Switzerland security reports

V

Visa Europe

visaeurope.ch

69

Visa Europe operates as a leading digital and mobile payment network, providing a wide range of payment technologies and services including credit, debit, and digital wallets such as Apple Pay and Google Pay. The website targets both consumers and businesses primarily in Switzerland and Europe, positioning itself as a trusted market leader in the finance sector. The business model revolves around enabling secure, innovative payment solutions and supporting merchants and partners with advanced commerce technologies. Visa Europe is a subsidiary of Visa Inc., reflecting a large enterprise scale with a strong global presence. Technically, the website leverages modern web technologies including Stencil.js, jQuery, and integrates with third-party services like YouTube and Tealium for analytics and tag management. The site is hosted on Visa's CDN infrastructure, optimized for performance, mobile responsiveness, and accessibility. The content is well-structured with comprehensive metadata, SEO optimization, and multilingual support. From a security perspective, the site enforces HTTPS with strong SSL configurations and security headers such as CSP and HSTS. Privacy compliance is robust with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not publicly available, representing areas for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity. The absence of critical vulnerabilities and the presence of strong privacy controls contribute to a favorable risk profile. Strategic recommendations include publishing detailed security policies and incident response contacts to enhance transparency and trust further.

C

CERN

visit.cern

66

The website visit.cern is the official visitor portal for CERN Science Gateway, providing comprehensive information about visiting CERN, including exhibitions, events, educational resources, and support opportunities. The site targets a broad audience including families, educational groups, and science enthusiasts, positioning itself as a leading educational and scientific outreach platform. The business model is non-profit, aligned with CERN's mission as a premier international scientific research organization. Technically, the site is built on Drupal 10 with modern web technologies such as Bootstrap, jQuery, and Matomo analytics, hosted on CERN's infrastructure, delivering fast and mobile-optimized performance with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers could be improved. Privacy compliance is well addressed with a clear data privacy page and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, reflecting CERN's reputable brand and mission.

C

CERN

home.cern

68

CERN is a globally recognized intergovernmental scientific research organization specializing in fundamental physics. The website serves as a comprehensive portal for scientific research, educational resources, news, and events related to particle physics. It targets scientists, educators, and the general public interested in physics and science. The site is professionally designed, well-branded, and provides rich, relevant content with clear navigation and mobile optimization. Technically, the website is built on Drupal 10 CMS, utilizing modern JavaScript libraries such as Owl Carousel and Prism.js, and employs Matomo for privacy-conscious analytics. The site is hosted securely with HTTPS and enforces clientTransferProhibited status on the domain, though DNSSEC is not enabled, representing a minor security gap. Security posture is solid with HTTPS and some security best practices, but lacks explicit security headers and a public vulnerability disclosure or security.txt file. Privacy compliance is partial due to the absence of visible privacy and cookie policies or consent mechanisms. Contact information is available primarily via contact forms and physical address, with no direct emails or phone numbers exposed. Overall, the website is trustworthy, authoritative, and well-maintained, with recommendations to improve privacy compliance and DNS security to enhance user trust and security posture.

C

CERN

cern.ch

68

CERN is a globally recognized intergovernmental scientific research organization specializing in fundamental physics. The website serves as a comprehensive portal for scientific information, news, events, and educational resources targeting scientists, educators, and the general public. It maintains a strong market position as a leader in particle physics research and public outreach. The technical infrastructure is modern, leveraging Drupal 10 CMS and open-source technologies, with good performance and mobile optimization. Security posture is strong with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not publicly visible. Privacy and cookie policies are not clearly presented, indicating room for compliance improvement. Overall, the website is professional, trustworthy, and content-rich, reflecting CERN's authoritative status in science.

S

Schweizerische Schifffahrtsgesellschaft Untersee und Rhein AG (URh)

urh.ch

53

Schweizerische Schifffahrtsgesellschaft Untersee und Rhein AG (URh) operates passenger shipping services on the Rhine and Lake Constance, providing scheduled routes, excursions, group offers, and ship rentals. The company targets tourists, local travelers, and groups seeking leisure and event experiences on the water. Their market position is that of a regional transportation and tourism provider with a medium-sized business footprint in Switzerland. The website reflects a professional and consistent brand image with good content quality and clear navigation.

I

Infront Sports & Media AG

bravenew.sport

65

BraveNew.sport is a professionally developed digital platform operated by Infront Sports & Media AG, focusing on the future of sports and its societal impact. The website serves as a hub for research, thought leadership, and community engagement through blogs, videos, events, and downloadable eBooks. The platform leverages modern technologies including HubSpot CMS, Wistia for video hosting, and integrates marketing and analytics tools such as Google Tag Manager and Twitter Analytics. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance evident through clear policies and cookie consent mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and business credibility.

V

Viteos SA

viteos.ch

42

Viteos SA is a Swiss-based company specializing in sustainable and renewable energy solutions for both private individuals and professionals. Positioned as a partner in the energy transition, the company offers services that support sustainable energy adoption and renewable energy technologies. The website reflects a medium-sized enterprise with a clear focus on energy sector clients in Switzerland. Technically, the site is built on WordPress with modern SEO and cookie consent management tools, indicating a mature digital presence. The use of Google Tag Manager, Microsoft Clarity, and other analytics tools shows a commitment to data-driven insights while maintaining GDPR compliance through detailed cookie consent mechanisms. Security posture is solid with HTTPS enforced and bot protection via Google reCAPTCHA, though explicit security headers and policies could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and privacy compliance.

R

ROOMZ SA

roomz.io

58

ROOMZ SA is a Swiss technology company specializing in wireless workplace management solutions including room booking, desk management, and digital signage. The company targets businesses adapting to hybrid work environments, offering scalable hardware and software solutions compatible with major collaboration platforms like Google, Outlook, and Teams. Their market position is supported by ISO certifications and strategic partnerships, reflecting a mature and trusted brand in the workspace technology sector. Technically, the website is built on WordPress with modern JavaScript libraries and frameworks, hosted on Azure infrastructure, and demonstrates good performance and mobile optimization. Security posture is strong with HTTPS, form protection via hCaptcha, cookie consent mechanisms, and ISO 27001 certification, though some HTTP security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact and legal information. No blocking WAF or suspicious content was detected, supporting a high trust score.

I

Insiders

insiders.live

52

Insiders.live SA is a Swiss sports technology company specializing in high-precision sports data devices and solutions that enhance athlete performance, competition, and storytelling. The company targets a broad audience including coaches, event organizers, broadcasters, media, sponsors, fans, and athletes. Their offerings include performance tracking, broadcast and second-screen solutions, wearable devices (INTENSE and INSPIRIT), and APIs for developers. The website demonstrates a solid market position with partnerships with professional sports teams and federations. Technically, the website is built on WordPress with WooCommerce and leverages modern technologies such as Google Analytics, Facebook Pixel, and UIkit for UI components. The site is mobile-optimized, SEO-friendly, and uses HTTPS with good SSL configuration. However, some security headers are missing, and there is no explicit cookie consent mechanism, which could be improved for GDPR compliance. From a security perspective, the site shows good practices like HTTPS enforcement and use of reCAPTCHA on forms, with no visible vulnerabilities or exposed sensitive data. The WHOIS data is privacy protected, which is common and justified for this business type, though it limits direct verification of registrant details. Overall, the site is trustworthy and professional with minor areas for improvement in privacy compliance and security headers. The overall risk assessment is low, with recommendations to enhance cookie consent, implement security headers, and add a vulnerability disclosure policy to strengthen security posture and compliance.

H

HURNI ENGINEERING Sàrl

hurni.ch

61

Hurni Engineering Sàrl is a Swiss-based company specializing in CAD, PDM, and PLM solutions primarily for the mechanical and horology industries. Established in 1984 and operating as a member of HexaGroup SA, the company offers consulting, development, installation, training, and support services. Their market position is solid within their niche, supported by over 20 specialized collaborators and a client base exceeding 1000. The website reflects a professional and consistent brand image with clear service offerings and a focus on Swiss industry sectors. Technically, the website employs a modern tech stack including jQuery, Kendo UI, and cookie consent management via tarteaucitron.js. It is built on the WebMaker CMS and ASP.NET MVC framework, with moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and cookie management aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Strategic improvements in security headers and incident response transparency would enhance its security posture and trustworthiness further.

H

High DC

highdc.ch

59

High DC is a Swiss-based data center company operating a local cloud infrastructure at over 1000 meters altitude in La Chaux-de-Fonds. Founded in 2019, it focuses on providing reliable, secure, and ecological data hosting services to regional businesses, leveraging partnerships with local fiber optic providers and emphasizing environmental sustainability through free cooling technology. The website reflects a professional and consistent brand image with clear contact information and partner affiliations. Technically, the site is built on WordPress with modern plugins and SEO tools, offering moderate performance and good mobile optimization. Security posture is strong, supported by ISO 27001 certification and HTTPS enforcement, though some security headers and explicit privacy policies are missing. Overall, the site is trustworthy, business-focused, and compliant with basic GDPR requirements via cookie consent mechanisms.

Exoscale is a European cloud hosting provider specializing in GDPR-compliant, secure, and scalable cloud infrastructure services tailored for businesses across Europe. The company operates data centers in Switzerland, Austria, Germany, and Bulgaria, positioning itself as a reliable alternative to larger cloud providers with a strong emphasis on data sovereignty and compliance. Their service portfolio includes compute instances, managed Kubernetes, database-as-a-service, object and block storage, GPU servers, networking, and more, catering primarily to engineers and enterprises requiring high performance and regulatory adherence. Technically, the website demonstrates a mature digital presence with modern JavaScript integrations, cookie consent management via OneTrust, and marketing tools such as Beamer and Kiflo. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a professional and user-friendly design. The hosting infrastructure is self-managed on their own cloud platform, ensuring control over data and compliance. From a security perspective, Exoscale enforces HTTPS and implements comprehensive cookie consent mechanisms aligned with GDPR. The company holds recognized certifications including ISO27001, Cloud Security Alliance membership, and ISO27018, underscoring their commitment to security and privacy. However, explicit security headers are not evident in the HTML content, and no security.txt file was found, suggesting areas for improvement in transparency and security posture. Overall, the website and business present a trustworthy and professional cloud service provider with strong compliance and security focus. The absence of WHOIS data slightly reduces domain trust but is mitigated by the company's clear branding, certifications, and contact information. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit Data Protection Officer contact details to further strengthen trust and compliance.

E

Ello Communications SA

ello.ch

57

Ello Communications SA is a local telecommunications service provider based in Neuchâtel, Switzerland, acting as a partner and distributor for Sunrise products. The company offers mobile, internet, and TV subscriptions, along with cloud services and customer support, emphasizing local presence and customer proximity. Their business model focuses on serving the canton of Neuchâtel with quality telecommunications solutions and personalized service. The website reflects a professional and consistent brand image with clear contact information and integration of modern digital marketing and analytics tools. Technically, the site is built on WordPress with popular plugins and frameworks, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS, security headers, and anti-bot measures, though explicit security and privacy policies are lacking. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing privacy compliance documentation, adding incident response contacts, and improving accessibility features to further strengthen security and compliance.

R

Reichenbach SA

sols.ch

48

Reichenbach SA is a small Swiss company specializing in floor and wall coverings, offering a wide range of products such as parquet, moquette, linoleum, PVC, cork, wallpapers, curtains, and blinds. The company operates a physical showroom in Tolochenaz-Morges, targeting residential and commercial customers seeking quality floor and wall covering solutions. The website is professionally designed using WordPress CMS and includes clear navigation and product categorization, supported by social media presence on Facebook, Twitter, and Instagram. Technically, the website employs standard WordPress technologies with jQuery and common plugins for slideshow and social media integration. The site is mobile optimized and performs moderately well, though accessibility and SEO optimizations are basic. Security-wise, HTTPS is properly configured, and anti-spam CAPTCHA is used on forms; however, no advanced security headers or published security policies are present, indicating room for improvement in security posture. Overall, the website is trustworthy and professional but lacks formal privacy, cookie, and security policies, which are critical for compliance and user trust. There are no signs of malicious content or blocking mechanisms, allowing full content accessibility. Strategic improvements in privacy compliance and security best practices would enhance the site's credibility and protection.

F

Friderici automobiles

friderici-automobiles.ch

49

Friderici Automobiles is a reputable Hyundai car dealership based in the Morges region of Switzerland, offering a comprehensive range of automotive services including new and used vehicle sales, maintenance, repair, leasing, and bodywork. The company positions itself as an official Hyundai partner with a strong regional presence and a focus on customer satisfaction. The website is built on WordPress with modern plugins and technologies, providing a good user experience with clear navigation and mobile optimization. Security measures such as HTTPS, cookie consent, and reCAPTCHA are implemented, though there is room for improvement in security headers and policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

B

Brasserie Docteur Gab's SA

docteurgabs.ch

65

Brasserie Docteur Gab's SA is a Swiss craft brewery established in 2001, specializing in the production and retail of craft beers and related products. The company targets general consumers and beer enthusiasts through both direct retail and wholesale channels, including bars, restaurants, and events. Their website reflects a small but professional business with a consistent brand and clear market positioning in the local craft beer sector. Technically, the website is built on the Umbraco CMS platform, utilizing modern JavaScript libraries and marketing tools such as Google Analytics, Facebook Pixel, and MailChimp. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and dedicated security or incident response policies. Privacy compliance is basic, with a privacy policy available only in French and limited GDPR indicators. Overall, the website is trustworthy and professionally maintained, though improvements in security and privacy transparency are recommended.

D

Domaine de la Ville de Morges

domainedelaville.ch

61

Domaine de la Ville de Morges is a historic Swiss wine estate dating back to 1547, specializing in organic and natural wines certified by BIO SUISSE. Managed by Bolle & Cie since 2020, the Domaine offers wine production, tasting experiences, and direct sales through its boutique and caveau. The website reflects a mature digital presence with modern technologies such as Webflow CMS, Google Tag Manager, and cookie consent via Axeptio, ensuring compliance with privacy regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. The site is professionally designed, mobile-optimized, and provides clear contact and business information, enhancing trust and credibility.

T

Transports de la région Morges Bière Cossonay SA

mbc.ch

53

Transports de la région Morges Bière Cossonay SA operates as a regional public transportation provider in Switzerland, serving the Morges, Bière, and Cossonay areas. The company offers train and bus services, ticketing options including online and SMS purchases, group and school transport, and tourism-related transport services. Their market position is that of a key regional transport operator with a focus on mobility and customer convenience. The website reflects a modern technical infrastructure built on React and Next.js frameworks, leveraging CDN hosting for performance and Bootstrap for responsive design. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content for its audience. Security posture is strong with HTTPS enforcement and security headers, though some compliance aspects like cookie consent and incident response information are missing. Overall, the site is trustworthy and professional, with room for improvement in privacy compliance and direct contact information availability.

Mountain Lake Productions is a small Swiss event production company specializing in humor and comedy festivals, targeting a general audience interested in local cultural events. The website serves primarily as a landing page linking to partner humor festivals, with minimal content and no direct contact or transactional features. Technically, the site is built using a basic hosting page builder platform with standard HTML, CSS, and minimal JavaScript, hosted by Infomaniak. The site lacks advanced technical features, security headers, and privacy compliance mechanisms. Security posture is minimal with no HTTPS verification visible in the data, no security policies, and no incident response contacts. Overall, the site is low risk but would benefit from improved security and privacy practices to enhance trust and compliance.

L

Loterie Romande

entraide.ch

61

Soutien Loterie Romande is a professional non-profit platform dedicated to distributing the proceeds of the Loterie Romande to public utility institutions active in various domains within Suisse Romande. The website serves as an authoritative regional platform providing information about beneficiaries, contribution requests, and institutional communication. The platform leverages modern web technologies including Drupal 10, Google Tag Manager, and reCAPTCHA to ensure a secure and user-friendly experience. The site is well-structured, multilingual, and optimized for mobile devices, reflecting a mature digital presence. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the website demonstrates high trustworthiness and professionalism suitable for its non-profit mission.

L

LFM | La radio musicale à Lausanne

lfm.ch

50

LFM is a prominent private radio station based in Lausanne, Switzerland, serving the Suisse romande region with music, humor, and regional news. It holds a leading market position as the number one private radio in the region and operates under the Media One Group umbrella. The website offers live streaming, podcasts, and advertising services targeting a general audience interested in regional and international news and entertainment. Technically, the site is built on WordPress with a modern tech stack including Google Tag Manager, OneSignal push notifications, and SmartAdServer for advertising. The site is mobile-optimized and uses structured data for SEO. Security posture is good with HTTPS and some security best practices, but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the site is professional and trustworthy with room for improvement in privacy compliance and security transparency.

V

Ville de Morges

morges.ch

50

The website www.morges.ch is the official digital presence of the city of Morges, Switzerland. It serves as a comprehensive portal for municipal information, public services, community activities, and administrative procedures. The site targets residents, local businesses, and visitors, providing easy access to official documents, event calendars, and contact directories. The business model is government/public service, with a medium-sized municipal scope and a consistent brand identity. Technically, the site employs modern web technologies including Alpine.js for interactivity, Swiper.js for sliders, and FSLightbox for media display. It is mobile-optimized and features a responsive design with good SEO and accessibility basics. The performance is moderate, with room for improvement in accessibility compliance. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published privacy policy, terms of service, and incident response contacts indicates gaps in compliance and transparency. Cookie consent mechanisms are present, reflecting some privacy awareness. Overall, the website is trustworthy and professional, reflecting the legitimacy of a municipal government site. Strategic improvements in privacy disclosures, security policy publication, and accessibility would enhance compliance and user trust.

V

Valiant Bank AG

valiant.ch

74

Valiant Bank AG operates a professional and comprehensive banking website targeting private and business customers in Switzerland. The site offers detailed information on banking products such as accounts, cards, financing, investments, and pension planning. The company positions itself as a regional Swiss bank with a strong focus on customer proximity and digital services. The website is built on a modern technology stack including React and Liferay, with good mobile optimization and accessibility. Security posture is strong with HTTPS, secure login mechanisms, and cookie consent management, although explicit security policies and incident response details are not publicly disclosed. Overall, the website reflects a mature digital presence consistent with a large financial institution.

Orell Füssli operates as a well-established Swiss retail bookstore with a strong online presence offering books, eBooks, films, and games. The website targets a general audience with a professional e-commerce model that supports home delivery and in-store pickup. The company appears to be a significant player in the Swiss retail book market, leveraging partnerships with related Thalia domains. Technically, the website employs modern JavaScript frameworks, a custom CMS, and integrates advanced consent management via Usercentrics, alongside Google Analytics and Cloudflare security features. The site is well-optimized for performance, mobile use, and accessibility, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and captcha protections, though explicit security headers and published security policies are absent. Privacy compliance is supported by a consent mechanism but lacks visible privacy and terms of service documentation. Overall, the site is trustworthy, professional, and safe for general audiences.

T

TYPO3 Association

typo3.org

63

TYPO3.org is the official website of the TYPO3 Project and Community, an established open source enterprise-class content management system (CMS) based on PHP. The site is managed by the TYPO3 Association, a not-for-profit organization founded in 2004, which coordinates and funds the long-term development of TYPO3 CMS. The project enjoys a strong global community with over 1000 members and offers a wide range of services including software downloads, documentation, certification, and community events. TYPO3 is recognized as a Certified Digital Public Good, promoting sustainable development goals. The website targets enterprise users, developers, and community contributors seeking a professional, scalable CMS solution.

L

LoveScout24

lovescout24.ch

68

LoveScout24.ch is a mature, well-established online dating platform targeting singles primarily in Switzerland and German-speaking Europe. It operates under the umbrella of the Match Group, a global leader in online dating services, which lends it significant market credibility and brand recognition. The platform offers partner search and matchmaking services through a modern web interface built on React and Next.js, ensuring a responsive and user-friendly experience. The website demonstrates good technical maturity with modern frameworks and a cookie consent mechanism, although explicit privacy and terms of service pages were not detected in the analyzed content. Security posture is solid with HTTPS enforcement and standard security headers, but there is room for improvement in publishing comprehensive privacy and security policies. Overall, the site is professionally designed and functional, catering to a mature audience seeking serious dating services.

Z

ZUG ALLIANCE

zug-alliance.ch

37

ZUG ALLIANCE is a regional collaborative alliance based in Zug, Switzerland, focused on advancing energy and mobility sectors through knowledge sharing, framework development, and innovative projects. The alliance brings together business, science, and politics to accelerate decarbonization and sustainable development in the region. Their website reflects a professional and consistent brand image, targeting stakeholders interested in sustainable energy and mobility solutions. Technically, the site is built on WordPress with Elementor and integrates modern tools such as Google Analytics and reCAPTCHA for security and analytics. Security posture is solid with HTTPS, security headers, and spam protection on forms, though it lacks explicit security policies and cookie consent mechanisms. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

A

AMAG Group AG

amag-group.ch

72

AMAG Group AG is a leading Swiss company specializing in sustainable mobility, energy, and innovation solutions. The company holds a strong market position in Switzerland, offering services such as bidirectional charging, solar fuels, and comprehensive energy mobility solutions. Their website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. The technical infrastructure leverages Adobe Experience Manager, Google Tag Manager, and OneTrust for privacy compliance, indicating a modern and well-maintained platform. Security posture is robust with HTTPS enforcement, security headers, and bot protection mechanisms. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website and domain data indicate a legitimate, trustworthy, and professional business with a strong focus on sustainability and innovation.

K

KICKOFF MEDIA

kickoff.media

37

Kickoff Media is a small Swiss-based media and web development company specializing in website creation, Wordpress training, interactive content, graphic design, motion design, and video production. The company targets clients primarily in La Chaux-de-Fonds and Neuchâtel regions of Switzerland, offering localized digital media services. The website is built on WordPress using a commercial Brooklyn theme, indicating a moderate level of digital maturity with integration of modern web technologies and analytics tools such as Google Analytics and Google Tag Manager. The technical infrastructure is typical for small to medium-sized digital agencies, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and use of Google reCAPTCHA, but lacks important security headers and formal privacy and cookie policies, which are critical for compliance and trust. Overall, the website appears legitimate and professional but would benefit from enhanced privacy compliance and security best practices to improve trust and reduce risk.

C

CUPRA

cupraofficial.ch

67

The website www.cupraofficial.ch is a professionally designed and well-maintained digital presence for CUPRA, a premium automotive brand specializing in electric and hybrid vehicles in Switzerland. The site offers detailed product information, leasing options, configurator tools, and after-sales services, reflecting a mature and customer-focused business model under the Volkswagen Group umbrella. Technically, the site leverages Adobe Experience Manager, Google Tag Manager, and Adobe Analytics, indicating a modern and scalable infrastructure with good performance and mobile optimization. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit privacy policies and security disclosures are not directly found in the provided HTML snapshot. Overall, the domain registration aligns well with the brand's Swiss market focus, supporting legitimacy and trustworthiness.

I

ITU/UNESCO Broadband Commission for Sustainable Development

broadbandcommission.org

67

The ITU/UNESCO Broadband Commission for Sustainable Development is a globally recognized non-profit organization advocating for universal broadband connectivity since 2010. It operates at the intersection of government, private sector, and civil society to develop policy recommendations and advocacy targets aligned with the UN 2030 Agenda. The website reflects a mature digital presence with comprehensive content including reports, working groups, and news updates, targeting broadband stakeholders worldwide. Technically, the site is built on WordPress with Elementor and employs modern SEO and analytics tools, though some security headers and DNSSEC are missing. Security posture is solid with HTTPS and domain transfer protections, but lacks published security policies or incident response contacts. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in its sector, with room for improvement in privacy and security transparency.

S

Swiss Ergonomic Design

swiss-ed.ch

45

Swiss Ergonomic Design operates the website swiss-ed.ch, specializing in the design, manufacture, and sale of hygiene products such as dispensers and consumables for workplaces and public spaces. The company emphasizes eco-responsibility and innovation, targeting schools, professional establishments, and companies primarily in Switzerland. The website is built on the PrestaShop CMS platform and uses modern web technologies including Bootstrap, jQuery, and various JavaScript libraries to provide a responsive and user-friendly e-commerce experience. While the site includes standard marketing and tracking tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight, it lacks a dedicated privacy policy page, which is a notable compliance gap. Contact information is clearly provided, including a Swiss physical address, phone number, and company email, supporting business credibility. The site is fully accessible with no WAF or security challenges detected.

C

Cyber Marchands Sàrl

cybermarchands.ch

52

Cyber Marchands Sàrl is a small Swiss company specializing in website creation, webdesign, e-commerce, and digital marketing services primarily targeting the Jura and Suisse Romande regions. The company positions itself as a regional expert offering comprehensive digital solutions including content management, hosting, and social media services. The website is built on Joomla! CMS with modern web technologies such as Bootstrap and jQuery, and integrates Google Analytics for user tracking. The site is professionally designed with good mobile optimization and clear navigation, although contact information is not prominently displayed on the main page. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. WHOIS data confirms the legitimacy of the business with consistent registration details matching the website's claims. Overall, the website presents a trustworthy and professional digital presence suitable for its target market.

P

PocketCampus Sàrl

pocketcampus.org

65

PocketCampus Sàrl is a Swiss-based company founded in 2010 that specializes in developing all-in-one mobile and web applications tailored for higher education institutions and large enterprises. Their digital solutions aim to enhance campus and workplace experiences through integrated software offerings. The company positions itself as a niche provider within the technology sector, focusing on education and enterprise digital transformation. The website reflects a professional and consistent brand image, supporting multiple languages and providing clear contact information.

E

EPFL Alumni

epflalumni.ch

57

EPFL Alumni operates as the official alumni community platform for graduates of the École Polytechnique Fédérale de Lausanne (EPFL) in Switzerland. The website provides a comprehensive suite of services including networking, career support, event management, mentoring programs, and company engagement. It targets alumni, recruiters, companies, and the broader EPFL community, positioning itself as a key facilitator of lifelong connections and professional development within the EPFL ecosystem. The platform supports multiple languages and offers OAuth-based secure login options, enhancing user experience and security. Technically, the website leverages modern web technologies such as Vue.js, Google Analytics, Google Tag Manager, and Google Maps API, integrated within a custom CMS framework tailored for alumni networks. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses secure authentication methods. However, some standard security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected, suggesting potential areas for improvement. Privacy policies and cookie consent mechanisms are present and appear GDPR compliant, supporting responsible data handling. Overall, EPFL Alumni presents a professional, trustworthy, and well-maintained digital presence that effectively serves its community. Strategic enhancements in security headers and accessibility would further strengthen its posture and user trust.

The International Telecommunication Union (ITU) is a United Nations specialized agency responsible for issues concerning information and communication technologies. The website serves as the official digital presence of ITU, providing comprehensive information about its mission, events, publications, and initiatives in the telecommunications and digital technology sectors. ITU holds a leading position globally as a standard-setting and development organization, targeting governments, industry stakeholders, and the global digital community. Technically, the website is built on Microsoft SharePoint, leveraging modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Hotjar for analytics and user experience insights. The site is well-structured, mobile-optimized, and accessible, with multi-language support implemented via machine translation services. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, uses secure forms with anti-forgery tokens, and includes standard security headers, although explicit Content-Security-Policy headers and a vulnerability disclosure mechanism are absent. Privacy compliance is good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the ITU website demonstrates a high level of professionalism, trustworthiness, and compliance appropriate for an international governmental organization. Strategic recommendations include enhancing privacy consent mechanisms, adding explicit security headers, and implementing a vulnerability disclosure policy to further strengthen security posture and user trust.

P

Proton AG

protonmail.com

71

Proton AG operates Proton Mail, the world's largest secure email service with over 100 million users, headquartered in Switzerland. The company offers a suite of privacy-focused services including encrypted email, calendar, cloud storage, password manager, VPN, and more, targeting privacy-conscious individuals, journalists, activists, and businesses. Proton's business model is freemium, providing free secure email accounts supported by paid subscription plans with enhanced features. The company is well-positioned in the privacy technology market, emphasizing Swiss privacy laws and open-source transparency. Technically, Proton's website employs modern web technologies including React and Astro frameworks, delivering a fast, mobile-optimized, and accessible user experience. The infrastructure supports multiple platforms including web, desktop, and mobile apps. SEO and content quality are excellent, reflecting a mature digital presence. Security-wise, Proton demonstrates strong practices with HTTPS enforcement, comprehensive security headers, end-to-end and zero-access encryption, and independent audits. However, DNSSEC is not enabled, and explicit incident response contacts or vulnerability disclosure pages are not found, representing minor gaps. Overall, Proton Mail's website and business exhibit high trustworthiness, professionalism, and compliance with privacy regulations such as GDPR. The risk profile is low, with no detected vulnerabilities or suspicious indicators. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and providing clearer incident response contacts to further enhance security posture and transparency.

1

128K

128k.ch

48

128K is a small communication microagency based in Geneva, Switzerland, specializing in original creations for web and print. The agency is run by a father-daughter team passionate about programming, typography, and design. Their clientele includes cultural, educational, and commercial entities such as L'Ecole des Parents, Galerie Latham, and various Geneva public services. The website showcases a portfolio of print and web projects, emphasizing bespoke design and client collaboration. Technically, the site is built on Joomla! CMS and uses common JavaScript libraries like jQuery and Bootstrap, with moderate performance and good mobile optimization. However, the site lacks privacy and cookie policies, security headers, and incident response information, which are critical for compliance and security posture. No WAF or blocking mechanisms are detected, and the site content is fully accessible and safe for general audiences.

A

Audi Schweiz

audi.ch

74

Audi Schweiz operates as the official Swiss branch of Audi AG, providing comprehensive information and services related to new Audi vehicles, including electric and hybrid models. The website targets prospective car buyers and existing customers in Switzerland, offering vehicle configurators, promotions, and electric mobility solutions. The digital infrastructure is modern and robust, leveraging Audi's Falcon CMS platform, proprietary scripts, and integrations such as Google Tag Manager and LivePerson chat for enhanced user engagement and analytics. Security measures are well implemented, with HTTPS enforced and multiple security headers present, ensuring a secure browsing experience. However, the absence of explicit privacy policy, terms of service, and incident response information represents a compliance gap that should be addressed to enhance transparency and trust. Overall, the website demonstrates a high level of professionalism, technical maturity, and brand consistency, positioning Audi Schweiz strongly in the premium automotive market.

S

SEAT Schweiz AG

seat.ch

71

SEAT Schweiz AG operates a professional and comprehensive automotive website targeting the Swiss market. The site offers detailed information on SEAT vehicle models, leasing options, test drives, and after-sales services. The company is positioned as a key player in the transportation sector in Switzerland, supported by its parent company Volkswagen Group. The website leverages modern technologies including Adobe Experience Manager, Google Tag Manager, and Adobe Analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and standard tracking tools, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the website is trustworthy, well-branded, and user-friendly, serving its target audience effectively.

O

OPTEN AG

opten.ch

56

OPTEN AG is a Swiss-based professional .NET internet agency specializing in the development of custom web applications, eCommerce platforms, corporate websites, and digital business solutions. The company holds a recognized position in the market as an Umbraco Silver Partner, reflecting its technical expertise and commitment to quality. Their services encompass strategy, design, and development, targeting businesses seeking tailored digital transformation and software solutions. The website is well-structured, professionally designed, and optimized for mobile devices, providing a seamless user experience. Technically, the site leverages modern JavaScript libraries, Google reCAPTCHA for security, and the Umbraco CMS platform, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR through clear privacy and cookie policies.

G

Gymnase de Renens

gyre.ch

54

Gymnase de Renens is a Swiss educational institution providing secondary education including commerce, general culture, and bilingual maturity programs. The website serves as an official portal offering resources and information for students, staff, and administration. The site is well-structured with clear navigation and professional design, targeting primarily French-speaking users in Switzerland. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, providing a responsive and moderately performant experience. Security posture is adequate with HTTPS enabled, but lacks important security headers and privacy compliance elements such as privacy and cookie policies. No forms or analytics scripts are detected, indicating minimal data collection. Overall, the domain registration aligns well with the institution's identity, supporting legitimacy and trustworthiness.

L

La Case à Chocs

case-a-chocs.ch

65

La Case à Chocs is a small cultural organization based in Neuchâtel, Switzerland, specializing in electronic music events, artist residencies, and community engagement. The website serves as a hub for event information, artist support programs, and venue details, targeting local and regional audiences interested in cultural and musical experiences. The organization operates with a non-profit model, emphasizing cultural enrichment and artist development. Technically, the website is built on WordPress using the Divi theme and builder, integrating modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and Cookiebot for GDPR compliance. The site demonstrates good mobile optimization and user experience, with clear navigation and consistent branding. Security posture is solid with HTTPS, security headers, and reCAPTCHA implementation, though formal security and incident response policies are not publicly documented. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, supporting the organization's cultural mission effectively.

G

G&F CHÂTELAIN, succursale de CHANEL SARL

chatelain.ch

63

G&F CHÂTELAIN is a Swiss-based manufacturer specializing in horology and jewelry, operating since 1947 and currently a subsidiary of CHANEL SARL. The company maintains a strong heritage and regional presence in La Chaux-de-Fonds, Switzerland, offering a range of manufacturing services in watchmaking and jewelry crafts. The website reflects a professional and consistent brand image aligned with its luxury market positioning. Technically, the site is built on Drupal 11, leveraging modern JavaScript libraries and Google Analytics for user insights, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR through its linkage to Chanel's privacy policies.

G

gibb Berufsschule Bern

gibb.ch

72

The gibb Berufsschule Bern is the largest vocational school in Switzerland, offering over 60 professions and diverse further education programs. The website reflects a professional educational institution targeting students and apprentices seeking vocational training and general education. The technical infrastructure is modern, leveraging Vue.js, Nuxt.js, Tailwind CSS, and Swiper.js, with analytics provided by Fathom Analytics, indicating a focus on privacy-conscious minimal tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and well-positioned but would benefit from enhanced privacy and security disclosures.

U

Université de Lausanne

unil.ch

72

Université de Lausanne (UNIL) is a prominent Swiss academic institution offering a wide range of educational programs and conducting cutting-edge research. The website serves students, researchers, and academic staff with comprehensive information about faculties, research centers, study programs, and campus life. It positions itself as a leading university with a strong emphasis on interdisciplinary teaching and international research excellence. Technically, the website is built on the Jahia CMS platform, utilizing modern web technologies including jQuery, Google Tag Manager, Google Analytics, Hotjar, and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation structure. From a security perspective, the site enforces HTTPS, employs CSRF protection, and integrates a cookie consent mechanism compliant with GDPR. However, explicit security headers and a published security policy or vulnerability disclosure program are absent, representing areas for improvement. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It poses low risk and effectively supports the university's mission. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information for privacy and security inquiries.

É

École polytechnique fédérale de Lausanne

epfl.ch

73

École polytechnique fédérale de Lausanne (EPFL) is a prestigious Swiss university focused on education, research, and innovation. The website serves a broad audience including students, researchers, and the general public interested in science and technology. EPFL holds a strong market position as a leading European science and technology institution, offering comprehensive educational programs and fostering innovation through its research activities. The site reflects the institution's commitment to academic excellence and community engagement. Technically, the website is built on WordPress with modern libraries such as jQuery and Google Tag Manager for analytics and marketing. It demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. The infrastructure supports a rich content experience with multimedia and event information. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and follows best practices in data protection. While explicit security headers are not fully visible, the overall posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, EPFL's website is a professional, trustworthy, and secure platform that effectively supports its educational and research missions. Strategic improvements could include publishing a vulnerability disclosure policy and enhancing security header implementation to further strengthen its security posture.

D

DUKOMETAL S.A.

dukometal.ch

38

DUKOMETAL S.A. is a Swiss-based specialist in industrial sheet metal work and thermopowder coating, offering a comprehensive range of manufacturing services including laser cutting, locksmithing, bending, and tank fabrication. The company targets industrial clients requiring high-quality sheet metal solutions and operates from modern facilities equipped with advanced machinery. The website is professionally designed using Joomla CMS and Bootstrap, providing a good user experience with clear navigation and relevant content. However, the site lacks visible privacy and cookie policies, which impacts compliance with GDPR and related regulations. Security posture is moderate with HTTPS usage but missing security headers and no visible incident response information. Overall, the website presents a credible and trustworthy business presence but would benefit from enhanced privacy and security practices.

M

Marcy Sàrl

marcy-sarl.ch

55

Marcy Sàrl is a small Swiss company specializing in the creation of innovative products, particularly distributors for sanitary towels and tampons, as well as Swiss ergonomic design products. The website serves as a basic informational platform highlighting their product offerings and contact details, targeting businesses and consumers interested in sanitary and ergonomic solutions. The company positions itself in a niche market with a focus on product innovation and Swiss design quality. Technically, the website employs standard web technologies such as Bootstrap 4, jQuery, and Font Awesome, delivered via reputable CDNs, indicating a moderate level of digital maturity. However, the site lacks advanced features such as a CMS, analytics, or interactive forms, reflecting a simple infrastructure. Security posture is minimal with no detected security headers or privacy policies, and no HTTPS status was verifiable from the provided data. The absence of privacy and cookie policies indicates non-compliance with GDPR and related regulations, which is a significant gap for a business operating in Switzerland and the EU region. Overall, the website is functional but basic, with room for improvement in security, privacy compliance, and user experience.

R

REALTI Swiss

realti.ch

53

REALTI Swiss operates as a real estate investment and services platform focused on the Swiss market, positioning itself as an innovator in the real estate sector. The website presents a professional design with clear branding and a focus on real estate investment opportunities. The target audience appears to be real estate investors and clients interested in Swiss properties. Technically, the website uses standard web technologies such as HTML5, CSS3, and Google Fonts, with moderate performance and good mobile optimization. However, the site lacks advanced frameworks or CMS indications and does not show evidence of analytics or tracking tools, suggesting a minimal digital footprint in terms of user data collection. Security posture is basic with HTTPS enabled but missing important security headers and policies. There is no evidence of privacy, cookie, or terms of service policies, which indicates compliance gaps, especially regarding GDPR. Contact information is limited to contact forms without explicit emails or phone numbers, reducing direct communication channels. WHOIS data is consistent and supports the legitimacy of the domain and business claims. Overall, the website is functional and professional but requires improvements in security, compliance, and contact transparency to enhance trust and regulatory adherence.