Switzerland security reports

H

Hotel Aarauerhof

aarauerhof.net

64

Hotel Aarauerhof is a modern self check-in hotel located in the center of Aarau, Switzerland, offering 75 rooms with amenities such as highspeed WLAN and breakfast. The website is professionally designed using modern web technologies including Next.js and React, with integration of Usercentrics for consent management and Aleno for reservations. The security posture is good with HTTPS enforced and no exposed sensitive data, though some security headers and incident response information are missing. The domain WHOIS data is unavailable, which raises some legitimacy concerns, but the website content and business presentation are professional and trustworthy. Overall, the site is well-optimized for SEO, mobile, and accessibility, targeting business travelers and tourists seeking flexible accommodation.

The website adia.tv is registered to Unblu inc., a Swiss company established in 2007. The site content is extremely minimal, containing only a single external link to adiacom.ch, with no additional business description, contact information, or user engagement features. This limits the ability to fully assess the business model, target audience, or market position. Technically, the site uses Cloudflare DNS but lacks DNSSEC and security headers, indicating a basic security posture. There is no evidence of privacy or cookie policies, which impacts GDPR compliance negatively. The domain registration is consistent and legitimate, with appropriate domain status flags and a long registration history, supporting trustworthiness. Overall, the website appears to be a placeholder or minimal presence rather than a fully developed business site.

AutoScout24.ch is a leading online automotive marketplace in Switzerland, offering vehicle listings for buyers and sellers. The platform is part of Scout24 AG, a reputable company in the digital classifieds sector. The website employs modern web technologies such as React and Next.js and is protected by Cloudflare's security services, including Turnstile captcha, indicating a strong focus on security and bot mitigation. However, the current content is inaccessible due to the Cloudflare WAF challenge, limiting the ability to fully assess the website's content, privacy policies, and user experience. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website appears to be a professional and established platform in the transportation sector, but the security challenge page restricts comprehensive analysis.

S

smARTec Veranstaltungstechnik AG

smartec.com

38

smARTec Veranstaltungstechnik AG is a Swiss-based company specializing in mobile event technology and digital events, offering services such as lighting, sound, and video technology rental and operation. Positioned as a Swiss industry leader with approximately 2000 projects annually, the company targets corporate, public, and exhibition event organizers. The website is professionally designed, content-rich, and well-structured, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS with modern JavaScript libraries and integrates analytics tools like Google Analytics and Matomo, indicating a good level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website and certifications. Overall, the site is trustworthy and business credible but would benefit from improved transparency in domain registration and security policies.

S

Stadt Aarau

aarau.ch

70

Stadt Aarau operates as the official municipal government website for the city of Aarau, Switzerland, providing comprehensive public services, cultural information, and administrative resources to residents, businesses, and visitors. The site positions itself as a regional hub with a strong focus on urban development, social services, and citizen engagement, including innovative features like a live video chat for direct communication with city officials. The website's content is well-structured, professionally designed, and accessible, reflecting a mature digital presence appropriate for a government entity. Technically, the website employs modern JavaScript libraries such as jQuery and Font Awesome, alongside a cookie consent framework that ensures GDPR compliance and user privacy. The CMS appears to be custom or proprietary, supporting extensive navigation and content management. Performance and mobile optimization are good, with accessibility features implemented to support diverse user needs. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms that block third-party scripts until user approval. While explicit security headers are not fully visible in the provided data, the overall posture is strong with no evident vulnerabilities or exposed sensitive information. However, the absence of a security.txt file and explicit incident response policies suggests room for improvement in transparency and vulnerability management. Overall, Stadt Aarau's website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its target audience with relevant content and digital services, though it could enhance its security posture by publishing formal security policies and expanding security header usage.

K

KENDRIS Ltd

kendris.com

74

KENDRIS Ltd is a Swiss-based international advisory and fiduciary services firm with a strong focus on wealthy individuals, family offices, corporations, and institutional clients. The company emphasizes its Swiss entrepreneurial roots, confidentiality, and independence from banks and financial institutions. With over 110 years of history and a presence in multiple countries, KENDRIS offers a broad range of services including trusts, corporate services, tax and legal advice, family office services, and alternative investment fund solutions through its subsidiary KENDRIS Capital Limited. The website is professionally designed, well-structured, and provides comprehensive information about its services and corporate group. Technically, the website employs modern technologies such as Google Tag Manager, CookieYes for consent management, and Mautic for marketing automation. It is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and secure forms, though it lacks explicit security policy and incident response information. Privacy compliance is well addressed with clear cookie and privacy policies and GDPR adherence. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which partially impacts the overall trustworthiness score. Despite this, the professional presentation and detailed business information mitigate some risks. Overall, the website represents a credible and mature financial services firm with room for improvement in transparency around security policies and domain registration verification.

C

Coop Rechtsschutz AG

cooprecht.ch

64

Coop Rechtsschutz AG is a Swiss legal protection insurance provider offering comprehensive insurance products for private individuals, businesses, and special sectors such as health insurers and unions. The company maintains a professional online presence with clear navigation, multi-language support, and a blog providing relevant legal content. Their market position is supported by numerous partnerships with reputable Swiss organizations, enhancing trust and reach. Technically, the website uses a proprietary CMS (SharedGWA), integrates Matomo analytics for privacy-conscious tracking, and employs modern frontend technologies like Swiper.js for UI elements. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and policies are not published. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. Overall, the website reflects a mature digital infrastructure aligned with business goals and regulatory requirements.

Auto Schmid AG operates as an authorized Mercedes-Benz dealership in Switzerland, providing a comprehensive range of automotive services including new and used vehicle sales, leasing, financing, and after-sales services. The company benefits from strong brand association with Mercedes-Benz Schweiz AG, leveraging official product information and service offerings. The website targets car buyers and Mercedes-Benz customers in the Swiss market, offering a professional and user-friendly digital experience. Technically, the website is built on a modern stack including Vue.js and Web Components, hosted on Mercedes-Benz's OneWeb platform with Adobe Experience Manager as the CMS. It demonstrates good performance, mobile optimization, and accessibility. The site employs advanced analytics and marketing tools such as Google Analytics 360, Datadog RUM, and Salesforce marketing suites, with appropriate cookie consent mechanisms. From a security perspective, the site enforces HTTPS, uses strong security headers, and avoids exposing sensitive data. However, it lacks explicit security policy and incident response information, which could be improved. Privacy compliance is robust, with comprehensive privacy and cookie policies aligned with GDPR and Swiss data protection laws. Contact information is transparent and complete, including a named data protection officer. Overall, the website presents a trustworthy, professional, and secure online presence for Auto Schmid AG, supporting its business objectives effectively. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

N

Nau.ch

nau.ch

49

Nau.ch is a Swiss online news portal delivering news content focused on Switzerland, covering sports, politics, and people. The website targets a general Swiss audience and positions itself as a modern news platform with multimedia content including videos. Technically, the site uses the Qwik framework, integrates Google Analytics and Tag Manager, and employs OneSignal for push notifications, indicating a mature digital infrastructure optimized for performance and mobile responsiveness. Security-wise, the site enforces HTTPS and appears to implement standard security headers, but lacks explicit published privacy and cookie policies, which are critical for GDPR compliance. No contact or incident response information is readily available, which could impact user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security transparency.

B

Busbetrieb Aarau AG (BBA)

busaarau.ch

52

Busbetrieb Aarau AG (BBA) is a regional public transportation company operating bus services in Aarau, Switzerland. The company provides comprehensive transit services including bus lines, schedules, ticketing options, and customer support. Their website is designed to serve local commuters and visitors with real-time information and service updates. The business operates in the transportation sector with a medium-sized organizational footprint and a clear focus on regional mobility solutions. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses a secure CMS platform but lacks some advanced security headers and does not publish a formal security or incident response policy. Privacy compliance is partially addressed with a privacy policy and cookie information, though no explicit cookie consent mechanism is present. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

A

Aarau Info

aarauinfo.ch

56

Aarau Info is a local tourism promotion entity focused on showcasing the city of Aarau, Switzerland, as an attractive destination for visitors. The website provides comprehensive information about cultural events, guided tours, accommodation, and local highlights, targeting tourists and residents interested in leisure activities. The business operates primarily as a regional tourism information provider with a small organizational size. Technically, the website employs modern web technologies including JavaScript modules, lazy loading, and plausible analytics, hosted on a cloud platform with good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and formal policies are absent. Privacy compliance is partial, lacking cookie consent mechanisms and explicit GDPR indicators. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional, trustworthy, and well-positioned for its market niche.

V

Verein Rüeblimärt Aarau

rueblimaert-aarau.ch

43

Verein Rüeblimärt Aarau organizes one of Switzerland's largest annual markets focused on regional products, sustainability, and community engagement. The website effectively communicates the event's nature, schedule, and cultural significance, targeting a general audience interested in local produce and natural experiences. Technically, the site employs modern web standards including responsive images and privacy-conscious analytics via Matomo. However, it lacks explicit privacy and cookie policies, and security headers are not evident, which are areas for improvement. The domain registration data aligns well with the website's claims, enhancing trustworthiness. Overall, the site is professional and trustworthy but could benefit from enhanced privacy and security disclosures.

F

FC Aarau

fcaarau.ch

45

FC Aarau is a Swiss football club with a long history dating back to 1902, competing in the Swiss Challenge League. The website serves as the official digital presence for the club, providing information about matches, teams, ticketing, membership, and merchandising. It targets football fans and supporters primarily in Switzerland. The business model revolves around sports entertainment, fan engagement, sponsorships, and merchandise sales. The club maintains a solid market position within Swiss football and leverages digital channels effectively to engage its audience. Technically, the website is built on WordPress with modern web technologies including SVG graphics, responsive design, and Matomo analytics for privacy-conscious tracking. The site is hosted by a Swiss provider (h2g.ch) and demonstrates good performance and accessibility standards. SEO and content structure are well implemented, supporting discoverability and user experience. From a security perspective, the site uses HTTPS and disables cookies for analytics, showing a privacy-aware approach. However, it lacks some security headers like Content-Security-Policy and X-Frame-Options, and does not provide explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low, with the site being trustworthy and professionally maintained. Strategic recommendations include implementing a cookie consent mechanism, enhancing security headers, and publishing security and incident response policies to improve compliance and user trust.

V

Visus Service GmbH

wisym.ch

50

The Wirtschaftssymposium Aargau website represents a well-established Swiss event organizer, Visus Service GmbH, hosting the 21st annual economic symposium in Aarau. The event targets professionals from business, politics, and society, focusing on Switzerland's stability amidst global challenges. The site is professionally designed with clear navigation, high-quality content, and structured data enhancing search engine visibility. Technical infrastructure includes privacy-conscious Matomo analytics and modern web technologies, hosted on reliable Swiss infrastructure. Security posture is good with HTTPS and privacy-respecting analytics, though improvements are recommended in cookie consent and security headers. Overall, the site reflects a credible and trustworthy business presence with strong regional partnerships.

C

Comp-On AG, HR Solutions

comp-on.ch

58

Comp-On AG is a Swiss-based company specializing in HR compensation solutions, targeting businesses seeking practical and understandable approaches to remuneration questions. The company operates a professional website built on WordPress with the Divi theme, integrating modern SEO and analytics tools such as Yoast SEO and Google Analytics. The website content is well-structured and relevant to its niche market, reflecting a small-sized enterprise with a clear business focus. Technically, the site demonstrates moderate performance and good mobile optimization, though some accessibility features could be enhanced. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks explicit security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism present but missing a formal privacy policy and terms of service. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the site is trustworthy and professional but would benefit from improved privacy and security documentation to enhance compliance and user trust.

The website schooldoctors-medsektion.net serves as an informational and educational platform dedicated to school and kindergarten doctors associated with Waldorf educational institutions. It provides comprehensive resources including the professional profile of the role, training opportunities, literature, job listings, and current news relevant to this niche medical-educational community. The site targets medical professionals and educators involved in Waldorf schools, primarily in the German-speaking region, with content presented in German and English. Technically, the website is built on TYPO3 CMS with Bootstrap 4 and jQuery, indicating a modern and maintainable infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured data. Hosting appears stable with a reputable registrar and no blocking mechanisms detected. However, some security best practices such as DNSSEC and security headers are missing, and there is no cookie consent mechanism, which could be improved. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website's purpose and geographic focus, supporting legitimacy. Overall, the website is a trustworthy, professional resource for its specialized audience, with room for improvement in privacy compliance and security hardening to enhance user trust and regulatory adherence.

S

swisspor Gruppe

swissporgroup.com

61

swisspor Gruppe is a Swiss family-owned company specializing in sustainable building products, systems, and services aimed at creating energy-efficient and economically viable buildings. The company emphasizes sustainability, architectural quality, safety, and technical feasibility, targeting builders and partners in the construction industry. The website is professionally designed, multilingual, and provides comprehensive information about the company's offerings and values. Technically, the site uses modern web technologies including Google Tag Manager and CookieHub for consent management, ensuring GDPR compliance. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are absent. The WHOIS data is missing, which raises concerns about domain legitimacy, but the professional presentation and valid contact details mitigate some risk. Overall, swisspor presents a credible business presence with room for improvement in security transparency and domain registration clarity.

S

swisspor AG

swisspor.com

61

swisspor AG is a Swiss-based manufacturer specializing in energy-efficient building envelope products, including thermal insulation and sealing membranes. The company positions itself as a leader in Switzerland with a comprehensive product portfolio and a strong emphasis on quality and sustainability. Their website reflects a mature digital presence with multimedia content, configurator tools, and detailed product information. Technically, the site uses modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a minor concern but does not detract from the overall legitimacy and professionalism of the business. Contact information and social media presence further reinforce trustworthiness.

C

CREATON

creaton.ch

68

CREATON is a well-established manufacturer and supplier specializing in roofing products, including high-quality clay roof tiles and economical concrete roof stones, complemented by extensive original and system accessories. The company targets both B2B and B2C customers in the construction and renovation sectors, maintaining a strong market presence in Switzerland and Europe. Their website reflects a professional and consistent brand image, offering multilingual support and comprehensive product information. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, integrating modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The website demonstrates good mobile optimization and SEO practices, ensuring a positive user experience.

N

NordSüd Verlag AG

nord-sued.com

50

NordSüd Verlag AG is a well-established Swiss children's book publisher with a strong market presence and a comprehensive digital platform. The website showcases a rich catalog of children's books, events, and related materials, targeting a general audience including parents, educators, and book enthusiasts. The company leverages modern web technologies including WordPress, WooCommerce, and Matomo analytics to provide a performant and user-friendly experience. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though DNSSEC is not enabled, representing an area for improvement. Privacy compliance is robust with clear cookie consent and a comprehensive privacy policy. Overall, the website reflects a professional and trustworthy business with consistent branding and high-quality content.

B

Baobab Books

baobabbooks.ch

49

Baobab Books is a Swiss non-profit organization specializing in publishing intercultural children's books and promoting reading skills through educational projects and cross-border initiatives. The website reflects a well-established niche publisher with a clear focus on education and cultural dialogue. The content is professionally presented, with rich multimedia elements including audiobooks and podcasts, targeting children, youth, educators, and families. The organization emphasizes intercultural understanding and reading promotion as its core mission. Technically, the website is built on TYPO3 CMS with Bootstrap 5 and modern JavaScript libraries, ensuring good mobile optimization, accessibility, and SEO. The site uses HTTPS with good SSL configuration but lacks some advanced security headers. No major vulnerabilities or exposed sensitive data were detected. Privacy compliance is evident with a comprehensive GDPR-compliant privacy policy, though a cookie consent mechanism is missing. Security posture is solid but could be improved by adding explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of direct contact emails and phone numbers suggests a preference for contact via web forms, which are present and functional. External links to trusted domains like Instagram, Vimeo, and Deutschlandfunk support the organization's credibility. Overall, Baobab Books presents a trustworthy, professional, and content-rich website aligned with its educational and non-profit mission. Strategic improvements in security headers and cookie consent would enhance compliance and security posture further.

T

Thomann

thomannmusic.ch

61

Thomann is a leading European retailer specializing in musical instruments, studio, lighting, and sound equipment. The website targets musicians and music enthusiasts primarily in Switzerland and Europe, offering a broad range of products and services including repair and maintenance. The company positions itself as a market leader with a strong online presence and comprehensive customer support. Technically, the website employs modern JavaScript frameworks, responsive design, and integrates Google Tag Manager and Cloudflare Turnstile CAPTCHA for security and analytics. Security posture is strong with HTTPS, secure forms, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR, providing a safe and user-friendly shopping experience.

S

SENS eRecycling

sens.ch

67

SENS eRecycling is a Swiss non-profit foundation specializing in the sustainable recycling of electrical and electronic equipment. The organization operates a well-established take-back system that facilitates environmentally friendly disposal for both private individuals and business partners. Their market position is strong within Switzerland, supported by a comprehensive partner network and a history of over 30 years in the industry. The website reflects a professional and consistent brand image, targeting environmentally conscious consumers and businesses. Technically, the site uses modern web technologies including Magnolia CMS, JavaScript frameworks, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Intercom for user engagement and tracking.

Q

Qube AG

itds.ch

64

Qube AG operates as a web and advertising agency based in Switzerland, specifically targeting the Aarau and Bern regions. Their website presents a professional image focused on branding, corporate communication, and digital strategy services. The company appears to serve businesses and organizations seeking creative and digital marketing solutions. The website is well-structured with modern design elements and uses technologies such as FontAwesome, Vimeo player, and analytics tools like Matomo and Google Tag Manager. However, the absence of visible privacy and cookie policies and lack of explicit contact information limit the transparency and compliance posture of the site. Security headers are not detected, indicating room for improvement in security hardening. The WHOIS data is unavailable or privacy protected, which is common for small agencies but reduces trust signals. Overall, the site is functional and professional but could benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

Q

Qube AG

qube.ag

64

Qube AG operates as a web and advertising agency based in Aarau and Bern, Switzerland, offering services including branding, corporate communication, digital strategy, and web design. The company targets business clients seeking professional digital and advertising solutions within the Swiss market. The website reflects a small, regionally focused agency with consistent branding and good content quality. The technical infrastructure includes modern web technologies such as Vimeo for video content, FontAwesome for icons, and analytics tools like Matomo and Google Tag Manager, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies, as well as lack of security headers, suggests room for improvement in compliance and security posture. The WHOIS data is privacy protected or unavailable, which is typical for small businesses but slightly reduces trustworthiness. Overall, the website is professional and functional but would benefit from enhanced security and privacy transparency to improve user trust and compliance.

F

Fair-ON-Pay Association

fair-on-pay.com

52

Fair-ON-Pay Association is a Swiss-based non-profit organization founded in 2022 that promotes equal pay in companies through certification and auditing services. It offers a recognized certification process with multiple levels, audited by SGS, to help companies demonstrate their commitment to equal pay and social responsibility. The association is a member of the Equal Pay International Coalition (EPIC), enhancing its credibility and international standing. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. It integrates Google Analytics and a GDPR-compliant cookie consent mechanism, reflecting a mature digital presence. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website and business present a trustworthy and professional image with clear contact information and partner relationships.

H

H2G Internetagentur AG

h2g.ch

46

H2G Internetagentur AG is a Swiss-based web agency located in Aarau, specializing in consulting, design, development, and hosting of websites and web applications. The company targets businesses and institutions seeking innovative and user-centric digital solutions. Their market position is that of a reputable regional agency with a diverse client base, including international companies and local institutions. The website reflects a professional and modern digital presence with clear service offerings and client references. Technically, the website employs modern web technologies including JavaScript, SVG graphics, and Matomo for privacy-conscious analytics. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Hosting appears to be managed internally or via trusted providers, with HTTPS enforced and minimal tracking. From a security perspective, the site uses HTTPS and respects user privacy by disabling cookies in analytics and honoring Do Not Track signals. However, it lacks some advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. The risk profile is low, with recommendations to enhance security headers and add explicit cookie consent mechanisms to further improve privacy compliance and security posture.

R

RGS Racing

rgs-racing.com

68

RGS Racing operates as a motorsport racing team and academy with an integrated e-commerce platform hosted on Shopify. The website provides comprehensive information about the team, sponsors, bikes, calendar, and offers merchandise through an online store. The target audience includes motorsport enthusiasts and customers interested in racing-related products and services. The business model combines sports promotion with direct-to-consumer sales, positioning itself as a niche player in the motorsport and racing e-commerce sector. Technically, the website leverages Shopify's robust platform, utilizing modern web technologies including JavaScript, CSS, and Shopify Liquid templates. The site is well-optimized for mobile devices, exhibits good performance, and incorporates SEO best practices. The use of Shopify Payments and integrated analytics indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and includes cookie consent mechanisms aligned with GDPR requirements. However, there is no explicit security policy or incident response contact information available, and the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website presents a professional and trustworthy front for RGS Racing, but the lack of WHOIS data and explicit security policies suggests areas for improvement in transparency and security posture. Strategic recommendations include establishing a clear security policy, publishing incident response contacts, and verifying domain registration details to enhance trust and compliance.

M

Meister Concept

getyourcertificate.ch

42

Get Your Certificate is a Swiss-based service platform focused on providing certification and examination facilitation for various Swiss medical societies, primarily in surgical and specialized medical fields. The website is professionally branded and targets medical professionals seeking certification in Switzerland. The business operates as a small entity under Meister Concept, with partnerships evident through linked domains. Technically, the website uses standard web technologies (HTML, CSS, JavaScript) but lacks advanced frameworks or CMS indications. Mobile optimization is currently poor, and no advanced SEO or accessibility features are evident. Security posture is moderate with HTTPS implied but no visible security headers or policies. Privacy compliance is minimal with no privacy or cookie policies found. Contact information is absent from the landing page, limiting direct communication channels. Overall, the site is functional and professional but requires improvements in privacy, security, and mobile responsiveness to enhance trust and compliance.

M

Medizinische Sektion am Goetheanum

medsektion-goetheanum.org

59

The Medizinische Sektion am Goetheanum is a specialized non-profit organization focused on anthroposophic medicine, providing educational programs, research, and networking opportunities for healthcare professionals and interested individuals. The website reflects a niche healthcare and educational entity with a consistent brand and professional presentation. Technically, the site uses modern web technologies with a custom or proprietary framework, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published policies, indicating room for improvement in compliance and incident readiness. Overall, the site is trustworthy and safe, with no signs of malicious content or blocking mechanisms.

A

AI House Association

aihousedavos.com

71

AI House Davos is a non-commercial, independent initiative founded in 2023 by the ETH AI Center and Merantix, based in Davos, Switzerland. It serves as a multi-stakeholder platform to foster dialogue and collaboration among AI researchers, industry leaders, policymakers, and investors. The organization hosts an annual event coinciding with the World Economic Forum, focusing on sustainable and secure AI development. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and compliance tools such as Cookiebot for privacy management. However, the absence of WHOIS registration data raises questions about domain legitimacy, though the association with reputable organizations mitigates concerns. Security posture is solid with HTTPS and consent mechanisms, but could be enhanced with explicit security headers and published security policies.

C

Casinoble

casinoble.xyz

10

Casinoble is a well-established media and affiliate platform focused on the Swiss gambling market, providing comprehensive reviews, guides, and educational content on online casinos, sports betting, bonuses, and payment methods. The website demonstrates a mature digital presence with a professional design, structured data implementation, and multilingual support through related country-specific domains. Technically, the site is built on WordPress with modern analytics and tracking tools, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS and domain transfer protection, though DNSSEC is not enabled and some advanced security headers are missing. Privacy and cookie policies are present and GDPR compliant, but direct company contact emails and phone numbers are not publicly listed, relying instead on contact forms. The domain registration is transparent and consistent with the business claims, enhancing trustworthiness. Overall, Casinoble presents a credible, professional, and secure platform for its target audience.

S

Shop Super Natural Club

supernaturalclub.ch

69

Shop Super Natural Club is a Swiss-based e-commerce business specializing in organic kombucha, lemonades, and other soft drinks. The company positions itself as a niche organic beverage brand with a focus on authentic Swiss craft products. Their online presence is built on the Shopify platform, leveraging modern web technologies and marketing tools such as Klaviyo and Facebook Pixel to engage customers and drive sales. The website is well-designed, mobile-optimized, and provides a smooth user experience with clear navigation and relevant content. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, direct contact information such as emails or phone numbers is not publicly listed, which may impact customer trust and support accessibility. Security posture is strong with HTTPS, security headers, and form protection via hCaptcha, but lacks a dedicated security policy or incident response information. Overall, the site is legitimate, secure, and professionally maintained, suitable for its target market.

F

FELCO SA

felco.com

67

FELCO SA is a Swiss precision manufacturing company specializing in pruning shears and cutting tools, targeting gardeners and professionals who require high-quality cutting solutions. The company maintains a strong market position as a reputable Swiss brand with a focus on innovation and sustainability. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations with marketing and analytics tools such as Google Tag Manager, Klaviyo, and Rakuten Advertising. The technical infrastructure is robust, with good performance, mobile optimization, and basic accessibility features. Security posture is strong with HTTPS enforcement, security headers, and use of CAPTCHA for forms, though explicit privacy and cookie policies are not detected in the provided content. The absence of WHOIS data raises some concerns about domain registration transparency, but the professional website and consistent branding support legitimacy. Overall, the site presents a trustworthy and professional front for FELCO's business operations.

I

INOBAT

batteryman.ch

63

Battery-Man is a Swiss environmental initiative operated by INOBAT, focused on promoting battery recycling and sustainability. The website serves as an educational platform encouraging the public to collect and properly dispose of used batteries, supported by a network of collection points and an online shop for related materials. The initiative has been active since 2012 and maintains a consistent brand presence with active social media channels. Technically, the website uses modern web technologies including JavaScript libraries and video embeds, hosted likely by Qube AG. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. WHOIS data confirms domain legitimacy and consistency with the business claims. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

G

Gilston Digital SA

miru.digital

49

Miru.digital is a Swiss-based SaaS platform operated by Gilston Digital SA, specializing in PDF document archiving, consultation, and distribution with advanced full-text search capabilities. The company positions itself as a Swiss-made, secure, and easy-to-use solution targeting businesses and organizations requiring efficient document management. The website reflects a professional and consistent brand image with clear pricing tiers and client references, indicating an established niche presence in the document management technology sector. Technically, the site is built on WordPress with modern frameworks like Bootstrap and includes essential security features such as HTTPS and cookie consent management. However, it lacks explicit privacy and terms of service documentation, which are critical for compliance and user trust. Security posture is generally good, with use of Google reCAPTCHA and no visible vulnerabilities, but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and professionally maintained, though it would benefit from enhanced privacy and security disclosures to align with best practices.

C

Comvation AG

cubetech.ch

64

Comvation AG is a Swiss digital and web agency based in Bern and Thun, specializing in developing customized digital products including web applications, websites, online shops, SEO, and consulting services. The company positions itself as a passionate and human-centric digital partner, serving businesses seeking tailored digital solutions. Their website demonstrates a professional and modern design with rich content, customer testimonials, and client references, indicating a strong market presence in their regional niche. Technically, the site leverages modern frameworks such as Astro, integrates Google Tag Manager and reCAPTCHA for analytics and security, and employs cookie consent mechanisms to comply with privacy regulations. Security posture is generally good with HTTPS enforced and secure form handling, though explicit security headers and published security policies are absent. The absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy, but the overall business credibility and digital maturity are solid. Strategic recommendations include enhancing security headers, publishing incident response contacts, and verifying domain registration details to improve trust.

S

swipe GmbH

recycling-map.ch

60

Recycling Map is a Swiss-based digital platform operated by swipe GmbH that aggregates over 12,000 recycling collection points across Switzerland. It serves as an informational resource for residents and municipalities to locate recycling stations for various materials, providing detailed data such as location, opening hours, and accepted recyclable goods. The platform supports user engagement through feedback mechanisms and favorites management, positioning itself as a niche environmental service provider within the Swiss market. Technically, the website leverages modern web technologies including Laravel backend inferred from routing patterns, Font Awesome for icons, Cookiebot for consent management, and Google Tag Manager for analytics. The site is well-optimized for mobile devices, uses HTTPS with strong security headers, and integrates a comprehensive cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection, and transparent cookie disclosures. However, it lacks a dedicated security policy or incident response contact information, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected in the provided content. Overall, Recycling Map presents a professional, trustworthy, and privacy-conscious web presence with strong compliance to GDPR and cookie regulations. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen its security posture and user trust.

V

Verband Schweizer Plastic Recycler (VSPR)

plasticrecycler.ch

51

The Verband Schweizer Plastic Recycler (VSPR) is a Swiss non-profit association serving as the competence center for plastic recycling in Switzerland. It connects municipalities, collection systems, and recycling companies to promote sustainable, high-quality plastic recycling and circular economy principles. The website reflects a strong commitment to sustainability, quality assurance, and transparency, supported by a monitoring and licensing system that awards a quality label to certified collection systems. The target audience includes municipalities, industry partners, and the general public interested in environmental sustainability within Switzerland. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery, Slick Carousel, LazyLoad, and Fancybox. It employs multilingual support via Weglot and integrates Google reCAPTCHA for form security. Cookie consent is managed through the Complianz GDPR plugin, ensuring compliance with European privacy regulations. The site is well-optimized for mobile devices and demonstrates good SEO practices. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. Email addresses are obfuscated to prevent scraping. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly configured, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and compliant digital presence for the VSPR. It effectively communicates its mission and services while maintaining good technical and security standards. Strategic recommendations include enhancing security headers, fixing minor image loading issues, and publishing a formal security policy or incident response contact to further strengthen trust and compliance.

F

Ferro Recycling

ferrorecycling.ch

25

Ferro Recycling is a Swiss non-profit association dedicated to promoting the recycling of steel packaging. The website serves as an informational platform targeting a general audience interested in environmental sustainability and recycling practices. It positions itself as a niche player within the Swiss recycling sector, focusing on awareness and stakeholder engagement rather than commercial activities. The site is multilingual, primarily in German, with French and Italian versions, reflecting its Swiss market focus. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Real Cookie Banner Pro for privacy compliance. The inclusion of WPML enables multilingual content delivery, enhancing accessibility for diverse Swiss audiences. The site integrates YouTube video content with appropriate consent mechanisms, demonstrating attention to privacy regulations.

VetroSwiss operates as a key organization managing glass recycling processes and fees in Switzerland, focusing on the administration of the 'vorgezogene Entsorgungsgebühr' (VEG) for glass beverage packaging. The website targets business partners involved in fee payments and compensation, providing a user-friendly customer portal and extensive informational resources about glass recycling. The organization positions itself as a central authority in the Swiss glass recycling ecosystem, emphasizing efficiency and digital transformation. Technically, the website is built on WordPress 6.6.4 with the Yoast SEO plugin, leveraging UIkit for frontend components and Matomo for privacy-respecting analytics. The site is well-structured with multi-language support (German, French, Italian), good SEO practices, and a cookie consent mechanism, reflecting a moderate to advanced digital maturity. Hosting details are not explicit but suggest a professional setup possibly involving Cubetech services. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. The absence of a vulnerability disclosure policy or security.txt file indicates room for improvement in transparency and security communication. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with a strong focus on business credibility and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the security posture and compliance.

S

SENS eRecycling

erecycling.ch

67

SENS eRecycling is a Swiss non-profit foundation specializing in the sustainable recycling of electrical and electronic equipment. The organization operates a well-established take-back system that facilitates environmentally friendly disposal for both private individuals and business partners across Switzerland. Their website reflects a mature market position with comprehensive services including collection, recycling, awareness campaigns, and a partner network. The content is professionally presented, multilingual, and targets a broad audience concerned with environmental sustainability. Technically, the website employs modern web technologies including Magnolia CMS, JavaScript frameworks, and integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, TikTok Pixel, and Intercom. The site is mobile-optimized, fast-loading, and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and secure form handling, though some improvements are recommended in security headers and explicit policies. The security evaluation shows no critical vulnerabilities or blocking mechanisms, indicating a trustworthy and stable platform. However, the absence of a cookie consent mechanism and formal security policies suggests room for compliance enhancement. Overall, the website demonstrates a high level of professionalism and trustworthiness suitable for its non-profit environmental mission. Strategic recommendations include implementing cookie consent banners, publishing security and incident response policies, adding vulnerability disclosure information, and enhancing security headers to further strengthen the security posture and regulatory compliance.

I

INOBAT

inobat.ch

66

INOBAT is a Swiss organization responsible for collecting and managing advance disposal fees related to batteries and accumulators. It serves as a key player in Switzerland's battery recycling ecosystem, providing information, education, and support to consumers, manufacturers, importers, and recycling partners. The website is well-structured, professionally designed, and offers comprehensive content relevant to its mission. Technically, the site uses modern web technologies including Bootstrap and JavaScript frameworks, with a cookie consent mechanism ensuring GDPR compliance. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the organization's claims, indicating legitimacy and trustworthiness.

I

IGORA-Genossenschaft für Aluminium-Recycling Schweiz

igora.ch

38

IGORA-Genossenschaft für Aluminium-Recycling Schweiz operates as a cooperative focused on the collection and recycling of aluminium packaging in Switzerland. The organization emphasizes environmental protection by promoting aluminium recycling, which significantly reduces energy consumption and greenhouse gas emissions compared to new aluminium production. The website positions IGORA as a key player in the Swiss aluminium recycling sector, targeting both consumers and businesses interested in sustainable waste management. Technically, the website is built on WordPress and integrates modern technologies such as Google reCAPTCHA for security, Google Maps for location services, and EmbedSocial for social media content integration. The site employs a professional cookie consent mechanism compliant with GDPR and Swiss data protection laws, indicating a mature digital infrastructure. Performance and mobile optimization are adequate, supporting a good user experience. From a security perspective, the site enforces HTTPS, uses multiple security headers, and manages user consent effectively. No critical vulnerabilities or suspicious activities were detected. However, the absence of a dedicated security policy or incident response page suggests room for improvement in transparency and preparedness. Overall, IGORA's website reflects a trustworthy and professional organization with a solid security posture and compliance framework. Strategic enhancements in security documentation and accessibility could further strengthen its digital maturity and stakeholder trust.

The website www.lausanne.ch is the official municipal portal for the City of Lausanne, Switzerland, serving as a comprehensive resource for residents, visitors, and businesses. It provides extensive information on municipal services, cultural events, social assistance, urban planning, and public participation. The site is well-branded and professionally designed, reflecting its authoritative government status. Technically, it employs modern web technologies including jQuery, Bootstrap Icons, Google Maps API, and Matomo analytics, indicating a mature digital infrastructure. Security measures such as HTTPS enforcement, security headers, and CSRF protections are in place, contributing to a strong security posture. However, explicit privacy policies, terms of service, and incident response information are not clearly linked or found, representing areas for improvement. Overall, the site is trustworthy, user-friendly, and well-optimized for mobile and accessibility standards.

Ö

Öserix

oeserix.ch

47

Öserix is a regional Swiss initiative focused on producing and promoting local agricultural food products from Appenzell Innerrhoden. The website serves as a platform to showcase the regional value chain, including producers, product information, and an online shop. The business targets consumers interested in sustainable, regional, and seasonal food products, emphasizing quality and local economic support. Technically, the site is built on WordPress with modern plugins and tracking tools such as Google Analytics and Tag Manager, showing moderate digital maturity. Security posture is adequate with HTTPS and IP anonymization but lacks advanced security headers and explicit incident response information. Privacy compliance is partial with a privacy policy present but missing cookie consent mechanisms. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

The website congress-imk.ch serves as a specialized conference management and overview platform primarily targeting the healthcare sector in Switzerland. Operated by IMK Institut für Medizin und Kommunikation AG, it provides listings and management tools for medical conferences, webinars, and educational events. The platform is well-branded and consistent, with content primarily in German and options for English and French, catering to a multilingual professional audience. The business model focuses on event hosting and conference management services within the healthcare education niche. Technically, the site uses a custom CMS platform named Converia, with standard web technologies such as JavaScript, CSS, and HTML5. The site demonstrates basic mobile optimization and good accessibility features, though SEO and performance optimizations appear moderate. No advanced frameworks or third-party analytics/tracking tools were detected, indicating a lean technical footprint. From a security perspective, the site is accessible without WAF or blocking mechanisms and uses HTTPS (assumed from domain and standard practice, though not explicitly confirmed). However, no security headers or cookie consent mechanisms were detected, and no explicit privacy or incident response policies are published on the main page. The WHOIS data aligns well with the business identity, showing a legitimate and consistent registration without privacy protection, enhancing trustworthiness. Overall, the website is professional and trustworthy for its intended audience but would benefit from improved privacy compliance (cookie consent), enhanced security headers, and more visible contact information to strengthen its security posture and user trust.

C

Coface

coface.ch

70

Coface is a well-established global leader in trade credit insurance, business information, and debt collection services, operating in Switzerland for over 30 years and globally for more than 75 years. The company supports approximately 100,000 businesses across 200 markets, providing risk management solutions to facilitate safe and secure trade. Their website reflects a professional and comprehensive digital presence, featuring interactive diagnostic tools, detailed service descriptions, and strong branding consistency. Technically, the site leverages modern JavaScript frameworks, consent management tools, and SEO best practices, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and consent mechanisms, though explicit security policies and vulnerability disclosures are absent. Overall, Coface demonstrates high business credibility and digital maturity, positioning itself as a trusted partner in financial risk management.

I

Ideogen AG

ideogen.com

49

Ideogen AG is a Switzerland-based pharmaceutical partner specializing in specialty therapeutics, orphan and rare disease care, and medical concierge services. The company targets healthcare professionals, biotech and pharmaceutical companies, and patient advocacy groups primarily across Europe, CIS, and MENA regions. Their business model focuses on providing managed access programs, regulatory support, and lifecycle management for specialty medicines. The website reflects a medium-sized, well-established company with a clear market niche and professional branding. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, Slick Carousel, and animation frameworks like AOS and WOW.js, indicating a mature digital infrastructure. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile optimized with good SEO and accessibility basics, though some improvements are possible. From a security perspective, HTTPS is enforced, and no sensitive data is exposed. However, the absence of security headers and explicit incident response policies suggests room for improvement. Privacy compliance is adequate with clear privacy and cookie policies, though a cookie consent mechanism is missing. Contact information is comprehensive, enhancing business credibility. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing incident response details, and adding vulnerability disclosure information to strengthen security posture and compliance.

G

Gebro Pharma AG

gebro.ch

10

Gebro Pharma AG is a Swiss pharmaceutical company specializing in healthcare products targeting indications such as rheumatology, pain, cold and cough, dermatology, and rare diseases. The company maintains a professional web presence with clear contact information and product navigation, serving healthcare professionals and patients primarily in Switzerland. The website is well-structured, mobile-optimized, and uses modern web technologies including JavaScript libraries and Google Tag Manager for analytics and marketing. From a technical perspective, the site employs asynchronous script loading and modern UI components like sliders and form validation, indicating a mature digital infrastructure. However, it appears to use a custom or proprietary CMS platform rather than a common open-source CMS. Performance is moderate with good mobile responsiveness and accessibility features. Security posture is solid with HTTPS enforced and spam protection on login forms, but lacks visible security headers and a public security policy or incident response contact. Privacy compliance is partial; while a privacy policy and terms of service are present, there is no cookie consent mechanism detected, which is a GDPR compliance gap. Overall, the website is trustworthy and professional with a high legitimacy score based on WHOIS data consistency and business information alignment. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.