Switzerland security reports

B

backslash AG

govis.ch

71

GOViS is a Swiss-based modern content management system tailored for public sector institutions such as municipalities, cities, cantons, and schools. The platform is widely adopted with over 550 public institutions using it nationwide, positioning it as a leading solution in the Swiss e-government space. The company behind GOViS, backslash AG, demonstrates a strong market presence with over 20 years of experience and a commitment to continuous development and customer support. The website reflects a professional and trustworthy image with comprehensive information and customer testimonials.

E

EXPERTsuisse

expertsuisse.ch

67

EXPERTsuisse is a well-established Swiss professional association specializing in audit, tax, and fiduciary services. With nearly a century of history, it provides comprehensive training, certification, and support to federally certified experts. The website reflects a mature market position with a focus on professional education, industry news, and member services. Technically, the site employs modern web technologies including Turbo Frames, StimulusJS, and integrates privacy-conscious analytics. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR standards.

H

Hello Career

hello-career.ch

51

Hello Career is a Swiss educational platform dedicated to providing comprehensive information about the apprenticeship profession 'Kauffrau/Kaufmann Treuhand/Immobilien'. The website targets young individuals interested in pursuing apprenticeships in fiduciary and real estate sectors, offering resources such as career choice analysis, event listings, blog testimonials, and apprenticeship opportunities. The platform is well-positioned within its niche, supported by partnerships with reputable Swiss organizations, enhancing its credibility and trustworthiness. Technically, the website employs modern tracking technologies including Google Analytics and Google Tag Manager, integrated with a consent management system to comply with privacy regulations. The site demonstrates good mobile optimization, clear navigation, and a professional design, contributing to a positive user experience. However, there is room for improvement in accessibility and the implementation of advanced security headers. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, reflecting a solid baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for enhancement to strengthen transparency and preparedness. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure framework to further bolster trust and security maturity.

G

gateway.one

gateway.one

48

gateway.one is a Swiss-based educational platform focused on connecting youth with apprenticeship opportunities and providing career guidance tools. The platform offers a comprehensive suite of services including apprenticeship search, aptitude tests, and employer services for posting apprenticeship positions. It targets students, parents, teachers, and companies, positioning itself as a key player in the Swiss vocational education market. The website is professionally designed, mobile-optimized, and rich in relevant content, supporting a positive user experience. Technically, the site leverages modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and Hotjar for analytics and user tracking. It is built on the Contao Open Source CMS, ensuring a robust content management framework. The site uses HTTPS with good SSL configuration, though security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Security posture is solid with secure login forms and encrypted connections, but lacks explicit incident response and vulnerability disclosure pages. The absence of WHOIS data limits domain registration transparency, but the overall business credibility and trust signals are strong. No adult or explicit content is present, making the site safe for general audiences. Overall, gateway.one demonstrates a mature digital presence with good security and privacy practices, serving an essential educational function in Switzerland. Strategic improvements in security headers and incident response transparency would further enhance trust and resilience.

H

Honorix

honorix.ch

55

Honorix.ch is a website with minimal publicly accessible content, primarily serving as a digital presence with an Angular-based frontend. The site lacks visible business descriptions, contact information, or policy documents, limiting insight into its operations or market positioning. The technical infrastructure uses Angular 12.2.16 and Webpack, indicating a modern but basic frontend setup. However, the absence of visible content and metadata suggests the site may be under development or intended for limited use. From a security perspective, no HTTPS or security headers information is available, and no privacy or cookie policies are present, indicating potential compliance gaps. The lack of contact or incident response information further reduces the site's trustworthiness and security posture. WHOIS data shows consistent domain registration in Switzerland, aligning with the domain name and presumed business location, supporting legitimacy. Overall, the website's risk is moderate due to minimal content and lack of security and privacy features. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact and incident response information, and enhancing security headers to improve compliance and trust.

WNG SA is a specialized digital communication and marketing agency based in Lausanne, Switzerland, targeting institutional clients in the French-speaking region of Switzerland. The company offers consulting, design, technology implementation, and marketing strategy services, positioning itself as a trusted partner for institutional actors. The website reflects a professional and consistent brand image with strong client references and certifications. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforcement and basic security headers, although there is room for improvement in explicit security policies and incident response documentation. Privacy compliance is supported by a cookie consent mechanism, but a dedicated privacy policy page is not clearly found. Overall, the website demonstrates a mature digital presence with good business credibility and technical implementation.

F

Finanzakzent AG

finanzakzent.ch

63

Finanzakzent AG is a Swiss financial advisory firm specializing in insurance and pension planning services tailored for doctors and dentists in the Bern region. The company positions itself as a trusted partner offering comprehensive and personalized financial and insurance trustee services. The website demonstrates a high level of professionalism with detailed expert profiles, partner affiliations, and rich content focused on the target audience. Technically, the site leverages modern frameworks such as Next.js and Prismic CMS, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are absent. Overall, the site reflects a mature digital presence with good compliance to privacy regulations and moderate user tracking.

U

Union suisse des professionnels de l’immobilier (USPI Suisse)

sous-location.immo

45

The website sous-location.immo is operated by the Union suisse des professionnels de l’immobilier (USPI Suisse), a recognized Swiss real estate professional association. It provides legal guidance and resources related to subletting residential properties in Switzerland, including downloadable contract templates. The site targets tenants and real estate professionals in the Swiss market, focusing on compliance with Swiss tenancy laws. Technically, the site is built on TYPO3 CMS, uses modern web technologies including Facebook SDK and Google Analytics, and is served over HTTPS with moderate performance and good mobile optimization. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and formal privacy and cookie policies, which are compliance gaps. WHOIS data is unavailable or privacy protected, but the website's consistent branding, professional content, and valid contact information support its legitimacy. Overall, the site is professional, trustworthy, and safe for general audiences, though improvements in privacy compliance and security headers are recommended.

U

USPI Formation

uspi-formation.ch

60

USPI Formation is a specialized educational center focused on real estate training in the Suisse Romande region of Switzerland. Established in 2016, it offers a wide range of courses including basic training, professional development, and preparatory courses for federal certifications. The website reflects a mature digital presence with comprehensive course information and session scheduling, targeting individuals and professionals seeking to develop real estate competencies. The organization maintains active social media profiles on Facebook, Instagram, LinkedIn, and YouTube, enhancing its market reach and engagement. Technically, the website is built on WordPress with WooCommerce for e-commerce functionality. It integrates multiple modern marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, Hotjar, and Zoho SalesIQ, indicating a sophisticated approach to user tracking and marketing. The site is well-optimized for SEO with structured data implemented via Yoast SEO and demonstrates good mobile responsiveness and user experience. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, explicit security headers are not clearly detected, and no published security or incident response policies are found. There are no visible vulnerabilities or exposed sensitive data, but improvements could be made by adding security headers and formalizing incident response contacts. Overall, USPI Formation presents a professional, trustworthy, and GDPR-compliant online presence suitable for its educational mission. The risk profile is low with no critical security issues detected. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a vulnerability disclosure policy to further strengthen security posture.

O

OKGT (Organisation kaufmännische Grundbildung)

okgt.ch

69

OKGT is a Swiss educational organization focused on kaufmännische Grundbildung (commercial basic education) in the Treuhand and Immobilien sectors. It serves apprentices and training companies by providing courses, qualification procedures, and professional development. The website positions OKGT as a central competence center with strong partnerships in the Swiss real estate and fiduciary sectors. Technically, the site uses modern web technologies including jQuery and Font Awesome, hosted on a Swiss eGovernment CMS platform (GOViS). The site is well-structured, mobile-optimized, and accessible. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its target audience.

T

The Swiss Parliament

parlament.ch

67

The Swiss Parliament website serves as the official digital platform for the Swiss Federal Assembly, providing comprehensive information about parliamentary organs, sessions, votes, committees, delegations, and services. It targets Swiss citizens, parliament members, researchers, journalists, and international partners, positioning itself as the authoritative source for Swiss parliamentary information. The site offers key services such as live streaming of sessions, access to official bulletins, and contact information for parliamentary services. Technically, the website is built on Microsoft SharePoint, utilizing JavaScript frameworks like AngularJS and Breeze.js for dynamic content delivery. The presence of Piwik analytics indicates moderate user tracking, while the site maintains good mobile optimization and accessibility standards. Security-wise, the site enforces HTTPS and likely includes standard security headers, though explicit Content-Security-Policy headers and cookie consent mechanisms are not evident. WHOIS data confirms the domain's legitimacy, consistent with an official government entity. Overall, the website demonstrates a high level of professionalism, trustworthiness, and content quality, with minor recommendations for enhanced privacy compliance and security transparency.

N

Niseko

niseko.ch

53

Niseko is a Swiss-based web agency specializing in bespoke web solutions, including custom website design, web applications, and AI/data integration services. The company targets businesses seeking tailored digital projects, emphasizing quality, performance, and user experience. Their market position is that of a small but professional agency with a clear focus on delivering solid and well-thought-out web solutions. Technically, the website is built on WordPress using Elementor, with modern JavaScript libraries and Google Analytics for tracking, complemented by a GDPR-compliant cookie consent mechanism. The site is well-optimized for SEO and mobile devices, offering a professional and consistent user experience. Security-wise, the site enforces HTTPS, includes standard security headers, and avoids exposing sensitive data, though it lacks explicit security policies and incident response information. Overall, the website is trustworthy and professional, with room for improvement in publishing security and compliance documentation.

Les Sittelles is a small, local musical society founded in 1972, specializing in accordion music with a varied repertoire including classical and traditional pieces. The organization is community-focused, engaging local audiences through concerts and events primarily in the Oron region of Switzerland. Their website reflects a well-maintained WordPress infrastructure with active event management and social media presence, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies highlights compliance gaps that should be addressed to meet modern data protection standards. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but the lack of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, serving its niche audience effectively.

The website blitzcms.localpoint.ch is a content publishing platform focused on technology, artificial intelligence, and customer success stories. It serves a niche audience interested in digital innovation and localpoint's technology offerings. The platform uses BlitzCMS as its content management system and incorporates modern web technologies such as jQuery, Bootstrap, and third-party analytics tools like Google Analytics and Microsoft Clarity. The site is mobile-optimized and presents content in German, targeting a Swiss audience. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks security headers and formal privacy or cookie policies. No contact or incident response information is provided, which limits trust and compliance indicators. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

K

KERUSSO · PRODUCTIONS

kerusso.ch

46

KERUSSO · PRODUCTIONS is a Swiss-based media production company specializing in social and cultural documentary projects. The website showcases various documentary works and projects, targeting a general audience interested in social issues and cultural storytelling. The company operates as a small-sized entity within the media industry, focusing on content creation and production services. The website is built on WordPress and integrates Google Analytics and Tag Manager for visitor tracking. While the site is professionally designed with good content quality and navigation, it lacks formal privacy and cookie policies, which are important for compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal security policies.

S

SRG Schweizerische Revisionsgesellschaft AG

srgch.ch

48

SRG Schweizerische Revisionsgesellschaft AG is a Swiss-based consortium of revision experts providing auditing and financial revision services across multiple regional offices in Switzerland. The company is registered with the Swiss revision supervisory authority, indicating regulatory compliance and professional standing. Their website targets small and medium-sized enterprises (KMU) seeking expert revision and auditing services with industry-specific knowledge. Technically, the website is built on WordPress using the Divi theme, incorporating modern analytics tools such as Google Analytics and Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and some privacy compliance measures in place, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and well-structured, supporting the company's market position as a regional leader in revision services.

V

Vale Treuhand GmbH

valetreuhand.ch

65

Vale Treuhand GmbH is a Swiss fiduciary company specializing in fully digital bookkeeping and tax services. The company targets small to medium-sized businesses and individuals seeking efficient, paperless financial administration solutions. Their service model emphasizes online document uploads, remote consultations via Microsoft Teams, and professional fiduciary expertise. The website reflects a modern digital infrastructure with partnerships such as TREUHAND | SUISSE and Bexio Silver-Partner status, positioning them as a niche player in the Swiss finance sector. Technically, the website is built on the Webnode CMS platform, leveraging AWS Cloudfront for content delivery and integrating Google Tag Manager and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good SEO practices and uses secure HTTPS connections. However, there is room for improvement in security headers and incident response transparency. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests moderate maturity in security governance. Overall, the website is professional, trustworthy, and well-aligned with its business objectives. Strategic enhancements in security policy transparency and incident response readiness would further strengthen its risk posture and client trust.

B

Büro im Flow

bueroimflow.ch

52

Büro im Flow is a Swiss-based fiduciary and financial consulting firm specializing in digital and personal services for private individuals and companies. The business emphasizes combining modern digital processes with personalized support to deliver efficient, reliable financial solutions including tax consulting, bookkeeping, and financial planning. The company operates under Buchhaltung WECHSLER and holds membership in SwissAccounting, enhancing its credibility in the Swiss market. The website is professionally designed using modern React and Next.js technologies, providing a good user experience with clear navigation and mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy and cookie information present but no active consent mechanism. Overall, the website and business present a trustworthy and professional image suitable for their target Swiss clientele.

Z

Z83

z83.ch

52

Z83 is a Swiss-based fiduciary and CFO partner specializing in supporting digital companies, startups, and SMEs with financial and HR processes. Their service offerings include accounting, CFO-as-a-Service, tax consulting, and audits, positioning them as a niche financial services provider in the Swiss market. The website is built on WordPress with Elementor and integrates modern technologies such as GSAP and Google Analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility and market positioning.

S

SoHa Treuhand AG

soha-treuhand.ch

61

SoHa Treuhand AG is a Swiss fiduciary and consulting firm based in Zurich, specializing in personalized accounting, payroll, tax consulting, and CFO as-a-Service offerings. The company emphasizes a blend of digital solutions and personal client relationships to optimize efficiency without sacrificing service quality. Their market position targets SMEs and business owners seeking modern yet personal fiduciary services. Technically, the website is built on Webflow with modern animation libraries like GSAP and uses Cloudflare Turnstile for spam protection on contact forms, indicating a good level of digital maturity. Security posture is solid with HTTPS and captcha integration, though security headers and formal policies are absent. Overall, the site is professional, trustworthy, and well-structured, but could improve privacy compliance and security transparency.

P

Pling

pling.ch

67

Pling is a Swiss-based service provider specializing in tailored, digitalized solutions for fiduciary services, administration, human resources, payroll accounting, and C-level consulting. The company targets businesses in Switzerland seeking efficient backoffice and personnel management services. The website is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies, indicating a moderate level of digital maturity. The site is mobile-optimized and presents a professional design with good user experience, although some navigation clarity and accessibility features could be improved. Security posture is strong with HTTPS enforced and security headers present, but lacks published security policies or incident response information. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy or terms of service pages. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

D

Digitron GmbH

digi-tron.ch

66

Digitron GmbH operates as a digital bookkeeping and accounting service provider based in Switzerland, targeting businesses seeking online financial management solutions. The website is built on the Wix platform, leveraging standard Wix technologies and scripts, and presents content primarily in German. The business model focuses on delivering complete bookkeeping services digitally, positioning itself as a niche player in the Swiss finance sector. Technically, the website demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place; however, the absence of security headers and privacy policy pages indicates room for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic enhancements in privacy compliance, contact transparency, and security best practices would strengthen trust and compliance.

R

Run my Accounts AG

runmyaccounts.ch

69

Run my Accounts AG is a Swiss-based company specializing in outsourced online bookkeeping services tailored for SMEs and startups. The company offers a blend of proprietary online bookkeeping software combined with personal fiduciary consulting, positioning itself as a visionary and digital-forward service provider. With a founding year of 2011 and multiple industry awards, the company holds a strong market position in the digital accounting sector in Switzerland and Germany through its subsidiary. Technically, the website is built on a modern WordPress platform with WooCommerce integration, enhanced by premium SEO and GDPR compliance plugins. The infrastructure includes Cloudflare for CDN and bot management, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security posture is robust with HTTPS enforced, cookie consent mechanisms, and standard security headers. No critical vulnerabilities or exposed sensitive data were detected. However, recommendations include implementing a Content-Security-Policy header and publishing a security.txt file to enhance transparency and incident response readiness. Overall, the website and business demonstrate high professionalism, trustworthiness, and compliance with GDPR. The risk profile is low, with strategic recommendations focusing on continuous security improvements and enhanced transparency in security policies.

R

Refina Treuhand AG

refina.ch

51

Refina Treuhand AG is a Swiss fiduciary company with over 30 years of experience, specializing in tax, auditing, fiduciary consulting, payroll administration, and accounting services. The website presents a professional image targeting businesses and individuals in Switzerland seeking trusted fiduciary services. The content is well-structured, primarily in German, and includes essential contact information and a cookie consent mechanism compliant with GDPR requirements. Technically, the site uses legacy jQuery 1.8.3, Google Analytics, and custom CSS, with basic mobile responsiveness and SEO optimization. Security posture is moderate, with no visible security headers and use of an outdated JavaScript library, but no critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is trustworthy and professionally maintained but could benefit from technical and security improvements.

H

Hugentobler & Bühler AG für Treuhand und Unternehmensberatung

hubtreuhand.ch

59

Hugentobler & Bühler AG is a Swiss-based medium-sized company specializing in fiduciary and business consulting services, including financial accounting, tax consulting, corporate consulting, succession planning, financial management, and personnel administration. With over 30 years of professional experience and a team of more than 20 specialists, the company holds a reputable position in the Swiss finance sector and is a member of the Swiss fiduciary association TREUHAND | SUISSE. The website reflects a professional and consistent brand image targeting Swiss businesses and private clients seeking trusted fiduciary services. Technically, the website is built on the Contao CMS platform and employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager. The site is mobile-optimized, SEO-friendly, and performs moderately well. However, it lacks a cookie consent mechanism despite using tracking scripts, which is a privacy compliance gap. Security-wise, the site uses HTTPS with anonymized IP tracking for analytics, but lacks explicit security headers and incident response information. Overall, the security posture is solid but could be improved by implementing cookie consent, security headers, and publishing security policies. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. No suspicious or malicious content was detected, and the site is safe for general audiences.

F

Fuchs + Partner Treuhand

fuchspartner.ch

55

Fuchs + Partner Treuhand is a Swiss-based professional services firm specializing in consulting and fiduciary services primarily for medical and dental practices, as well as SMEs across various industries. The company positions itself as a modern and experienced partner, offering timely and high-quality services with a focus on individual employee development. Their market position is that of a trusted, specialized fiduciary service provider in the healthcare and SME sectors in Switzerland, with offices in Interlaken and Bern. Technically, the website is built using modern JavaScript frameworks (likely Vue.js/Nuxt.js) and hosted on Netlify, indicating a contemporary digital infrastructure. The site is mobile-optimized and performs moderately well, with good SEO practices and structured data enhancing discoverability. Security-wise, the site uses HTTPS and Google Tag Manager for analytics but lacks some recommended security headers and does not provide explicit privacy or cookie policies, which are compliance gaps. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a professional and credible business presence with room for improvement in privacy compliance and security hardening.

D

Duss Treuhand GmbH

dusstreuhand.ch

61

Duss Treuhand GmbH is a small Swiss finance services company based in Zug, specializing in fiduciary services, tax consulting, auditing, and accounting. The company targets private individuals, SMEs, and larger enterprises, emphasizing personalized and reliable service. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Webflow, leveraging modern web technologies and providing a good user experience with mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and a cookie consent mechanism, but lacks advanced security headers and formal privacy or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

Bolleter GmbH

bolleter-gmbh.ch

45

Bolleter GmbH is a Swiss fiduciary company specializing in accounting, tax, payroll, personnel management, and company formation services primarily targeting small and medium-sized enterprises (KMU) and private clients in the Zürcher Unterland region. The website presents a professional image with clear service offerings and contact information, positioning the company as a regional service provider in fiduciary and related business services. Technically, the website is built on WordPress using the Divi theme, incorporating Google Analytics and Tag Manager for user tracking. The site is mobile-optimized and has good SEO practices but lacks some advanced accessibility features. Security-wise, the site uses HTTPS and avoids exposing sensitive data but does not implement important security headers or publish security policies, which could be improved. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and functional but would benefit from enhanced compliance and security measures.

A

Aebin Treuhand AG

aebin-treuhand.ch

57

Aebin Treuhand AG is a Swiss-based small finance and business consulting firm specializing in administration and advisory services for companies and private individuals. The company positions itself as a local trusted advisor in Pratteln, Switzerland, offering core services in financial and economic matters. The website reflects a professional and consistent brand image with clear contact details and affiliations to Swiss professional organizations, enhancing trustworthiness. Technically, the website is built using modern web technologies including Statamic CMS and Tailwind CSS, with a focus on performance and accessibility. The site is mobile-optimized and SEO-friendly, with no detected tracking or cookies, indicating a strong privacy posture. The absence of forms on the main page reduces attack surface, and the use of HTTPS ensures secure communications. From a security perspective, the site demonstrates good practices such as disabling automatic detection of emails and phone numbers to prevent scraping. However, explicit security headers are not visible in the HTML content and could be improved. No vulnerability disclosure or incident response information is provided, which could be enhanced to improve security transparency. Overall, the website is safe, professional, and trustworthy with a strong privacy focus. Strategic recommendations include adding explicit security headers, publishing a security policy and incident response contacts, and implementing a cookie consent mechanism if cookies are introduced in the future.

A

adminster ag

adminster.ch

51

adminster ag is a Swiss-based professional services firm specializing in accounting, tax, payroll, and consulting solutions tailored for small and medium-sized enterprises (KMUs) primarily in Zürich and Zug. The company positions itself as a trusted local partner offering comprehensive financial and administrative outsourcing services, including external CFO support and company formation assistance. Their market approach emphasizes personal, uncomplicated service with a strong focus on digital processes and client collaboration. The website reflects a mature digital presence with modern technologies such as WordPress, Breakdance builder, and SEO optimization tools, ensuring excellent user experience and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, although explicit security headers and incident response policies are not publicly detailed. Overall, the domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating.

S

Soeurs de Saint-Paul

soeurs-st-paul.ch

50

Soeurs de Saint-Paul is a well-established Catholic religious congregation founded in 1873 in Fribourg, Switzerland, with an international presence in several countries including Cameroon, Madagascar, Vietnam, and Burundi. The organization focuses on spiritual activities, charitable works, and community engagement, targeting religious communities and supporters. Their website reflects a professional and consistent brand image, providing multilingual content and clear contact information. Technically, the site is built on WordPress with modern JavaScript libraries and plugins, including Vue.js and Google reCAPTCHA for form security. While HTTPS is properly implemented, the site lacks explicit security headers and formal privacy and cookie policies, which are important for compliance and security posture. Analytics are managed via Google Analytics and Google Site Kit, indicating moderate user tracking. Overall, the website is functional, trustworthy, and well-positioned for its non-profit religious mission, but could improve in privacy compliance and security best practices.

M

media f

media-f.ch

52

media f is a regional Swiss company operating as both a printing house and an advertising agency, serving local businesses with content production and distribution services. The company is part of the Groupe Saint-Paul and maintains a medium-sized operation with multiple regional branches. Their website reflects a professional presence with clear service descriptions and a focus on regional market needs. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics for tracking. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks published privacy and cookie policies, which impacts compliance. Overall, the website is functional and professional but could improve in privacy transparency and security headers to enhance trust and compliance.

F

Fédération Romande Immobilière

fri.ch

50

Fédération Romande Immobilière (FRI) is a well-established association founded in 1925, representing property owners in the French-speaking region of Switzerland. The organization focuses on defending property owners' rights, improving political, economic, and legal conditions related to real estate, and encouraging home ownership. The website reflects a professional presence with clear business information, contact details, and regional partnerships with cantonal chambers and HEV Schweiz. Technically, the site is built on WordPress with modern plugins for SEO, GDPR compliance, and search functionality, supported by Google Analytics and Tag Manager for analytics and marketing. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy accessible via a report page. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

S

SVIT Schweiz

svit.ch

67

SVIT Schweiz is a well-established professional association serving real estate professionals in Switzerland. The website offers comprehensive information about their services, events, publications, and educational offerings, positioning them as a key player in the Swiss real estate sector. The site is professionally designed, mobile-optimized, and provides clear navigation and rich content tailored to its target audience. Technically, the website is built on Drupal 10 with modern libraries and integrates Google Tag Manager and Analytics with consent management, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are not publicly disclosed. Overall, the website demonstrates high business credibility and compliance with privacy regulations, making it a trustworthy resource for its audience.

U

USPI Suisse

uspi.ch

48

USPI Suisse is a professional association representing real estate professionals in the French-speaking region of Switzerland. It focuses on advocacy at the federal level, professional training, and federating cantonal associations. The website is well-structured, professionally designed, and provides comprehensive information about the organization's activities, news, and resources. The technical infrastructure is based on WordPress with modern plugins such as Elementor and Rank Math SEO, ensuring good SEO and user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the site reflects a mature digital presence appropriate for a professional association.

J

Journal Le Messager

lemessager.ch

52

Journal Le Messager is a regional news media outlet serving the Veveyse region in Switzerland, providing current news, sports, opinions, and event information. The website is built on Drupal CMS and uses a variety of modern web technologies including jQuery, Google Tag Manager, and advertising integrations with Google Ad Manager and local ad services. Mobile applications are available on both iOS and Android platforms, enhancing accessibility for users. The site demonstrates good content quality and professional design with clear navigation and relevant regional content. However, it lacks explicit privacy and cookie policies, which may impact GDPR compliance. Security posture is solid with HTTPS and common security headers, but no published security or incident response policies were found. WHOIS data confirms the legitimacy and consistency of the domain registration with the business's regional focus. Overall, the website is trustworthy and functional but could improve privacy compliance and transparency.

I

immobilier.ch

immobilier.ch

62

immobilier.ch is a well-established real estate portal serving the Swiss Romande region, offering a comprehensive platform for residential and commercial property listings, tenant services, and real estate news. The website demonstrates a strong market position as a trusted intermediary connecting buyers, renters, and agencies. Technically, the site employs modern web technologies including Google Tag Manager, Matomo analytics, and Google Maps API, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and consent management implemented, though some security headers could be improved. Privacy compliance is robust with clear policies and cookie consent mechanisms. Overall, the site presents a professional and trustworthy digital presence with no critical security or content safety concerns.

G

Groupe Saint-Paul

st-paul.ch

51

Groupe Saint-Paul is a well-established Swiss media and printing group with a history spanning over 150 years. It operates multiple regional newspapers and printing services, serving the Fribourg canton and surrounding areas. The group is owned by the Congrégation des Sœurs de Saint-Paul and employs around 300 staff plus freelance journalists and newspaper carriers. The website reflects a professional digital presence built on WordPress, featuring modern technologies such as Google reCAPTCHA and interactive maps. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS and form protections but could be improved with additional security headers and policies. Overall, the website is trustworthy and serves its regional audience effectively.

The website forward-publishing.io is currently inaccessible due to a Cloudflare error 1000 indicating that the DNS resolves to a prohibited IP address. This misconfiguration prevents access to any business content or services, rendering the site non-functional for users. The domain is registered to Netcetera AG, a Swiss company, with consistent WHOIS data and a domain age appropriate for a business founded in 2020. However, no privacy, cookie, or terms of service policies are present, and no contact information or business descriptions are available on the site. Technically, the site relies on Cloudflare for DNS and security, but the DNS misconfiguration severely impacts availability and security posture.

C

CH Media

chmediawerbung.ch

68

CH Media operates a comprehensive advertising portal targeting Swiss advertisers with cross-media offerings including newspapers, magazines, radio, TV, and digital platforms. The company has a strong market position as the largest private broadcaster group in Switzerland, reaching millions daily. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript and CSS technologies, including Lottie animations and Piwik PRO analytics, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency around security policies and incident response.

G

Gedenkzeit.ch

gedenkzeit.ch

59

Gedenkzeit.ch is a Swiss regional online platform specializing in obituary listings, memorial pages, and funeral service directories. It serves a German-speaking audience seeking to find or place death notices and related services. The website is well-branded with regional newspaper affiliations and is part of the CH Media group, indicating a solid market position in Swiss media. The platform offers search and submission functionalities for obituaries and a directory of funeral-related service providers.

W

Weltwoche Verlags AG

weltwoche.ch

64

Die Weltwoche is a Swiss media publishing company operating the website weltwoche.ch, delivering independent and critical journalism primarily in the German language. The company positions itself as a reputable media outlet with a focus on quality content for a German-speaking audience. The website leverages a WordPress CMS with advanced SEO tools such as Yoast SEO Premium and integrates multiple analytics platforms including Matomo and Chartbeat, indicating a mature digital infrastructure. Consent management is implemented via consentmanager.net, reflecting attention to privacy compliance. Security posture is solid with HTTPS enforced and no obvious vulnerabilities detected, although explicit security headers could be improved. The absence of a visible privacy policy or terms of service in the provided content is a notable gap. Overall, the website is professional, trustworthy, and well-structured, serving a media audience with journalistic content.

S

St. Galler Tagblatt

tagblatt.ch

66

St. Galler Tagblatt is a well-established regional news media organization serving the Ostschweiz region in Switzerland. Founded in 1839 and operated under the parent company CH Media, it offers comprehensive news coverage including sports, politics, economy, and entertainment. The website is professionally designed with consistent branding and targets a general audience interested in regional news. Technically, the site employs modern JavaScript frameworks, push notification services, and multiple advertising networks, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, includes essential security headers, and shows no signs of vulnerabilities or blocking mechanisms. Privacy compliance is evident through the presence of privacy and cookie policies with consent mechanisms. Overall, the site demonstrates a strong business credibility and a good security posture.

T

The Market Media AG

themarket.ch

70

The Market Media AG operates the website themarket.ch, a Swiss-based media platform specializing in financial market analysis, economic background reports, and opinion pieces. The site targets investors and business professionals seeking independent and noise-free insights into financial markets. The business model centers on subscription and content monetization, supported by a professional digital presence and integration with subscription management services like Piano.io. The company maintains a consistent brand image and a good market position within the Swiss financial media sector. Technically, the website employs modern web technologies including Vue.js for frontend rendering, Piano.io for identity and subscription management, and various analytics and consent management tools. The site is well-optimized for performance and mobile devices, with good SEO practices and structured data enhancing discoverability. Hosting details are not explicitly disclosed but the infrastructure appears robust and professionally managed. From a security perspective, the site enforces HTTPS with a Content Security Policy and uses a consent management platform to comply with privacy regulations. While no explicit security policy or incident response contacts are published, the site shows good security hygiene with no exposed sensitive data or vulnerable libraries detected. Advertising and tracking are present but managed with user consent, reflecting a balanced approach to monetization and privacy. Overall, themarket.ch presents a trustworthy and professional online presence with a strong focus on financial content. The site is secure, performant, and compliant with basic privacy requirements, though it could benefit from publishing clearer privacy and security policies. The risk profile is low, with no critical vulnerabilities or suspicious indicators found.

L

Le Temps

letemps.ch

61

Le Temps is a prominent Swiss media company delivering continuous news coverage, in-depth investigations, and multimedia content including podcasts and videos. The website targets a general audience interested in Swiss and global news, operating on a subscription and advertising business model. Technically, the site employs modern web technologies such as Turbo, StimulusJS, and integrates multiple analytics and advertising platforms, demonstrating a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses nonce-based script loading, and implements GDPR-compliant consent management, reflecting a strong security posture with room for improvement in explicit security policy disclosures. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable source of news content.

La Côte is a regional news media organization based in Switzerland, providing comprehensive coverage of local, national, and international news primarily in French. The website targets the general public interested in news from the Côte region and beyond. It maintains a professional online presence with consistent branding and a clear focus on journalism and media services. The business model revolves around news publishing and dissemination, positioning itself as a key regional media outlet. Technically, the website leverages modern web technologies including Nuxt.js and Bootstrap, ensuring a responsive and user-friendly experience across devices. The site implements cookie consent mechanisms and uses Google Tag Manager for analytics, reflecting a moderate level of digital maturity. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site benefits from HTTPS encryption and a cookie consent mechanism, but lacks several security headers and formal security policies. No vulnerability disclosure or incident response contacts are published, which could be improved to enhance trust and compliance. Overall, the security posture is adequate but could benefit from additional hardening and transparency. The domain registration data aligns well with the website's business claims, showing consistency and legitimacy. No WAF or blocking mechanisms interfere with content access, and no adult or explicit content is present, making the site safe for general audiences. Strategic recommendations include publishing privacy and terms of service policies, implementing security headers, and establishing a vulnerability disclosure process to strengthen compliance and security posture.

S

swissmom

swissmom.ch

60

swissmom.ch is a Swiss-based online informational portal specializing in topics related to pregnancy, childbirth, baby and child care. It serves parents, expecting mothers, and families with medically and practically oriented content, shopping tips, and community engagement features. The website is well-branded and targets a Swiss audience with content in German. Technically, the site uses modern web technologies including React and Material-UI, integrates Google Tag Manager for analytics, and employs ConsentManager.net for cookie consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses consent mechanisms but lacks visible security headers and published privacy or terms of service pages, which are areas for improvement. No blocking or WAF mechanisms were detected, and the domain registration data aligns well with the website's business focus, indicating legitimacy. Overall, swissmom.ch is a credible and professional content portal with moderate security and privacy compliance maturity.

M

Moneyhouse

kmutoday.ch

70

Moneyhouse operates as a Swiss business information and media platform affiliated with Neue Zürcher Zeitung AG, offering comprehensive company data, credit reports, and curated business content under the KMU+ brand. The website targets entrepreneurs, SMEs, and business professionals seeking reliable economic insights and company information. The business model relies on subscription memberships, premium content access, and corporate services including APIs and advertising. Technically, the website employs modern web technologies such as JavaScript, lazy loading, and consent management scripts to ensure performance and privacy compliance. The site is mobile-optimized with good SEO practices and a professional design, although some accessibility features could be enhanced. Analytics and advertising tools are used responsibly with user consent. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, the website presents a trustworthy and professional digital presence with good content quality and privacy compliance. Strategic improvements in security headers and published security policies would further enhance its security posture and user trust.

A

Aargauer Zeitung

aargauerzeitung.ch

60

Aargauer Zeitung is a well-established regional news media portal serving the Aargau region in Switzerland since 1996. It provides comprehensive news coverage including sports, politics, economy, and entertainment, targeting a regional audience. The website is professionally designed with consistent branding and good content quality, supported by a large media company, CH Media AG. The digital infrastructure leverages modern web technologies such as React, structured data, and integrates multiple advertising and analytics services to support its business model. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates a mature digital presence with moderate tracking and advertising typical for media outlets.

S

St-Paul Médias SA

laliberte.ch

63

La Liberté is a well-established regional media company based in Fribourg, Switzerland, operating since 1871 under the parent company St-Paul Médias SA. The website serves as a comprehensive news portal offering digital newspapers, podcasts, newsletters, and video content targeting the general public in the Romandy region. It maintains a strong market position as an independent media outlet with a professional and consistent brand presence. Technically, the site leverages modern frameworks such as React and Next.js, integrates advanced data visualization libraries like Highcharts and D3.js, and employs various marketing and analytics tools including Google Analytics, Facebook Pixel, and Wonderpush. The site is well-optimized for mobile and accessibility, with fast performance and good SEO practices. Security posture is strong with HTTPS, security headers, and consent management in place, though explicit security policies and incident response contacts are not published. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.