Switzerland security reports

B

benevol Winterthur

benevol-winterthur.ch

56

benevol Winterthur is a Swiss non-profit organization serving as the primary regional contact point for volunteer organizations, associations, and individuals interested in volunteering in Winterthur. Their services include consulting, networking, training, volunteer job listings, recognition, standards, informational leaflets, and public relations. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to their mission. Technically, the site uses modern technologies including Google Tag Manager, Google Analytics, CookieYes for consent management, and Cloudflare Turnstile for bot protection, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies could be improved. Privacy compliance is well addressed with a detailed cookie consent mechanism and a comprehensive privacy policy in German. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and partner affiliations.

B

benevol Thurgau

benevol-thurgau.ch

56

benevol Thurgau is a regional non-profit organization specializing in volunteer work facilitation within the canton of Thurgau, Switzerland. The organization focuses on promoting volunteerism, providing advisory services, offering training, and supporting local organizations. Their market position is that of a trusted regional specialist with strong community ties and partnerships. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site employs modern web technologies including Google Tag Manager, Google Analytics, and a cookie consent management system, ensuring compliance with privacy regulations. The use of Cloudflare Turnstile captcha enhances security against automated abuse. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers are missing and no explicit security policy is published. Overall, the site is well-structured, accessible, and trustworthy, with moderate tracking consistent with its service nature.

B

benevol St. Gallen

benevol-sg.ch

58

benevol St.Gallen is a well-established non-profit organization serving as the primary contact point for volunteer organizations, associations, and individuals interested in volunteering in the St.Gallen region of Switzerland. The website effectively communicates its mission, services, and community engagement through a professional and well-structured digital presence. It offers a variety of services including consulting, job boards, training, and rental spaces, supported by a network of over 300 partners. The organization maintains a strong market position as a regional leader in volunteer facilitation. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics, and CookieYes for consent management, alongside Cloudflare's Turnstile captcha for security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through comprehensive cookie consent mechanisms and GDPR-aligned privacy policies. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility, making it a reliable resource for its target audience.

B

benevol Schaffhausen

benevol-sh.ch

55

benevol Schaffhausen is a regional non-profit organization specializing in volunteer coordination and support services in the Schaffhausen region of Switzerland. As a member of the national benevol Schweiz network, it provides professional services and acts as a key contact point for volunteers, institutions, churches, associations, authorities, political bodies, and the general public. The website clearly communicates its mission and services, targeting individuals and organizations interested in volunteer engagement. The technical infrastructure of the website is modern and well-maintained, utilizing technologies such as Laravel Livewire, Google Tag Manager, Google Analytics, and CookieYes for consent management. The site is hosted behind Cloudflare, leveraging security features like Turnstile captcha to mitigate bot traffic. The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the website enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, it lacks publicly available security policies and incident response information, which could enhance trust and preparedness. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, reinforcing the legitimacy of the domain. Overall, benevol Schaffhausen presents a trustworthy and professional online presence suitable for its non-profit mission. Strategic improvements in publishing security policies and incident response contacts would further strengthen its security posture and user trust.

B

benevol Luzern

benevol-luzern.ch

58

benevol Luzern is a specialized non-profit organization dedicated to supporting and promoting volunteer work within the canton of Luzern, Switzerland. The website clearly communicates its mission to provide professional frameworks, recognition, and visibility for volunteer activities. It offers services such as consulting, knowledge transfer, volunteer matching via the benevol-jobs.ch platform, and organizes courses and events. The organization targets local entities including organizations, associations, municipalities, and individual volunteers. The site reflects a strong regional presence and partnership with the national benevol network. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, CookieYes for consent management, and Cloudflare Turnstile for bot protection, indicating a mature digital infrastructure. The site is mobile-optimized, fast-loading, and accessible with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policy and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its audience.

B

benevol Graubünden

benevol-gr.ch

56

benevol Graubünden is a Swiss non-profit organization dedicated to promoting and facilitating volunteer work within the canton of Graubünden. The organization provides advisory services, volunteer placement, and training courses for both volunteers and organizations. It holds a strong regional presence and is supported by various local partners. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in German. Technically, the site uses modern web technologies including Google Tag Manager, Google Analytics, and a cookie consent management system (CookieYes). Security measures include HTTPS enforcement and bot protection via Cloudflare Turnstile captcha. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and a detailed privacy policy. Contact information and social media presence enhance business credibility. No critical security or compliance issues were detected.

B

benevol Kanton Bern

benevol-be.ch

57

benevol Kanton Bern is a well-established non-profit organization focused on facilitating and supporting volunteer engagement within the Kanton Bern region of Switzerland. The organization provides consulting, networking, training, and digital tools to volunteers, organizations, and municipalities. Their market position is strong regionally, supported by a professional website, clear contact information, and active social media presence. The website demonstrates a high level of digital maturity with modern technologies such as Google Analytics, Google Tag Manager, and Cloudflare Turnstile captcha integrated for security and analytics purposes. Privacy compliance is robust, featuring a detailed cookie consent mechanism and a comprehensive privacy policy in German. Security posture is strong with HTTPS enforced and multiple security headers present, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-optimized for user experience and accessibility.

Q

Q12

q12.ch

58

Q12 is a collaborative network of small and medium-sized cultural and congress venues across Switzerland, providing event locations primarily for cultural and congress events. The website presents a professional and consistent brand image, targeting event organizers and cultural institutions within Switzerland. The technical infrastructure relies on legacy JavaScript libraries such as jQuery 1.8 and includes Google Analytics for visitor tracking. Mobile optimization is good, and the site includes basic SEO and accessibility features. Security posture is moderate but impacted by the use of outdated libraries and lack of visible security headers. Privacy compliance is addressed with a cookie consent banner and a privacy policy, though no terms of service or incident response policies are evident. Overall, the site is safe with no adult or questionable content, but improvements in security and compliance documentation are recommended.

B

benevol Baselland

benevol-baselland.ch

57

benevol Baselland is a regional non-profit organization serving as the competence center for volunteer work in the Basel-Landschaft canton of Switzerland. The organization supports volunteers, associations, and municipalities through consulting, mediation, networking, and digital platforms such as benevol-jobs.ch. Their website reflects a professional and consistent brand image, targeting local community stakeholders and volunteers. The business model focuses on fostering voluntary engagement and providing resources and recognition for volunteer efforts. The organization is well-positioned regionally with partnerships and sponsorships from reputable local entities.

B

benevol Aargau

benevol-aargau.ch

52

benevol Aargau is a specialized non-profit organization dedicated to promoting and supporting volunteer work within the canton of Aargau, Switzerland. The organization provides advisory services, networking opportunities, and training for volunteers, non-profit organizations, and municipalities. Their website reflects a strong regional focus with clear communication and professional presentation, supported by a network of reputable partners and supporters. The site also promotes a dedicated volunteer job platform, enhancing engagement opportunities. Technically, the website employs modern web technologies including Laravel Livewire, Google Tag Manager, and Cloudflare's Turnstile CAPTCHA, ensuring a secure and responsive user experience. Security posture is solid with HTTPS enforced and bot protection mechanisms in place, though some security headers could be improved. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity suitable for its non-profit mission.

G

Genossenschaft ZFV-Unternehmungen

zfv.ch

62

Genossenschaft ZFV-Unternehmungen is a leading Swiss hospitality and gastronomy cooperative operating over 200 venues including restaurants, hotels, childcare facilities, and event locations. The company emphasizes sustainability, partnerships, and innovation in its business model, targeting a broad audience of guests, partners, and employees. The website is professionally designed using Drupal 11 and Tailwind CSS, with modern tracking and consent management tools such as Google Analytics, Google Tag Manager, and Usercentrics. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information could be improved. Overall, the domain registration and business information are consistent and trustworthy, reflecting a mature and credible enterprise.

M

Markthalle Aarau

markthalle-aarau.ch

63

Markthalle Aarau is a community-focused venue and event space located in Aarau, Switzerland, operating since 2002. It offers a variety of services including event hosting, sustainable exchange programs like 'Madame Frigo' and an open clothes cupboard, as well as community gardening initiatives. The website is professionally designed and targets local residents and visitors interested in cultural and sustainable activities. Technically, the site is built on Webflow, uses modern web fonts, and integrates Google Tag Manager for analytics. It is hosted on Webflow's CDN and performs moderately well with good mobile optimization. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy linked via a partner site but no cookie consent mechanism visible. Overall, the domain registration data aligns well with the website's claims, indicating a legitimate and trustworthy entity.

M

mehr.wert.aarau.

mehrwert-aarau.ch

53

mehr.wert.aarau. is a regional educational network platform based in Aarau, Switzerland, focused on fostering collaboration between education and the local economy. The website serves as an informational hub promoting vocational training, lifelong learning, and addressing workforce challenges through projects and events. The organization positions itself as a non-profit entity facilitating knowledge exchange and regional development. Technically, the website is built on Joomla CMS with Bootstrap framework, ensuring a modern and responsive design. The site is HTTPS secured and uses common web technologies such as jQuery and FontAwesome. However, it lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. No forms collecting personal data are present on the homepage, reducing immediate privacy risks. The security posture is moderate with room for improvement in headers and incident response transparency. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security policies to align with GDPR and best practices.

A

Aarau Impact

aarauimpact.ch

54

Aarau Impact is a recently established (2023) public-private partnership business ecosystem focused on fostering innovation and startups in Aarau, Switzerland. The website serves as an information portal for community members, entrepreneurs, and stakeholders interested in innovation programs and networking events. The organization is supported by the City of Aarau and local business promotion entities, positioning it as a key regional innovation hub. Technically, the website is built on Joomla CMS with Bootstrap and modern frontend libraries, offering a responsive and user-friendly experience. Security posture is adequate with HTTPS and CSRF protections but lacks advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

A

Aarau Regio

aarau-regio.ch

44

Aarau Regio is a regional governmental entity focused on coordinating cooperation and projects within the Aarau region in Switzerland. The website serves as an information portal highlighting current projects, regional cooperation efforts, and news relevant to residents and stakeholders. The organization emphasizes regional development, spatial and traffic planning, and nature and landscape protection. The website is built on the TYPO3 CMS platform and incorporates modern web technologies including jQuery, Owl Carousel, and analytics tools such as Google Analytics and Matomo. While the site is well-structured and professionally designed, it lacks visible cookie consent mechanisms and detailed privacy compliance features, which may pose GDPR compliance challenges. Security posture is moderate with HTTPS enforced but missing advanced security headers and explicit security policies. Overall, the domain registration and WHOIS data align well with the website's governmental nature, indicating legitimacy and trustworthiness.

The website analyzed is a login page for Helvetia, a Swiss insurance company. The page content is minimal and appears to be blocked or protected by a security mechanism, likely a Web Application Firewall (WAF), as indicated by the hidden body and placeholder text. The site lacks visible privacy, cookie, or terms of service policies, and no contact information or forms are present. The technical infrastructure shows minimal publicly accessible content with a single JavaScript file loaded, and no metadata or structured data is available for deeper analysis. From a security perspective, the absence of visible security headers, privacy policies, and incident response contacts suggests a low transparency posture, although this may be due to the page's nature as an identity provider login portal. The lack of accessible content limits the ability to assess SSL configuration or other security best practices. No vulnerabilities or exposed sensitive data were detected, but the inability to access full content restricts comprehensive evaluation. Overall, the website's risk assessment is constrained by the blocked content, resulting in a low AI score. Strategic recommendations include improving transparency by publishing privacy and cookie policies, adding contact and incident response information, and ensuring security headers and SSL configurations are properly implemented and visible. These steps will enhance trust and compliance with data protection regulations.

V

VOI Migros-Partner

voi-migrospartner.ch

68

VOI Migros-Partner operates as a retail partner network for Migros, a major Swiss retailer, offering a range of Migros products including food, beverages, and spirituosen. The website targets general consumers in Switzerland, providing localized content primarily in German. The business model focuses on regional retail partnerships, leveraging Migros branding and product lines to serve local communities. The site demonstrates consistent branding and a professional presentation aligned with Migros standards. Technically, the website employs modern tracking and analytics tools such as Google Analytics, Google Tag Manager, and Qualtrics for marketing and user experience optimization. Cookie consent is implemented with an opt-in mechanism, reflecting good privacy compliance practices. The site is served over HTTPS with basic security headers, though there is room for improvement in security hardening and accessibility. Security posture is moderate, with no critical vulnerabilities detected in the visible content. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests opportunities to enhance transparency and readiness. Privacy compliance is strong, supported by a comprehensive privacy and cookie policy hosted on the Migros privacy domain. Overall, the website presents a low-risk profile with a solid foundation in business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to further strengthen trust and compliance.

Integrale operates a marketplace platform primarily targeting gastro wholesalers in Switzerland. The website presents a business-oriented service with a focus on facilitating wholesale transactions in the gastronomy sector. The market position and business model are consistent with a specialized marketplace serving a niche audience. Technically, the site is built on a modern Angular framework and uses CKEditor for content management, indicating a moderate level of digital maturity. Performance and mobile optimization are basic but functional. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies. No contact or incident response information is provided, which limits transparency and user trust. Overall, the site is safe and professional but would benefit from enhanced privacy compliance and security practices.

S

Saviva AG

saviva.ch

54

Saviva AG is a leading Swiss service provider specializing in hospitality, healthcare, food wholesale, logistics, and digital solutions. The company integrates physical and digital services, including a proprietary digital marketplace called Integrale, to streamline procurement and logistics for its customers. Since August 2024, Saviva operates under the parent company Transgourmet, enhancing its market reach and service offerings. The website reflects a professional and modern digital presence with comprehensive service descriptions and multimedia content targeting hospitality and retail sectors in Switzerland. Technically, the site is built on Joomla CMS with modern JavaScript libraries and UI frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could improve the stance. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

D

Digitec

digitec.ch

73

Digitec is a leading Swiss e-commerce platform specializing in consumer electronics, operating under the parent company Migros. The website offers a broad range of digital products including smartphones, TVs, and notebooks, supported by a strong community and quality content. It holds a market leader position in Switzerland's consumer electronics online retail sector. The platform is technically mature, leveraging modern frameworks like Next.js and GraphQL, with robust integrations for payment and analytics services. Security posture is strong with HTTPS enforced and standard security headers implied, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, Digitec presents a professional, trustworthy, and user-friendly online shopping experience.

S

Stiftung UNIA

unia.swiss

57

Stiftung UNIA operates as a major Swiss trade union representing employees across various sectors. The organization focuses on negotiating collective labour agreements, providing legal advice and protection to its members, and advocating for fair working conditions and social justice. The website serves as an information portal for workers in Switzerland, offering guides, membership information, and resources related to employment rights. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mouseflow, with appropriate consent mechanisms in place. Security posture is solid with HTTPS enforced and domain registration protections, though DNSSEC is not enabled and some security headers are missing. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its target audience.

G

Galaxus

galaxus.ch

72

Galaxus is the largest Swiss online retail platform offering a wide range of consumer products across multiple categories. It operates under the parent company Migros and targets general consumers primarily in Switzerland and German-speaking Europe. The website is professionally designed with excellent content quality, clear navigation, and multi-language support. Technically, it leverages modern frameworks such as Next.js and React, integrates multiple analytics and marketing tools, and uses secure payment gateways like Stripe and Datatrans. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a mature, trustworthy e-commerce business with a high level of digital maturity and security awareness.

M

migrolino

migrolino.ch

70

Migrolino operates as a well-established retail convenience store chain in Switzerland, providing quick and convenient shopping options for daily needs. The website serves primarily as a shop finder and promotional platform, targeting the general Swiss public with localized language options in German, French, and Italian. The business model focuses on retail convenience with a strong physical presence across Switzerland, supported by an interactive map of store locations. Technically, the website leverages modern web technologies including Google Maps API, Google Fonts, and Google Analytics, ensuring a functional and user-friendly experience with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and basic privacy controls such as cookie consent, though explicit privacy policies and security headers could be improved. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate business entity. Strategic recommendations include enhancing privacy compliance, publishing clear policies, and strengthening security headers to improve trust and compliance.

F

Föderation der Schweizer Psycholog:innen (FSP)

psychologie.ch

55

The Federation of Swiss Psychologists (FSP) operates a comprehensive and professionally designed website serving as the largest professional association for psychologists in Switzerland. The site offers key services including a psychologist directory, training information, job offers, membership services, and news updates. The target audience includes psychologists, patients, and the general public interested in psychology-related services within Switzerland. The business model focuses on professional association services and community engagement. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Livewire, integrates multiple analytics and tracking tools, and demonstrates excellent mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement, CSRF protection, and bot mitigation via hCaptcha, although explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, compliant with GDPR, and reflects a mature digital presence appropriate for a large healthcare association.

Ihre Apotheke is a Swiss national pharmacy association platform operated by Schweizerischer Apothekerverband pharmaSuisse. It provides a comprehensive directory of pharmacies, detailed information on pharmacy services, health campaigns, and apprenticeship opportunities. The website targets Swiss residents seeking pharmacy-related services and information, positioning itself as a trusted healthcare resource. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, with Tailwind CSS for styling, and integrates Google Tag Manager for analytics. The site is mobile-optimized and SEO-friendly, offering a professional user experience. Security posture is strong with HTTPS enforced and multiple security headers present, though no explicit security policy or incident response page was found. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

M

MDS Display

mdsdisplays.com

47

MDSdisplays.com is a professional website representing MDS Display, a Swiss-based company specializing in LED display solutions for various applications. The company offers a wide range of products including LED wall displays, hologram displays, LED posters, shelf displays, and innovative transparent LED films. With over 16 years of experience, MDS Display positions itself as a reliable supplier focused on quality, energy efficiency, and environmental protection. The website targets businesses and organizations seeking customized LED display solutions, providing multimedia content and downloadable catalogs to support customer engagement. Technically, the website is built on WordPress 6.8.3, utilizing common web technologies such as jQuery, Font Awesome, and Google Fonts. Hosting is provided by Hostpoint AG, as inferred from the DNS nameservers. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. Google Analytics is integrated for visitor tracking, but no cookie consent mechanism is present. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers like Content-Security-Policy and X-Frame-Options. DNSSEC is not enabled, and no explicit security or incident response policies are published. The site does not expose sensitive data and uses a honeypot plugin to protect forms. Overall, the security posture is moderate but could be improved with additional headers and compliance measures. The domain registration is transparent and consistent with the business location and claims, though the domain age (registered in 2020) is younger than the company's stated experience, suggesting a possible rebranding or domain migration. No WAF or blocking mechanisms are detected, and the content is fully accessible. Privacy compliance is partial, with a privacy policy present but lacking cookie consent and terms of service. Overall, the website is professional and trustworthy with good business credibility but would benefit from enhanced security practices and privacy compliance to improve user trust and regulatory adherence.

S

Swisscare

swisscare.ch

69

Swisscare is an established insurance provider specializing in international health and travel insurance for students, interns, au pairs, travelers, and expatriates primarily in Europe and Switzerland. The company offers a digital-first experience with instant online insurance certificates and a customer account portal. The website is professionally designed, mobile-optimized, and supports multiple languages, reflecting a mature digital presence. Technically, the site uses modern web standards, Cloudflare DNS, and privacy-respecting analytics, though DNSSEC is not enabled. Security posture is good with HTTPS and CSRF tokens, but lacks explicit security policies and some security headers. Privacy compliance is strong with GDPR and FADP policies and cookie consent mechanisms. Overall, the domain and website content align well, indicating a legitimate and trustworthy business with a solid market position in niche insurance services.

G

Globetrotter

globetrotter.ch

63

Globetrotter is a Swiss travel company offering a wide range of travel experiences, advisory services, and curated travel recommendations. The website targets diverse traveler segments including families, solo travelers, and those interested in responsible tourism. The company appears to have a solid market position in Switzerland with a medium-sized business profile. Technically, the website uses modern web technologies such as the Svelte framework, lazy loading for images, and integrates a consent management platform to comply with privacy regulations. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses consent management but lacks explicit security headers and published security policies, which could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and compliant with privacy standards, though it would benefit from publishing privacy and security policies and providing clearer contact information.

H

Hotelplan

hotelplan.ch

65

Hotelplan.ch is a leading Swiss online travel agency specializing in personalized holiday and travel bookings including flights, hotels, cruises, and car rentals. The website targets Swiss travelers seeking convenient and comprehensive travel solutions. Technically, the site employs modern frameworks such as Next.js and integrates multiple analytics and marketing tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS and security headers in place, though explicit privacy and cookie policies are not detected in the provided content, representing a compliance gap. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and incident response documentation.

L

Luzerner Kantonalbank

lukb.ch

75

Luzerner Kantonalbank (LUKB) is a leading regional bank based in Luzern, Switzerland, providing a broad range of financial services including retail banking, mortgages, investment products, and personalized financial advisory. The website targets private customers primarily in the Luzern and Central Switzerland region, emphasizing personal service and innovative banking solutions. The bank maintains a strong market position as a trusted cantonal bank with a professional digital presence. Technically, the website employs modern web technologies such as Google Tag Manager, Cookiebot for consent management, and HTMX for dynamic content. It is well-optimized for mobile devices and accessibility, with good SEO practices and comprehensive metadata. The site uses HTTPS with strong security headers, ensuring secure communications and protecting user data. From a security perspective, the site demonstrates good practices including secure cookie handling, consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly detailed, representing an area for improvement. The privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website is professional, trustworthy, and secure, with extensive content relevant to its audience. It integrates multiple analytics and marketing tools responsibly, maintaining transparency and user control over data. Strategic recommendations include publishing detailed security policies, vulnerability disclosure mechanisms, and enhancing transparency around data protection officers to further strengthen trust and compliance.

S

SzeneSchweiz – Berufsverband Darstellende Künste

szeneschweiz.ch

38

SzeneSchweiz is the largest and most important Swiss professional association for performing artists in theater, film, and TV. It provides a range of services including legal advice, protection against abuse, pension schemes for freelancers, continuing education, and a casting platform. The organization targets professional artists in Switzerland and operates as a non-profit entity with a strong market position in the Swiss performing arts sector. The website is multilingual and professionally designed, reflecting a medium-sized organization founded around 2017. Technically, the website is built on WordPress 6.8.3 with modern plugins for social sharing and forms. It uses Google Analytics for tracking and is mobile-optimized with good SEO practices. Performance is moderate, and accessibility is basic. The site uses HTTPS with excellent SSL configuration but lacks some security headers and a cookie consent mechanism. From a security perspective, the site enforces HTTPS and does not expose sensitive data. However, it lacks explicit security policies, incident response information, and cookie consent banners, which are important for GDPR compliance. No vulnerabilities or suspicious content were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's Swiss identity. Overall, the website is professional, trustworthy, and well-positioned in its niche but could improve privacy compliance and security posture by adding cookie consent, security headers, and incident response details.

V

VPOD/SSP

vpod.ch

11

VPOD/SSP is a well-established Swiss trade union representing employees in the public service sector, including education, healthcare, transportation, and government. The organization offers membership services, educational programs, advocacy on labor rights, and regional support through multiple subdomains. The website reflects a mature digital presence with clear branding, comprehensive content, and active social media engagement. Technically, the site is built on the ProcessWire CMS with modern JavaScript libraries and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the site is professional, trustworthy, and well-aligned with its mission and audience.

V

VCS Productions GmbH

vcs.ch

40

VCS Productions GmbH is a Swiss-based company specializing in visual computing services with over 30 years of experience. Their offerings include tailored content creation for product videos, LED display solutions, high lumen projectors, 3D animations, laser shows, video mapping, and streaming products. The company targets businesses and organizations seeking advanced visual content and display technologies. The website reflects a professional and consistent brand image with clear contact information and a focus on technology services. Technically, the site is built on WordPress with a modern theme and plugins, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and anti-spam measures, though lacking advanced security headers and explicit policies. Privacy compliance is partial, with a privacy policy present but no cookie consent or terms of service. Overall, the site is trustworthy and well-maintained, with room for improvement in security and compliance documentation.

U

Unia

unia.ch

10

Unia is the largest trade union in Switzerland, serving a broad range of employees across industries such as construction, manufacturing, commerce, and private services. The organization operates as a non-profit entity focused on labor rights, collective bargaining agreements, and member services. The website is built on TYPO3 CMS and integrates modern analytics and tracking tools like Google Tag Manager and Facebook Pixel, with privacy-conscious default settings denying consent until granted. Security posture is solid with HTTPS enforced, though improvements can be made by adding security headers and explicit privacy and cookie policies. The site is well-branded, multilingual, and professionally designed, targeting workers and union members in Switzerland.

S

syndicom

syndicom.ch

52

syndicom is a prominent Swiss trade union representing employees in logistics, information and communication technology, and media sectors. The organization advocates for fair working conditions, social justice, and responsible technological progress. It offers services such as collective bargaining, legal advice, education, and campaigns to its members. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support, targeting employees and stakeholders in Switzerland. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration aligns with the organization's identity, supporting legitimacy and trustworthiness.

S

Sympany Services AG

sympany.ch

70

Sympany Services AG is a Swiss insurance company specializing in health insurance, offering both basic and supplementary insurance products alongside vehicle, household contents, and business insurance. The company targets individuals and corporate customers within Switzerland, positioning itself as a trusted and customer-centric insurer with high satisfaction ratings. The website reflects a professional and comprehensive digital presence with clear navigation and extensive service information. Technically, the website employs modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for consent management, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with secure HTTPS connections and no visible technical vulnerabilities. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks publicly available dedicated security policies or incident response contacts. No exposed sensitive data or vulnerabilities were detected. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, with recommendations to enhance security transparency and implement additional security headers to further strengthen its security posture.

R

RVK

rvk.ch

52

RVK is an independent and leading service provider in the Swiss healthcare market, offering specialized services including risk and performance management, insurance medicine consulting, and education through its RVK Academy. The company targets insurers, pension funds, and enterprises, providing tailored insurance and educational solutions. The website is professionally designed, consistent in branding, and provides clear contact information and trust signals such as client testimonials and SQS-Audit certification. Technically, the site uses modern web technologies like Swiper.js and Google Maps API, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Migros Verteilbetrieb AG

mvb.ch

51

Migros Verteilbetrieb AG is a leading logistics company within the Migros Group, specializing in storage, packaging, picking, and distribution of a wide range of products including food, textiles, and frozen goods. It operates multiple large distribution centers in Switzerland, serving hundreds of Migros stores and migrolino shops daily. The company is well-established with over 50 years of operational history, positioning itself as a key logistics partner in the Swiss retail sector. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and OwlCarousel, and is built on the Umbraco CMS platform. The site is mobile-optimized, uses HTTPS, and includes cookie consent mechanisms compliant with GDPR. While the site lacks explicit security headers and detailed security policies, it demonstrates a solid baseline security posture with no evident vulnerabilities or exposed sensitive data. From a security perspective, the website benefits from HTTPS encryption and cookie consent but could improve by implementing additional HTTP security headers and publishing incident response or security policies. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business identity, indicating high legitimacy. Overall, the website is professional, trustworthy, and well-suited for its business purpose. Strategic recommendations include enhancing security headers, improving accessibility, and publishing explicit security and incident response information to further strengthen trust and compliance.

H

Helvetia Insurance

helvetia.ch

70

Helvetia Insurance is a well-established Swiss insurance company with over 160 years of history, serving more than 1.3 million customers. The company offers a broad range of insurance and pension products targeting private customers in Switzerland. Their website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding. The technical infrastructure leverages Adobe Experience Manager CMS, integrates multiple analytics and marketing tools, and employs modern web technologies ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms in place. However, WHOIS data is not publicly available, likely due to privacy protection, which is common for large enterprises. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

G

Garanto

garanto.ch

50

Garanto is a Swiss trade union established in 2001 representing customs and border personnel. The organization provides legal protection, member services, and advocacy for its members within the customs administration sector. The website is professionally designed, multilingual (German, French, Italian), and provides clear navigation and relevant content for its target audience. Technically, the site uses modern JavaScript libraries such as jQuery, Swiper, and Fancybox, with a custom or unknown CMS. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing. No critical vulnerabilities or blocking mechanisms were detected. Contact information is clearly presented, including phone and email, and a member login area is available. Overall, the site demonstrates a solid digital presence for a government-related non-profit entity.

ERV is a Swiss insurance company specializing in travel and leisure insurance products, offering comprehensive coverage including multi-trip, single-trip, group travel, mobility, health, accident, pet, and corporate insurance. The company maintains strong partnerships with reputable Swiss organizations such as Migros, LUKB, and Hotelplan, reinforcing its market position. The website is professionally designed, mobile-optimized, and uses Adobe Experience Manager as its CMS, with Adobe Analytics and OneTrust for tracking and consent management. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not prominently published. No signs of blocking or WAF interference were detected, and the domain WHOIS data aligns well with the business claims, indicating legitimacy.

S

Stiftung Standortförderung Aarau und Region

asf-aarau.ch

63

The Stiftung Standortförderung Aarau und Region operates as a regional non-profit foundation focused on promoting economic development, tourism, and city management in Aarau and its surrounding region. The website clearly communicates its mission to unite business, quality of life, culture, and leisure under one umbrella, targeting local businesses, residents, tourists, and event organizers. The foundation offers services including economic promotion, city management, tourism marketing, and event planning, positioning itself as a key regional player fostering sustainable growth and community engagement. Technically, the website employs modern web technologies such as ES modules, Tailwind CSS, and integrates privacy-focused analytics via Plausible. The site is well-optimized for mobile devices, loads quickly, and features a professional design with clear navigation. Hosting and media assets are served via reliable providers, ensuring good performance and availability. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced protection and GDPR compliance. No incident response or vulnerability disclosure policies are published, indicating room for improvement in security transparency and readiness. Overall, the website presents a trustworthy and professional digital presence for the foundation, with minor gaps in privacy and security best practices. Strategic enhancements in these areas would strengthen compliance and user trust, supporting the foundation's mission and reputation.

S

Sorell Hotels

sorellhotels.com

59

Sorell Hotels is a Swiss boutique hospitality group operating 15 hotels, event locations, and restaurants across multiple Swiss cities. The website presents a professional and modern digital presence built on Drupal 11 with a focus on user experience, mobile optimization, and SEO. The company emphasizes unique guest experiences, local culture, and sustainability. The site integrates a booking system and consent management via Usercentrics, demonstrating awareness of privacy compliance. However, explicit privacy policy and terms of service pages are not clearly found, which is a compliance gap. The WHOIS data for the domain www.sorellhotels.com is unavailable, raising questions about domain registration transparency, though the website content and branding strongly indicate a legitimate business. Security posture is good with HTTPS and secure forms, but lacks visible security headers and incident response information.

S

Stadtmuseum Aarau

stadtmuseum.ch

68

Stadtmuseum Aarau is a Swiss cultural institution dedicated to collecting, conserving, and presenting the history and stories of the city of Aarau and its population. It serves a broad audience including families, schools, and local visitors by offering exhibitions, events, educational programs, and digital content. The museum operates under the auspices of the city of Aarau, positioning itself as a trusted local government-affiliated entity with a clear cultural mission. Technically, the website is built on the GOViS CMS platform, a Swiss eGovernment content management system, and employs modern web technologies such as jQuery, Font Awesome, and Matomo analytics. The site is well-optimized for mobile devices and accessibility, with good SEO practices and a clear navigation structure. Security-wise, the website enforces HTTPS and uses a comprehensive cookie consent mechanism, though it lacks explicit security headers and a published security policy or incident response contact. Overall, the site demonstrates a solid security posture with no visible vulnerabilities or suspicious content. The domain registration data aligns well with the website's claims, reinforcing its legitimacy. Strategic recommendations include enhancing HTTP security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen trust and security posture.

K

kultur & kongresshaus aarau

kuk-aarau.ch

67

The Kultur & Kongresshaus Aarau is a cultural and congress venue located in Aarau, Switzerland, operating as an institution of the city of Aarau. The website presents a professional and well-structured platform showcasing their event spaces, services, and cultural events. The organization emphasizes accessibility and sustainability, holding certifications such as Swisstainable Level II and membership in OK:GO for barrier-free travel planning. Their target audience includes event organizers, cultural attendees, and local businesses. Technically, the website employs modern JavaScript libraries including jQuery, Font Awesome, and responsive slideshow plugins, ensuring a mobile-optimized and accessible user experience. The site uses a cookie consent mechanism compliant with GDPR principles, and analytics are handled via Matomo, indicating a moderate level of user tracking with privacy considerations. From a security perspective, the site uses HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's claims, reinforcing the domain's legitimacy. Overall, the website is professional, trustworthy, and compliant with basic privacy standards, though improvements in security policy transparency and header implementation are recommended to enhance security posture and user trust.

F

Forum Schlossplatz

forumschlossplatz.ch

48

Forum Schlossplatz is a cultural institution based in Aarau, Switzerland, established in 1994. It serves as a vibrant venue for cultural and societal reflection through exhibitions, events, educational projects, and a podcast. The website reflects a well-structured and professionally presented digital presence targeting a general audience interested in arts and culture. The business model focuses on community engagement and cultural education rather than commercial sales. Technically, the website uses modern web technologies including lazy loading, JavaScript libraries for UI effects, and structured data for SEO. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers are missing and no explicit security or incident response policies are published. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained.

F

Forstbetrieb Region Aarau

forst-aarau.ch

51

Forstbetrieb Region Aarau is a regional forestry management organization serving multiple municipalities in Switzerland, primarily Aarau, Biberstein, and Unterentfelden. The organization manages approximately 916 hectares of forest land, focusing on sustainable wood harvesting and diverse forestry services including garden and park forestry, tree care, root stock milling, consulting, and sales of firewood and forest products. The website is professionally designed using Joomla CMS and Bootstrap framework, providing clear navigation and relevant content in German for its target audience. Contact information is prominently displayed, enhancing business credibility. Technically, the site uses modern web technologies and enforces HTTPS, but lacks some security headers and privacy compliance mechanisms such as cookie consent. No blocking or WAF challenges were detected, allowing full content access.

B

benevol Schweiz

benevol.ch

56

benevol Schweiz is a Swiss non-profit umbrella organization that connects regional volunteer offices and promotes volunteer engagement across Switzerland. The website serves as a central hub for volunteer opportunities, educational resources, and recognition tools, positioning benevol as a leading entity in the volunteer sector. The organization targets volunteers, organizations seeking volunteers, and public entities, offering services such as a volunteer job platform and educational courses. Technically, the website employs modern web technologies including Google Tag Manager, CookieYes for consent management, and Cloudflare Turnstile for bot protection, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security cookies, and privacy compliance, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

M

Mobimo Management AG

aeschbachquartier.ch

61

The website www.aeschbachquartier.ch represents the Aeschbachquartier Aarau, a mixed-use urban development project managed by Mobimo Management AG, a reputable Swiss real estate company. The site offers detailed information about residential, commercial, and community spaces, targeting residents, businesses, and visitors in Aarau. The business model centers on real estate development and management, with a medium-sized market presence in Switzerland. Technically, the website is built on Drupal 10 with Bootstrap 5, featuring embedded Vimeo videos and Matomo analytics configured to respect DoNotTrack settings. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security posture is good with HTTPS enforced and some security headers present, though improvements are recommended in cookie consent and explicit security policies. No critical vulnerabilities or suspicious content were detected. Privacy compliance is adequate with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Contact information is clear, though no direct email addresses are published. Overall, the site is professional, trustworthy, and aligned with the parent company Mobimo Management AG.