Switzerland security reports

D

DUXIANA

duxiana.ch

74

DUXIANA is a premium Swiss company specializing in luxury beds, bedding, and furniture, with a history dating back to 1926. The company emphasizes innovation, sustainability, and comfort, targeting discerning customers and professional partners such as hotels and designers. Their market position is that of a high-end retailer with a strong brand presence in Switzerland and internationally. Technically, the website is built on a modern CMS (likely Episerver), uses Google Tag Manager and Azure Application Insights for analytics, and implements a robust cookie consent mechanism. The site is well-optimized for SEO, accessibility, and mobile devices, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and secure cookie practices, though there is room to improve transparency with a dedicated security policy and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a positive user experience and strong business credibility.

L

Liip AG

rokka.io

57

Rokka.io is a technology-focused SaaS platform specializing in digital image processing, storage, and delivery. Operated by Liip AG, a Swiss company, rokka.io offers a developer-centric service with APIs and libraries supporting multiple programming languages. The platform emphasizes ease of use, SEO optimization, and fast global delivery of images. The business model is pay-per-use with a free tier, targeting web developers and digital businesses needing efficient image management solutions. The website is professionally designed, mobile-optimized, and provides clear pricing and testimonials, indicating a mature market position in the niche of image services. Technically, the site leverages modern web technologies and is hosted on AWS infrastructure. It uses HTTPS with good SSL configuration and integrates Piwik PRO analytics with privacy-conscious settings (cookies disabled). The site offers extensive API documentation and client libraries, reflecting a high level of digital maturity. Performance and SEO are well addressed, and the site is accessible and user-friendly. From a security perspective, the site enforces HTTPS and uses domain transfer protection. However, it lacks DNSSEC, security headers, and published security policies or incident response contacts. No privacy or cookie policies are present, which is a compliance gap. The analytics setup respects privacy by disabling cookies. No vulnerabilities or suspicious content were detected, and no WAF or blocking mechanisms interfere with access. Overall, rokka.io presents a trustworthy and professional service with strong business credibility and technical implementation. The main risks relate to privacy compliance and security policy transparency. Strategic improvements in these areas would enhance trust and regulatory adherence.

B

biskoui

biskoui.ch

57

Biskoui is a Swiss-based technology company specializing in consent management platforms designed to help websites comply with Swiss nLPD and European GDPR regulations. Their platform offers multilingual support, granular consent controls, and integration with popular tools like Google Consent Mode and Google Tag Manager. The company positions itself as a trusted Swiss Made Software provider with a focus on privacy and data protection, targeting businesses and website owners who require compliance solutions. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are lacking. Overall, the website is professional, trustworthy, and well-optimized for its niche market.

W

webways AG

employerboard.ch

63

sozjobs.ch is a leading Swiss job portal specializing in social and healthcare professions, operated by webways AG. The platform offers job listings, employer portraits, and recruitment tools tailored to the niche market of social and healthcare employment in Switzerland. The website demonstrates a professional design with consistent branding and clear navigation, targeting both job seekers and employers in the sector. Technically, the site employs modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, with a custom CMS and good mobile optimization. Security posture is solid with HTTPS enforced and error monitoring via Sentry, though explicit security headers and incident response policies are absent. Privacy compliance is well addressed through comprehensive privacy and cookie policies with user consent mechanisms. Overall, the site is trustworthy, safe, and professionally maintained, with a strong market position in its niche.

K

Kuhn und Bieri AG

kuhnbieri.ch

51

Kuhn und Bieri AG is a well-established Swiss company specializing in medical technology and care supplies, serving healthcare institutions such as nursing homes, hospitals, rehabilitation clinics, and medical practices. With over 50 years of experience, the company offers tailored solutions, a broad product range, and personal consultation services, positioning itself as a trusted regional player in the healthcare supply market. The website reflects a professional e-commerce platform built on Shopware 6, featuring comprehensive product categories and customer service options. Technically, the site employs modern web technologies, including Google Tag Manager, reCAPTCHA v3, and Doofinder search, ensuring a functional and user-friendly experience with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS, uses security headers, and integrates bot protection, though it lacks a dedicated security policy or vulnerability disclosure page. Overall, the website is secure, compliant with GDPR, and credible, with transparent business and contact information.

E

Emil Frey AG

emilfrey.ch

71

Emil Frey AG is a prominent automotive group in Switzerland, offering a wide range of new and used cars across 30 brands. The company operates both online and through physical dealerships, targeting consumers seeking reliable vehicles with guarantees. The website reflects a mature digital presence with professional design, consistent branding, and integration of advanced marketing tools such as Visual Website Optimizer for A/B testing and Google Tag Manager for analytics. However, explicit privacy and cookie policies are not readily found, which may impact compliance and user trust. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities, but the absence of published security policies and headers suggests room for improvement. Overall, the site is trustworthy and well-positioned in the transportation sector, though enhancing privacy compliance and security transparency would strengthen its digital maturity.

O

OWIBA AG

iba.ch

69

OWIBA AG operates the website iba.ch, the largest B2B office supplies distributor in Switzerland, offering over 13,000 products with next-day delivery and professional consulting services. The company targets business customers with a comprehensive e-commerce platform featuring a broad product catalog and loyalty programs. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Dynamic Yield for personalization and analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response information are absent. Privacy compliance is robust with clear cookie consent and GDPR-aligned privacy policies. Overall, the site demonstrates high professionalism, trustworthiness, and market credibility.

P

Publicare AG

publicare.ch

68

Publicare AG is a Swiss market-leading company specializing in the supply and consultation of medical aids, including incontinence, stoma, tracheostomy care, and wound treatment. The company targets both private individuals and business customers, offering high-quality advice and fast delivery services. Their business model combines e-commerce with direct billing to health insurers, positioning them as a trusted healthcare supplier in Switzerland. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website is built on modern frameworks such as Next.js and React, leveraging Cloudflare for hosting and security. It employs Cookiebot for comprehensive cookie consent management and Google reCAPTCHA for form protection. The site demonstrates good mobile optimization and moderate performance, with SEO and accessibility features implemented at a basic to good level. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. The use of consent management and bot detection cookies indicates a mature approach to privacy and security. However, the absence of a dedicated security policy or incident response information suggests room for improvement in transparency and readiness. Overall, Publicare AG's website presents a trustworthy and professional digital presence with strong compliance to privacy regulations and a solid technical foundation. Strategic enhancements in security policy disclosure and accessibility could further strengthen their security posture and user trust.

S

SmartLife Care AG

smartlife-care.ch

60

SmartLife Care AG is a Swiss company specializing in emergency call solutions for seniors, offering devices such as emergency buttons, watches, and bracelets combined with 24/7 call center services. The company holds a leading market position in Switzerland with a clear focus on safety and independence for elderly users. The website reflects a mature digital presence with professional design, multilingual support, and integrated e-commerce capabilities. Technically, the site uses modern technologies including Google Tag Manager and a consent management platform, ensuring compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business.

W

webways AG

spitexjobs.ch

69

spitexjobs.ch is a specialized online job portal dedicated to the Spitex healthcare sector in Switzerland, connecting job seekers with Spitex organizations. The platform offers comprehensive job listings, employer profiles, and advanced search and filtering capabilities tailored to healthcare roles such as ambulatory care and specialized nursing. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content for its target audience. Technically, the site employs modern JavaScript frameworks, integrates analytics via Matomo and Google Tag Manager, and uses Sentry for error monitoring, reflecting a mature digital infrastructure. Security is robust with HTTPS enforced, appropriate security headers, and privacy compliance including GDPR-aligned privacy and cookie policies with user consent mechanisms. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms the domain's legitimacy and consistency with the business profile. Overall, the site demonstrates a strong security posture, good privacy practices, and a credible business presence in the Swiss healthcare job market.

S

Schweizer Radio und Fernsehen (SRF)

srf.ch

69

Schweizer Radio und Fernsehen (SRF) is the Swiss public broadcasting organization providing a comprehensive range of media services including news, sports, culture, weather, and children's programming. The website serves as a multimedia platform offering live TV and radio streaming, podcasts, and on-demand video and audio content, targeting the general Swiss public. It operates under the parent company SRG SSR and holds a leading market position in Swiss media. The content is professionally curated, regularly updated, and presented with consistent branding and high trust indicators.

S

Spitex Magazin

spitexmagazin.ch

53

Spitex Magazin is a specialized online media outlet focused on the Spitex home care sector in Switzerland. It provides news, articles, and information relevant to home care professionals and the general public interested in Spitex services. The website is professionally designed using WordPress, supports multiple languages (German, French, Italian), and integrates advertising and newsletter subscription services. The business model centers on media publication and advertising revenue within a niche healthcare segment. Technically, the site uses modern web technologies including Google Tag Manager and Mailchimp, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some improvements like a security.txt file and explicit security policies could enhance compliance and transparency. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate media presence in Switzerland.

The Swiss Institute of Emergency Medicine Ltd (SIRMED) is a reputable Swiss organization specializing in emergency medicine education and training. It offers a range of courses including first aid seminars for laypersons, professional paramedic training, and continuous medical education for specialists. The institute operates under the umbrella of the Swiss Paraplegic Group, reinforcing its credibility and market position in the healthcare education sector. The website reflects a professional and well-structured digital presence with clear branding and comprehensive service descriptions targeting healthcare professionals and first responders. Technically, the website is built using modern web technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. It integrates key marketing and analytics tools like Google Tag Manager and Visual Website Optimizer, alongside a robust cookie consent mechanism via Cookiebot, demonstrating a mature approach to privacy compliance. The site is well-optimized for SEO and accessibility, providing a positive user experience. From a security standpoint, the website enforces HTTPS, employs multiple security headers, and shows no signs of vulnerabilities or exposed sensitive data. Certifications such as ISO 9001 and eduQua further attest to its commitment to quality and security standards. However, the absence of a public vulnerability disclosure policy and incident response contact information suggests areas for improvement in transparency and security readiness. Overall, SIRMED's website presents a trustworthy, professional, and secure platform aligned with its business objectives. Strategic recommendations include establishing a vulnerability disclosure channel, publishing incident response contacts, and continuous monitoring of third-party scripts to maintain security posture.

C

CONCORDIA

concordia.ch

72

CONCORDIA is a well-established Swiss health insurance provider offering a comprehensive range of insurance and pension provision services tailored for individuals and families. The company maintains a strong market position supported by multiple agencies and a broad service portfolio including basic and supplementary health insurance, private pension solutions, and digital health advisory services. The website reflects a professional and user-friendly digital presence with clear navigation and extensive content relevant to its target audience. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies such as jQuery and Adobe Analytics for performance and user insights. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a positive user experience across devices. Security measures include HTTPS enforcement, appropriate security headers, and secure form handling, indicating a mature security posture. While the site demonstrates strong privacy compliance with a comprehensive privacy policy and cookie consent mechanism, it lacks explicit incident response contact details and a vulnerability disclosure policy. The WHOIS data aligns well with the business claims, showing no suspicious patterns and supporting the legitimacy of the domain. Overall, CONCORDIA's website is a trustworthy, secure, and professionally maintained platform that effectively supports its business objectives and customer engagement.

T

Tonotaco OÜ

viva-betreuung.ch

60

GCI - The Green Change Initiative is a Swiss-based non-profit platform focused on climate protection and sustainability, recently expanding its scope by acquiring Viva-Betreuung.ch to integrate innovative and sustainable care services. The website presents a professional and well-structured digital presence built on WordPress with modern SEO and performance optimizations. It leverages technologies such as Elementor, WP Rocket, and Google Analytics to deliver a fast, mobile-optimized user experience. Security posture is solid with HTTPS and some security best practices, though there is room for improvement in security headers and explicit privacy policies. The site maintains a strong social media presence and demonstrates trustworthiness through structured data and positive user engagement. Overall, the platform is positioned as a credible and innovative leader in sustainable climate and care initiatives in Switzerland.

V

Verein palliative bern

palliativebern.ch

58

palliative bern is a non-profit association dedicated to promoting and networking palliative care services in the Canton of Bern, Switzerland. The website serves as an information hub for patients, families, healthcare professionals, and interested parties, offering event information, resources, and support services. The organization positions itself as a regional leader in palliative care advocacy and community engagement. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery, Bootstrap, and Google Fonts. It employs HTTPS with a good SSL configuration and integrates Google Analytics with IP anonymization to respect user privacy. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. From a security perspective, the site follows basic best practices such as HTTPS enforcement and secure form handling but lacks advanced security headers like Content Security Policy and does not publish explicit security or incident response policies. No cookie consent mechanism was detected, which may impact GDPR compliance. WHOIS data confirms the legitimacy of the domain with consistent registrant information matching the organization's profile. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in privacy compliance and security policy transparency. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

P

Pallifon

pallifon.ch

54

Pallifon is a Swiss non-profit organization providing telephone emergency consultation services for palliative patients and their relatives. The website reflects a specialized healthcare support service with a clear mission to assist in acute health situations. The digital infrastructure is built on a modern WordPress platform using Astra theme and Elementor page builder, complemented by GDPR-compliant cookie management and SEO optimization. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though formal security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations.

V

Vitatel

vitatel.ch

66

Vitatel operates a specialized website focused on emergency call systems and fall detection devices primarily targeting seniors and individuals at risk of falls in Switzerland. The company is recognized as a testsieger in the Swiss Kassensturz, indicating a strong market position and trustworthiness. The website offers detailed product information, a shop integration, and social media presence, supporting a direct-to-consumer business model in healthcare technology. Technically, the site uses modern web technologies including service workers for PWA capabilities and is hosted on a reputable provider. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Spitex Schweiz

spitex.ch

62

Spitex Schweiz is the national umbrella organization for Spitex cantonal associations and other professional home care providers in Switzerland. The organization focuses on coordinating professional home care and support services, advocacy, education, and providing information to clients and caregivers. The website reflects a well-established, large non-profit entity with a clear mission and strong market position within the Swiss healthcare sector. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Sentry for error tracking, indicating a mature digital infrastructure. The cookie consent mechanism is implemented with granular user controls, supporting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

F

FresuCare

fresucare.ch

73

FresuCare is a Swiss homecare provider specializing in clinical nutrition and related healthcare services with over 25 years of experience. As a subsidiary of Fresenius Kabi (Schweiz) AG, it offers comprehensive patient care including ambulatory nutrition therapy, a specialized pharmacy, and support for healthcare professionals. The website is well-structured, professionally designed, and targets patients, healthcare professionals, and cost bearers in Switzerland. Technically, the site uses Adobe Experience Manager CMS and integrates Adobe marketing and analytics tools along with OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, CSRF protection, and cookie consent mechanisms, though explicit security and privacy policies are not prominently found. Overall, the site demonstrates high business credibility and trustworthiness with consistent WHOIS data and no suspicious indicators. Recommendations include publishing detailed privacy and security policies and enhancing accessibility features.

E

Energie Wasser Bern

ewb.ch

72

Energie Wasser Bern is a large municipal utility provider based in Switzerland, offering essential services such as electricity, water, gas, district heating, and waste management primarily to residents and businesses in Bern. The website reflects a professional and consistent brand presence with a clear focus on serving the local community. The business model centers on utility provision and energy consulting, positioning the company as a key player in the regional energy sector. Technically, the website is built on the Weblication CMS platform and integrates modern analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response information are not publicly available. Overall, the site demonstrates high trustworthiness and business credibility, with room for improvement in privacy compliance documentation and direct contact information availability.

G

Geistlich Pharma AG

geistlich-pharma.com

57

Geistlich Pharma AG is a Swiss-based global leader in regenerative dentistry and biomaterials, specializing in bone, cartilage, and tissue regeneration. The company serves both professional healthcare providers and patients with a broad portfolio of biomaterials and medical devices. Their website reflects a mature digital presence with multilingual support, comprehensive educational resources, and global distribution information. Technically, the site is built on TYPO3 CMS, integrates modern analytics and cookie consent tools, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. WHOIS data is unavailable, which slightly impacts trust but the professional content and contact details support legitimacy. Overall, Geistlich Pharma's website is professional, secure, and compliant, supporting its market position as a trusted healthcare biomaterials provider.

B

Berner Chiropraktoren Gesellschaft

chiropraktikbern.ch

63

The Berner Chiropraktoren Gesellschaft website serves as the online presence for a regional chiropractic professional society in Switzerland. It provides information about the organization's mission, member services, and resources for patients and healthcare professionals. The site is primarily in German and targets local chiropractors, patients, and medical professionals. The business model is non-profit and focused on professional development and advocacy within the chiropractic healthcare sector. Technically, the website is built on the Jimdo CMS platform, utilizing standard Jimdo hosting and resources. It includes basic SEO and accessibility features, though mobile optimization is only basic. The site employs Facebook Pixel for analytics and tracking purposes. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a privacy and cookie policy present but no terms of service or incident response information. Overall, the website is professional and trustworthy but could benefit from enhanced security and compliance features.

MEDPHONE AG is a Swiss healthcare emergency call center founded in 2004, providing 24/7 medical emergency services including emergency doctors, dentists, psychiatrists, and collaboration with rescue services. The company operates primarily in the Bern and Lucerne cantons and is 100% physician-owned, positioning itself as a leading emergency call center in Switzerland. The business model is funded by contributions from the medical community, patients via paid emergency numbers, and third-party services. The website is professionally designed, content-rich, and provides clear contact information and service descriptions.

K

KITA Ämmehüpfer Burgdorf

kita-aemmehuepfer.ch

54

KITA Ämmehüpfer Burgdorf is a local childcare service primarily serving children of employees at Spital Emmental in Switzerland. The website presents a professional and consistent brand image with clear focus on early childhood care and education. The technical infrastructure is modern, utilizing HTML5, CSS3, JavaScript, Google Tag Manager, and popular libraries such as jQuery and FontAwesome. Mobile optimization and SEO practices are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data confirms legitimacy with consistent registrant information matching the website's business and location. Overall, the site is trustworthy and suitable for its audience, with room for improvement in privacy and security disclosures.

S

solique ag

solique.ch

54

solique ag is a Swiss-based technology company specializing in smart multiposting solutions for HR recruiters and advertising agencies. Their platform enables cross-media and international job advertisement publication, integrating with HR systems and offering modern recruitment tools such as quick apply via social media. The company positions itself as an international leader in multiposting applications, serving a targeted audience of HR professionals and agencies. The website is professionally designed, bilingual (German and English), and provides comprehensive business and customer information including case studies and references. Technically, the site is built on SilverStripe CMS, uses modern analytics tools like Google Analytics and Microsoft Clarity with privacy-conscious configurations, and implements cookie consent via Klaro. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and well-structured for its business purpose.

S

SQS Switzerland

sqsde.de

61

SQS Switzerland is a medium-sized service provider specializing in sustainable corporate management and quality assurance certifications, including ISO 27001. The company operates primarily in Switzerland with a subsidiary in Germany (SQS Deutschland GmbH). Their website is built on Drupal 10 and integrates modern technologies such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good mobile optimization and professional design, targeting businesses seeking certification and sustainability consulting services. Security posture is strong with HTTPS enforcement, security headers, and a comprehensive cookie consent mechanism. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Swiss Association for Quality and Management Systems (SQS)

sqs.ch

61

SQS is a well-established Swiss non-profit organization specializing in certification and assessment services across a broad range of industries. With over 40 years of experience, it holds a strong market position as a pioneer in ISO certifications and is an exclusive partner of the global IQNET network in Switzerland. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, it leverages Drupal 10 CMS, integrates modern fonts, and uses Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site projects high trustworthiness and business credibility.

E

Expert:innen für Arbeitsplatzkultur

greatplacetowork.ch

50

The website 'greatplacetowork.ch' represents a Swiss-based organization specializing in workplace culture consulting, employee experience measurement, and certification services under the Great Place To Work® brand. It targets organizations aiming to improve their internal culture and employee satisfaction. The site is multilingual, primarily in German, with French and English support, and uses a modern WordPress-based technical infrastructure with WooCommerce and Elementor for content management and e-commerce capabilities. The presence of structured data and SEO plugins indicates a focus on discoverability and professional presentation. Security-wise, the site uses HTTPS and includes several third-party analytics and marketing scripts, but lacks visible security headers and explicit security or privacy policies. No contact emails or phone numbers were found in the visible content, which may impact user trust and compliance. Overall, the site is professional and functional but could improve in privacy compliance and security transparency.

BerufsbildungPlus.ch is a Swiss government-backed platform operated by the Staatssekretariat für Bildung, Forschung und Innovation (SBFI) to promote vocational education and training for adults and youth. The website serves as an informational and community hub, providing resources, news, and engagement opportunities related to apprenticeships and vocational pathways in Switzerland. It holds a strong market position as an official government initiative with clear branding and trust signals. Technically, the website uses a modern JavaScript stack including jQuery, Modernizr, and the Foundation framework, with Matomo analytics hosted on a Swiss domain, reflecting a privacy-conscious approach. The site is mobile optimized and well-structured, though some accessibility features could be improved. Performance is moderate with good SEO practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not provide explicit security policies or incident response information. No vulnerability disclosure or security.txt file is present. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional with a solid business credibility score. Recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to improve compliance and security posture.

R

Regionalspital Emmental AG

spital-emmental.ch

59

Spital Emmental AG operates as a regional hospital in Switzerland with two main locations in Burgdorf and Langnau. The hospital provides a broad spectrum of healthcare services including emergency care, specialized medical departments, patient and visitor services, and additional comfort options for insured patients. The website targets patients, visitors, healthcare professionals, and referring physicians, positioning itself as a trusted regional healthcare provider. The company maintains a professional online presence with clear contact information, certifications, and active social media engagement. Technically, the website employs a modern technology stack including jQuery, Font Awesome, and various analytics and marketing tools such as Google Analytics, HubSpot, and Siteimprove. The site is mobile optimized with a responsive design and good SEO practices. Security measures include HTTPS enforcement and a Content Security Policy, although additional security headers could enhance protection. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. The security posture is solid with no evident vulnerabilities in the HTML content. However, the use of multiple third-party scripts suggests a need for ongoing privacy and security reviews. The domain registration details are consistent with the hospital's identity, supporting the legitimacy and trustworthiness of the website. Overall, the site demonstrates a good balance of business credibility, technical implementation, and privacy compliance, making it a reliable resource for its audience.

FISCHER Spindle Group AG is a Swiss-based international technology leader specializing in the development and manufacturing of high-precision rotary products including milling spindles, grinding spindles, milling heads, and high-speed turbo compressors. The company emphasizes in-house production and quality control, serving a global industrial and manufacturing audience. Their website reflects a mature digital presence built on TYPO3 CMS, integrating modern technologies such as Google Analytics, reCAPTCHA, and Cookiebot for privacy compliance. The site is professionally designed, mobile-optimized, and provides comprehensive content including product information, news, events, and contact forms with CAPTCHA protection. Security posture is strong with HTTPS enforced and privacy mechanisms in place, though explicit security headers and incident response policies are not published. WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall business credibility is supported by consistent branding, ISO certification, and active social media channels. Strategic recommendations include enhancing security headers, publishing a security policy, and improving domain registration transparency.

G

Glas Trösch

glastroesch.com

62

Glas Trösch is a well-established Swiss family-owned company specializing in glass manufacturing and solutions since 1905. The company offers a broad portfolio of architectural, technical, safety, and design glass products, serving a diverse international market with operations in 15 countries and 70 locations. Their website reflects a mature digital presence built on TYPO3 CMS, integrating modern privacy compliance tools such as Usercentrics CMP and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and consent-based script loading, though some security headers could be explicitly confirmed. The WHOIS data is missing or unavailable, which is unusual for a company of this stature and may indicate privacy protection or domain registration inconsistencies. Overall, the website is professional, content-rich, and trustworthy, with clear business focus and strong branding.

N

net+

netplus.ch

57

Net+ is a Swiss telecommunications provider offering customizable internet, television, and telephony packages tailored to customer needs. Positioned as a regional player, it targets residential and business customers within Switzerland, emphasizing multimedia services under the BLI BLA BLO brand. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience. Technically, the site leverages modern frameworks such as Bootstrap and Vue.js (Nuxt.js), integrates Google Tag Manager for analytics, and complies with cookie consent regulations via Iubenda. Security posture is solid with HTTPS enforced and basic security headers implied, though explicit security policies and incident response contacts are not published. WHOIS data confirms the domain's legitimacy and alignment with the business claims. Overall, Net+ demonstrates a mature digital presence with room for enhanced security transparency and vulnerability disclosure.

The website www.coop.ch is currently inaccessible due to an active CAPTCHA security mechanism (DataDome CAPTCHA), which blocks automated access and prevents content retrieval. As a result, no meaningful content, metadata, or contact information could be extracted for analysis. Coop is known as a major Swiss retail company, but the provided data does not allow verification of business details or security posture. The technical infrastructure shows use of JavaScript and third-party CAPTCHA services, but no further technology stack or CMS details are available. Security posture cannot be assessed due to lack of accessible content and headers. Overall, the site is protected by a WAF or bot mitigation service, limiting external analysis.

moxi ltd. is a Swiss-based, owner-managed full-service communication agency with approximately 25 years of experience. The company specializes in communication design, serving a diverse clientele including public sector entities at federal, cantonal, and municipal levels, SMEs, associations, and cultural institutions. Their services encompass strategy, content creation, design, and digital development, with a strong focus on societal and political topics. The website reflects a professional and consistent brand image, targeting organizations requiring comprehensive communication solutions. Technically, the website uses modern web standards with a custom CMS framework and includes responsive design and accessibility features. Security posture is moderate with HTTPS implied but lacks visible security headers and explicit security policies. Privacy compliance is good with a clear privacy policy but no cookie consent mechanism detected. Overall, the website is trustworthy, well-maintained, and aligned with the company's business claims.

M

mailXpert

mailxpert.ch

53

mailXpert.ch is a Swiss-based professional email marketing and newsletter software provider targeting SMEs, agencies, and large enterprises. The company positions itself as a leading Swiss solution with a focus on data location in Switzerland and professional-grade marketing features. The website is well-structured, primarily in German, and offers a range of services including email design, contact management, automation, and SMTP services. Technically, the site uses modern web technologies including Google Tag Manager, Hotjar, and LiveChat, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and some security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is partial with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.

E

Eurotrek

eurotrek.ch

74

Eurotrek is a Swiss-based travel company specializing in tailor-made active holidays, primarily cycling and hiking tours across Switzerland and Europe. The company targets active travelers seeking self-guided and guided tours with luggage transport services. Their market position is that of a niche operator with a strong focus on quality and customer satisfaction, supported by positive user ratings and professional digital presence. Technically, the website is built using modern web technologies including React and employs good SEO and accessibility practices. The site is mobile-optimized and features rich multimedia content such as autoplay videos and adaptive images. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks visible incident response or security policies. Privacy compliance is mostly met with a comprehensive privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Overall, the website is professional, trustworthy, and well-suited for its business purpose.

The website raclettemiete.ch represents a Swiss-based rental service specializing in fondue and raclette equipment for events, operated by Schweizer Milchproduzenten SMP. The business targets general consumers and event organizers seeking to rent culinary equipment for private or corporate occasions. The site is professionally designed with clear navigation and consistent branding, supported by social media presence and certification documents, indicating a trustworthy and established business. Technically, the website employs modern front-end technologies including Bootstrap, jQuery, FontAwesome, and integrates payment processing via Payrexx modal. The site is mobile optimized and provides a moderate performance experience. However, there is room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS but lacks visible security headers and privacy/cookie policies, which are important for compliance and user trust. No forms are present on the main page, reducing attack vectors but also limiting user engagement. The WHOIS data aligns well with the business entity, supporting legitimacy. Overall, the website presents a low-risk profile with good business credibility but would benefit from enhanced privacy compliance and security hardening to improve trust and regulatory adherence.

La Route Verte is a specialized tourism website promoting an e-bike route through six regional nature parks in Switzerland, targeting tourists and cycling enthusiasts. The site provides detailed stage information, scenic maps, and reservation options via partner Eurotrek. The technical infrastructure uses modern web technologies including Foundation CSS, jQuery, and various JavaScript libraries, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS, reCAPTCHA, and cookie consent, but lacks explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and partner endorsements.

N

Netzwerk Schweizer Pärke

savurando.ch

57

Savurando is a project under the Netzwerk Schweizer Pärke that offers culinary treasure hunts in Swiss nature parks, combining outdoor activities with local gastronomy. The website targets nature and food enthusiasts including families, friends, and corporate groups, providing ticket and voucher sales for these experiences. Technically, the site uses modern web technologies such as Google Tag Manager, Google Analytics, and Swiper.js, and is built on the moxi CMS platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS and uses standard tracking and advertising scripts but lacks explicit security policies or vulnerability disclosures. Privacy compliance is basic with cookie consent and GDPR references present. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

S

Swiss Parks Network

paerke.ch

52

The Swiss Parks Network operates as a government-supported non-profit entity promoting the conservation, cultural heritage, and sustainable tourism of 20 unique Swiss parks. The website serves as a comprehensive portal for visitors, local communities, and stakeholders, offering detailed information, events, and support programs such as corporate volunteering and a voucher system. The network holds a strong market position as the authoritative source for Swiss parks, supported by the Federal Office for the Environment (FOEN). Technically, the website is built on the indual CMS platform, leveraging modern JavaScript libraries such as jQuery, Fancybox, and Slick Carousel for enhanced user experience. It implements HTTPS with anonymized IP tracking in Google Analytics and a robust cookie consent mechanism via Klaro, reflecting a mature digital infrastructure. The site is well-optimized for mobile and accessibility standards, with clear navigation and multilingual support. From a security perspective, the site enforces HTTPS and employs privacy-compliant analytics and cookie management. However, it lacks explicit security headers and a public vulnerability disclosure policy, which are recommended for further strengthening its security posture. No vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, the Swiss Parks Network website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively balances user engagement with security and privacy considerations, making it a reliable resource for its audience.

M

MEDIAparc

mediaparc.ch

56

MEDIAparc is a regional media center based in Villars-sur-Glâne, Switzerland, hosting multiple media entities including radio, television, digital agencies, and advertising services. It serves the Freiburg region with a collaborative business model that integrates various media formats under one roof. The website is professionally designed using WordPress and Elementor, supporting multilingual content in German and French. It provides clear contact information, a contact form, and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response channels are absent. Overall, the website is trustworthy and well-positioned as a regional media hub.

N

netplusFR SA

netplusfr.ch

59

netplusFR SA is a regional telecommunications provider based in Switzerland, specializing in internet, fixed and mobile telephony, and television services. The company targets residential and business customers primarily in the Fribourg canton, offering combined multimedia packages with competitive speeds up to 10 Gbit/s via fiber optic technology. The website reflects a professional and customer-focused approach with clear service offerings, local physical presence, and customer testimonials enhancing trust. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, integrating modern JavaScript libraries such as Swiper.js and Google reCAPTCHA v3 for security. Analytics are implemented via Matomo, Google Analytics, and Metricool, with cookie consent managed through tarteaucitron.js, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses CAPTCHA to protect forms. However, it lacks a dedicated security policy or incident response contact details, which could be enhanced to improve transparency and readiness. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, netplusFR SA presents a trustworthy and well-maintained online presence suitable for its regional telecommunications business. Strategic recommendations include publishing explicit security policies, establishing a vulnerability disclosure program, and enhancing accessibility to further strengthen compliance and user trust.

C

Connect Com AG

ccm.ch

62

Connect Com AG is a Swiss-based company specializing in fiber optic communication infrastructure solutions, serving sectors such as energy, transport, industry, and data centers. Established in 1993, the company offers a comprehensive range of products and services including fiber optic cables, building cabling, data center solutions, and installation services. Their market position is strong within Switzerland and Germany, supported by local manufacturing and logistics capabilities. The website reflects a professional B2B focus with clear product and service descriptions, customer testimonials, and a consistent brand image. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, Microsoft Clarity for analytics, and a cookie consent mechanism via Cookiefirst. The site is mobile-optimized and SEO-friendly, though it appears to use a custom or proprietary CMS. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site uses HTTPS with a CSRF token present, indicating attention to secure form handling. However, explicit security headers like CSP or HSTS are not confirmed in the HTML content. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent banner but no visible privacy policy or terms of service on the main page. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website presents a low risk profile with good business credibility and technical implementation. Strategic improvements include publishing comprehensive privacy and security policies, implementing recommended security headers, and adding a vulnerability disclosure or security.txt file to enhance trust and compliance.

S

Switzerland Cheese Marketing AG

switzerlandcheesemarketing.com

65

Switzerland Cheese Marketing AG operates a professional website dedicated to promoting Swiss cheeses internationally. The organization targets media representatives and consumers, providing detailed information about Swiss cheese varieties and marketing activities. The website is built on TYPO3 CMS and integrates modern technologies such as Usercentrics for cookie consent and Sentry for error monitoring, reflecting a mature digital infrastructure. The site is well-structured, mobile-optimized, and includes multilingual support, enhancing user experience and accessibility. Security practices include HTTPS enforcement and consent management, though additional security headers could improve the security posture. The absence of WHOIS data for the domain is a notable concern, suggesting either a recent registration or restricted WHOIS information, which warrants further verification. Overall, the website presents a trustworthy and professional front for the organization, with clear contact information and active social media engagement.

I

Intersim AG

intersim.ch

65

Intersim AG is a Swiss digital agency specializing in innovative and customized web solutions using technologies such as PHP, .NET, and .NET Core. The company serves a diverse clientele including public sector entities and private organizations, positioning itself as a reliable partner for digital transformation projects. Their offerings span consulting, development, operation, and support, with a focus on quality and user experience. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website employs modern frameworks and technologies, including TYPO3 CMS, nopCommerce for digital commerce, and integrates AI capabilities through their Intersim AI product. The site is mobile-optimized, uses Vimeo for video content, and incorporates Google Tag Manager and Usercentrics for analytics and consent management, indicating a well-rounded digital infrastructure. From a security perspective, the site enforces HTTPS, implements standard security headers, and uses Google reCAPTCHA to protect forms. Consent management is handled professionally, supporting GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, Intersim AG's website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy digital platform. Strategic recommendations include publishing explicit security policies, enhancing incident response visibility, and maintaining vigilance on third-party scripts to sustain security posture.

U

UBIQ AG

ubiq.swiss

49

UBIQ AG is a Swiss-based small design agency specializing in web design, graphic design, brand design, product design, and webshop development. The company showcases a portfolio of projects for various clients, indicating a focus on regional business customers seeking professional digital and creative services. The website is built on Joomla CMS and employs a modern JavaScript technology stack including jQuery, Swiper, and Matomo analytics, reflecting a moderate level of digital maturity. While the site design and user experience are good, there is room for improvement in accessibility and SEO optimization. Security posture is moderate; HTTPS is used, but no DNSSEC or security headers are detected, and privacy compliance is lacking due to absence of privacy and cookie policies. The domain registration data is consistent with the business claims, supporting legitimacy. Overall, the website is professional but could enhance trust and compliance by adding privacy policies, security headers, and contact information.

F

Federal Chancellery of Switzerland

ch.ch

65

The website www.ch.ch is the official information portal of the Swiss authorities, managed by the Federal Chancellery of Switzerland. It provides comprehensive and authoritative information covering federal, cantonal, and municipal administrative matters across multiple sectors such as health, housing, taxes, and political processes. The portal targets residents and foreign nationals living in Switzerland, offering multilingual support in the country's official languages plus English. The site is positioned as a trusted government resource with a large scope and high content quality. Technically, the website is built using modern frameworks including Nuxt.js and Vue.js, styled with Tailwind CSS, and enhanced with Swiper.js for interactive elements. It demonstrates excellent mobile optimization, accessibility, and SEO practices. The infrastructure appears robust with fast performance and no visible technical issues. From a security perspective, the site enforces HTTPS and includes standard security headers, reflecting a strong security posture. However, it lacks visible cookie consent mechanisms and published security or incident response policies. No vulnerability disclosure or security.txt files are present, which could be improved to enhance transparency and security culture. Overall, the website is highly professional, trustworthy, and well-maintained, serving as a critical government communication channel. Strategic recommendations include implementing cookie consent for privacy compliance, publishing security policies, and establishing a vulnerability disclosure process to further strengthen security and user trust.

A

Association FairSocialNet

tooting.ch

57

Tooting.ch is a Swiss Mastodon instance operated by the Association FairSocialNet, providing a decentralized social networking platform primarily for Swiss users. The platform leverages Mastodon version 4.4.5 and modern web technologies such as React and ES modules, indicating a contemporary technical infrastructure. The website content is user-generated social posts focusing on news, privacy, and social issues, targeting a general audience without adult content. Security posture is solid with HTTPS enforced and no WAF blocking, but lacks some security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service pages detected. Overall, the site is trustworthy and professionally maintained but could improve in privacy and security transparency.