, supporting the domain's legitimacy. Overall, the website is accessible and safe for general audiences but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

W

weclapp

weclapp.ch

64

weclapp is a technology company providing cloud-based ERP and CRM software solutions primarily targeting small to medium-sized business teams in German-speaking regions, including Switzerland. Their platform offers a comprehensive suite of business management tools including inventory, accounting, e-commerce, project management, and helpdesk functionalities. The company positions itself as a modern, collaborative ERP platform facilitating smart teamwork. The website is professionally designed using WordPress and Elementor, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent implemented, though explicit privacy and terms of service pages are not found in the provided content. No critical vulnerabilities or suspicious content were detected. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy business presence.

V

Ventura Travel GmbH

japaventura.ch

56

Japaventura, operated by Ventura Travel GmbH, is a specialized travel company focusing on small group tours to Japan, blending cultural and natural experiences. The website targets German-speaking travelers primarily from Switzerland, Germany, and Austria, positioning itself as a niche leader in authentic Japan travel experiences. The business model centers on curated group tours with comprehensive travel preparation support. Technically, the site leverages modern frameworks like React and Next.js, hosted partly on Google Cloud, and integrates multiple analytics and marketing tools for performance and user insights. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities, though formal security policies and incident response contacts are absent. Privacy compliance is robust, with clear GDPR-aligned policies and consent mechanisms. Overall, the site presents a professional, trustworthy, and user-friendly platform with good SEO and mobile optimization.

3

3Bears

3bears.ch

65

3Bears is a Swiss-based e-commerce company specializing in healthy oat-based breakfast products such as overnight oats, porridge, granola, and oat bars. Founded in 2016, the company targets health-conscious consumers seeking alternatives to sugary breakfast options. The website is professionally designed, multilingual, and supports multiple European markets, reflecting a mature digital presence. Technically, the site leverages Shopify's robust e-commerce platform, integrates modern analytics and marketing tools, and maintains good performance and accessibility standards. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie management, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a trustworthy and professional online retail presence with room for enhanced transparency in security governance.

O

On

on-running.com

77

On is a Swiss-based company specializing in performance running shoes and sports clothing, leveraging patented cushioning technology. The website serves as a professional e-commerce platform targeting athletes and running enthusiasts globally. The brand is well-established with a strong market presence in the sports retail sector. Technically, the website employs modern frameworks such as Vue.js/Nuxt.js and integrates with Contentful CMS, Google Analytics, and advertising platforms like Google Ads and Bing Ads, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforcement and standard security headers, though the absence of public WHOIS data and security.txt files suggests room for improvement in transparency and incident response readiness. Overall, the site is professionally designed, mobile-optimized, and compliant with GDPR, providing a trustworthy user experience.

S

Swiss Side

swissside.com

68

Swiss Side operates a professional e-commerce website specializing in aerodynamic cycling wheels, leveraging over 50 years of Formula 1 experience to maximize speed and performance. The company positions itself as a market leader in the niche of aero cycling products, targeting cycling enthusiasts and professional athletes. The website is built on the Shopify platform, integrating modern marketing and analytics tools such as Klaviyo, Facebook Pixel, and Google Analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The absence of WHOIS registration data raises concerns about domain legitimacy, but the professional site design and operational e-commerce presence mitigate some risk. Overall, the site is trustworthy, well-optimized, and compliant with privacy regulations, but would benefit from enhanced transparency in security and contact information.

A

Africaventura

africaventura.ch

55

Africaventura is a small Swiss-based travel operator specializing in authentic African tours conducted in small groups. The website targets German-speaking travelers interested in immersive African travel experiences. The business operates in the hospitality sector with a niche focus on African round trips. Technically, the website is built using modern frameworks such as Next.js and React, with integrations for Google Tag Manager and Google Identity Services, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are critical for compliance and trust. The security posture is weak due to missing security best practices and policies. Overall, the website is professional and user-friendly but requires improvements in privacy, security, and transparency to enhance trust and compliance.

V

Viventura

viventura.ch

55

Viventura is a specialized travel company focusing on South America tours, targeting German-speaking customers primarily in Switzerland, Germany, and Austria. The website presents a professional and modern digital presence using contemporary web technologies such as React and Next.js, hosted on Google Cloud infrastructure. The content is well-structured and relevant to its niche, offering online booking capabilities for travel packages. However, the site lacks visible privacy and cookie policies, incident response contacts, and security disclosures, which are important for compliance and trust. Security posture is moderate with HTTPS enforced but missing key security headers and vulnerability disclosure mechanisms. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

P

Puraventura

puraventura.ch

58

Puraventura is a Swiss-based travel company specializing in small group tours focused on nature, culture, and adventure in Central America. The website is built on a modern React/Next.js framework and uses Google Cloud for media hosting. Marketing efforts include multiple third-party analytics and advertising tools such as Google Analytics, Microsoft Clarity, and Bing Ads. The site is accessible with no blocking or WAF challenges detected. However, it lacks explicit privacy and cookie policies and security headers, which are areas for improvement. Contact information is not clearly presented in the analyzed content, which may affect user trust and compliance. Overall, the business appears legitimate and well-positioned in its niche market, but security and privacy compliance should be enhanced.

A

Asiaventura

asiaventura.ch

57

Asiaventura is a Swiss-based travel company specializing in authentic and sustainable small group tours in Southeast Asia. The website targets German-speaking travelers interested in immersive cultural experiences. Technically, the site is built on modern frameworks such as Next.js and React, with integration of multiple analytics and advertising tools. The security posture is generally good with HTTPS enabled and no blocking mechanisms detected, but lacks some security headers and public security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but could improve transparency and compliance.

A

Anticimex

anticimex.ch

72

Anticimex is a leading Swiss service provider specializing in modern pest control, bird deterrence, and pigeon protection services. The company targets private individuals, businesses, and municipalities across Switzerland, offering both traditional and digital pest management solutions. Their market position is strong, supported by a professional and well-branded online presence. The website is built using modern technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security and incident response policies are not publicly disclosed. Privacy compliance is partial, with a cookie consent mechanism but missing privacy and terms of service pages. Overall, the website reflects a credible and professional business with room for improvement in compliance documentation.

L

Lifull Connect

trovit.ch

65

Trovit.ch operates as a comprehensive classified ads search engine specializing in real estate, automobiles, and job listings within Switzerland. It aggregates thousands of listings from various websites, providing users with a unified search experience. The platform is part of Lifull Connect, a larger parent company, which lends credibility and operational support. The website is professionally designed with consistent branding and clear navigation, targeting a broad audience seeking classified ads in the Swiss market. Technically, the site employs modern JavaScript frameworks and integrates Google Analytics and Tag Manager for tracking, alongside a robust consent management platform (Didomi) to ensure GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although additional security headers could enhance protection. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the site presents a trustworthy and professional online presence with moderate to good technical and security maturity.

S

SwissDevJobs

swissdevjobs.ch

67

SwissDevJobs operates as a specialized online job board focusing on IT and software developer positions within Switzerland. It distinguishes itself by offering transparent salary data and detailed tech stack information, catering primarily to IT professionals seeking employment opportunities in the Swiss market. The platform also provides additional services such as company profiles, salary statistics, job alerts, and a talent directory, positioning itself as a niche leader in the Swiss IT recruitment space. Technically, the website leverages modern web technologies including React for frontend rendering and Leaflet for interactive mapping. It employs privacy-conscious analytics (Plausible) and integrates marketing tools like WonderPush for notifications. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a smooth user experience across devices. From a security perspective, SwissDevJobs enforces HTTPS with strong SSL configurations and includes essential security headers. While no critical vulnerabilities or exposed sensitive data were detected, the site lacks explicit security policy and incident response information, which could enhance trust and preparedness. Privacy compliance is robust, with clear privacy and cookie policies and consent mechanisms in place. Overall, SwissDevJobs presents a low-risk profile with a strong business model and technical foundation. Strategic improvements in security transparency and formal policies would further solidify its market credibility and user trust.

B

Bank for International Settlements

bis.org

60

The Bank for International Settlements (BIS) is a premier international financial institution dedicated to promoting global monetary and financial stability through cooperation among central banks and financial authorities. The website reflects its authoritative market position by offering extensive research, statistical data, and innovation initiatives targeted at central banks, policymakers, and financial supervisors worldwide. The BIS operates as a global hub for banking supervision, financial stability, and technological innovation in finance, supported by a mature and enterprise-scale digital presence. Technically, the website employs modern web technologies including React components, jQuery, and Matomo analytics for privacy-conscious user tracking. The site is well-structured, mobile-optimized, and accessible, with comprehensive metadata and structured data enhancing SEO and interoperability. While the WHOIS data is unavailable due to privacy or registry limitations, the website's professional branding and consistent domain usage strongly support its legitimacy. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, though explicit security headers and incident response disclosures are absent. The use of Matomo analytics aligns with privacy best practices, and cookie and privacy policies are clearly presented with consent mechanisms. Overall, the security posture is solid but could be enhanced by publishing dedicated security policies and vulnerability disclosure programs. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include improving security header implementation, publishing incident response and vulnerability disclosure information, and enhancing transparency around data protection officers and security policies to further strengthen trust and compliance.

C

Council on Economic Policies

cepweb.org

72

The Council on Economic Policies (CEP) is an international nonprofit, nonpartisan think tank focused on sustainability through fiscal, monetary, and trade policy research. The organization is positioned as a reputable entity within the economic policy research sector, targeting policymakers, researchers, and sustainability advocates globally. Their website reflects a professional and consistent brand image, offering a range of publications, programs, and events to engage their audience. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and multiple analytics tools such as Google Analytics, Matomo, and LinkedIn Insight Tag. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate, with a clean and navigable user interface. From a security perspective, the site enforces HTTPS and uses security plugins, but lacks explicit security headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a clear privacy policy, cookie consent banner, and GDPR adherence. Contact information is transparent, but no dedicated security policy or incident response pages were found. Overall, CEP's website presents a trustworthy and professional front with a solid security posture and compliance framework. The lack of detailed WHOIS data is mitigated by the site's transparency and consistent content. Strategic improvements in security headers and incident response documentation would further enhance their security maturity.

The Union Cycliste Internationale (UCI) is the global governing body for cycling, overseeing multiple cycling disciplines and organizing international events and championships. The organization serves a diverse audience including federations, teams, officials, riders, media, event organizers, and fans. It operates as a non-profit entity headquartered in Switzerland, with a long history dating back to 1900. The website reflects UCI's authoritative market position and commitment to cycling integrity, safety, and inclusion. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Hotjar, and Facebook Pixel for analytics and user experience enhancement. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Privacy and cookie policies are comprehensive and GDPR-compliant, with active consent mechanisms. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks visible security headers in the HTML response. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to privacy protection, which is justified for this type of global non-profit organization. Overall, the site demonstrates a strong security posture and trustworthy digital presence. The overall risk assessment is low, with recommendations to enhance security headers and publish a dedicated security policy or vulnerability disclosure page to further strengthen trust and compliance.

G

Global Legal Entity Identifier Foundation

gleif.org

76

The Global Legal Entity Identifier Foundation (GLEIF) is a reputable non-profit organization responsible for managing the Global LEI System, which provides unique legal entity identifiers worldwide. The organization operates globally with offices in Switzerland and Germany, targeting financial institutions, regulators, and businesses requiring standardized entity identification. Their website reflects a professional and consistent brand presence, offering clear information about their mission and services. Technically, the website employs a modern technology stack including jQuery, Lodash, MathJax, Cookiebot for consent management, and Piwik Analytics for visitor tracking. The site is well-optimized for mobile devices and includes essential privacy and cookie policies, demonstrating digital maturity and compliance with GDPR requirements. The use of HTTPS and reCAPTCHA enhances security, though some security headers could be improved. From a security perspective, the site shows good practices such as encrypted connections, consent mechanisms, and bot protection. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contact is a minor gap. The WHOIS data is privacy protected or unavailable, which is typical for organizations handling sensitive data, and does not detract from the site's legitimacy. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen the site's security posture and user trust.

The World Economic Forum is a globally recognized non-profit organization established in 1971, dedicated to fostering public-private cooperation to address global economic and social challenges. It serves as a platform for leaders from government, business, academia, and civil society to collaborate on shaping agendas that impact the world. The website reflects this stature with professional design, comprehensive content, and a focus on transparency through privacy and cookie policies. The target audience includes global leaders, policymakers, and the informed public. Technically, the website employs modern web technologies including Google Tag Manager, Cookiebot for consent management, and authentication services via LoginRadius. The use of Chakra UI framework indicates a modern, responsive design approach. Performance is moderate with good mobile optimization and accessibility features, supporting a positive user experience. From a security perspective, the site enforces HTTPS, employs multiple security headers, and integrates consent mechanisms for privacy compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public vulnerability disclosure policy and security.txt file suggests room for improvement in transparency and incident response readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. The lack of WHOIS data is consistent with privacy protection practices common among high-profile organizations. Strategic recommendations include enhancing security transparency and maintaining up-to-date third-party components to sustain security posture.

N

news aktuell

newsaktuell.ch

69

news aktuell is a well-established Swiss media communication company offering innovative solutions for successful communication with media and markets through brands such as ots, renteria, and Presseportal. The website is professionally designed, primarily in German, targeting media professionals and businesses seeking press release distribution and communication services. The company maintains a consistent brand presence and leverages modern digital marketing and analytics tools to optimize user engagement and advertising effectiveness. Technically, the site uses Cookiebot for GDPR-compliant cookie consent management and integrates Google Tag Manager and Google Analytics for tracking and marketing purposes. Security posture is solid with HTTPS enabled and no visible critical vulnerabilities, though there is room for improvement in security headers and incident response transparency. Overall, the website reflects a mature digital infrastructure aligned with business goals and regulatory compliance.

Just Eat is a leading online food delivery marketplace operating in Switzerland, offering consumers access to over 4,000 restaurants and shops. Founded in 2007 and part of the Just Eat Takeaway.com group, it provides a comprehensive platform including ordering, logistics, and partner services. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Next.js, integrated with advanced analytics and monitoring tools. Security posture is strong with HTTPS, security headers, and a bug bounty program, though a dedicated security policy page could enhance transparency. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

F

Fairgate AG

fairgate.ch

51

Fairgate AG is a Swiss-based technology company specializing in cloud-based software solutions tailored for associations, clubs, and federations. Their platform offers comprehensive modules including membership management, finance and invoicing, event planning, communication tools such as newsletters, sponsor management, intranet, and website CMS. The company targets a broad range of clients from small clubs to large federations, positioning itself as a modern and efficient solution provider in the Swiss market. The website is professionally designed with clear navigation and multilingual support, reflecting a mature digital presence.

T

Threema GmbH

threema.com

77

Threema GmbH operates a highly secure instant messaging platform developed in Switzerland, targeting individuals and organizations that prioritize privacy and data protection. The company offers end-to-end encrypted messaging, calls, and file sharing, with specialized products for business use such as Threema Work, Broadcast, and Gateway. The website reflects a mature market position with a strong emphasis on GDPR compliance and security, trusted by millions including notable enterprise and government clients. Technically, the site employs modern JavaScript frameworks like Alpine.js and privacy-focused analytics via Matomo, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and domain registration protections, though improvements like DNSSEC and security headers could enhance defenses further. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

IR club Schweiz is a well-established professional association dedicated to Investor Relations in Switzerland, serving a significant portion of the Swiss market including 80% of SMI companies. The organization offers a range of services including events, professional development, networking, and partnerships, positioning itself as a key player in the Swiss financial communications sector. The website reflects this focus with clear content, member statistics, and partner information. Technically, the site is built on TYPO3 CMS and uses common JavaScript libraries for UI enhancements and analytics. It employs HTTPS with good SSL configuration and includes privacy-conscious Google Analytics settings such as IP anonymization and an opt-out mechanism. However, the site lacks a cookie consent banner and security headers, which are important for GDPR compliance and security hardening. Contact information is prominently displayed, enhancing trust and credibility. Overall, the website is professional, informative, and trustworthy, though it could improve in privacy compliance and security policy transparency.

Ethics and Compliance Switzerland operates a professional WordPress-based website focused on providing information and services related to ethics and compliance within Switzerland. The platform includes event management and booking functionalities powered by the EventPrime plugin, targeting professionals and organizations interested in compliance matters. The website maintains a consistent brand presence and offers a clear user experience with good design quality and navigation. Technically, the site leverages modern web technologies including Bootstrap 4, jQuery, and integrates Google Analytics and Tag Manager for user tracking. While the site is mobile-optimized and performs moderately well, there are areas for improvement in accessibility and SEO. Security-wise, HTTPS is properly implemented, but the absence of security headers and incomplete configuration of Google reCAPTCHA present potential risks. The lack of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the security posture is moderate with room for enhancements in policy transparency and technical safeguards. The domain registration data aligns well with the website's Swiss focus and business claims, supporting its legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, configuring security headers, and properly setting up anti-spam measures to strengthen trust and compliance.

T

Threema GmbH

threema.ch

76

Threema GmbH operates a highly secure instant messaging platform developed in Switzerland, targeting individuals and organizations that prioritize privacy and data protection. The company offers end-to-end encrypted messaging, calls, and file exchange services, with specialized products such as Threema Work for enterprises, Threema Broadcast, and Threema Gateway. The website reflects a mature market position with strong trust signals including GDPR compliance and endorsements from public authorities and large enterprises. Technically, the site employs modern JavaScript frameworks and privacy-respecting analytics (Matomo), with excellent mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and domain protection, though improvements like DNSSEC and security headers could enhance it further. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market presence.

S

Schindler Aufzüge AG

schindler.ch

75

Schindler Aufzüge AG is a leading Swiss company specializing in the manufacturing and servicing of elevators, escalators, and moving walks. As part of the global Schindler Group, it holds a dominant market position in Switzerland, offering a wide range of products and comprehensive maintenance services. The website reflects a mature digital presence with professional design, clear navigation, and multi-language support tailored to regional markets. Technically, the site leverages Adobe Experience Manager CMS, integrates advanced analytics and consent management tools, and enforces strong security headers and HTTPS, indicating a robust infrastructure. Security posture is strong with no evident vulnerabilities, though the absence of a dedicated security policy or vulnerability disclosure page suggests room for improvement. Overall, the site is compliant with GDPR, provides clear contact and privacy information, and maintains high business credibility, making it a trustworthy digital asset for the company.

S

Schindler Aufzüge AG

schindlerplus.ch

60

Schindler Aufzüge AG operates a regional contact website (schindlerplus.ch) focused on providing localized customer support and fault reporting services for elevators and escalators in Switzerland and Liechtenstein. The site offers a postal code and location-based search to connect users with their nearest contact person. The business is positioned as a medium-sized service provider in the transportation sector with a clear focus on customer service and operational support. Technically, the website uses a traditional tech stack including jQuery, jQuery UI, Bootstrap, and Fresco for UI components. The site is moderately optimized for mobile devices and provides basic accessibility features. However, there is no evidence of advanced CMS or modern frameworks, and SEO optimization is minimal. Performance is moderate with no major errors detected. From a security perspective, the site lacks visible HTTPS enforcement details and security headers, which lowers its security posture. Input validation is implemented on the search form to prevent illegal characters, but no published security policies, incident response contacts, or vulnerability disclosure mechanisms are found. Privacy and cookie policies are absent, indicating potential compliance gaps with GDPR and related regulations. Overall, the website is functional and serves its business purpose but requires improvements in security, privacy compliance, and transparency to enhance trust and meet modern standards. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding security headers, and establishing a vulnerability disclosure process.

S

Sourcepole AG

sourcepole.com

55

Sourcepole AG is a Swiss technology company specializing in geoinformatics solutions based on open source software, particularly the QGIS suite. They provide products such as QGIS Enterprise and QGIS Cloud, alongside custom development and SDI advisory services. Their market position is that of a niche expert with official involvement in OSGeo projects, targeting organizations needing spatial data infrastructure solutions. Technically, the website is built using the Hugo static site generator, employs jQuery for scripting, and uses Matomo analytics for user tracking. The site is mobile optimized with a moderate performance profile but lacks advanced accessibility features. Security posture is moderate with HTTPS implied but no visible security headers or published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy but would benefit from improved privacy and security disclosures.

C

Camptocamp

camptocamp.com

56

Camptocamp is a well-established Open Source IT company founded in 2001, specializing in providing innovative solutions in GIS, ERP (Odoo), and IT infrastructure. The company operates internationally with offices in Switzerland, France, and Germany, targeting enterprises seeking flexible and collaborative Open Source technologies. Their business model includes consulting, implementation, subscription management, training, and hosting services, positioning them as a trusted partner in the Open Source ecosystem. Technically, the website is built on modern web technologies including Pimcore CMS, Bootstrap, and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, Facebook SDK, and LinkedIn Insight. Hosting is inferred to be on Amazon AWS, ensuring reliable infrastructure. The website demonstrates excellent design quality, mobile optimization, and accessibility, with a comprehensive cookie consent mechanism supporting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though DNSSEC is not enabled and security headers are not explicitly detected. The absence of a published privacy policy and terms of service in the provided content is a gap in compliance documentation. Overall, the domain registration is consistent with the business history and location, supporting legitimacy. The website is safe for general audiences with no adult or questionable content detected.

D

Datatrans

customerinitiatedpayments.com

58

The website www.customerinitiatedpayments.com serves as a demonstration and informational platform for customer initiated payment solutions powered by Datatrans, a reputable Swiss payment processor. It showcases various payment integration options including hosted payment pages, secure fields, payment links, and mobile SDKs, targeting businesses seeking seamless and secure payment processing capabilities. The site is professionally designed with good content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site is built on Webflow with modern JavaScript libraries including jQuery and Datatrans-specific secure payment scripts. It employs HTTPS with excellent SSL configuration and integrates Cookiebot for cookie consent management, indicating attention to privacy compliance. However, some security best practices such as explicit security headers and incident response information are missing, which could be improved to enhance the security posture. From a security perspective, the site demonstrates strong use of secure payment technologies and privacy policies aligned with GDPR. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, although the content and contact email align with the Datatrans brand. No critical vulnerabilities or exposed sensitive data were detected, but the lack of a security.txt or vulnerability disclosure policy limits transparency. Overall, the website presents a trustworthy and professional front for payment solutions but would benefit from improved domain registration transparency and enhanced security documentation. Strategic recommendations include implementing security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust and compliance.

D

Datatrans

datatrans.com

61

Datatrans is a Swiss-based payment solutions provider offering a flexible and customizable payment platform tailored for companies demanding advanced payment capabilities. The website presents a professional image with consistent branding and a clear focus on payment services, targeting business clients. The technical infrastructure leverages modern web technologies including Vue.js, and integrates reputable analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and CSRF protection, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR, supporting trustworthiness and business credibility.

F

FOAMGLAS®

foamglas.com

75

FOAMGLAS® is a specialized manufacturer of cellular glass thermal insulation products, targeting building owners, specifiers, and construction professionals. The company positions itself as a leader in energy-efficient and sustainable building materials, with a focus on long-term performance and financial efficiency. The website is multilingual and professionally designed, reflecting a mature digital presence. The technical infrastructure includes modern web technologies such as Bootstrap, Google Tag Manager, Adobe Launch, and Visual Website Optimizer, indicating a commitment to performance optimization and user experience. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. The WHOIS data is missing or indicates the domain may not be registered, which is a concern for domain legitimacy and should be monitored. Overall, the website is professional and trustworthy, but improvements in transparency around security and domain registration are recommended.

H

HANDELSVERBAND.swiss

handelsverband.swiss

51

HANDELSVERBAND.swiss is a Swiss trade association focused on supporting retailers and e-commerce businesses within Switzerland. The organization offers a range of services including framework contracts to reduce costs, networking events, political advocacy, market data reporting, and certification programs such as the Swiss Online Garantie and European Trustmark. The website is professionally designed, multilingual (German and French), and targets Swiss retail and e-commerce stakeholders. The association maintains a solid market position with active member engagement and partnerships. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WP Rocket caching, EventON calendar, and WPML for multilingual support. It uses Google reCAPTCHA v3 for bot protection and integrates marketing automation via Mautic. Performance and mobile optimization are good, with fast loading times and responsive design. SEO practices are well implemented. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks DNSSEC and advanced security headers like CSP and X-Frame-Options. There is no explicit security policy or incident response contact published. Cookie consent is implemented in compliance with GDPR, and a comprehensive privacy policy is available. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a good balance of business credibility, technical maturity, and privacy compliance. Recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and providing incident response contacts to enhance trust and security posture.

Z

Zwischengas AG

zwischengas.com

64

Zwischengas AG operates zwischengas.com, the largest German-language online platform dedicated to classic automobiles, including oldtimers, youngtimers, and historic motorsport. The website offers detailed reports, news, event coverage, a marketplace for buying and selling vehicles and parts, and premium subscription services for an ad-free experience. The company targets classic car enthusiasts and collectors primarily in the German-speaking region, with a strong presence in Switzerland. The business model combines advertising, premium subscriptions, and marketplace services, positioning Zwischengas as a leading media and community platform in its niche. Technically, the website employs a mature technology stack including jQuery, Bootstrap, Google Tag Manager, and various consent management tools to ensure GDPR compliance. The site is mobile-optimized with good SEO and accessibility features, though some improvements could be made in accessibility and security headers. The integration of social login options via Google and Facebook enhances user experience and security. From a security perspective, the site enforces HTTPS and uses consent management for cookies and tracking. While no critical vulnerabilities were detected in the provided content, the absence of some security headers and the lack of visible incident response or security policy pages suggest areas for improvement. The WHOIS data is missing or unavailable, which is unusual but does not detract significantly from the site's legitimacy given the professional presentation and business information. Overall, Zwischengas.com is a professional, content-rich platform with strong privacy compliance and a solid security posture. Strategic recommendations include enhancing security headers, conducting regular security audits, and improving accessibility to further strengthen trust and compliance.

S

Seeberger

seeberger-snacks.ch

68

Seeberger is a well-established premium snack brand operating an e-commerce platform primarily targeting the Swiss market with multi-language support for neighboring countries. The website offers a broad range of natural snack products including nuts, dried fruits, and coffee. The business model focuses on direct online retail with a professional and consistent brand presentation. Technically, the site is built on Shopify, leveraging modern web technologies and optimized for performance and mobile use. Security posture is strong with HTTPS, security headers, and form protections, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a trustworthy and professional online retail experience.

O

Ofac Abilis

abilis.ch

61

Ofac Abilis is a healthcare-focused organization providing digital patient services, including mobile applications as indicated by app store meta tags. The website is moderately mature technically, utilizing JavaScript, Google Tag Manager for analytics, and Datatrans for payment processing, suggesting e-commerce capabilities. The site is built on Wax CMS and shows basic mobile optimization and SEO features. Security posture is limited with no visible security headers or explicit privacy and cookie policies, which presents compliance and trust challenges. No contact information or forms were detected, limiting direct user engagement. Overall, the website is functional but lacks comprehensive privacy and security disclosures, which should be addressed to improve trust and compliance.

C

Club Diplomatique De Genève

clubdiplomatique.ch

52

Club Diplomatique De Genève is a recognized private association founded in 1976 that serves as the official platform for the Geneva international community, including governmental, academic, and private actors. The website reflects a well-established organization with a clear focus on fostering relationships and organizing events that promote Geneva's international stature. The site is professionally designed, mobile-optimized, and uses modern WordPress technologies with SEO and performance plugins. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit cookie consent and security policy disclosures. Overall, the site demonstrates high business credibility and trustworthiness with room for improvement in privacy compliance and security transparency.

P

pharmacieplus

pharmacieplus.ch

66

pharmacieplus is a Swiss network of nearly 100 pharmacist-owned pharmacies providing a wide range of health services including prevention, vaccination, and personalized care. The website presents a professional and consistent brand image targeting the general public seeking pharmacy and health services in Switzerland. Technically, the site is built on a modern React and Gatsby framework with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published privacy or security policies. No contact emails or phone numbers were explicitly found in the HTML content, which could impact user trust and compliance. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security transparency.

O

Opéra de Lausanne

opera-lausanne.ch

47

Opéra de Lausanne is a well-established cultural institution located in Lausanne, Switzerland, with a rich history dating back to 1871. The organization focuses on delivering high-quality opera performances, cultural mediation, and educational programs to a broad audience including opera enthusiasts and the general public. The website reflects a professional and consistent brand image, providing comprehensive information about performances, ticketing, and institutional details. It supports multilingual access (French and English) and integrates secure online ticket sales through a trusted partner platform.

L

Lausanne Tourisme

lausanne-tourisme.ch

64

Lausanne Tourisme operates the official tourism website for the city of Lausanne, Switzerland, providing comprehensive information on local events, attractions, accommodations, and business services related to tourism. The website targets tourists, local visitors, and business event planners, positioning itself as a key destination marketing organization for the Olympic Capital. The site is built on WordPress with multilingual support and uses modern web technologies such as jQuery, Google Tag Manager, and Slick Slider to deliver a rich user experience. The design is professional, mobile-optimized, and content-rich, supporting excellent user engagement and navigation. Security posture is solid with HTTPS enforcement and anti-clickjacking measures, though explicit security headers could be enhanced. Privacy compliance is limited due to the absence of visible privacy and cookie policies in the analyzed content. Overall, the website demonstrates high business credibility and trustworthiness, consistent with an official city tourism entity.

D

Digital Commerce Award

digital-commerce-award.ch

43

The Digital Commerce Award website serves as a professional platform recognizing the best Swiss online shops, hosting annual award events and facilitating industry networking. The site targets e-commerce professionals and businesses within Switzerland, positioning itself as a reputable and established industry award organizer since 2012. The business model revolves around event organization, industry recognition, and fostering community engagement within the Swiss digital commerce sector. Technically, the website is built on WordPress with modern plugins such as Elementor and Yoast SEO, integrating multiple analytics and marketing tools including Google Tag Manager, Hotjar, and Microsoft Clarity, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers, though the absence of a cookie consent mechanism and vulnerability disclosure policy suggests room for compliance improvements. Overall, the site is well-designed, content-rich, and trustworthy, with minor gaps in privacy compliance and incident response transparency.

S

Swiss Online Garantie

swiss-online-garantie.ch

36

Swiss Online Garantie is a Swiss-based certification platform providing a quality seal and trust mark for online businesses in Switzerland. The website is built on WordPress using the ListingPro theme and integrates common web technologies such as jQuery, Bootstrap, and Google services. The technical infrastructure is moderately optimized with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a professional and trustworthy front for its niche certification services, but could improve transparency and security practices.