Switzerland security reports

S

Solothurn Tourismus

solothurn-tourismus.ch

50

Solothurn Tourismus operates as the official tourism portal for the city of Solothurn, Switzerland, providing comprehensive information on attractions, events, accommodations, and business-related services such as seminars and congresses. The website targets tourists, families, and groups interested in exploring the city, offering multilingual content and booking capabilities. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, integrating modern web technologies and third-party analytics tools like Google Analytics and Facebook Pixel. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-aligned with its business purpose, with no signs of blocking or malicious activity.

R

RigiPlus AG/RIGI BAHNEN AG

rigi.ch

48

RigiPlus AG, operating under the brand 'Rigi - Königin der Berge', is a well-established tourism and transportation company based in Switzerland. The company offers mountain railway services, hiking and wellness experiences, event hosting, and an online shop for tickets and souvenirs. The website is professionally designed, multilingual, and targets tourists and visitors interested in the Central Swiss mountain region. Technically, the site uses modern frameworks such as Neos CMS and Flow PHP, integrates Google Tag Manager and Zendesk Chat, and implements accessibility and SEO best practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not publicly detailed. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business presence.

B

Basel Tourism

basel.com

66

Basel Tourism operates the official website basel.com, providing comprehensive information and services related to tourism in Basel, Switzerland. The site offers detailed guides on sightseeing, events, hotels, restaurants, shopping, and guided tours, targeting tourists and visitors. The website is well-branded, professionally designed, and supports multiple languages, enhancing accessibility and user experience. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern web technologies and good SEO practices. Security measures include HTTPS enforcement, content security policies, and GDPR-compliant consent management via Usercentrics. However, the WHOIS data for the domain is unavailable, indicating privacy protection or a recent registration, which slightly impacts trust but is common for tourism sites. Overall, the site demonstrates a mature digital presence with strong content quality and compliance, suitable for its business purpose.

Z

Zermatt-Matterhorn: Ferien in den Bergen & Alpen

zermatt.ch

62

The website zermatt.swiss serves as a regional tourism portal promoting vacations and holidays in the Zermatt-Matterhorn area of the Swiss Alps. It targets tourists interested in mountain and alpine experiences, providing information and services related to travel and accommodation. The business model is focused on destination marketing and tourism promotion, positioning itself as a key regional player in hospitality. The website demonstrates a good level of digital maturity, utilizing modern web technologies such as Nuxt.js, Tailwind CSS, and integrating analytics and marketing tools like Google Analytics, Facebook Connect, and Cookiebot. Performance and mobile optimization are good, though accessibility is basic. From a security perspective, the site enforces HTTPS and employs a Content-Security-Policy header, reflecting sound security practices. However, additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited, with no explicit privacy or cookie policies found in the provided content, which is an area for improvement. Business credibility is supported by consistent WHOIS data and a professional web presence, though contact information and trust indicators are minimal. Overall, the website presents a moderate risk profile with strengths in technical implementation and business legitimacy but gaps in privacy compliance and security policy transparency. Strategic recommendations include publishing comprehensive privacy and cookie policies, enhancing security headers, and improving accessibility and user trust signals.

D

DeepAlps Ltd

deepalps.ch

47

DeepAlps Ltd is a Swiss-based technology company specializing in AI and machine learning solutions. Their offerings include AI chatbots, AI search engines, training and consulting services, and custom deep neural network model development. The company emphasizes Swiss data sovereignty and sustainability through partnerships such as with e-Durable, which provides eco-friendly cloud hosting. The website presents a professional and consistent brand image targeting businesses and organizations seeking advanced AI solutions. Technically, the site uses modern JavaScript frameworks and privacy-respecting Matomo analytics, hosted likely on Swiss infrastructure. Security posture is good with HTTPS enabled and no exposed sensitive data, though the absence of security headers and formal policies indicates room for improvement. Overall, the website is well-designed, mobile-optimized, and trustworthy, but lacks explicit privacy and cookie policies, as well as incident response information.

A

arx iT

arxit.com

61

arx iT is a well-established company specializing in GIS and geospatial IT services, with over 20 years of experience serving clients in Switzerland, France, and internationally. Their offerings include consulting, custom GIS development, training, cartography, data management, and application maintenance. The company positions itself as a leader in geoinformatics with a strong focus on innovation and quality, supported by ISO 9001 and ISO 14001 certifications and a commitment to social responsibility. Technically, the website is built on WordPress with modern libraries and plugins ensuring good performance, mobile optimization, and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details could be improved. The absence of WHOIS registration data is a notable concern that impacts trustworthiness, but the professional content, client references, and certifications support legitimacy. Overall, the website and business demonstrate maturity and professionalism in the geospatial technology sector.

D

Datasport

datasport.com

63

Datasport is a Swiss-based company specializing in sport event timing and management services, catering primarily to athletes and event organizers. Established in 1996, the company offers a comprehensive suite of services including online registration, participant administration, timing services, marketing, and communication support. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site is built on Mura CMS 7.1.0, leveraging common web technologies such as jQuery and Modernizr, and is hosted with reputable providers including Infomaniak Network SA and Cloudflare DNS services. The site is mobile-optimized and implements basic SEO and accessibility features.

B

BuxumLunic

buxumlunic.ch

53

BuxumLunic is a well-established digital communication agency based in Geneva, Switzerland, with over 35 years of experience. The company specializes in 360-degree communication services including branding, digital campaigns, print, visual creation, and website development. Positioned as a strategic partner for businesses and institutions, BuxumLunic targets a broad audience seeking to enhance their brand visibility and communication effectiveness. The website reflects a professional and consistent brand image with a strong portfolio and client references, indicating a solid market position in the media and communication sector. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper.js and GSAP, and integrates SEO tools like Yoast SEO. Google Tag Manager is used for analytics, showing a moderate level of digital maturity. The site is mobile-optimized and offers a good user experience with clear navigation and rich content. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and incident response policies. No cookie consent mechanism was detected, indicating partial GDPR compliance. No vulnerabilities or exposed sensitive data were found, but improvements in security best practices are recommended. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in privacy compliance and security policy transparency. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing incident response information to strengthen trust and compliance.

Fonds du sport is a Geneva-based non-profit organization dedicated to supporting local sports clubs and athletes by providing news, event information, and resources. The website serves as a regional hub for sports-related activities and community engagement, targeting sports enthusiasts and organizations within the canton. Technically, the site is built on WordPress using the Avada theme, incorporating common web technologies such as jQuery and Google Tag Manager for analytics. The site demonstrates moderate performance and good mobile optimization, with a professional design and clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR standards. Overall, the website is trustworthy and professionally maintained, but could improve in privacy and security transparency.

Stade Genève is a well-established athletics sports club based in Geneva, Switzerland, offering a wide range of services including training, competitions, camps, and community engagement. The website reflects an active organization with regular updates, event calendars, and social media presence, targeting athletes and sports enthusiasts in the region. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and plugins to provide a good user experience and mobile responsiveness. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies, indicating room for improvement in security maturity. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy policy or terms of service pages found. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing privacy and security disclosures, implementing security headers, and publishing incident response information to improve compliance and trust.

L

Léman Bleu Télévision

lemanbleu.ch

59

Léman Bleu Télévision operates as a regional Swiss television channel based in Geneva, providing news, cultural programming, debates, and sports content. The website serves as a digital platform to broadcast and promote their programming, targeting a general audience primarily in the Geneva region. The business model centers on media broadcasting and online content delivery, positioning itself as a trusted local news source with regular updates and multimedia content.

T

Tamedia Publications romandes S.A.

tdg.ch

61

Tribune de Genève, operated by Tamedia Publications romandes S.A., is a well-established Swiss news media outlet founded in 1988. It provides comprehensive news coverage focused on Geneva, Switzerland, and international topics, targeting a general audience interested in current affairs, culture, sports, and society. The business model relies on subscriptions, advertising, and digital content delivery including e-paper and newsletters. The website demonstrates a mature digital infrastructure leveraging modern web technologies such as React and Next.js, integrated with advanced advertising and analytics platforms. Privacy and cookie consent mechanisms are implemented in compliance with GDPR, enhancing user trust and regulatory adherence. Security posture is strong with HTTPS, security headers, and secure form handling, though explicit security and incident response policies are not publicly detailed. Overall, the site is professional, trustworthy, and technically sound, serving a large audience with high-quality content.

A

Aeschbach

aeschbach-chaussures.ch

58

Aeschbach is a Swiss-based e-commerce retailer specializing in shoes, clothing, and accessories for women, men, and children. The website offers a broad selection of products from over 300 leading brands, emphasizing quality customer service, free shipping, and returns. The platform targets consumers interested in fashion and footwear, positioning itself as a trusted and established player in the Swiss retail market. The business model is primarily online retail with a focus on brand partnerships and customer satisfaction.

M

Media One Group

yesfm.ch

50

Yes FM is a Swiss-based radio station operated by Media One Group, targeting French-speaking audiences with music broadcasting and online streaming services. The website presents a professional and consistent brand image aligned with its parent company. Technically, the site leverages modern JavaScript frameworks such as Nuxt.js and Vue.js, integrates Google Tag Manager for analytics, and uses a reputable streaming provider (Infomaniak). The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is limited due to the lack of visible privacy and cookie policies, despite the presence of a cookie consent mechanism via Axeptio. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

M

Media One Group

urbnradio.ch

48

URBN is a Swiss-based urban culture radio station operated by Media One Group, focusing on Rap, Hip-Hop, and R’n’B music targeted at francophone and Romande audiences. The website presents a professional and modern digital presence using Nuxt.js and Vue.js frameworks, with integrated streaming and music curation services. The technical infrastructure is modern and performant, with good mobile optimization and use of analytics tools such as Google Analytics and Tag Manager. Security posture is adequate with HTTPS enforced, but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is safe, trustworthy, and well-branded but would benefit from enhanced privacy and security disclosures.

M

Media One Group

rockstarradio.ch

47

Rockstar is a digital radio station operated by Media One Group, focusing on rock music from the 1960s to today. The website serves as a streaming platform and brand presence for the radio station, targeting rock music enthusiasts primarily in Switzerland. The site uses modern web technologies including Vue.js and Nuxt.js, and integrates Google Tag Manager and Axeptio for analytics and consent management, although no explicit cookie or privacy policies are published. Social media presence on Instagram and Facebook supports audience engagement. Technically, the website is well-structured with responsive design and moderate performance. However, security posture is moderate due to lack of visible security headers and absence of published security or privacy policies. The domain uses privacy protection in WHOIS, which is common and acceptable for media entities, and no suspicious patterns were detected. The site content is safe for general audiences with no adult or explicit material. Overall, the website is professionally presented and credible as a niche digital radio station. Key improvements include publishing privacy and cookie policies, adding security headers, and providing clear contact information to enhance trust and compliance. These steps will strengthen the security posture and privacy compliance, aligning with best practices for media websites.

M

Media One Group

kisscollector.ch

48

Kiss Collector is a digital radio station operated by Media One Group, targeting French-speaking audiences interested in classic hits from the 1970s and 1980s. The website offers streaming services with a focus on nostalgic music content, positioning itself as a niche media outlet within Switzerland. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and Nuxt.js, with integration of Google Tag Manager for analytics and Axeptio for consent management, indicating a moderate level of digital maturity. The site is mobile optimized and presents a professional design with consistent branding. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal policies. Privacy compliance is weak due to absence of privacy and cookie policies, and no explicit contact information is provided for users or security incidents. Overall, the website is functional and trustworthy but would benefit from enhanced compliance and security transparency.

R

Rouge

rouge.ch

49

Rouge is a Swiss regional media company operating a radio station with a strong digital presence including live streaming, podcasts, and mobile applications. The website targets the general public in the Canton of Vaud, offering entertainment, news, and contests. The business model revolves around media broadcasting and digital content delivery. Technically, the site is built on WordPress using the Extra theme and integrates common plugins such as Gravity Forms and Google Tag Manager. Hosting appears to be with Infomaniak, a reputable Swiss provider. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced but lacks security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is partially available via social media and a WhatsApp link, but no direct company emails are published. WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

C

CartoJuraLéman

cjl.ch

51

CartoJuraLéman is a non-profit regional geoportal managed by the ARCAM association for the district of Morges in Switzerland. Founded in 2016, it provides cartographic data representation and integration services to 46 partners including 37 municipalities and 9 associations. The website serves as an information and access point for regional geographic data, targeting government entities and local associations. Technically, the site is built on WordPress using popular plugins such as Yoast SEO and Elementor, with Google Analytics integrated for traffic monitoring. The site is well designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is legitimate and trustworthy, with room for improvement in privacy and security documentation.

P

Publiepress

publiepress.com

52

Publiepress is a small Swiss-based consultancy specializing in web design, internet strategy, and WordPress development with over 25 years of experience. The company targets professionals, companies, communities, and associations, offering tailored digital communication and website solutions. The website is well-structured, bilingual (English and French), and showcases a portfolio of clients, reinforcing its market credibility. Technically, the site is built on WordPress using the Breakdance builder and Yoast SEO plugin, hosted by Infomaniak Network SA, a reputable Swiss provider. Performance and mobile optimization are good, though accessibility is basic. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided including a phone number, physical address, and a contact form. Overall, the site is professional and trustworthy but could improve in security and privacy compliance.

C

Course de l'Escalade

escalade.ch

59

Course de l'Escalade is a well-established event organizer focused on the popular running event held annually in Geneva, Switzerland. The website provides comprehensive information about the races, registration, schedules, and related activities, targeting runners, families, and the local community. The business model revolves around event management and promotion, supported by sponsorships and partnerships with notable Swiss companies. Technically, the website is built on WordPress with modern web technologies, including jQuery and Google Tag Manager, and integrates cookie consent via Axeptio. The site is mobile-optimized and offers good SEO and accessibility features. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and compliant with GDPR, but could improve transparency by adding terms of service and vulnerability disclosure policies.

M

Mirabaud Asset Management

mirabaud-am.com

54

Mirabaud Asset Management is an independent asset management firm specializing in active investment strategies across equities, fixed income, and private assets. The company emphasizes sustainable and high conviction investment approaches, targeting institutional and private investors. The website reflects a strong market position under the Mirabaud Group umbrella, offering detailed information on capabilities, funds, and corporate governance. Technically, the website is built on TYPO3 CMS with modern integrations such as Google Tag Manager and OneTrust for cookie consent, indicating a mature digital infrastructure. The site is well-optimized for SEO, mobile-friendly, and provides a professional user experience with clear navigation and comprehensive content. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published incident response or vulnerability disclosure policies. The absence of WHOIS registration data is a notable concern, potentially impacting trustworthiness, though the professional presentation and branding mitigate this risk. Overall, the website demonstrates a high level of professionalism and compliance with privacy regulations, but could improve transparency in security policies and domain registration details to enhance trust and security posture.

L

Linkgroup AG

linkgroup.ch

60

Linkgroup AG is a Swiss-based agency specializing in publishing across multiple channels, offering comprehensive services including corporate communication, financial and sustainability reporting, digital strategy, content creation, and media production. Positioned as a leading Swiss agency, it targets corporate clients seeking integrated communication solutions. The website reflects a mature digital infrastructure leveraging modern web technologies, consent management via Usercentrics, and analytics through Google Tag Manager, indicating a strong digital maturity. Security posture is solid with HTTPS enforcement, consent defaults denying tracking until user approval, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are absent, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting a positive risk profile.

E

Login Event Wise - Wise

eventwise.ch

58

The website eventwise.ch serves as a login portal for the Event Wise platform, presumably an event management service based in Switzerland. The site is minimalistic, focusing primarily on user authentication without publicly exposing detailed business or security policies. The technical infrastructure leverages modern JavaScript libraries such as Bootstrap Datetime Picker, FullCalendar, Vue.js components, Spectrum Colorpicker, and SurveyJS, indicating a contemporary front-end stack. However, the site lacks visible SEO optimization, comprehensive content, and accessibility features. Security posture is basic with no detected security headers or explicit SSL/TLS configuration details, and no privacy or cookie policies are present, which may impact compliance with GDPR and other regulations. The domain uses privacy protection in WHOIS, which is common for small businesses but reduces transparency. Overall, the site is functional but requires improvements in security, privacy compliance, and business transparency to enhance trust and regulatory adherence.

O

Online Travel Information Services AG

onlinetravel.ch

51

Online Travel Information Services AG is a Swiss-based, medium-sized company specializing in rail travel technology solutions. Established in 2013, it offers a suite of B2B products including a Rail API Gateway, Travelshop booking platform, and affiliate integrations, positioning itself as a market leader with over 30 years of experience in rail technology. The website reflects a professional and consistent brand image targeting travel industry businesses and agencies seeking seamless rail booking solutions across Europe. Technically, the site is built on WordPress with modern plugins and tracking tools, optimized for SEO and mobile use, though some security headers could be improved. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Security posture is solid with HTTPS and secure forms, but lacks publicly available security policies or incident response contacts. Overall, the site is trustworthy, well-maintained, and business credible.

I

Interhome AG

interhome.ch

67

Interhome AG is a well-established Swiss company specializing in the rental of holiday homes, apartments, and chalets across Europe. With a founding date in 1965 and a parent company relationship to Hotelplan Group, Interhome holds a strong market position in the European hospitality sector. The website serves tourists and holidaymakers seeking vacation rentals, offering a broad portfolio of properties. Technically, the site employs modern web technologies including Vue.js and Tailwind CSS, with integrations for Google Analytics and Tag Manager, reflecting a mature digital infrastructure. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS, uses modern security headers, and shows no signs of vulnerabilities or exposed sensitive data. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the company's business claims.

2

2L.COMM SA

kendros.com

40

Kendros.com operates as a specialized travel industry information portal primarily targeting travel agencies and tourism professionals. The platform aggregates and distributes daily information from various service providers, including travel offers, directories, visa information, and news updates. The business is linked to 2L.COMM SA, a Swiss company, and serves a niche market within the transportation and hospitality sectors. The website content is mostly in French and provides basic but relevant information for its target audience. Technically, the website is built on legacy ASP.NET WebForms technology with JavaScript enhancements and uses Google Analytics for visitor tracking. The site is moderately optimized with basic mobile and accessibility features but lacks modern security headers and advanced privacy compliance mechanisms. The absence of a clear cookie policy and GDPR compliance indicators suggests room for improvement in privacy practices. From a security perspective, the site uses HTTPS but lacks critical security headers such as Content-Security-Policy and anti-CSRF protections. No vulnerabilities were directly observed, but the missing WHOIS data for the domain raises concerns about domain registration legitimacy. Overall, the security posture is moderate but could benefit from enhancements to protect user data and improve trust. The overall risk assessment indicates a moderately trustworthy site with some compliance and security gaps. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers and form protections, and resolving domain registration transparency issues to strengthen legitimacy and user trust.

takeoverpractice.ch is a specialized online platform providing comprehensive access to Swiss takeover law, including legal provisions, case law commentary, and decision abstracts. Operated by the reputable Swiss law firm Schellenberg Wittmer Ltd, it targets legal professionals and financial market participants seeking authoritative and up-to-date information on public takeovers in Switzerland. The platform offers multilingual support and integrated search functions, enhancing its utility as a legal research tool. Technically, the website uses legacy JavaScript libraries such as jQuery 1.7.1 and Google Analytics for tracking, with a CMS likely based on Contao. While the site is professionally designed with clear navigation, it lacks modern security headers and cookie consent mechanisms, which impacts its privacy compliance and security posture. The WHOIS data confirms the domain's legitimacy and consistent registration details aligned with the business identity. Overall, the website is a credible and valuable resource but would benefit from technical and compliance improvements.

A

APEF

apef.ch

40

APEF is a well-established non-profit association founded in 1983 that supports the parents of students at Institut Florimont in Switzerland. The organization focuses on volunteer coordination, organizing school and charitable events, and providing resources to families. The website is professionally designed using WordPress and WooCommerce, with modern plugins such as Yoast SEO and Breakdance. It features multilingual support (French and English) and integrates social media channels for community engagement. Security measures include HTTPS, Google reCAPTCHA on forms, and standard security headers, although there is room for improvement in cookie consent and public security policies. Overall, the website reflects a trustworthy and credible organization with a clear mission and active community involvement.

A

Association des Anciens Elèves de l'Institut Florimont

floanciens.ch

47

The website represents the Association des Anciens Elèves de l'Institut Florimont, a non-profit alumni association established in 1920, serving former students and professors of Institut Florimont in Switzerland. It provides community engagement through events, information sharing, and membership services. The site is built on Drupal 8 and integrates Google Tag Manager for analytics. The design is professional, mobile-optimized, and accessible, with clear navigation and relevant content for its target audience. Security posture is moderate with HTTPS enabled and secure login forms, but lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is trustworthy and well-positioned within its niche but could improve in security and privacy transparency.

V

Ville de Morges

morgesavenir.ch

48

The website 'Morges Avenir' serves as an official information portal for the city of Morges, Switzerland, focusing on public works, infrastructure projects, and urban environment updates. It targets residents and users of the city, providing timely updates on construction, traffic disruptions, and public announcements. The site is positioned as a government service platform, offering transparency and communication about municipal projects. Technically, the website employs a modern tech stack including HTML5, CSS, JavaScript with jQuery and Bootstrap frameworks, and mapping technologies such as OpenLayers and proj4. It is mobile responsive and provides a moderate performance experience. The site integrates Google Analytics and Google Tag Manager for user tracking but lacks visible privacy and cookie policies, which is a compliance gap. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks visible security headers and formal security or incident response policies. The absence of privacy and cookie policies reduces its privacy compliance score. Overall, the security posture is moderate but could be improved with better header implementation and transparency. The overall risk assessment is low, given the official nature and trustworthy domain registration. Strategic recommendations include implementing privacy and cookie policies, adding security headers, and publishing vulnerability disclosure and incident response information to enhance trust and compliance.

S

SIS Morget

sismorget.ch

52

SIS Morget is a regional fire and rescue service operating in the Morges region of Switzerland, staffed primarily by approximately 200 volunteer firefighters. The organization provides comprehensive emergency response services including firefighting, rescue operations, and public safety education. Their website reflects a strong community focus with active volunteer recruitment and engagement through social media platforms such as Instagram and TikTok. Technically, the website is built on WordPress using Elementor and Smart Slider 3, with modern web technologies and good mobile optimization. Security posture is solid with HTTPS enforcement and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and audience.

V

Ville de Morges

morgesdialogue.ch

47

The website 'Morges Dialogue - Démarche Participative' is an official municipal platform dedicated to engaging the population of Morges, Switzerland, in urban planning and development projects. It provides detailed information on participatory processes, legal frameworks, and specific urban initiatives such as Prairie-Nord and Morges Gare-Sud. The site targets local residents, associations, and municipal stakeholders, aiming to foster transparent and inclusive urban development. Technically, the website is built with standard HTML5 and CSS3, with no detected advanced frameworks or CMS. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating minimal user tracking. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are important for GDPR compliance. The SSL configuration could not be confirmed from the data provided. No incident response or vulnerability disclosure information is present. The domain WHOIS data aligns well with the municipal nature of the site, supporting its legitimacy. Overall, the website is a trustworthy and informative municipal resource but would benefit from enhanced security measures, privacy compliance, and technical modernization to improve user trust and regulatory adherence.

P

Patinoire des Eaux Minérales

patinoiremorges.ch

48

Patinoire des Eaux-Minérales is a local public ice rink facility in Morges, Switzerland, offering recreational ice skating, events, and group activities. The website serves as an information portal for schedules, pricing, regulations, and contact details, targeting local residents and visitors interested in ice sports. The business operates as a small-scale public service with a focus on community engagement and sports promotion. Technically, the site is built on WordPress using the Divi theme, with common plugins for GDPR compliance and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is moderate with HTTPS enabled and some security plugins in use, but lacks explicit security headers and published security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the website is trustworthy and safe for general audiences, with room for improvement in security and compliance documentation.

C

Carac Media SA

carac.tv

48

Carac Media SA operates carac.tv, a Swiss French-language media platform offering live TV streaming, replay content, and program guides. Positioned as a niche broadcaster under Media One Group, it targets Swiss viewers interested in character-based TV content. The website employs modern web technologies including Nuxt.js and Vue.js, integrates advertising via Smart AdServer, and uses Google Tag Manager for analytics. Cookie consent is managed through Axept.io, reflecting some privacy compliance efforts. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of explicit privacy policies and security incident contacts indicates room for improvement. Overall, the site is professional, trustworthy, and well-branded, serving its audience effectively.

M

Media One Group

mesradios.ch

53

MesRadios.ch is a digital platform operated by Media One Group, the leading private radio group in French-speaking Switzerland. The platform provides centralized account management for multiple radio brands under Media One Group, targeting regional listeners in the Lake Geneva area. The website offers social login options and integrates Google reCAPTCHA for secure authentication. The business is well positioned in the regional media market with a focus on radio broadcasting and digital content delivery.

Media One Group is a prominent private media company operating in the French-speaking region of Switzerland, specializing in radio and television broadcasting. The group manages multiple radio stations and TV channels, serving a diverse audience with music, entertainment, and regional news. Their business model includes advertising sales, event sponsorship, and production services, positioning them as a leading media entity in the Lake Geneva area. Technically, the website is built on WordPress with modern plugins and tracking tools, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and CAPTCHA usage, but lacks advanced security headers and explicit privacy policies. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

M

Maxi-Rires | Festival d'humour international

maxi-rires.ch

51

Maxi-Rires is an international humor festival website primarily targeting a general audience interested in comedy events. The site is built on WordPress using the Divi theme and includes WooCommerce, suggesting some e-commerce capabilities, likely for ticket sales or merchandise. The technical infrastructure is standard for small to medium event organizations, with moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, and no contact information or security policies are evident, which impacts its trustworthiness and compliance posture. The Google Analytics plugin is present but not configured, indicating limited user tracking at this time. Security headers are absent, and no incident response or vulnerability disclosure information is provided, which suggests a low security maturity level. Overall, the website is functional and professionally designed but requires significant improvements in privacy, security, and compliance to enhance trust and reduce risk.

B

BAM - La Voie des Sens

lavoiedessens.ch

48

BAM - La Voie des Sens is a niche tourism operator in Switzerland offering unique gourmet experiences aboard the historic Bière Apples Morges (BAM) train. The company focuses on culinary outings such as gastronomic meals, fondue, beer and burgers, brunch, and wine pairings, targeting tourists and locals interested in regional terroir and heritage. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. However, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers. Contact options are limited to a newsletter subscription form, with no direct emails or phone numbers visible. Social media presence on Facebook and Instagram supports brand trust. Overall, the site is credible and well-positioned in its market niche but should improve privacy compliance and security headers to enhance trust and regulatory adherence.

B

Bolle & Cie SA

bolle.ch

70

Bolle & Cie SA operates a well-established Swiss wine retail business with a history dating back to 1865. Their website, bolle.ch, serves as an e-commerce platform offering a variety of Swiss wines including their flagship La Licorne collection. The company targets wine consumers and enthusiasts primarily in Switzerland, leveraging a professional online presence with clear branding and consistent messaging. The business model focuses on direct online sales, complemented by wine tastings and events, positioning Bolle & Cie as a reputable player in the Swiss wine retail market. Technically, the website is built on the Shopify platform using the Dawn theme, incorporating modern web technologies and third-party marketing and analytics tools such as Google Tag Manager and Sendinblue. The site demonstrates good performance, mobile optimization, and accessibility standards. Security measures include HTTPS enforcement, standard security headers, and captcha protection on forms, reflecting a mature security posture. However, explicit security policies and incident response information are not publicly available. From a security and compliance perspective, the site includes comprehensive privacy and cookie policies with consent mechanisms, indicating GDPR awareness and compliance. No critical vulnerabilities or suspicious activities were detected. The WHOIS data confirms the legitimacy of the domain registration, consistent with the company's Swiss origins and long history. Overall, bolle.ch is a professionally managed e-commerce site with strong business credibility, good technical implementation, and solid security practices. Strategic improvements could include publishing detailed security policies, incident response contacts, and terms of service to enhance transparency and trust further.

N

Nanoxi Sàrl

nanoxi.com

59

Nanoxi Sàrl is a Swiss web agency based in Sion, Valais, specializing in web creation, ecommerce solutions, SEO/SEA, mobile applications, and Microsoft-based IT consulting. The company targets SMEs, associations, and local entities seeking digital transformation with a focus on quality and proximity. Their market position is strengthened by partnerships with Microsoft and Google certifications, offering a comprehensive digital service portfolio. Technically, the website uses modern web standards, Umbraco CMS, and integrates analytics tools such as Google Analytics and Mouseflow, indicating a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the website is professional, well-branded, and trustworthy, though privacy compliance needs enhancement.

E

ello communications SA

myello.ch

62

ello communications SA is a Swiss telecommunications company based in Neuchâtel, offering services including television, radio, internet, data transfer, and telephony. The company emphasizes local production, ecological responsibility, and strong data protection practices. The website serves as a login portal for customers to access their personal accounts and highlights the company's commitment to privacy and local hosting. Technically, the website employs modern web technologies such as Google Tag Manager, Stripe.js, and Modernizr, with responsive design and good SEO practices. Security measures include HTTPS enforcement and CSRF protection on forms, though explicit security headers and cookie consent mechanisms are absent. The security posture is solid with no visible vulnerabilities or exposed sensitive data, but the lack of published incident response and vulnerability disclosure policies suggests room for improvement. Privacy compliance is strong, with a comprehensive privacy policy and a named Data Protection Officer. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market positioning. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance the security and compliance profile further.

E

ello Mail :: Welcome to ello Mail

ellomail.ch

55

ello Mail is a Swiss-based webmail service platform providing users with email access and management capabilities through a web interface. The website primarily serves as a login portal for users to access their email accounts. The platform uses the Roundcube webmail system with custom skins and scripts to deliver its service. The target audience is general users requiring secure and reliable email services. The business model is focused on providing webmail hosting and management, with no explicit information on market positioning or company size. Technically, the website employs standard web technologies including jQuery, Bootstrap, and Google Fonts, delivering a basic but functional user experience. Mobile optimization and accessibility are present but minimal, and SEO practices are basic. Security posture shows use of HTTPS and secure login forms with CSRF tokens; however, no advanced security headers or policies are detected, and privacy and cookie policies are absent, which may impact user trust and compliance. No contact information or social media presence is visible on the login page, limiting transparency. Overall, the website is functional but lacks comprehensive privacy, security, and business information disclosures.

I

ISP Solutions SA

isp-solutions.net

51

ISP Solutions SA is a Swiss-based telecommunications and IT infrastructure service provider specializing in colocation rack services, dedicated physical servers, network transit, leased lines, VPNs, firewall management, and consulting. The company targets businesses and IT professionals seeking reliable hosting and network solutions primarily in Switzerland. Their website is professionally designed, mobile-optimized, and provides comprehensive service descriptions and contact information. The presence of the Certified Swiss Hosting badge adds to their trustworthiness. Technically, the website uses modern frontend technologies including Bootstrap, jQuery, Font Awesome, and integrates Google Analytics and Tag Manager for user tracking. Security posture is moderate with HTTPS implied but lacks explicit security headers and formal privacy or cookie policies, which are compliance gaps. WHOIS data is incomplete and inconsistent, which raises some legitimacy concerns, though the website content and certifications suggest a legitimate business. Overall, the website scores well in business credibility and technical implementation but needs improvements in privacy compliance and WHOIS transparency.

H

HexaGroup SA

hexagroup.ch

57

HexaGroup SA is a Swiss-based consortium of five expert companies specializing in computer-aided design (CAD), product data management (PDM), and product lifecycle management (PLM) solutions, primarily serving manufacturing, construction, and engineering sectors in Switzerland and Liechtenstein. As an Autodesk Gold Partner, HexaGroup offers consulting, training, technical support, and software installation services, leveraging a strong partner network to cover multiple Swiss regions. The website is professionally designed, content-rich, and provides clear navigation, targeting business professionals and companies in relevant industries. Technically, the site uses modern JavaScript libraries and analytics tools but lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security posture. No direct contact emails or phone numbers are published, with contact primarily via forms. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the site presents a trustworthy and professional image with moderate technical maturity and security readiness.

K

KIS Communication

kiscommunication.ch

48

KIS Communication is a small Swiss-based graphic design and web development service provider founded in 2017 by Kim Sartori. The company offers branding, graphic design, and WordPress-based web services primarily targeting clients in the Broye vaudoise region. The website is professionally designed with a clear portfolio showcasing their work and provides multiple contact channels including email, phone, and social media links. Technically, the site is built on WordPress using modern frameworks like UIkit and includes SEO optimization via Yoast. Security measures include HTTPS and CAPTCHA on forms, but lack some standard security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and well-maintained but could improve in security and privacy compliance.

N

Nomady

nomady.camp

64

Nomady operates an online platform specializing in booking nature-centric campsites, cabins, and shelters primarily across Germany, Switzerland, Italy, and Austria. The company targets outdoor enthusiasts seeking authentic and private camping experiences. The website is professionally designed with excellent content quality and strong branding consistency, supported by active social media channels. Technically, the site leverages modern frameworks such as Next.js and React, with optimized performance and mobile responsiveness. Security posture is good with HTTPS enforced and no exposed sensitive data, though it lacks some security headers and formal privacy/cookie policies. WHOIS data is privacy protected but consistent with a legitimate hospitality business. Overall, Nomady presents a trustworthy and mature digital presence in the hospitality sector.

S

SI-Solutions GmbH

si-solutions.ch

43

SI-Solutions GmbH is a Swiss-based company specializing in SmartHome and ICT solutions, offering a range of services including module sales, downloads, and support. The company targets businesses and individuals interested in technology solutions for smart homes and ICT infrastructure. The website is built on a WordPress platform using Elementor, indicating a moderate level of digital maturity with basic mobile optimization and SEO features. However, the content is minimal and lacks comprehensive policy documentation. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website presents a small technology service provider with room for improvement in security and compliance.

cadwork is a software company specializing in CAD/CAM and BIM solutions for wood construction, joinery, civil engineering, and contractor project management. The company targets professionals in construction and engineering sectors, offering tools that cover design, production, and machine control. The website indicates a regional presence primarily in Switzerland with multiple related domains serving other countries. Technically, the website uses modern frontend technologies such as Bootstrap and jQuery, providing a good user experience and mobile optimization. However, SEO and accessibility features are basic, and no CMS or hosting details are evident. Security posture is limited due to missing HTTPS verification and lack of security headers, and no privacy or cookie policies are present, indicating compliance gaps. WHOIS data is missing, reducing trustworthiness, but the website content and related domains suggest a legitimate business. Overall, the site is functional and professional but requires improvements in security, privacy compliance, and transparency.

The website cadwork.swiss is registered to Cadwork Holz AG, a Swiss company founded in 2016. However, the website content is currently inaccessible, returning a 403 Forbidden error page that blocks access to any business or informational content. This severely limits the ability to assess the company's online presence, services, or compliance posture. The domain registration data is consistent and legitimate, matching the company name and country. The technical infrastructure appears minimal with no DNSSEC enabled and no visible security headers or analytics scripts. The lack of accessible content and policies indicates a low digital maturity level at this time. Security posture is weak due to missing standard protections and the access restriction itself.