Switzerland security reports

B

Baukader Schweiz

baukader.ch

48

Baukader Schweiz is a well-established Swiss association representing approximately 4000 professionals in the construction industry, including supervisors, foremen, site managers, and master builders. The organization offers legal protection, networking opportunities, educational courses, events, and industry publications, positioning itself as a key player in the Swiss construction sector with a history spanning over 113 years. The website is professionally designed, multilingual, and provides comprehensive information and services tailored to its target audience of construction professionals across Switzerland.

V

VADIAN.NET AG

baugewerbe.ch

57

baugewerbe.ch is an established online platform operated by VADIAN.NET AG, serving as a comprehensive directory and marketplace for construction-related companies in Switzerland. The site offers extensive company profiles, job listings, industry news, and seminars, targeting construction professionals and businesses within the Swiss market. The platform positions itself as a key resource for SMEs in the construction sector, facilitating business visibility and networking. Technically, the website employs modern web technologies including Bootstrap, jQuery, FontAwesome, and Owl Carousel, supported by Cloudflare for CDN and security. The site is mobile-optimized with good SEO practices and moderate performance. Analytics are implemented via Google Tag Manager and Cloudflare Insights, enabling moderate user tracking. From a security perspective, the site enforces HTTPS and benefits from Cloudflare's security features. Security headers are present, and no obvious vulnerabilities or exposed sensitive data were detected. However, the absence of a visible cookie consent mechanism and dedicated security or incident response policies indicates room for improvement in privacy compliance and security transparency. Overall, the website demonstrates a solid business credibility and technical foundation with good content quality and user experience. Strategic enhancements in privacy compliance and security policy publication would further strengthen its trustworthiness and regulatory adherence.

I

Infopro Digital Schweiz GmbH

baublatt.ch

45

Baublatt.ch is a well-established Swiss construction industry media platform operated by Infopro Digital Schweiz GmbH. It offers comprehensive news, project information, company profiles, and industry reports targeted at construction professionals and stakeholders in Switzerland. The platform supports subscription services and advertising, positioning itself as a key information source in the Swiss construction sector. Technically, the website employs modern web technologies including Google Tag Manager, Parsely analytics, and Bootstrap framework, delivering a mobile-optimized and user-friendly experience. Security posture is solid with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly detailed. Overall, the domain registration aligns with the business identity, indicating legitimacy and trustworthiness. The website maintains a professional design and content quality, with moderate user tracking consistent with media industry standards.

B

BAUBIBLE AG

baubible.ch

47

The website www.baubible.ch is a small-scale site hosted on the Wix platform, primarily serving as an informational or placeholder site with minimal content and no visible business or contact information. The technical infrastructure relies on Wix's standard scripts and hosting, indicating a basic digital maturity level. Security posture is weak due to the absence of HTTPS enforcement details, security headers, and privacy or cookie policies. No incident response or vulnerability disclosure information is present, limiting trust and compliance assurances. Overall, the site presents a low-risk profile due to minimal content but lacks professional and security best practices, suggesting the need for significant improvements in privacy, security, and content quality.

The website schreiner-jobs.ch is currently inaccessible due to an active CAPTCHA security mechanism, likely implemented as a Web Application Firewall (WAF) or bot protection. This prevents access to any meaningful content or business information. The site appears to be related to job listings for carpenters (schreiner in German) in Switzerland, but no explicit business details, contact information, or policies are available for review. The technical infrastructure is minimal, with only JavaScript related to CAPTCHA delivery detected. Security posture is weak due to lack of visible HTTPS enforcement and security headers. Privacy and compliance documentation are absent. Overall, the site’s risk profile is elevated due to lack of transparency and accessibility, limiting trust and usability.

The website reinigungs-jobs.ch is currently inaccessible due to a CAPTCHA security mechanism implemented by DataDome, which acts as a Web Application Firewall (WAF) or bot protection. This prevents access to the actual website content, limiting the ability to analyze business details, technical infrastructure, and security posture. The domain name suggests a focus on cleaning job listings in Switzerland, but no content or metadata confirms this. The technical footprint is minimal, with only JavaScript related to CAPTCHA detected. No privacy, cookie, or terms of service policies are found, and no contact or business information is accessible. Security headers and SSL configuration details are unavailable due to the blocked content. Overall, the site appears to have poor content quality, minimal technical implementation, and low trustworthiness based on the accessible data.

The website hlk-jobs.ch appears to be a job listing or recruitment related site based in Switzerland, as inferred from the domain and URL. However, the entire website content is blocked by a CAPTCHA security mechanism provided by captcha-delivery.com, which prevents access to any meaningful content or metadata. This limits the ability to analyze the business model, services, or contact information. The site lacks visible privacy, cookie, or terms of service policies, and no contact details or social media links are present in the accessible content. Technically, the site uses a bot protection service but does not reveal any CMS, frameworks, or hosting details. Security posture cannot be fully assessed due to lack of accessible data and absence of security headers or SSL information. Overall, the site shows low transparency and minimal content, resulting in a low trust and security score.

J

jobchannel ag

handwerker-job.ch

59

handwerker-job.ch is a specialized Swiss job platform focusing on craftsmen and craftswomen employment opportunities across various trades and regions in Switzerland. Operated by jobchannel ag, it offers comprehensive job listings, salary data, labor market insights, and company profiles, targeting skilled tradespeople seeking employment. The platform integrates partner ratings and provides a user-friendly interface with filtering by trade and region. Technically, the website employs modern JavaScript libraries, Google Analytics, and Tag Manager for tracking, with responsive design and good SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though it lacks explicit security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving a niche market effectively.

The website gaertner-jobs.ch appears to be a job listing platform focused on gardener positions in Switzerland. However, the site content is inaccessible due to an active CAPTCHA security mechanism, which prevents full content analysis and user access. The lack of visible business information, contact details, and policies limits the ability to assess the company's market position or services offered. Technically, the site uses JavaScript and external CAPTCHA scripts but lacks visible security headers or HTTPS confirmation. The security posture is weak due to content blocking and absence of compliance indicators. Overall, the site presents a high risk for users due to limited transparency and accessibility. Strategic recommendations include removing or optimizing the CAPTCHA challenge for legitimate users, implementing HTTPS and security headers, and publishing clear privacy and contact information to improve trust and compliance.

The website baustellenanzeiger.ch is currently inaccessible due to a CAPTCHA security mechanism implemented by a Web Application Firewall (WAF), specifically a DataDome CAPTCHA. This prevents any meaningful extraction of content, metadata, or business information from the site. The domain appears to be privacy protected, which is common for small or personal websites, but no registrant details or business credentials are publicly available to verify legitimacy or business operations. The technical infrastructure is minimal with only JavaScript related to CAPTCHA detected, and no other technologies or CMS platforms identified. Security posture cannot be fully assessed due to lack of accessible content and headers. Overall, the site is protected against automated access, which limits analysis and reduces transparency.

J

jobchannel ag

baukader-jobs.ch

59

baukader-jobs.ch is a specialized online job platform focused on construction management and leadership roles within Switzerland. Operated by jobchannel ag, it serves a niche market by providing targeted job listings, career advice, salary information, and company profiles with integrated employer ratings. The platform is well-positioned in the Swiss real estate and construction recruitment sector, catering primarily to professionals seeking leadership positions in construction projects. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and integrates Google Tag Manager and Analytics for tracking and marketing purposes. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and filtering capabilities. The platform uses HTTPS with strong SSL configuration, ensuring secure data transmission. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data aligns well with the business profile, indicating legitimacy and consistency. Overall, baukader-jobs.ch is a professional, trustworthy job platform with a solid technical foundation and good privacy compliance. Strategic enhancements in security policy transparency and security headers would further strengthen its security posture and trustworthiness.

J

jobchannel ag

bauingenieur-jobs.ch

60

bauingenieur-jobs.ch is a specialized job platform operated by jobchannel ag, focusing on civil engineering job listings in Switzerland. It offers job search, company profiles, salary information, and career advice tailored to civil engineers. The platform integrates third-party company ratings from Kununu to enhance trust and user decision-making. The website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content for its target audience. Technically, it uses modern web technologies including JavaScript, jQuery, Bootstrap, and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and a published security policy. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, aligned with GDPR requirements. Overall, the domain registration and WHOIS data confirm legitimacy and consistency with the business claims, supporting a trustworthy online presence.

The website architekten-jobs.ch appears to be a platform related to job listings in the architecture sector, as inferred from the domain name. However, the actual website content is fully blocked by a CAPTCHA security mechanism, preventing access to any meaningful content or business information. The site lacks visible metadata, structured data, or contact details, which limits the ability to assess its business model or market position. Technically, the site uses JavaScript and external CAPTCHA services but does not reveal any CMS or hosting details. The security posture is weak due to the absence of visible HTTPS or security headers, and no privacy or cookie policies are present, indicating poor compliance with data protection standards. Overall, the site is inaccessible for detailed analysis and scores low on content quality, security, and privacy compliance.

B

BIO-TECHNOPARK® Schlieren-Zürich

bio-technopark.ch

47

BIO-TECHNOPARK® Schlieren-Zürich operates a nationally and internationally recognized science park focused on life sciences, providing modern laboratory, production, and office spaces to approximately 60 companies and 80 university research groups. The organization supports knowledge and technology transfer, company formation, and development through services such as coaching, consulting, and networking events. The website is professionally designed, multilingual, and provides relevant business and news content targeting life science companies, research institutions, and startups. Technically, the website is built on WordPress with multilingual support via WPML, uses jQuery 1.11.1, and integrates Google Analytics and Google Tag Manager for tracking. While the site is functional and moderately optimized for performance and SEO, it uses an outdated jQuery version that may pose security risks. Mobile optimization and accessibility are basic but adequate. No explicit cookie consent mechanism or comprehensive privacy compliance features are detected. From a security perspective, the site uses HTTPS (implied), but no security headers were detected in the HTML content. There is no visible security policy or incident response contact information. The outdated jQuery library is a notable vulnerability. No exposed sensitive data or critical security issues were found. Privacy compliance is basic, with a privacy policy page present but no cookie consent banner. Overall, the website presents a professional and trustworthy image with good business credibility and content quality. However, improvements in security practices, privacy compliance, and technical modernization are recommended to enhance the security posture and user trust.

V

VCM Schweiz

creditmanager.ch

48

VCM Schweiz is a Swiss non-profit association dedicated to advancing and professionalizing credit management within Swiss companies. The organization offers education, networking opportunities, standards, and publications to credit management professionals, positioning itself as a national platform with international connections. The website is well-structured, professionally designed, and targets credit managers and related professionals in Switzerland. Technically, the site is built on WordPress with WooCommerce and modern plugins, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, though it lacks visible security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy business entity.

P

Publicontext AG

investrends.ch

56

Investrends.ch is a Swiss-based professional news platform operated by Publicontext AG, targeting professional investors with up-to-date news and trends in asset management and finance. The website offers a variety of services including news articles, newsletters, event listings, advertorials, and a job board focused on the investment sector. It maintains a strong market position within the niche of Swiss financial news for professionals, supported by partnerships with reputable financial institutions and asset managers. Technically, the site is built on the ProcessWire CMS and utilizes a range of JavaScript libraries and analytics tools such as Matomo and Google Analytics, with privacy-conscious configurations like IP anonymization and cookie consent mechanisms. The site is mobile-optimized and features good SEO practices, though some technical debt is noted with the use of an outdated jQuery version and missing security headers. From a security perspective, the site enforces HTTPS and implements cookie consent and email obfuscation to protect user data. However, it lacks explicit security headers and uses an outdated JavaScript library, which could pose risks. No incident response or security policy information is publicly available. The WHOIS data confirms the legitimacy of the domain ownership by Publicontext AG in Switzerland, consistent with the website's business claims. Overall, investrends.ch presents a professional and trustworthy platform for its target audience, with good privacy compliance and business credibility. Security improvements are recommended to enhance protection and trust further.

F

Finews AG

finews.ch

61

finews.ch is a leading Swiss financial news portal operated by Finews AG, providing continuously updated news and insights for professionals in the finance industry. The website targets finance professionals, investors, and industry stakeholders with high-quality journalism, sponsored content, and multimedia offerings such as podcasts and videos. The site demonstrates a mature digital presence with a modern Joomla CMS infrastructure, integration of advanced analytics (Matomo and Google Analytics), and a consent management platform ensuring GDPR compliance. Security posture is strong with HTTPS enforcement and privacy-conscious tracking, though there is room for improvement in explicit security policies and vulnerability disclosure. Overall, finews.ch presents a professional, trustworthy, and well-branded platform with extensive social media engagement and advertising partnerships.

J

jobchannel ag

emploi-bancassurance.ch

56

emploi-bancassurance.ch is a specialized Swiss job platform focusing on bancassurance employment opportunities, operated by jobchannel ag. It offers a comprehensive range of services including job listings, salary calculators, employer profiles, and career advice tailored to banking and insurance sectors. The platform targets job seekers and employers within Switzerland's financial services industry, positioning itself as a niche leader with a professional and user-friendly interface. Technically, the site employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or suspicious elements were detected, and the domain registration aligns well with the business identity, supporting legitimacy. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and effective platform for its target audience.

J

jobchannel ag

versicherungsjobs-schweiz.ch

61

versicherungsjobs-schweiz.ch is a specialized online job platform focused on the Swiss insurance industry, operated by jobchannel ag. It provides comprehensive job listings, career advice, and company profiles tailored to insurance professionals and job seekers in Switzerland. The platform integrates trusted partner services such as Kununu for employer reviews, enhancing its market position as a niche leader in insurance recruitment. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is well-optimized for SEO and mobile devices, with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses secure forms with validation, though it lacks explicit security headers and a published security policy. Privacy compliance is addressed with a clear privacy policy, cookie consent mechanism, and GDPR considerations. Overall, the website demonstrates a solid security posture and business credibility with no critical vulnerabilities detected.

The website emploi-commercial.ch is currently inaccessible due to a CAPTCHA challenge implemented by a bot protection service (captcha-delivery.com). This security mechanism blocks automated access and prevents retrieval of actual website content, metadata, or business information. Consequently, no meaningful business description, contact details, or compliance policies are available for analysis. The site appears to be minimal or placeholder content behind this WAF. From a technical perspective, the site uses JavaScript and external CAPTCHA scripts but lacks visible SEO metadata, structured data, or security headers in the provided HTML snippet. The performance and user experience cannot be fully assessed but are likely poor due to the blocking mechanism. Security posture is weak or unknown due to lack of accessible data. No HTTPS or SSL information was provided, and no privacy or cookie policies were found. The presence of a CAPTCHA indicates some level of bot protection but also limits transparency and accessibility. Overall, the site currently presents a high risk for users and analysts due to inaccessibility and lack of visible compliance or security information. Strategic recommendations include removing or adjusting the WAF to allow legitimate access, implementing standard security headers and HTTPS, and publishing clear privacy and cookie policies to improve trust and compliance.

J

jobchannel ag

verwaltungs-jobs.ch

62

verwaltungs-jobs.ch is a specialized Swiss job platform focusing on public administration positions across Switzerland. Operated by jobchannel ag, it offers job listings, subscription services, company profiles, and career advice tailored to the public sector. The platform targets job seekers interested in government and administrative roles, providing a comprehensive and localized job search experience. Technically, the website employs modern web technologies including JavaScript, Bootstrap, and integrates Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data, though it lacks some advanced security headers and a public security policy. Overall, the website is legitimate, professional, and trustworthy with no detected security or privacy red flags.

J

jobchannel ag

kv-stelle.ch

62

kv-stelle.ch is a specialized Swiss job board focused on kaufmännisch-betriebswirtschaftliche (commercial/business administration) positions. It operates under jobchannel ag and partners with the Kaufmännischer Verband Schweiz, providing a comprehensive platform for job seekers and employers in this niche. The site offers job listings, alerts, career advice, and salary recommendations, targeting professionals and companies in Switzerland's commercial sector. Technically, the website employs modern web technologies including JavaScript, Bootstrap, and Google Analytics, with responsive design and good SEO practices. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, including a detailed privacy policy and cookie consent. However, there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and well-positioned in its market niche.

S

SVIA / SSIE / SSII

svia-ssie-ssii.ch

51

The website represents the Schweizerischer Verein für Informatik in der Ausbildung (SVIA), a Swiss association dedicated to promoting informatics education in general schools. It serves as a platform and network for informatics teachers, offering resources such as newsletters, events, educational materials, and partnerships. The organization positions itself as a key stakeholder in the Swiss education sector for informatics, with a clear focus on supporting educators and curriculum development. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress using well-known plugins like Yoast SEO, Contact Form 7, and Complianz GDPR for privacy compliance. It employs Google Tag Manager for analytics and tracking. The site is mobile-optimized and performs moderately well, though some improvements in accessibility and security headers could enhance its posture. The presence of cookie consent and a comprehensive privacy policy indicates good compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration and implements nonce tokens in forms to prevent CSRF attacks. However, explicit security policies and incident response contacts are not published, which could be improved. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data aligns well with the website's claims, showing consistent registration details and domain age appropriate for the organization's history. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its target audience of informatics educators in Switzerland. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contact information to further strengthen trust and security posture.

S

SAQ Swiss Association for Quality

saq.ch

48

SAQ Swiss Association for Quality is a well-established Swiss non-profit association specializing in person certification, quality management, and business excellence. With over 1300 members, it holds a leading position in Switzerland's quality sector, offering a broad range of certification programs and training services. The website reflects a mature digital presence with multilingual support and comprehensive content tailored to professionals and organizations seeking quality certifications. Technically, the site uses a custom CMS (verbands.net) with modern JavaScript libraries and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and public security policies could enhance trust. Overall, the domain registration and WHOIS data align well with the organization's claims, supporting high legitimacy and trustworthiness.

J

jobchannel

jobchannel.ch

54

jobchannel is a leading Swiss provider specializing in targeted recruitment of professionals through a network of over 200 specialized job and professional platforms. The company boasts a significant market presence with approximately 4 million monthly page views and a strong SEO footprint. Their services include job advertising, SEO/SEA management, and data-driven social media recruiting, catering primarily to companies seeking qualified candidates in Switzerland. Technically, the website is built on WordPress with modern web technologies and integrates Google services for analytics and bot protection. The site is well-structured, mobile-optimized, and professionally designed, though it lacks explicit privacy and cookie policies. Security posture is good with HTTPS enforced and reCAPTCHA implemented, but the absence of security headers and incident response contacts are areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website der-landschaftsgaertner.ch represents a small local landscaping and gardening service provider named Jngold Gartenbau based in Kestenholz, Switzerland. The site offers basic information about the business, including contact details and a gallery of images related to their services. The business appears to target local customers seeking garden maintenance and landscaping solutions. The website is minimalistic with limited content and no advanced features such as forms or social media integration. From a technical perspective, the site uses basic web technologies including JavaScript and jQuery, with Google Fonts for typography. There is no evidence of a CMS or advanced frameworks. Performance and mobile optimization are basic but functional. SEO and accessibility features are minimal. No analytics or tracking tools are detected, indicating a low level of digital maturity. Security posture is weak due to the absence of visible security headers and no confirmed HTTPS/SSL status from the provided data. There are no privacy or cookie policies, which is a compliance gap especially under GDPR. No incident response or security contact information is provided. The WHOIS data is consistent with the business location and type, supporting legitimacy. Overall, the site is functional but lacks modern security and privacy best practices. The overall risk is moderate given the lack of security and privacy policies, but no critical vulnerabilities or malicious indicators are found. Strategic improvements in security headers, SSL implementation, and compliance documentation are recommended to enhance trust and protect user data.

W

wega Informatik AG

wega-it.com

57

wega Informatik AG is a Swiss-based medium-sized company specializing in life science and IT consulting services. The company offers a range of informatics solutions including laboratory information management systems, clinical development IT, and computer systems validation. Positioned as an established niche player, they serve life science and IT companies by bridging business and IT needs. The website is professionally designed, multilingual, and optimized for SEO and mobile use, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins for SEO, cookie consent, and analytics, indicating a well-maintained infrastructure. Security measures include HTTPS, Wordfence firewall, and Google reCAPTCHA, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy, though the website content and business information appear trustworthy. Overall, the site scores well on content quality, technical implementation, security, and privacy compliance, with minor credibility concerns due to WHOIS data gaps.

S

Schaub Baumpflege AG

schaub-baumpflege.ch

61

Schaub Baumpflege AG is a Swiss-based small business specializing in professional tree care services including crown cutting, securing, stand safety, stump milling, pest control, and specialized arboriculture solutions. The company also offers training courses and promotes careers in the tree care sector, targeting property owners, construction sites, and green industry professionals within Switzerland. The website is built on Joomla CMS with modern frameworks like Bootstrap and Helix Ultimate, integrating Google Analytics and Tag Manager for visitor tracking. The site is mobile optimized and presents a professional design with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and CSRF tokens present, but lacks important security headers and a formal security or privacy policy. GDPR compliance is incomplete due to missing privacy and cookie policies. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security hardening.

M

msg Suisse AG

msg-systems.ch

64

msg Suisse AG is a prominent IT consulting and software engineering company based in Switzerland, specializing in intelligent IT and industry-specific solutions primarily for banking, insurance, and the public sector. As part of the larger msg group with over 10,000 employees, it holds a strong market position supported by a broad portfolio of services including AI, cloud solutions, SAP consulting, and managed services. The website reflects a mature, professional business with clear branding and comprehensive service offerings tailored to Swiss enterprises. Technically, the website employs modern web technologies including Google Custom Search and Usercentrics for consent management, ensuring GDPR compliance and user privacy. The site is well-optimized for mobile and accessibility, with good SEO practices and a moderate performance profile. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. From a security perspective, the site uses HTTPS with strong SSL configuration and integrates a consent management platform, indicating a good baseline security posture. The absence of exposed sensitive data and vulnerabilities is positive, but the lack of visible security policies and vulnerability disclosure mechanisms suggests room for improvement in transparency and incident readiness. Overall, the domain WHOIS data is unavailable publicly, likely due to privacy protection, which is common for enterprises of this size. The website content and corporate information strongly support legitimacy and trustworthiness. The site is safe for general audiences, with no adult or questionable content detected.

P

Prevo-System AG

prevo.ch

58

Prevo-System AG is a Swiss-based software company specializing in providing the PAKT management system tailored for collective life insurance providers. The company is a joint venture involving msg systems ag, Baloise, and Helvetia Versicherungen, positioning it strongly within the Swiss insurance software market. Their product PAKT supports the entire lifecycle of collective life insurance administration, including BVG and over-obligatory occupational benefits, offering a comprehensive and integrated solution for insurers. The website reflects a professional and consistent brand image with clear business focus and customer testimonials from reputable insurance companies, indicating a solid market position. Technically, the website is built on Joomla CMS with modern frameworks such as Bootstrap and jQuery, enhanced by custom MSG group scripts and third-party integrations like hCaptcha for bot protection. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security measures include HTTPS enforcement and CSRF tokens, though some security headers are missing. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. The security posture is generally strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. The domain registration aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, Prevo-System AG presents a credible, professional, and secure online presence suitable for its target audience in the Swiss insurance sector. Strategic enhancements in security transparency and incident response communication would further strengthen trust and compliance.

R

RhySearch

rhysearch.ch

45

RhySearch is a Swiss innovation hub specializing in research and development in optical coating, ultra-precision manufacturing, and digital innovation. The organization serves as a bridge between industry and research institutions, fostering collaboration and delivering applied innovation services. The website reflects a professional and well-structured digital presence, supporting multiple languages and providing comprehensive information about their labs, projects, and news updates. Technically, the site is built on TYPO3 CMS and integrates Google Analytics and Tag Manager for user tracking, indicating a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses secure forms but lacks explicit security policies and incident response information, which could be improved. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact channels, supporting its credibility as a research organization.

C

CAOS Ltd.

zitadel.ch

72

ZITADEL, operated by CAOS Ltd., is a modern identity infrastructure platform designed to simplify identity management for developers and enterprises. The company offers a multi-tenant, API-first platform that supports authentication, authorization, passwordless login, and role-based access control. Positioned as a bridge between open source and enterprise solutions, ZITADEL targets developers and businesses seeking secure and extensible identity management solutions. The platform is well-regarded in the developer community, evidenced by a strong GitHub presence and active community engagement on Discord and social media. Technically, the website is built using modern frameworks such as Next.js and React, hosted on Vercel, and integrates analytics tools like PostHog and HubSpot for marketing and user engagement. The site is fast, mobile-optimized, and accessible, with comprehensive documentation and developer resources. Security best practices are observed, including HTTPS enforcement, multi-factor authentication, and audit trails, although DNSSEC is not enabled, representing a minor security gap. From a security posture perspective, ZITADEL demonstrates maturity with ISO 27001 certification and GDPR compliance. The website includes clear privacy and cookie policies with consent mechanisms. However, there is no publicly visible security.txt or explicit incident response contact information, which could be improved. The WHOIS data is consistent with the business identity, showing no privacy protection and domain registration dating back to 2017, appropriate for the company's founding in 2020. Overall, ZITADEL presents a professional, trustworthy, and technically sound platform with strong compliance and security foundations. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing transparency around incident response to further strengthen trust and security posture.

R

Resilyou GmbH

resilyou.com

61

Resilyou GmbH operates a website focused on resilience training and crisis management through a free app, targeting a general audience interested in mental wellness. The company is based in St. Gallen, Switzerland, and presents a professional online presence built on the Wix platform. The website content is well-structured and relevant to its business purpose, though it lacks comprehensive privacy and cookie policies. Technically, the site uses Wix's Thunderbolt framework and related technologies, offering moderate performance and good mobile optimization. Security posture is basic, with HTTPS implied but no explicit security headers or incident response information found. The absence of WHOIS data raises concerns about domain registration legitimacy, though the active and professional website suggests legitimate business operations. Overall, the site scores moderately in content quality, technical implementation, and business credibility but falls short in privacy compliance and security best practices.

M

MycoSolutions AG

mycosolutions.ch

57

MycoSolutions AG is a Swiss company specializing in the development and production of fungal formulations for natural and biological plant protection. Their website highlights applied research, pilot field tests, and a product portfolio including granulate and liquid forms with Swiss strains. The company targets agricultural producers, gardeners, and distributors seeking sustainable alternatives to chemical pesticides. The site is professionally designed, multilingual, and includes customer testimonials and partner logos, indicating a credible market position in the niche of natural plant protection. Technically, the website is built on WordPress with modern plugins such as WPBakery, Slider Revolution, and WPML for multilingual support. Google Tag Manager and Google Analytics are used for analytics, with a cookie consent mechanism in place, reflecting good digital maturity. Performance is moderate with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and no exposed sensitive data. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are found on the site. Privacy compliance is strong, with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the website presents a low-risk profile with strong business credibility and good compliance. Recommendations include enhancing security headers, adding explicit security policies, and improving accessibility to further strengthen the security and user experience.

K

Keller Schneider Patent- und Markenanwälte AG

kellerschneider.com

45

Keller Schneider Patent- und Markenanwälte AG is a well-established international law firm specializing in intellectual property, including patents and trademarks. Founded in 1957, the firm operates multiple offices in Switzerland and Germany and maintains partnerships in over 80 countries, positioning itself as a trusted specialist in IP law. Their services cater primarily to businesses, startups, and investors seeking robust protection and strategic advice for their intellectual property assets. The website reflects a professional and consistent brand image with detailed contact information and service offerings. Technically, the website is built on WordPress with Bootstrap and jQuery, ensuring mobile responsiveness and a modern user experience. Google Analytics is integrated for visitor tracking, and the site uses HTTPS, indicating a secure connection. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site shows a good baseline with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a notable anomaly, which slightly impacts trustworthiness but does not detract from the professional presentation and detailed contact information provided. Overall, the site demonstrates a solid security posture but would benefit from enhanced privacy compliance and security policy disclosures. Strategically, the firm should focus on improving transparency around security and privacy policies, implementing cookie consent, and publishing incident response contacts to strengthen trust and compliance. These steps will support their market position as a reputable and secure provider of intellectual property legal services.

R

Raumpioniere

raumpioniereai.com

64

Raumpioniere is a Swiss-based company specializing in sustainable real estate development, focusing on unlocking the potential of properties for future-oriented growth and value enhancement. The website targets property owners and investors interested in sustainable development solutions within the Swiss market. The company positions itself as a niche service provider offering consulting and strategic services in real estate sustainability. Technically, the website employs modern frontend frameworks such as Nuxt.js and Tailwind CSS, integrating marketing and analytics tools like HubSpot, Google Analytics, and LinkedIn Insight. The site is mobile-optimized and presents a professional design with good user experience and SEO practices. Security-wise, the website uses HTTPS with IP anonymization in analytics but lacks important security headers and explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. No contact information or incident response channels are explicitly provided, limiting direct communication avenues for security or business inquiries. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the website's security posture and user trust.

R

RSS Medienschule

rss-medienschule.ch

62

RSS Medienschule is a Swiss-based media education institution offering practical training in radio, video, and social media production. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The site is well-designed with good mobile optimization and basic SEO features, targeting German-speaking audiences interested in media education. Security posture is moderate with HTTPS enabled and some security hardening scripts in place, but lacks comprehensive security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanisms. Business credibility is supported by consistent branding and legitimate WHOIS registration data matching the Swiss educational focus. Overall, the website is functional and professional but would benefit from enhanced privacy and security practices.

wölkli Mail is a Swiss-based secure email service provider offering encrypted email accounts hosted in Switzerland with a strong emphasis on privacy and security. The service targets individuals and businesses seeking secure communication solutions, leveraging ISO/IEC 27001 certification and Swiss data protection standards. The business operates with a subscription model offering free and PRO tiers, accessible via webmail and email clients. The company is relatively young, founded around 2019, and owned by oriented.net LLC, which also provides hosting services. Technically, the website employs modern SSL encryption via Let's Encrypt and uses OpenBSD as part of its infrastructure, indicating a security-conscious environment. The site is moderately performant, mobile-optimized, and uses Matomo analytics for privacy-aware user tracking. However, some technical improvements such as enabling DNSSEC and adding security headers could enhance security posture further. From a security perspective, the company demonstrates strong practices including server-side email encryption and ISO 27001 compliance. The domain registration is consistent and trustworthy, with clientTransferProhibited status preventing unauthorized transfers. However, the absence of publicly available privacy and cookie policies, as well as lack of incident response or vulnerability disclosure information, represents compliance gaps. No critical vulnerabilities or suspicious content were detected. Overall, wölkli Mail presents a trustworthy and professional secure email service with solid technical and security foundations. Strategic improvements in privacy compliance documentation and DNS security would further strengthen its market position and user trust.

O

oriented.net LLC

woelkli.com

69

woelkli.com is a Swiss-based secure cloud storage service provider offering encrypted Nextcloud hosting tailored for individuals and businesses seeking privacy and data sovereignty. The company emphasizes ISO/IEC 27001 certification and hosts data in Switzerland using renewable energy-powered data centers. The website is professionally designed, multilingual, and provides clear information about its services, including file synchronization, calendar, and contact management. The business operates under oriented.net LLC, established in 2014, aligning with the domain age and registration data. Technically, the site uses modern web technologies with JavaScript and CSS, and employs Matomo analytics for privacy-conscious user tracking. Security practices include 256-bit SSL encryption and server-side encryption, though DNSSEC is not enabled and security headers are missing. Privacy compliance is limited by the absence of explicit privacy and cookie policies. Contact is available via a contact form, but no direct emails or phone numbers are published. Overall, the website is trustworthy, secure, and professionally maintained with room for improvement in privacy disclosures and security headers.

PiHost.ch, operated by oriented.net GmbH, is a specialized hosting provider offering dedicated Raspberry Pi 5 Linux servers located in Switzerland. The company emphasizes high performance with NVMe SSD storage, IPv4/IPv6 connectivity, and a secure ISO 27001 certified data centre powered by 100% renewable energy. Their services target privacy-conscious individuals and businesses seeking reliable and eco-friendly hosting solutions. The website is professionally designed with clear navigation and good content relevance, supporting multiple Linux distributions and advanced use cases such as Kubernetes clusters and Nextcloud hosting. Technically, the site uses modern web technologies including Semantic UI, Swiper.js for UI components, and Matomo for privacy-focused analytics. The hosting infrastructure is based in Switzerland with strong security certifications, although explicit security headers and privacy policies are missing. The site implements CSRF protection in forms and avoids exposing sensitive data, reflecting a moderate security posture. Security-wise, the company demonstrates commitment through ISO 27001 and ISAE 3402 certifications and regular audits. However, the absence of published privacy and cookie policies and lack of incident response contacts represent compliance gaps. No WAF or blocking mechanisms were detected, and no vulnerabilities or suspicious content were found. Overall, PiHost.ch presents a trustworthy and niche hosting service with good technical maturity and business credibility. Strategic improvements in privacy compliance and security header implementation would enhance their security posture and regulatory adherence.

O

OpenOlat

openolat.com

68

OpenOlat is a Swiss-based learning management system (LMS) platform offering versatile, intuitive, and reliable solutions for knowledge transfer, eTesting, and administration. The website presents a professional and well-structured digital presence built on WordPress, leveraging modern plugins such as WPBakery Page Builder and Real Cookie Banner Pro for compliance and user experience. The platform targets educational institutions and organizations seeking open-source LMS solutions. Security posture is solid with HTTPS enforcement, privacy compliance, and anonymized analytics, though some gaps exist in published security policies and incident response information. The absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy, warranting further verification. Overall, the website demonstrates a mature digital infrastructure with good content quality and compliance, suitable for its educational market niche.

P

Pädagogische Hochschule St.Gallen

phsg-forschungsbericht.ch

53

Pädagogische Hochschule St.Gallen operates an academic research report website focused on educational research and scientific discourse. The site serves as a platform for publishing research reports and supporting scientific activities primarily targeting academic researchers and educational professionals in the St.Gallen region of Switzerland. The institution positions itself as a regional educational research entity with a medium organizational size. Technically, the website is built on WordPress using Elementor and several plugins such as Yoast SEO and Complianz GDPR for privacy compliance. It employs modern web technologies including jQuery, Vue.js, and Google Tag Manager for analytics and tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website enforces HTTPS with excellent SSL configuration and implements cookie consent mechanisms aligned with GDPR. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a professional and trustworthy digital presence for an educational institution, with good compliance to privacy regulations and moderate technical maturity. Strategic improvements in security policy transparency and contact information availability could enhance trust and compliance further.

P

Pädagogische Hochschule St.Gallen

phsg-jahresbericht.ch

53

The website 'PHSG Jahresbericht 2024' serves as the official annual report portal for the Pädagogische Hochschule St.Gallen, a regional educational institution in Switzerland specializing in teacher education, research, and continuing education. The site targets students, educators, researchers, and stakeholders interested in educational developments and institutional performance. It provides structured content including editorial focus, thematic areas, chronicle, and detailed reports on education, research, and services. Technically, the website is built on WordPress CMS using the Elementor page builder and Jet plugins, leveraging modern JavaScript libraries such as Vue.js and ApexCharts for interactive content. The site employs HTTPS with a good SSL configuration and integrates Google Tag Manager for analytics with IP anonymization, reflecting a moderate level of digital maturity and performance. Mobile optimization and SEO practices are adequately implemented. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism compliant with GDPR. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web threats. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear cookie policies and consent management. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for an educational institution. It maintains transparency in domain registration and aligns with its stated business purpose. Recommendations include enhancing security headers, improving accessibility features, and maintaining up-to-date software to sustain security and compliance.

Pädagogische Hochschule St.Gallen (PHSG) operates a professional and regionally focused academic job portal targeting prospective employees and students in the education sector. The institution offers teaching, research, and continuing education services, positioning itself as a medium-sized educational entity in Switzerland. The website content is well-structured, primarily in German, and provides clear contact information and social media presence. Technically, the site uses modern JavaScript libraries such as jQuery and jQuery UI, runs on Drupal CMS, and integrates Matomo analytics for privacy-conscious visitor tracking. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and privacy policy documentation are missing. Overall, the site is trustworthy and professionally maintained, suitable for its academic audience.

A

aprendo - Digitale Kompetenz

aprendo.ch

58

The website aprendo.ch serves as a digital competence training platform targeted at teachers and school leaders in the canton of St. Gallen, Switzerland. It offers educational services focused on strengthening digital skills within the education sector. The site uses modern frontend technologies such as React and JavaScript modules, indicating a contemporary technical infrastructure. However, the content is minimal and primarily informational without interactive elements or extensive content. Security posture is weak due to the absence of security headers, privacy policies, and contact information, which limits trust and compliance with data protection regulations. Overall, the site appears functional but lacks critical security and privacy features necessary for a professional educational platform. Strategic improvements in security, privacy compliance, and contact transparency are recommended to enhance trust and regulatory adherence.

R

Roche

roche.com

71

Roche is a globally recognized healthcare company specializing in innovative medicines and diagnostic tests. Founded in 1896 in Basel, Switzerland, it holds a leading market position in the pharmaceutical and diagnostics sectors. The website reflects a mature enterprise with a clear focus on healthcare professionals, patients, and partners. The digital infrastructure leverages modern technologies such as React and Gatsby, ensuring fast performance and excellent mobile optimization. Security measures are robust, including HTTPS enforcement and comprehensive security headers, complemented by ISO 27001 certification. Privacy policies and GDPR compliance are well addressed, with clear contact points for data protection and incident response. Despite the absence of WHOIS data, the website's content and external trust signals strongly support its legitimacy. Overall, Roche's digital presence is professional, secure, and user-friendly, aligning with its stature as a healthcare industry leader.

Oriented.net is a Swiss-based managed services provider specializing in open-source software services and Linux server management. The company operates from a self-owned data centre in Switzerland and holds ISO 27001 certification, underscoring its commitment to information security. Their service portfolio includes various server types such as ARM VPS, GPU servers, physical servers, and managed security services like web application firewalls. The website targets businesses seeking reliable and secure Linux-based hosting and managed services. Technically, the site employs modern JavaScript libraries and Matomo analytics for privacy-conscious tracking, hosted on their own infrastructure. However, the site lacks visible privacy and cookie policies, and no contact information is directly available in the provided HTML content. Security posture is solid due to ISO certification and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and contact transparency.

B

Berufs- und Weiterbildungszentrum Buchs Sargans

bzbs.ch

44

Berufs- und Weiterbildungszentrum Buchs Sargans (BZBS) is a regional educational institution in Switzerland providing a wide range of vocational and continuing education programs across multiple locations including Buchs, Sargans, and Salez. The institution targets students and professionals seeking foundational and advanced training in various fields such as business, technology, agriculture, and languages. BZBS maintains a strong market position as a trusted education provider in the canton of St. Gallen with a comprehensive portfolio of courses and services.

P

Pädagogische Hochschule St.Gallen

phsg.ch

52

Pädagogische Hochschule St.Gallen is a reputable educational institution in Switzerland focused on teacher education, research, and professional development. The website clearly targets educators, students, and educational institutions, offering comprehensive services and programs. The institution holds a strong regional and national presence with a professional and consistent online brand. Technically, the website is built on Drupal 11, leveraging modern web technologies and includes user-friendly features such as responsive design and accessibility considerations. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website reflects a trustworthy and professional organization with no signs of malicious activity or content safety concerns.

G

GBS St.Gallen

gbssg.ch

58

GBS St.Gallen is an educational institution based in Switzerland offering a wide range of vocational and industrial training programs, including courses and federally recognized higher vocational education. The website targets students and professionals seeking education in approximately 50 commercial and industrial professions. Technically, the site is built on TYPO3 CMS with Bootstrap 4.6.2 for frontend styling, indicating a modern and maintainable infrastructure. The website is moderately optimized for mobile devices and provides a good user experience with clear navigation and relevant content. However, there is a lack of published privacy and cookie policies, and no visible security headers or incident response information, which are critical for compliance and security posture. The domain registration details are consistent with the institution's claims, supporting its legitimacy. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security practices.