Switzerland security reports

B

bio.inspecta AG

bio-inspecta.ch

59

bio.inspecta AG is a Swiss market leader specializing in certification and auditing services for farms and companies in the food, organic, cosmetics, aquaculture, and climate sectors. With over 25 years of experience, the company offers comprehensive certification services aligned with statutory regulations and private labels. Their business model integrates traditional auditing with innovative digital tools such as WORLD-TRACE for supply chain transparency. The company operates primarily in Switzerland with international reach and is part of the EASY-CERT group, enhancing its market credibility. Technically, the website employs modern frameworks like Bootstrap and jQuery, integrates multiple analytics and tracking tools including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, and uses a custom CMS platform. The site is mobile-optimized with good SEO and accessibility features, though some improvements in accessibility and security headers could be made. The infrastructure supports a professional user experience with clear navigation and multilingual support. From a security perspective, the website enforces HTTPS, uses CSRF tokens, and implements email obfuscation and cookie consent mechanisms, indicating a mature security posture. However, additional security headers and a published security policy would further strengthen their security stance. No vulnerabilities or blocking WAF mechanisms were detected, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, bio.inspecta AG presents a trustworthy, professional, and well-maintained online presence that aligns with its business goals and compliance requirements. Strategic recommendations include enhancing security headers, publishing incident response information, and continuing to improve privacy transparency to maintain high trust and compliance standards.

B

Bio Suisse

bio-suisse.ch

74

Bio Suisse is a Swiss non-profit umbrella organization representing organic farms certified under the Knospe label. The organization focuses on sustainable agriculture, animal welfare, and fair trade, holding the registered trademark for Knospe products. Their market position is strong within Switzerland as a leading certifier and promoter of organic farming. The website targets consumers and producers interested in organic products and sustainability. Technically, the site employs modern web technologies including JavaScript, Cookiebot for consent management, and Google Tag Manager for analytics, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and standard security headers present, though no dedicated security policy or incident response information is publicly available. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to transparency.

V

Valais excellence

valais-excellence.ch

46

Valais excellence is a regional organization based in Switzerland focused on certifying and supporting responsible enterprises within the Valais region. Their services include labelling, networking, training, and events aimed at promoting sustainable and positive economic practices. The website reflects a small-sized entity with a clear regional focus and a business model centered on certification and community building. Technically, the website uses common web technologies such as Bootstrap, Google Tag Manager, and Google Analytics, with basic mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a privacy policy linked but not prominently detailed on the main pages. Overall, the site is functional but could improve in content quality, security practices, and privacy transparency.

N

Nanoxi Sàrl

nanoxi.ch

59

Nanoxi Sàrl is a Swiss-based web agency specializing in website creation, ecommerce solutions, and web development services. Positioned as a local agency in Sion, Valais, it targets SMEs, associations, and municipalities seeking digital transformation and IT solutions. The company leverages modern technologies including Umbraco CMS, HTML5, CSS3, and JavaScript, and holds certifications such as Google Adwords & Analytics and Microsoft partnership, enhancing its market credibility. The website reflects a professional design with good content quality and clear navigation, optimized for mobile devices.

C

Carrefour addictionS

monado.ch

51

MonAdo.ch is a non-profit informational website operated by Carrefour addictionS, focused on supporting parents of adolescents dealing with addiction and related challenges. The site offers educational content on alcohol, tobacco, cannabis, gambling, screens, and nightlife, targeting a mature audience of concerned parents. It is positioned as a specialized resource in the addiction prevention and adolescent support sector within Switzerland. Technically, the site is built on WordPress with a modern plugin ecosystem including WPML for multilingual support, Google Tag Manager for analytics, and Complianz for cookie consent management. The site demonstrates good mobile optimization and SEO practices but lacks explicit privacy and terms of service pages. Security posture is solid with HTTPS and reCAPTCHA usage, though some security headers are not explicitly confirmed. Overall, the site is trustworthy and professionally maintained, with room for improvement in privacy compliance and direct contact information.

S

SPAR Handels AG

spar.ch

59

SPAR Handels AG is a well-established Swiss grocery retailer operating a website primarily in German, targeting local customers with fresh food offers. The website is built on TYPO3 CMS and uses modern web fonts from Typekit, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. The absence of these elements suggests room for improvement in privacy compliance and security posture. Overall, the website is accessible and functional but would benefit from enhanced security and compliance features to better protect users and align with regulatory requirements.

C

Cembra Money Bank AG

lipo-mastercard.ch

67

The website lipo-mastercard.ch presents the LIPO Mastercard, a credit card product issued by Cembra Money Bank AG, targeting Swiss residents and customers of the LIPO retail chain. The site offers detailed information about the card's benefits, usage, and additional services such as mobile payment and a personalized card design option. The business is positioned as a niche financial service provider with a focus on customer loyalty through point collection and exclusive offers. Technically, the site employs modern web technologies including Google Tag Manager and OneTrust for analytics and cookie consent management, ensuring GDPR compliance and user privacy. Security measures such as HTTPS and security headers are properly implemented, though explicit security and incident response policies are not directly published on the site. Overall, the website is professional, trustworthy, and well-optimized for user experience and mobile devices.

IKEA Schweiz operates as a leading furniture and home goods retailer in Switzerland, offering a comprehensive online shopping platform alongside physical stores. The website provides a rich catalog of products, localized content in German, and multiple customer services including delivery, assembly, and loyalty programs. The technical infrastructure leverages modern web technologies such as React, cookie consent management via OneTrust, and A/B testing with Optimizely, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and multiple security headers, although public security policies and incident response contacts could be enhanced. Overall, the site demonstrates high professionalism, compliance with GDPR, and trustworthy brand representation.

F

Fnac

fnac.ch

61

Fnac Suisse operates a comprehensive e-commerce platform specializing in cultural and technological products for the Swiss French-speaking market. As a subsidiary of the well-known Fnac brand, it holds a strong market position with a broad product catalog including books, electronics, games, and household appliances. The website demonstrates a mature digital infrastructure with modern technologies such as service workers, Adobe Experience Platform, and bot protection services, ensuring a smooth and secure user experience. Privacy compliance is well addressed with a cookie consent mechanism and a detailed privacy policy, reflecting adherence to GDPR standards. Security posture is robust with HTTPS enforcement, security headers, and bot mitigation, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and well-optimized for performance and accessibility.

Certo! One Mastercard is a cashback credit card product offered by Cembra Money Bank AG, a reputable Swiss financial institution. The website promotes the card's benefits including no annual fees, cashback rewards at favorite merchants, and additional insurance coverage. The target audience is consumers in Switzerland looking for a convenient and rewarding credit card solution. The company leverages modern digital marketing and analytics tools such as Google Tag Manager, Google Analytics, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The website is well-designed, mobile-optimized, and accessible, providing a professional user experience. Security measures include HTTPS enforcement and Mastercard Identity Check integration, though explicit security headers and policies are not prominently published. Overall, the site demonstrates a strong security posture with room for improvement in transparency around privacy and security policies.

L

Locali

locali-ge.ch

55

Locali is a small Swiss e-commerce platform dedicated to promoting local consumption through subscriptions, fresh product baskets, neighborhood grocery stores, seasonal restaurant dishes, and gift cards. The website is built on a modern WordPress and WooCommerce stack with Elementor and several plugins enhancing e-commerce and user experience. The platform targets consumers in Geneva interested in sustainable and local products. Technically, the site uses HTTPS, cookie consent management, and integrates Google Ads and Analytics for marketing and tracking. Security posture is moderate with HTTPS enforced and nonce usage, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service pages. WHOIS data is privacy protected, which is common but reduces transparency. Overall, the website is professional and functional with room for improvement in privacy and security disclosures.

L

L'ESPACE

lespacedapres.ch

57

L'ESPACE is a community-focused, modular venue located in Geneva, Switzerland, offering flexible spaces for meetings, conferences, and collaborative events. The website serves as a platform for room reservations, community event listings, and resource sharing, targeting local organizations and professionals interested in social economy and collective activities. Technically, the site is built on Drupal 9 with modern web technologies, providing good mobile optimization and accessibility. Security posture is moderate with HTTPS usage and secure forms but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security transparency.

I

itopie informatique

itopie.ch

54

itopie informatique is a Geneva-based non-profit cooperative focused on providing ethical, sustainable, and citizen-oriented IT services. Their offerings include repair and resale of refurbished professional-grade computers, IT infrastructure management, web services, training, and secure data wiping. The cooperative model and local anchoring position them uniquely in the Geneva market as a trusted provider for professionals, students, and individuals seeking responsible IT solutions. Technically, the website is built on WordPress with a modern theme and plugins, including privacy-respecting Matomo analytics and MailPoet for newsletters. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms could be improved. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website demonstrates a strong commitment to privacy, ethics, and community engagement.

B

Biofruits SA

biofruits.ch

66

Biofruits SA is a medium-sized Swiss company specializing in the retail and commercialization of organic fruits and vegetables sourced from seven local producers in the Valais region. The company operates both physical stores and an online shop, offering a variety of organic products including fresh produce, juices, compotes, and gift boxes. Their market position is strong regionally, supported by multiple certifications such as BioSuisse and ISO standards, which enhance their credibility and trustworthiness. Technically, the website is built on the Umbraco CMS and leverages modern JavaScript libraries and marketing tools including Google Tag Manager, Facebook Pixel, and Sendinblue for analytics and customer engagement. The site is mobile-optimized with good SEO practices and a clear navigation structure, providing a positive user experience. From a security perspective, the website uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which are areas for improvement to enhance security posture and transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with moderate tracking and marketing practices. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and establishing incident response contacts to further strengthen security and compliance.

Z

Zenhäusern

chezzen.ch

66

Chezzen is a Swiss-based bakery and catering service provider specializing in fresh products and professional service with regional expertise in Valais. The website presents a professional image with clear navigation and relevant content targeting both general consumers and professionals in hospitality. The technical infrastructure leverages modern web technologies including Umbraco CMS, Bootstrap 5, Google reCAPTCHA, and analytics tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS, security headers, and form protections, though explicit privacy and security policies are missing. Overall, the site is trustworthy and well-maintained but could improve compliance documentation and transparency.

O

Organisation cantonale valaisanne des secours (OCVS)

ocvs.ch

57

The Organisation cantonale valaisanne des secours (OCVS) is the official emergency coordination body for the canton of Valais in Switzerland. It manages professional and militia rescue services and prominently features the emergency telephone number 144. The website serves residents, visitors, and emergency responders by providing critical contact information, incident reporting, and general information about emergency services. The site is bilingual with French as the primary language and a German alternate site available. Technically, the website is built on WordPress 6.8.3 using the GeneratePress theme and Yoast SEO plugin, indicating a modern and SEO-optimized infrastructure. It employs HTTPS with good SSL configuration and uses common web technologies such as jQuery and Kadence Blocks. The site is mobile optimized and accessible with a clear navigation structure. From a security perspective, the site enforces HTTPS and uses some security best practices like email encoding to protect contact information. However, it lacks explicit security headers, a vulnerability disclosure policy, and incident response contact channels. Privacy compliance is limited due to the absence of a dedicated cookie policy and consent mechanism, which is critical for GDPR adherence. Overall, the website is trustworthy and professional, reflecting its governmental nature. Strategic improvements in privacy compliance and security policy transparency would enhance its security posture and user trust.

S

Ski World Cup

skicm-cransmontana.ch

54

The Ski World Cup Crans-Montana website serves as an official platform promoting the Audi FIS Ski World Cup events held in Crans-Montana, Switzerland. It provides detailed event schedules, news updates, and visitor information targeting ski sports enthusiasts, participants, and tourists. The site positions itself as a regional event promoter with a focus on winter sports and hospitality. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and integrations such as Google Tag Manager and ContentFry for social media content. The design is professional, mobile-optimized, and offers a clear navigation structure. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, though it lacks explicit security headers and publicly available security policies. No critical vulnerabilities or suspicious elements were detected. Overall, the website demonstrates a solid digital presence with good privacy compliance and trustworthy domain registration.

M

AgeCheck

morand.ch

58

The website www.morand.ch/en/agecheck/ serves as an age verification gateway, requiring users to confirm if they are over or under 18 years old before accessing further content. The site is minimalistic, focusing solely on compliance with age restrictions likely related to adult content or regulated products. The business behind the site appears to be Swiss-based, consistent with the domain registration data. The technical infrastructure includes common web tracking tools such as Google Analytics and Facebook Pixel, integrated via Google Tag Manager. The site uses JavaScript and jQuery for client-side interactions and form handling. Security posture is moderate; HTTPS is used, but no explicit security headers are detected, and no privacy or cookie policies are present on this page. The site does not expose sensitive data and does not show signs of WAF or content blocking. Overall, the site is functional but lacks comprehensive privacy and security disclosures.

A

Association Valaisanne des Musées

musees-vs.ch

48

The Association Valaisanne des Musées (AVM) is a Swiss non-profit organization established in 1981, serving as the umbrella organization for museums in the Valais region. The website provides comprehensive information about the association's activities, events, and coordination efforts for the local museum network. The site targets cultural institutions and the general public interested in museum-related content in Valais. Technically, the website is built on WordPress using the Divi theme, enhanced with modern plugins for SEO, caching, and cookie compliance, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. However, the site lacks explicit security policies and incident response information, which could be improved to enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and audience.

T

theWinefamily.ch

thewinefamily.ch

64

theWinefamily.ch is a Swiss-based e-commerce retailer specializing in the sale of Swiss and international wines, targeting primarily francophone customers in Switzerland. The website offers a curated selection of wines from various countries and terroirs, emphasizing quality and direct delivery to consumers. The business operates on the Shopify platform, leveraging modern e-commerce technologies and integrations to provide a seamless shopping experience. The site demonstrates good branding consistency and professional design, with clear navigation and mobile optimization. Technically, the website is built on Shopify's Dawn theme, hosted on Shopify's CDN infrastructure, and uses various third-party marketing and analytics tools such as Nosto and Trusted Shops. Performance is moderate with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and use of hCaptcha for form protection, though explicit security headers and policies are not fully documented. Privacy compliance is partial, lacking visible privacy and cookie policies or consent mechanisms. Overall, the site presents a trustworthy and professional front for wine retail, with clear contact information and legitimate WHOIS registration data. However, it would benefit from enhanced privacy disclosures and security policy transparency to improve compliance and user trust.

P

palliative.ch

palliative.ch

52

palliative.ch is a Swiss non-profit organization dedicated to palliative care, providing education, advocacy, and support services to terminally ill patients and healthcare professionals. The website is professionally designed using TYPO3 CMS, with multilingual support and a clear focus on Swiss regional services and partnerships. The technical infrastructure includes modern web technologies and compliance tools such as Iubenda for cookie consent and Google Tag Manager for analytics. Security posture is strong with HTTPS and secure cookie practices, though some security headers and explicit policies could be improved. Overall, the website is trustworthy, well-branded, and serves its target audience effectively.

F

FHV Fédération des hôpitaux vaudois

fhv.ch

45

The Fédération des hôpitaux vaudois (FHV) is a healthcare federation representing the interests of 12 hospitals in the canton of Vaud, Switzerland. The website serves as an informational portal for stakeholders within the healthcare sector in this region. The organization operates as a non-profit entity focused on coordination and representation rather than commercial activities. The website is built on WordPress using the Divi theme, integrating analytics tools such as Google Analytics and Matomo for user tracking and performance insights. The content is primarily in French and targets healthcare professionals and institutions within the canton. Technically, the site is moderately optimized with good mobile responsiveness and SEO practices, but lacks some advanced accessibility features and security headers.

G

GraphiCité

graphi-cite.ch

46

GraphiCité is a small Swiss-based graphic and web design service provider focused on creating logos, websites, and various graphic materials such as brochures and flyers. The website targets clients primarily in the Nyon and Geneva regions, offering personalized and creative communication solutions. The business operates on a service model catering to local customers seeking professional design services. Technically, the website is built on Joomla CMS and uses JavaScript libraries including jQuery and MooTools. The site is moderately optimized for mobile devices and has a basic SEO setup. However, there is a lack of advanced security measures such as security headers and no visible HTTPS enforcement data from the provided content. No privacy or cookie policies are present, indicating low privacy compliance. No contact emails, phone numbers, or social media links are provided, which limits direct communication channels and reduces business credibility. The domain registration is privacy protected, which is common for small businesses but reduces transparency. Overall, the website is functional and professional but requires improvements in security, privacy compliance, and contact information to enhance trust and compliance.

C

Carrefour Addictions

carrefouraddictions.ch

51

Carrefour Addictions is a Geneva-based non-profit umbrella organization focused on the prevention of addictions including alcohol, cannabis, tobacco, gambling, and video games. Founded in 2013, it consolidates efforts from multiple prevention entities to provide coordinated interventions and resources for the local population, targeting youth, parents, and professionals. The organization is financially supported by the Republic and Canton of Geneva, reinforcing its legitimacy and regional importance. The website reflects a professional and informative presence with clear contact channels and social media engagement. Technically, the site is built on WordPress with modern plugins and caching mechanisms, ensuring moderate performance and good mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and GDPR adherence. Overall, the site is trustworthy and well-positioned as a regional prevention resource.

A

Association ESPAS

espas.info

39

Association ESPAS is a Swiss non-profit organization dedicated to supporting children, adolescents, and adults affected by sexual abuse. The organization provides therapeutic support, family therapy, evaluation services, and prevention and training programs aimed at professionals and volunteers working with vulnerable populations. The website reflects a focused mission with clear service offerings and a target audience that includes victims, families, and professionals. Technically, the website is built on WordPress with modern plugins and frameworks such as Bootstrap, and it employs HTTPS with Google Analytics and Facebook SDK for tracking. However, it lacks explicit privacy and cookie policies and security headers, which are areas for improvement. The WHOIS data is not publicly available, indicating privacy protection, which is reasonable for a non-profit entity. Overall, the site is professional, trustworthy, and accessible, with moderate technical and security maturity.

C

Cembra Money Bank AG

cembra.ch

73

Cembra Money Bank AG is a leading Swiss financial institution specializing in consumer finance products including loans, leasing, credit cards, savings, and insurance. The company targets both private and corporate customers within Switzerland, positioning itself as a trusted and comprehensive financial services provider. The website reflects a mature digital presence with professional design, clear navigation, and multiple service portals. Technically, the site uses modern web technologies including Astro framework, Google Tag Manager for analytics, and OneTrust for cookie consent management, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and WHOIS data align well with the business claims, indicating legitimacy and trustworthiness. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

A

APRÈS

apres-ge.ch

46

APRÈS is a well-established social and solidarity economy network based in Geneva, Switzerland, founded in 2004. It serves over 900 members including enterprises and organizations, providing a platform for promoting ecological and social transition. The website is built on Drupal 7 and features a comprehensive set of services including event listings, news, job offers, and member support. The technical infrastructure is moderately modern with standard web technologies and Google Analytics for traffic analysis. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as CSP headers and security.txt files are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, targeting a general audience interested in social economy initiatives.

V

Verein für Qualität in Palliative Care

qualitepalliative.ch

51

The website www.qualitepalliative.ch represents a Swiss non-profit organization dedicated to certifying and promoting quality in palliative care. It offers a recognized Swiss label for institutions providing palliative care, targeting healthcare providers and related stakeholders within Switzerland. The site is professionally designed with clear navigation and multilingual support, reflecting a focused and credible business model centered on healthcare quality assurance. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates privacy-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, well-maintained, and aligned with its stated mission.

E

EUROBUNGY Swiss GmbH

bungyniouc.com

51

BungyNiouc is a specialized adventure tourism company operating in Switzerland, offering a range of adrenaline activities including bungy jumping, giant swings, rope jumps, and ziplines. The company positions itself as a premier destination for thrill-seekers in the Swiss Alps, supported by multiple ISO certifications and a strong presence on Tripadvisor. The website is professionally designed using WordPress with modern plugins and multilingual support, providing a seamless user experience with clear navigation and mobile optimization. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms implemented. Security posture is generally good with HTTPS and reCAPTCHA protections, though the absence of HTTP security headers and a public security policy page are areas for improvement. The lack of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy perceptions. Overall, the website and business demonstrate a mature digital presence with room for enhanced security transparency and domain registration verification.

H

Hôpital de Lavaux

hopitaldelavaux.ch

61

Hôpital de Lavaux is a regional healthcare institution serving the Grand Lausanne and Lavaux-Oron districts in Switzerland. The hospital offers a range of services including rehabilitation, palliative care, medico-social housing, diabetes programs, ambulatory care, and temporary care facilities. The website reflects a professional and patient-focused organization with clear service offerings and contact information. The hospital maintains an active social media presence to engage with its community. Technically, the website is built on the Jalios JCMS platform with Bootstrap and jQuery frameworks, providing a responsive and user-friendly experience. The use of Matomo analytics indicates a preference for privacy-conscious tracking. The site is well-structured with good SEO and accessibility basics, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and uses CSRF tokens, but lacks visible security headers and published security policies. There is no privacy or cookie policy, which is a compliance gap under GDPR. Incident response and vulnerability disclosure information are also absent, limiting transparency in security matters. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security transparency to better protect users and meet regulatory requirements.

C

Cleaning Service SA

cleaning-service.ch

46

Cleaning Service SA is a professional cleaning and facility services company operating primarily in the Suisse Romande region of Switzerland, with agency locations in Geneva, Nyon, Lausanne, and Fribourg. The company offers a broad range of services including general cleaning, concierge services, special cleaning tasks, medical and pharmaceutical disinfection, waste collection, handyman services, and a flexible 'One Stop Shopping' concept. The website reflects a well-established regional business with multiple certifications such as ISO 9001, 14001, 45001, and various local labels indicating quality and corporate responsibility. The target audience includes businesses and organizations seeking reliable cleaning and facility management services.

V

Verein Jobdach

jobdach.ch

50

Verein Jobdach is a Swiss non-profit organization established in 1996, providing survival aid and harm reduction services in the canton of Luzern. Their key offerings include emergency shelter (Notschlafstelle), long-term housing for individuals with addiction and mental health challenges (Obdach), and day structure programs (Wärchstatt). The website is built on Joomla CMS and incorporates modern web technologies such as Bootstrap and jQuery, with Google Analytics for visitor tracking. The site is well-structured, mobile-optimized, and presents a professional image consistent with its social mission. However, it lacks visible contact information on the homepage and does not implement cookie consent mechanisms, which may affect privacy compliance.

Z

Zürich Tourismus

zuerich.com

59

Zürich Tourismus operates the official city guide website zuerich.com, providing comprehensive information on tourism, events, accommodations, and travel tips for visitors to Zurich, Switzerland. The site targets tourists and visitors, offering a rich user experience with modern web technologies such as Nuxt.js and Vue.js. The website demonstrates a high level of digital maturity with excellent design, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and cookie consent management, although explicit security policies and incident response details are not published. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, but the professional content and branding mitigate some risk. Overall, the site is a trusted resource for Zurich tourism but would benefit from improved transparency in domain registration and security disclosures.

S

Solothurn Tourismus

solothurnservices.ch

50

Solothurn Tourismus operates a professional tourism and event promotion website focused on seminars, congresses, and cultural events in Solothurn, Switzerland. The site targets business event planners and tourists seeking venues and programs for conferences and celebrations. The business model centers on providing venue finders, event locations, and booking services, positioning itself as a regional tourism authority with a medium-sized presence. Technically, the website is built on the Neos CMS using the PHP Flow framework, integrating modern analytics and tracking tools such as Google Analytics and Facebook Pixel. The site demonstrates good mobile optimization, accessibility, and SEO practices, supported by structured data and a cookie consent mechanism compliant with GDPR. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, professional, and safe for general audiences, with a legitimacy score supported by consistent WHOIS data. Strategic improvements include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

E

EdelCert & InSpectorat Sàrl

edelcert.net

41

EdelCert & InSpectorat Sàrl is a small Swiss company specializing in certification of quality management systems according to ISO standards and recognized labels, as well as providing related training services. The company targets private enterprises, public organizations, and non-profit entities primarily within Switzerland. Their market position is niche with over 200 certified clients, supported by accreditations such as SAS and ISO certifications. Technically, the website is built on WordPress with modern plugins like Elementor and WPForms, offering a responsive and professional user experience. Security posture is solid with HTTPS enforced and secure forms, though lacking some security headers and cookie consent mechanisms. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site is well-structured, informative, and trustworthy for its intended audience.

P

ProCert

procert.ch

59

ProCert is a Swiss-based certification body providing high-quality certification, auditing, and training services across multiple sectors including food safety, product certification, health and social care, education, and sustainable development. The company maintains a strong market position with multiple offices in Switzerland, France, Africa, and other regions, serving organizations seeking compliance and certification services. Their website reflects a professional and consistent brand image with clear navigation and multilingual support. Technically, the site uses modern web technologies including Google Analytics, Google Tag Manager, and Google reCAPTCHA to enhance user experience and security. The security posture is strong with HTTPS enforcement and anti-bot protections on forms, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, ProCert demonstrates a mature digital presence aligned with its business goals and regulatory requirements.

K

Kommuniversum AG

kommuniversum.ch

60

Kommuniversum AG is a Swiss-based advertising agency located in Zurich, specializing in creative marketing and advertising solutions. The company operates as a small-sized agency with a strong emphasis on creativity, agility, and client partnership. It offers services including strategic consulting, design, content creation, and campaign execution. The agency benefits from its affiliation with the parent company Linkgroup AG, which provides additional digital and media resources. The website is professionally designed using TYPO3 CMS, featuring modern web technologies and a clear structure that supports user navigation and engagement. Security-wise, the site enforces HTTPS, employs spam-protected email addresses, and includes a cookie consent mechanism, reflecting good privacy practices. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site presents a trustworthy and credible business front with strong client testimonials and transparent contact information.

S

Schellenberg Wittmer Ltd

swlegal.ch

54

Schellenberg Wittmer Ltd is a leading Swiss business law firm with a strong presence in Zurich, Geneva, and Singapore. The firm offers a comprehensive range of legal services including transactions, advisory, and dispute resolution to a global client base of companies and entrepreneurs. The website reflects a professional and well-established business with extensive legal expertise and a commitment to corporate social responsibility. Technically, the website employs modern JavaScript libraries such as RequireJS and integrates Google Analytics and reCAPTCHA for tracking and security. The site is mobile-optimized and provides a rich content experience with detailed insights and newsletters. Security posture is generally good with HTTPS and CAPTCHA protections, but lacks visible security headers and published incident response policies. WHOIS data is missing or unavailable, which is unusual for a firm of this stature and warrants further investigation. Overall, the website is trustworthy and professional but would benefit from enhanced transparency in domain registration and security policies.

L

Linkstudio (a brand of Linkgroup AG)

linkstudio.ch

58

Linkstudio, a brand of Linkgroup AG based in Switzerland, specializes in high-end video production, motion design, animation, and podcast services. The company targets businesses seeking creative and professional media solutions to enhance brand storytelling and engagement. The website reflects a strong market position supported by decades of experience under the parent company Linkgroup AG. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates Google Tag Manager for analytics, indicating a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, providing a good user experience. Security posture is solid with HTTPS and email obfuscation, though lacking explicit security policies or vulnerability disclosure mechanisms. Privacy compliance is robust with a clear cookie consent mechanism and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and business-focused, with no signs of malicious activity or content blocking.

E

e-Durable SA

e-durable.ch

54

e-Durable SA is a Swiss-based IT service provider specializing in sustainable and responsible IT solutions since 2015. Their offerings include strategic consulting, ICT support, advanced technical expertise, green hosting, and greener hardware, targeting businesses in Suisse Romande. The company positions itself as a niche leader in green IT services with a strong ethical and ecological focus. Technically, the website is built on the Odoo CMS platform, hosted on the eco-friendly Recycled Cloud, and employs modern web technologies including Bootstrap and FontAwesome. Analytics are implemented via Google Tag Manager and Plausible Analytics, though privacy compliance could be improved with cookie consent mechanisms. Security posture is good with HTTPS and CSRF protections but lacks explicit security policies and headers. Overall, the website is professional, trustworthy, and well-structured, reflecting a credible business with a clear sustainability mission.

RigiShop.ch is an e-commerce platform dedicated to selling gift vouchers and tickets related to the Rigi mountain railway and associated tourism experiences in Switzerland. The website offers a variety of vouchers including tickets, steam rides, annual passes, and other curated experiences targeting tourists and visitors interested in the Rigi region. The platform is well integrated with the main Rigi tourism website and maintains consistent branding and social media presence. Technically, the site uses a mix of legacy and modern web technologies including jQuery, FontAwesome, Google Analytics, and cookie consent mechanisms. While the site is secure with HTTPS and basic privacy compliance, it lacks some advanced security headers and uses an outdated jQuery version which could pose minor risks. Overall, the website is professional, user-friendly, and trustworthy, with room for improvement in security and compliance documentation.

K

KOALA

koala.ch

56

KOALA is a Swiss-based e-commerce retailer specializing in women's, men's, and children's fashion footwear, clothing, and accessories. The website offers products from over 300 leading brands, emphasizing quality customer service, free shipping, and returns. The platform is built on Magento, leveraging modern web technologies and multiple analytics and advertising tools to optimize user experience and marketing effectiveness. The site supports multiple languages and provides clear contact information, enhancing accessibility for its target audience. Security-wise, KOALA enforces HTTPS, implements GDPR-compliant cookie consent mechanisms, and uses fingerprinting for fraud prevention, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing areas for improvement. Overall, KOALA presents a professional, trustworthy online retail presence with a solid technical foundation and good privacy compliance.

C

CembraPay AG

cembrapay.ch

62

CembraPay AG is a Swiss financial services company specializing in flexible payment solutions such as invoice purchase, installment payments, monthly billing, and digital wallets. It is a leading provider in the Swiss market, formed from the merger of Swissbilling and Byjuno, and operates under the umbrella of the publicly listed Cembra Bank AG. The website targets both consumers and merchants in Switzerland, offering secure and convenient payment options. The business model focuses on risk-free payment facilitation for merchants and flexible payment options for consumers. The company maintains a professional online presence with clear branding and comprehensive service descriptions. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of Google reCAPTCHA v3 for spam protection. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security best practices such as explicit security headers and published security policies are not evident from the data provided. From a security perspective, the site uses HTTPS and implements anti-spam measures but lacks visible security headers and formal incident response information. No vulnerabilities or suspicious content were detected. Privacy compliance is strong with accessible privacy and cookie policies and GDPR adherence. Contact information is transparent and comprehensive, enhancing trust. Overall, CembraPay AG presents a trustworthy and professional digital presence consistent with its market position. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, and improving accessibility features to further strengthen compliance and security posture.

D

Deeplink.ai

deeplink.ai

57

Deeplink.ai is a Swiss technology company specializing in sovereign and secure artificial intelligence solutions. Their offerings include AI document processing, AI chatbots, and AI translation services, targeting public institutions and SMEs within Switzerland. The company emphasizes data sovereignty by keeping data within Swiss jurisdiction and providing independent AI technology. Technically, the website is built on WordPress with modern themes and plugins, including Google Tag Manager for analytics. The site is well-structured with good SEO and mobile optimization. Security posture is solid with HTTPS enforced, but lacks some security headers and visible privacy compliance documentation. Overall, the business appears legitimate and professional, though improvements in privacy and security transparency are recommended.

A

Aeschbach

a1904.ch

58

Aeschbach is a Swiss-based e-commerce retailer specializing in shoes, clothing, and accessories primarily targeting women, men, and children. The website showcases a broad portfolio of over 300 leading brands, offering free shipping and returns, and emphasizes customer satisfaction and quality service. The platform is built on Magento Commerce, leveraging modern web technologies and analytics tools such as Google Tag Manager, Facebook Pixel, and Matomo for marketing and user behavior tracking. The site is well-structured with clear navigation and multilingual support, optimized for mobile devices. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website presents a professional and trustworthy retail experience with moderate to good technical maturity.

J

Jugend+Sport

jugendundsport.ch

66

Jugend+Sport is a Swiss government-affiliated organization dedicated to promoting youth sports and physical activity across Switzerland. The website reflects a professional and consistent brand image aligned with its mission to provide sports programs, coach education, and event organization for young people. The technical infrastructure is modern, leveraging Nuxt.js and Tailwind CSS, ensuring good mobile optimization and accessibility. However, the site lacks explicit privacy and cookie policies, as well as visible security headers and incident response information, which are important for compliance and trust. No blocking or WAF mechanisms interfere with content access, and the domain registration data aligns well with the organization's identity, confirming legitimacy.

S

Special Olympics Switzerland

specialolympics.ch

52

Special Olympics Switzerland is a prominent non-profit organization dedicated to providing sports opportunities and inclusion for people with intellectual disabilities in Switzerland. The organization holds a strong market position as the largest sports entity in this niche within the country, offering key services such as sports events, inclusion programs, and awareness campaigns. The website reflects a professional and consistent brand image aligned with its mission. Technically, the website is built on WordPress with multilingual support and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security and incident response policies are not published. Overall, the domain registration data aligns well with the organization's profile, supporting its legitimacy and trustworthiness.

G

Gobe-Bitume

gobe-bitume.ch

34

Gobe-Bitume is a well-established running group affiliated with Stade Genève, serving over 200 members since 1978. The organization focuses on group running and walking activities, training sessions, and participation in organized races, including the notable Course de l’Escalade. The website reflects a medium-sized sports club with a clear local focus in Switzerland. Technically, the site is built on WordPress using Elementor, providing a modern but basic digital presence. While the site is accessible and mobile-optimized, it lacks critical privacy and security policies, which are essential for compliance and trust. Security posture is moderate with HTTPS enabled but missing key security headers and incident response information. Overall, the site is functional and professional but would benefit from enhanced security and privacy measures to improve compliance and user trust.

P

Proximity-Softwares Sàrl

cogito-sport.ch

46

Cogito-sport.ch is a Swiss-based software company, Proximity-Softwares Sàrl, specializing in ERP solutions tailored for clubs, associations, and schools primarily in French-speaking countries such as Switzerland, France, Belgium, and Canada. Their software suite includes membership management, course scheduling, automated invoicing, accounting, member portals, online registration forms, surveys, document management, salary management, and internet reservation systems. The company positions itself as a niche provider with a focus on administrative efficiency for community organizations. Technically, the website is built on GravCMS with the Gantry5 framework, utilizing common JavaScript libraries such as jQuery, Featherlight, and LightSlider. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No advanced analytics or advertising technologies are detected, indicating a privacy-conscious or minimal tracking approach. From a security perspective, the site uses HTTPS as implied by canonical URLs but lacks explicit security headers and published security policies. No privacy or cookie policies are present, which is a compliance gap under GDPR. No incident response or vulnerability disclosure information is provided. The WHOIS data aligns well with the business claims, indicating legitimacy and consistency. Overall, the website is professional and functional with good business credibility but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

C

Caymland Technologies AG

caymland.app

61

Caymland Technologies AG operates a technology platform focused on digital marketing and communication solutions, including email marketing, SMS, and Viber messaging, as well as content management and user segmentation. The website analyzed is a login page for this platform, indicating a SaaS business model targeting marketing professionals and businesses. The platform integrates modern JavaScript libraries and editors to facilitate content creation and management. Technically, the website employs a modern tech stack with libraries such as Froala Editor, CKEditor, and Ace Editor, and appears to be built on the Symfony framework. Hosting is supported by Cloudflare, ensuring good SSL configuration and basic performance. However, SEO and accessibility features are minimal, and mobile optimization is basic. The site uses HTTPS and includes CSRF tokens for form security, reflecting a moderate security posture. Security-wise, while HTTPS and CSRF protections are in place, the site lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and related regulations. The domain registration is privacy protected, which is common for tech companies but reduces transparency. Overall, the website is functional and moderately secure but lacks comprehensive privacy and security disclosures. Strategic improvements in privacy compliance, security headers, SEO, and accessibility would enhance trust and regulatory adherence.