Switzerland security reports

A

Allianz Suisse

allianz.ch

77

Allianz Suisse is a leading insurance and pension solutions provider in Switzerland, targeting private customers with a broad portfolio of insurance products including vehicle, travel, household, liability, legal protection, building, cyber, and life insurance. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its Swiss audience. Technically, the site leverages Adobe Experience Manager as its CMS, integrates modern analytics and marketing tools such as Adobe Analytics, Facebook Pixel, and Google Tag Manager, and employs a robust cookie consent mechanism compliant with GDPR. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. The domain registration data aligns well with the business identity, confirming legitimacy and trustworthiness. Overall, the website demonstrates a high level of professionalism, security, and compliance, supporting Allianz Suisse's market position as a trusted insurer.

I

Integraal Groupe

integraal.ch

60

Integraal Groupe is a well-established Swiss business group founded in 1984, specializing in providing comprehensive services to companies in the arc lémanique region. Their offerings include personnel placement, IT services, insurance, consulting, and delegated salary management. The group operates multiple subsidiaries, each focusing on specific service areas, reinforcing their market presence and diversified business model. Technically, the website is built on WordPress with Elementor and optimized for SEO and mobile devices, reflecting a moderate to good digital maturity. Security posture is strong with HTTPS and security headers properly configured, although explicit security policies and incident response contacts are not found. Overall, the website presents a professional and trustworthy image with active content and clear branding.

N

Naef Holding SA

naef.ch

70

Naef Immobilier is a leading real estate agency operating primarily in Suisse Romande, Switzerland, offering a broad spectrum of services including rental, sales, property management, and luxury real estate. The company targets both private and institutional clients and maintains a strong market position supported by a comprehensive service portfolio and international subsidiaries focused on prestige and investment properties. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support primarily in French. Technically, the site is built on WordPress with modern libraries and frameworks, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers could be improved. Privacy policies are comprehensive and GDPR compliant. Overall, the domain registration and WHOIS data align well with the business identity, supporting legitimacy and trustworthiness.

P

Protectas

protectas.com

74

Protectas is a leading Swiss private security company offering integrated security solutions including on-site guarding, mobile patrols, electronic security, and enterprise risk management. It operates as part of the global Securitas Group, leveraging strong brand recognition and extensive service offerings tailored to corporate and private clients in Switzerland. The website is professionally designed, multilingual, and optimized for user experience and accessibility. Technically, the site employs modern analytics and consent management tools, ensuring GDPR compliance and user privacy. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of a public security.txt and incident response information suggests room for improvement. WHOIS data is missing, which is unusual and reduces transparency, but the overall trustworthiness remains high based on branding and content quality. Strategic recommendations include publishing vulnerability disclosure policies and improving domain registration transparency.

P

Ports Francs et Entrepôts de Genève SA

geneva-freeports.ch

47

Ports Francs et Entrepôts de Genève SA is a well-established Swiss company specializing in warehousing and logistics services, particularly for valuable goods such as artworks, fine wines, and other high-value items. With a history spanning over 130 years, the company holds a leading position in the European market, offering tailored storage solutions, customs regimes, and complementary services including transport and insurance. Their target audience includes businesses and individuals requiring secure and specialized storage and logistics solutions. The website reflects a professional and consistent brand image, supported by partnerships with reputable organizations and compliance with European data protection regulations.

D

Devillard Holding SA

devillard.ch

47

Devillard Holding SA is a well-established Swiss technology company founded in 1958, specializing in IT infrastructure, printing systems, document management (GED), and interactive screens. It holds a leading market position in Suisse Romande, targeting SMEs with comprehensive technology solutions and premium maintenance services. The company operates multiple physical locations across the region, emphasizing proximity and high-quality customer service. The website reflects a mature digital presence with professional design, clear navigation, and relevant content tailored to its business audience. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for performance monitoring. Security posture is strong with HTTPS, captcha protections, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust with a detailed privacy policy and cookie banner. Overall, the website and business demonstrate high credibility and trustworthiness.

G

Gourmet Brothers

gourmetbrothers.ch

57

Gourmet Brothers is a Swiss-based event catering company specializing in professional, private, and wedding events in Geneva. The company offers contemporary, creative, and refined cuisine tailored to various event types, positioning itself as a local leader in hospitality services. The website reflects a well-maintained digital presence with integrated marketing and analytics tools, including HubSpot, Google Analytics, and Cookiebot for GDPR compliance. Technically, the site is built on WordPress with modern plugins and scripts, providing a good user experience with mobile optimization and SEO best practices. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some security headers and policies could be improved. Overall, the domain registration data aligns with the business claims, indicating legitimacy and transparency. The site is free from adult or questionable content, targeting a general audience interested in catering services.

S

Schellenberg Wittmer Ltd

swlegal.com

64

Schellenberg Wittmer Ltd is a leading Swiss business law firm with a strong presence in Zurich, Geneva, and Singapore. The firm offers a comprehensive range of legal services including transactions, advisory, and dispute resolution across multiple practice areas and industries. It is recognized for its professional excellence, awards, and commitment to corporate social responsibility. The website reflects a mature digital presence with modern technologies and good user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. WHOIS data is missing, which is a concern for domain legitimacy verification but the professional content and contact details support trustworthiness.

B

BeVisible

bevisible.swiss

58

BeVisible is a small, regional Swiss media company specializing in creative video production and communication services, targeting businesses across Suisse Romande including Geneva, Lausanne, Neuchâtel, Fribourg, and Sion. The website is professionally designed using the Wix platform, showcasing a portfolio of promotional videos and storytelling content. The technical infrastructure leverages Wix's proprietary framework and includes modern JavaScript polyfills and LinkedIn Insight tracking for marketing analytics. Security posture is adequate with HTTPS enforced and some security hardening scripts, but lacks explicit security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Q

Qualibroker - Swiss Risk & Care

swissriskcare.ch

56

Qualibroker - Swiss Risk & Care is a prominent Swiss insurance brokerage firm specializing in insurance, pension provisions, and HR services outsourcing. Positioned as the leading broker in French-speaking Switzerland and the second nationally, the company offers tailored solutions for companies, independent professionals, and individuals. Their services include risk management, employee benefits, actuarial consulting, and administrative outsourcing, supported by a team of 430 expert employees managing 1.7 billion in premiums for 8000 corporate clients. The website reflects a mature, professional business with strong branding and clear market positioning. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPBakery Page Builder, and Ninja Forms. It employs Google Analytics and reCAPTCHA v3 for analytics and security, respectively, and complies with GDPR through Complianz cookie consent management. The site is mobile-optimized, SEO-friendly, and performs moderately well. Security-wise, the company demonstrates a strong posture with HTTPS enforcement, security headers, and certifications including ISO 27001 and ISAE 3402. Forms are protected with reCAPTCHA, and privacy policies are comprehensive and GDPR compliant. However, incident response and vulnerability disclosure policies are not publicly available, representing an area for improvement. Overall, the website and business present a low-risk profile with high trustworthiness, professional content, and solid security practices. Strategic recommendations include publishing incident response contacts, adding vulnerability disclosure mechanisms, and enhancing accessibility features to further strengthen compliance and user trust.

Mediterranean Shipping Company S.A. (MSC) operates a professional and comprehensive website focused on global container shipping and logistics services. The company positions itself as a world leader in the shipping industry, offering digitized global services with local expertise. The website features advanced tracking tools, schedule searches, and contact options, reflecting a mature digital infrastructure. Technically, the site employs modern JavaScript frameworks, analytics, and performance monitoring tools, hosted likely on Akamai's CDN, ensuring fast and responsive user experience across devices. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data limits domain registration trust analysis, but the overall professional presentation and business reputation support legitimacy. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures.

M

Media One Contact SA

mediaone.ch

50

Media One Contact SA is a Swiss media company specializing in tailored advertising solutions across radio, TV, digital platforms, production, and events, primarily serving the Suisse Romande region. The company operates multiple radio stations and TV channels, positioning itself as a regional leader in local advertising. The website reflects a professional and consistent brand image with good content quality and user experience, targeting advertisers and businesses seeking local media exposure. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, with integration of Google Tag Manager and cookie consent management via Axeptio. The site is mobile-optimized and uses HTTPS, ensuring secure connections. However, some security best practices like security headers and explicit privacy and cookie policies are missing or not easily discoverable. From a security perspective, the site benefits from HTTPS and modern tech stack usage but lacks visible security policies, incident response contacts, and vulnerability disclosures. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, indicating legitimacy and consistency. Overall, the website presents a moderate to good security posture and digital maturity but should improve privacy compliance and transparency to enhance trust and regulatory adherence.

B

Banque Cantonale de Genève

bcge.ch

70

Banque Cantonale de Genève (BCGE) is a well-established Swiss bank founded in 1816, serving a broad range of clients including individuals, private banking customers, corporate clients, institutional clients, and SMEs. The bank offers a comprehensive suite of financial services such as day-to-day banking, savings, mortgage loans, leasing, investment management, pension planning, and security solutions. BCGE positions itself as a key regional player in Geneva and the surrounding region, emphasizing competitive banking services and regional development. Technically, the website is built on the Liferay CMS platform and employs modern web technologies including Google Tag Manager and Google reCAPTCHA for security and analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security best practices are observed with HTTPS enforcement, security headers, and secure form handling. From a security perspective, BCGE demonstrates a strong posture with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. However, explicit security policies and incident response information are not publicly detailed, representing an area for improvement. Overall, BCGE's website reflects a professional, trustworthy, and secure banking institution with a strong market presence. Strategic recommendations include enhancing transparency around security policies and vulnerability disclosures to further strengthen trust and compliance.

R

Russell Bedford Fiduciaire Genève SA

rbfg.ch

53

Russell Bedford Fiduciaire Genève SA is a well-established independent fiduciary and audit services provider based in Geneva, Switzerland, founded in 1987. The company operates two entities offering complementary services including fiduciary management, audit, tax expertise, company creation, and governance consulting. It benefits from membership in the global Russell Bedford International network, enhancing its international reach and expertise. The website is professionally designed using Joomla CMS and Bootstrap framework, with multilingual support and modern web technologies. Cookie consent is implemented, and Google Tag Manager is used for analytics. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and published security policies. No blocking or WAF mechanisms were detected, and the domain registration data aligns well with the business profile, indicating legitimacy. Overall, the website presents a trustworthy and professional image suitable for its target audience of businesses and individuals seeking fiduciary and audit services.

E

Executive Travel Airport SA

e-travel.ch

52

Executive Travel Airport SA is a well-established Geneva-based travel agency with over 40 years of experience providing personalized business and leisure travel services. The company offers a broad range of services including business travel, tourism, group events, and VIP services, targeting both corporate clients and individual travelers. Their market position is that of a trusted, independent agency with a strong local presence and a commitment to quality and customer service. Technically, the website is built on WordPress with modern plugins and libraries, supporting multilingual content and online booking capabilities. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security policies and advanced security headers. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and incident response readiness.

E

Epwise AG

wise.swiss

46

Wise.swiss, operated by Epwise AG, is a Swiss-based technology company specializing in AI-enhanced software solutions for event and real estate co-ownership assembly management. Their product suite includes Eventwise and Estatewise, designed to streamline invitations, registrations, check-ins, document sharing, and voting processes. The company targets Swiss organizations, including public agencies, SMEs, and large groups, emphasizing data sovereignty and compliance with Swiss data protection laws. The website reflects a professional and consistent brand image with strong trust signals such as customer testimonials and Swiss Made Software certification. Technically, the site uses modern web technologies including HubSpot forms, Google Tag Manager, and Bootstrap, hosted by Infomaniak Network SA. Performance and mobile optimization are good, with clear navigation and SEO best practices. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and security headers are not explicitly detected in the HTML. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website and business present a credible, secure, and mature digital presence.

D

Darest Informatic SA

darest.com

61

Darest Informatic SA is a well-established Swiss IT solutions provider founded in 1978, specializing in delivering innovative and personalized IT and digital services to SMEs and large enterprises in the Suisse Romande region. Their offerings include IT infrastructure management, cybersecurity, telephony, printing, digitalization, AI solutions, and IT staff delegation. The company positions itself as a trusted partner with a strong regional presence and a portfolio of recognized certifications and partnerships with major technology vendors. Technically, the website is built on WordPress using modern tools such as Elementor and Yoast SEO, supporting multilingual content and optimized for performance and mobile devices. Security posture is good with HTTPS and reCAPTCHA integration, though explicit privacy and cookie policies are not found, indicating room for compliance improvement. The absence of WHOIS registration data reduces transparency but does not contradict the professional business presentation. Overall, the company demonstrates a mature digital presence with solid business credibility and moderate security maturity.

H

Harsch

harsch.ch

46

Harsch is a specialized moving company based in Geneva, Switzerland, offering local, national, and international moving services, including the transport and storage of artworks. The company positions itself as a professional and reliable service provider in the transportation sector, targeting individuals and businesses requiring specialized moving solutions. The website is built on WordPress and incorporates modern web technologies and marketing tools, reflecting a moderate to advanced digital maturity. Security measures include HTTPS enforcement and a comprehensive cookie consent mechanism, although explicit security policies and incident response contacts are not present. Overall, the website demonstrates a good security posture with room for improvement in security headers and transparency. The domain registration data aligns well with the business profile, supporting legitimacy and trustworthiness.

L

Le Floris

lefloris.com

58

Le Floris is a gastronomic restaurant located in Anières, Switzerland, offering festive cuisine with a scenic view of Lake Geneva. The website presents a professional and well-structured digital presence, leveraging WordPress with the Divi theme and multiple plugins for SEO, multilingual support, and cookie compliance. The site includes clear contact information, social media links, and a cookie consent mechanism, demonstrating awareness of privacy regulations such as GDPR. However, the absence of WHOIS registration data raises questions about domain legitimacy, although the website content and design suggest a legitimate business. Security posture is generally good with HTTPS enforced, but could be improved by adding security headers and incident response information. Overall, the site is suitable for its hospitality audience and maintains a good balance of usability and compliance.

F

Franck Muller Genève

franckmuller.com

62

Franck Muller Genève is a Swiss luxury watchmaker specializing in haute horlogerie and grand complications. The company operates a professional, content-rich website built on Squarespace, targeting luxury watch buyers globally with multilingual support. The site showcases collections, news, and brand craftsmanship, positioning itself as a high-end retailer with exclusive boutiques and authorized dealers. Technically, the website uses modern web technologies including Google Analytics, Facebook Pixel, and Weglot for translations, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS enforced but lacks some recommended security headers and published privacy or cookie policies, which are critical for compliance and trust. WHOIS data for the domain is unavailable, which slightly reduces trust but the brand's established reputation and consistent online presence mitigate concerns. Overall, the website is professional and trustworthy but would benefit from enhanced privacy disclosures and security header implementations.

J

Jooce Digital Agency

jooce.ch

60

Jooce Digital Agency is a small, local digital agency based in Geneva, Switzerland, specializing in web development, IT assistance, and digital solutions tailored for local businesses. The company positions itself as a trusted local partner emphasizing Swiss quality and personalized service. Their website is professionally designed using modern technologies such as React and Next.js, hosted on Vercel, and optimized for performance and mobile devices. Structured data is well implemented to enhance SEO and local business visibility. However, the website lacks critical compliance and security documentation such as privacy policies, cookie consent mechanisms, and incident response information. No contact emails or phone numbers are explicitly provided, which may impact user trust and business credibility. Overall, the site is secure with HTTPS and no visible vulnerabilities, but improvements in privacy compliance and transparency are recommended.

G

Genève-Servette Hockey Club

gshc.ch

56

Genève-Servette Hockey Club is a professional hockey organization based in Geneva, Switzerland, operating a well-established sports club with a strong local and regional fan base. The website serves as the official portal for the club, providing information on team schedules, news, ticketing, merchandise, and fan engagement. The club maintains partnerships with various sponsors and ticketing platforms, reflecting a solid market position within Swiss professional hockey. Technically, the website is built on TYPO3 CMS and integrates modern web technologies including YouTube embeds, Google Tag Manager, and TikTok analytics pixels. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is room for improvement in performance optimization and security hardening, particularly in implementing security headers and enhancing privacy compliance. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal privacy and cookie policies. There is no public vulnerability disclosure or incident response contact information, which could be improved to enhance trust and compliance. The use of third-party tracking scripts suggests moderate user tracking, but privacy compliance is currently limited. Overall, the website is professional and trustworthy, supporting the club's business objectives effectively. Strategic enhancements in privacy, security policies, and transparency would further strengthen the club's digital maturity and user trust.

H

Hôpitaux Universitaires Genève

hug.ch

65

Hôpitaux Universitaires Genève (HUG) is a prominent university hospital in Geneva, Switzerland, providing a wide range of medical services including surgery, outpatient consultations, and specialized care. It also engages in research and education in close collaboration with the University of Geneva Faculty of Medicine. The website reflects a well-established institution with a strong market position as a national and international reference in healthcare. The target audience includes patients, their families, and healthcare professionals. The business model is public healthcare with academic and research components. Technically, the website is built on Drupal 10, uses modern web technologies, and integrates analytics via Piwik PRO. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and no obvious vulnerabilities, though it lacks some public security policies and cookie consent mechanisms. WHOIS data confirms legitimacy and consistency with the institution's identity. Overall, the website is professional, trustworthy, and comprehensive, serving its audience effectively.

H

Helvetia Environnement

helvetia-environnement.ch

58

Helvetia Environnement is a Swiss-based environmental services group specializing in comprehensive waste management solutions including collection, recycling, and energy production from waste. Positioned as a leader in the Swiss market, the company serves public and private entities as well as individuals. The website is professionally designed, primarily in French, and provides clear information about the company's services, subsidiaries, and sustainability commitments. Technically, the site uses a legacy ASP.NET WebForms framework with JavaScript libraries such as jQuery and Fotorama, and integrates Google Tag Manager and Axeptio for analytics and cookie consent. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though some security headers and modern library versions could improve the stance. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site reflects a trustworthy and credible business with good digital maturity.

I

Infomaniak Network SA

infomaniak.events

64

Infomaniak Events is an established online platform operated by Infomaniak Network SA, focused on promoting and ticketing a wide range of events including concerts, festivals, theatre, and workshops primarily in Switzerland. The website offers a comprehensive catalog of events with detailed descriptions, dates, and locations, targeting a broad audience interested in cultural and entertainment activities. The business model revolves around event ticket sales and event promotion services, positioning itself as a key regional player in the Swiss event ticketing market. Technically, the website employs modern web technologies including JavaScript, Web Components, and Laravel Livewire framework, ensuring a responsive and user-friendly experience across devices. The site is hosted likely by Infomaniak, a reputable Swiss hosting provider, and uses HTTPS with a valid SSL configuration. While the site shows good SEO and accessibility basics, there is room for improvement in security headers and explicit terms of service documentation. From a security perspective, the site demonstrates a solid posture with HTTPS enforcement and no visible sensitive data exposure. The presence of reCAPTCHA v3 indicates protection against automated abuse. However, the absence of explicit security headers and limited contact information for incident response or data protection officers suggests areas for enhancement. Privacy compliance is well addressed through a comprehensive privacy policy linked to the parent company’s main site, with GDPR compliance evident. Overall, the website presents a trustworthy and professional front with a strong focus on user experience and privacy. The lack of WHOIS registrant data is mitigated by the business’s established brand and consistent content. Strategic recommendations include enhancing security headers, publishing clear terms of service, and providing more explicit contact channels for security and privacy inquiries to further strengthen trust and compliance.

A

Alliance of Swiss Wealth Managers

asv-aswm.ch

56

The Alliance of Swiss Wealth Managers is a professional association representing independent wealth management companies in Switzerland. Founded in 2016, it serves as a collaborative platform for sharing knowledge, influencing the industry, and organizing events such as the Custodian Bank Award and annual summits. The association targets wealth managers and clients seeking trusted, independent financial advisory services within the Swiss market. The website reflects a medium-sized organization with a clear focus on finance and wealth management, supported by a professional digital presence built on WordPress and Elementor. Technically, the website employs modern web technologies including WordPress CMS, Elementor page builder, and essential addons, with Google Analytics for visitor tracking. The site is well optimized for SEO and mobile devices, with good content quality and structured data markup enhancing search visibility. Performance is moderate, with room for improvement in accessibility features and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, showing a legitimate registration aligned with the association's founding date and location. Overall, the website presents a trustworthy and professional image suitable for its target audience. Strategic recommendations include publishing formal security and incident response policies, enhancing accessibility, and adding security headers to improve the security posture further.

P

Pictet

pictet.com

70

Pictet is a well-established independent investment partnership specializing in wealth management, asset management, and asset servicing. With over 200 years of history, it holds a leading position in the financial services industry, targeting high net worth individuals and institutional clients. The website reflects a mature and professional digital presence, leveraging Adobe Experience Manager as its CMS and integrating advanced analytics and consent management tools. The technical infrastructure is modern and optimized for performance and accessibility, with strong mobile responsiveness and SEO practices. Security posture is robust with HTTPS enforcement and consent mechanisms, although explicit security headers could be further verified. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency, but the overall business credibility and website quality strongly indicate legitimacy. Strategic recommendations include enhancing security header visibility, publishing explicit security policies, and maintaining rigorous third-party script audits.

S

Swissstaffing

swissstaffing.ch

56

Swissstaffing is the national association representing Swiss recruitment agencies, providing industry representation and member services. The website is professionally designed, targeting recruitment agencies and stakeholders in Switzerland. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, Google Tag Manager, and Cookiebot for cookie consent management. The site uses HTTPS and implements security best practices including security headers and Google reCAPTCHA. However, explicit privacy policy and terms of service pages are not found in the analyzed content, which is a compliance gap. The site integrates multiple third-party analytics and marketing services, indicating extensive user tracking. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and contact transparency.

A

ASP Global Manufacturing GmbH

aspuniversity.com

52

ASP Learning Lab is a professional healthcare education platform operated by ASP Global Manufacturing GmbH, based in Switzerland. The platform specializes in lifelong learning for healthcare professionals, focusing on medical device reprocessing, sterilization, and infection prevention. It offers a variety of educational resources including e-learning modules, webinars, professional certifications, and a Centre of Excellence program, targeting healthcare professionals primarily in the EMEA region. The website demonstrates a strong market position within its niche, supported by professional certifications and a consistent brand presence across social media channels. Technically, the site is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. The site is well-optimized for SEO, mobile-friendly, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though some improvements like enabling DNSSEC and additional security headers are recommended. Overall, the domain registration is recent but consistent with the platform's new branding and content, indicating legitimacy. No critical security issues or adult content were detected, and the site maintains high professionalism and trustworthiness.

E

EveryWare AG

ewcs.ch

64

EveryWare AG operates an Open Cloud Authentication Service, providing identity and access management solutions primarily targeting enterprise clients. The website analyzed is a login portal leveraging modern authentication protocols such as OpenID Connect and technologies including Keycloak and PatternFly. The site is designed for secure user authentication but lacks publicly accessible information such as privacy policies, terms of service, or contact details on this page. Technically, the site uses a modern tech stack with React-based UI components and standard security practices like disabling autocomplete on password fields. However, no explicit security headers were detected, and privacy compliance indicators are absent, which could be improved to enhance trust and security posture. Overall, the site is functional and professional but minimalistic in public content.

V

Volkswagen Schweiz

vw-motion.ch

44

Volkswagen Schweiz operates the digital magazine 'Motion' as a content platform to engage customers and enthusiasts with inspiring stories and brand-related articles. The website is well-branded, professionally designed, and localized for the Swiss market in German, French, and Italian. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, ensuring a modern and SEO-optimized platform. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with a clear privacy policy and cookie banner. The site lacks direct contact emails or phone numbers but provides a newsletter subscription form for engagement. Overall, the website is trustworthy, professional, and aligned with Volkswagen's corporate identity.

T

Touring Club Schweiz (TCS)

tcs.ch

73

Touring Club Schweiz (TCS) is a well-established Swiss mobility club founded in 1909, offering roadside assistance, member benefits, and mobility-related services to a broad Swiss audience. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its members and potential customers. Technically, the site uses modern JavaScript libraries, consent management tools, and analytics platforms, hosted on a secure HTTPS infrastructure with strong security headers and privacy compliance mechanisms. Security posture is solid with no detected vulnerabilities or exposed sensitive data, though explicit security policies and incident response information could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and Swiss data protection standards.

A

autoSense

autosense.ch

65

autoSense is a Swiss-based company specializing in intelligent mobility solutions, focusing on electric vehicle charging and fleet management. Their offerings include comprehensive charging solutions for workplaces, public charging, home charging reimbursement, and telematics services such as digital logbooks. The company targets fleet managers and drivers transitioning to electric vehicles, providing integrated software and hardware solutions to simplify and optimize electric mobility. The website is professionally designed, mobile-optimized, and uses modern web technologies including Webflow CMS, Google Tag Manager, and Facebook Pixel for analytics and marketing. From a technical perspective, the website demonstrates a mature digital infrastructure with fast performance, good SEO, and accessibility features. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit privacy policy and terms of service pages, which are critical for GDPR compliance and user trust. Cookie consent is implemented, indicating some privacy awareness. Overall, the security posture is solid but could be improved by publishing comprehensive privacy and security policies and providing clear contact information including incident response contacts. The domain registration data aligns well with the business claims, supporting legitimacy. The website content is safe and appropriate for a general audience, with no adult or questionable content detected.

V

Volkswagen Nutzfahrzeuge Schweiz

volkswagen-nutzfahrzeuge.ch

72

Volkswagen Nutzfahrzeuge Schweiz operates as the official Swiss branch of Volkswagen commercial vehicles, providing a comprehensive range of services including vehicle sales, leasing, service, and digital applications tailored for both private and commercial customers. The website reflects a strong market position with consistent branding and a professional digital presence. Technically, the site leverages modern web technologies such as React and Adobe Experience Manager, ensuring fast performance, mobile optimization, and good accessibility. Security practices are robust with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high trustworthiness and professionalism, supporting Volkswagen's brand reputation in Switzerland.

A

AMAG Leasing AG

amag-leasing.ch

72

AMAG Leasing AG is a prominent Swiss vehicle leasing company specializing in automotive and electric mobility leasing solutions. The company operates under the AMAG Group umbrella and offers a comprehensive range of leasing products including bike leasing, fuel and charging cards, and all-inclusive leasing packages. Their website demonstrates a high level of professionalism, with clear navigation, multilingual support, and a strong focus on customer experience. Technically, the site leverages modern frameworks such as Adobe Helix and integrates trusted third-party services like Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is robust with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not publicly detailed. Overall, the website is well-optimized for performance, accessibility, and SEO, reflecting a mature digital presence.

E

EveryWare AG

everyware.ch

71

EveryWare AG is a well-established Swiss IT service provider specializing in cloud, hosting, datacenter, network, and managed IT services. The company positions itself as a leading provider in Switzerland with over 25 years of experience, offering comprehensive business IT solutions focused on public, hybrid, and private cloud environments. Their services cater primarily to Swiss businesses and IT organizations seeking secure, scalable, and sovereign cloud and IT infrastructure solutions. The website reflects a professional and consistent brand image with detailed service offerings and customer success stories, reinforcing their market position. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, well-structured, and performs moderately well. Privacy and cookie policies are clearly presented with consent mechanisms in place, demonstrating good compliance with GDPR requirements. However, explicit security policies and incident response contacts are not publicly available, which could be improved. From a security perspective, the site enforces HTTPS and uses privacy-focused tools but lacks visible advanced security headers and a dedicated vulnerability disclosure policy. No vulnerabilities or suspicious content were detected. WHOIS data confirms the legitimacy of the domain registration, consistent with the company’s Swiss identity and business history. Overall, EveryWare AG’s website presents a trustworthy, professional, and compliant digital presence suitable for its target market. Strategic improvements in security transparency and incident response communication would further enhance their security posture and customer trust.

E

ELCA Security

elcasecurity.ch

85

ELCA Security is a Swiss-based cybersecurity company specializing in securing IT infrastructure, identities, and business operations for both businesses and government entities. The company positions itself as a robust security solutions provider with a focus on anticipating, protecting, detecting, and defending against cyber threats. Their website reflects a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrating reputable third-party services like Stripe for payments and Matomo for privacy-focused analytics. The site is well-optimized for mobile devices and includes comprehensive cookie consent management via Cookiebot, demonstrating a commitment to privacy compliance.

B

bbv Software Services AG

bbv-software.de

59

bbv Software Services AG is a well-established Swiss software and consulting company specializing in digital consulting, software engineering, and digital transformation services. Founded in 1995, the company serves a broad range of clients, focusing on delivering scalable digital businesses, innovative digital experiences, and sustainable software products. Their market position is strong within Switzerland, supported by a medium-sized team and a comprehensive portfolio of services including AI consulting, cloud services, cybersecurity, and data management. The website reflects a professional and consistent brand image with multilingual support and rich content tailored to business clients. Technically, the website is built on WordPress with modern plugins and tools such as WPBakery Page Builder, Google Tag Manager, HubSpot, and LinkedIn Insight Tag. It employs standard web technologies including JavaScript and jQuery, and integrates multiple analytics and marketing tools with a robust cookie consent mechanism ensuring GDPR compliance. The site demonstrates good performance, mobile optimization, and accessibility features. From a security perspective, the site uses HTTPS with strong SSL configuration and employs Google reCAPTCHA to protect forms from spam. While some security headers are not explicitly detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management system. However, the site could improve by publishing explicit security policies and incident response contacts. Overall, bbv Software Services AG presents a trustworthy and professional online presence with strong business credibility, good technical implementation, and solid privacy and security practices. The risk level is low, and the company is well-positioned to maintain compliance and security in its digital operations.

J

JobCloud

jobcloud.ch

80

JobCloud AG operates as Switzerland's leading job portal and recruitment technology provider, serving over 30,000 Swiss companies. The company offers a comprehensive suite of services including job ads, programmatic job ads, employer branding, international recruitment, and candidate management. Their market position is strong, supported by well-known subsidiary portals jobs.ch and jobup.ch, and a clear focus on the Swiss recruitment market. The website is professionally designed with consistent branding and clear messaging targeting Swiss employers and recruiters.

The Fondation internationale pour la recherche en paraplégie (IRP) is a Swiss-based non-profit organization dedicated to advancing research in paraplegia and tetraplegia. The foundation supports scientific projects, offers research grants and fellowships, and organizes events to raise awareness and funds. Their website is professionally designed, multilingual, and targets researchers, donors, and patients interested in spinal cord injury research. The foundation holds a reputable position in the healthcare non-profit sector with clear contact and event information.

A

Association pour la Préservation des Rives des Lacs vaudois (APRIL)

april-vd.ch

48

APRIL is a small non-profit association dedicated to preserving the ecological integrity of the shores of lakes in the Vaud canton of Switzerland. The organization focuses on balancing environmental preservation with the interests of various lake users including residents and professionals. The website serves as an informational and advocacy platform with clear contact details and social media presence. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile responsiveness and SEO optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal policies such as privacy and cookie policies. No vulnerability disclosure or incident response information is provided, indicating room for improvement in security transparency. Overall, the site is trustworthy and professional but could enhance compliance and security practices.

G

Genève Tourisme

geneve.com

53

Genève Tourisme operates the official online guide for Geneva, providing comprehensive tourism information including attractions, events, dining, accommodation, and city tours. The website is well-structured, professionally designed, and targets tourists and visitors seeking to explore Geneva's cultural and natural offerings. Technically, the site uses TYPO3 CMS, integrates Google Tag Manager, and employs modern JavaScript libraries, indicating a mature digital infrastructure. Security posture is moderate with HTTPS usage and cookie consent, but lacks visible security headers and explicit privacy policies. WHOIS data is missing or unavailable, which raises concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from enhanced security and compliance disclosures.

P

Prime Partners S.A.

prime-partners.com

50

Prime Partners S.A. is an independent wealth management company founded in 1998 and based in Geneva, Switzerland. The firm focuses on private investors and offers discretionary management, active investment advice, and family office services. It positions itself as a partner-oriented firm with a limited client base to ensure personalized service. The website is professionally designed, multilingual, and optimized for SEO and mobile devices. It uses WordPress CMS with modern technologies including Yoast SEO and Google Analytics for tracking. Security posture is good with HTTPS and cookie consent mechanisms, but lacks published security policies and incident response information. WHOIS data is missing, which raises some concerns about domain registration transparency. Overall, the business appears credible and well-established in the finance sector, but domain registration details should be verified for full trust assurance.

S

Scan Compétences

scan-competences.ch

54

Scan Compétences is a small Swiss-based service provider specializing in competency evaluation and development services. The website is professionally designed using WordPress with modern plugins such as Yoast SEO and Divi Builder, indicating a moderate level of digital maturity. The company targets professionals and organizations seeking expert competency assessments. The site includes structured data and social media links to LinkedIn and YouTube, enhancing its online presence. Technically, the site uses HTTPS with Google Analytics tracking and an opt-out mechanism, but lacks visible security headers and published privacy or cookie policies. No incident response or vulnerability disclosure information is available, which limits transparency in security practices. Overall, the website is functional and professional but could improve in privacy compliance and security posture.

F

Fondation Nicolas Bogueret

fondation-nicolasbogueret.ch

51

Fondation Nicolas Bogueret is a Swiss non-profit foundation dedicated to creating and developing housing solutions for individuals and families with modest incomes, young people in training, and seniors. The website presents a professional and consistent brand image with content primarily in French, targeting a Swiss audience. The foundation operates in the real estate sector with a focus on affordable housing development. Technically, the website is built on WordPress using Divi Builder and Yoast SEO, indicating a moderate level of digital maturity. The site is well-optimized for SEO and mobile devices, with good performance and accessibility at a basic level. Security posture is adequate with HTTPS enabled and some security plugins in use, but lacks advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and legitimate but would benefit from enhanced privacy and security practices.

F

Fondation Clair-Bois

clairbois.ch

59

Fondation Clair-Bois is a Swiss non-profit organization dedicated to supporting polyhandicapped individuals. The website, primarily in French, serves as an informational and possibly e-commerce platform using WordPress with the Divi theme and WooCommerce plugin. The foundation appears to be established since 2017, consistent with the domain registration date. The site targets a general audience interested in the foundation's mission and services. Technically, the site employs modern web technologies including Google Tag Manager for analytics and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place; however, the absence of security headers and explicit privacy and terms policies suggests room for improvement. Overall, the website is professionally designed with good user experience and moderate trustworthiness, but lacks some compliance and security best practices.

S

Servette Rugby Club SA

servetterc.ch

60

Servette Rugby Club SA is a Swiss-based rugby sports club focused on providing rugby team activities, events, and community engagement primarily in Geneva. The club operates a professional website offering ticket sales, merchandise, and information about matches and training academies. Their market position is that of a regional sports club with a dedicated fan base and active community involvement. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including YouTube embeds, Google Tag Manager, and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and headers. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

Servette FC

servettefc.ch

60

Servette FC is a Swiss football club with an official website serving as a hub for club news, updates, and fan engagement. The website is built on WordPress and leverages modern SEO and cookie consent tools such as Yoast SEO and Cookiebot. It integrates multiple third-party analytics and marketing pixels including Google Analytics, Facebook Pixel, and TikTok Pixel, indicating a mature digital marketing approach. The site is well-branded and professionally designed, targeting football fans and stakeholders in Switzerland. Technically, the site is moderately performant with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of security headers and explicit privacy and terms of service pages are notable gaps. No contact information or incident response channels are directly visible, which could impact user trust and compliance. Overall, the domain registration aligns well with the business claims, supporting legitimacy. Strategic improvements include publishing comprehensive privacy and terms policies, enhancing security headers, and providing clear contact channels for security and privacy inquiries.

O

Office cantonal des assurances sociales

ocas.ch

64

The Office cantonal des assurances sociales (OCAS) of Geneva is a government entity responsible for managing and coordinating key social insurance schemes including old-age and survivors insurance, disability insurance, family allowances, and loss of earnings allowances. The website serves as an official portal providing comprehensive information, e-government services, and assistance to various stakeholders such as employers, employees, independents, students, and medical professionals. The site is well-positioned as the authoritative source for social insurance in the Geneva canton. Technically, the website is built on Drupal 11, leveraging modern web technologies including Matomo and Google Tag Manager for analytics, with a focus on privacy and accessibility. The site is mobile-optimized, well-structured, and uses recognized accessibility tools, reflecting a mature digital infrastructure suitable for a government agency. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and security posture. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for its target audience. Strategic improvements in security policy transparency and security headers would further strengthen its security maturity.

D

Domaine des Trois Étoiles

trois-etoiles.ch

58

Domaine des Trois Étoiles is a small Swiss vineyard and wine producer located in Peissy, Switzerland, specializing in organic wine production certified by Bio Suisse. The company operates an e-commerce platform hosted on Shopify, offering a selection of wines including Chardonnay, Merlot, Rosé de Gamay, and Amprô. The website is professionally designed with consistent branding and clear navigation, targeting mature wine consumers primarily in the Swiss region. The business model focuses on direct-to-consumer online sales complemented by local events such as the Saint-Martin de Peissy celebration. Technically, the site leverages Shopify's platform and CDN infrastructure, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and use of hCaptcha for form protection, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.