Switzerland security reports

S

Seiji Ozawa International Academy Switzerland

ozawa-academy.ch

50

Seiji Ozawa International Academy Switzerland is a prestigious classical music academy dedicated to training young high-level string instrumentalists worldwide. Founded by the renowned conductor Seiji Ozawa, the academy offers educational programs, concerts, auditions, and maintains a social and didactic mission. The website is professionally designed using WordPress with the Divi theme and includes multilingual support in French and English. It integrates social media channels and employs SEO best practices with Yoast SEO and structured data. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks visible privacy policies and security incident response information. Overall, the site reflects a credible and trustworthy educational institution with room for improvement in privacy and security transparency.

M

Mirabaud Group

mirabaud.com

52

Mirabaud Group is a well-established Swiss financial institution specializing in wealth management and asset management services. With a heritage spanning over 200 years, the company serves high net worth individuals, families, entrepreneurs, and institutional clients globally. Their business model emphasizes personalized client relationships, sustainable investment strategies, and a robust international platform. The website reflects a professional and consistent brand image, showcasing their key services and corporate responsibility initiatives. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager and OneTrust for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. However, some technical improvements could be made in security headers and incident response disclosures. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which is unusual for a financial institution. Overall, the website presents a trustworthy and professional front for Mirabaud Group, but verification of domain registration and enhancement of security disclosures are recommended to strengthen trust and compliance.

C

Chambre de commerce, d’industrie et des services de Genève

ccig.ch

63

The Chambre de commerce, d’industrie et des services de Genève (CCIG) is a well-established private association founded in 1865, representing approximately 2600 member companies. It serves as a key economic actor in Geneva, promoting a strong economy and supporting its members through business networking, events, export services, legal advice, and publications. The website reflects a professional and consistent brand image, targeting local businesses and economic stakeholders. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Kendo UI, and integrates analytics tools such as Google Analytics and LinkedIn Insight Tag. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is good with HTTPS enforced, but lacks visible security headers and a public security policy. Privacy compliance is limited due to absence of explicit privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the organization's claims, indicating a legitimate and trustworthy entity.

F

FER Genève

fer-ge.ch

68

FER Genève is a large, established umbrella organization representing over 80 professional associations and 29,000 member companies in Geneva, Switzerland. The website serves as a platform for advocacy and support of its members' political and economic interests. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries such as jQuery and FontAwesome, and integrates multiple analytics and tracking services including Google Analytics and Friendly Analytics. The security posture is adequate with HTTPS enabled and asynchronous loading of scripts, but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is functional and moderately professional but would benefit from enhanced privacy disclosures and security best practices.

R

Rhône Avocat∙e∙s

rhoneavocats.ch

53

Rhône Avocat∙e∙s is a Swiss legal services firm offering innovative and solution-oriented legal practice. The website presents a professional image with clear branding and content focused on legal expertise and client service. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie compliance, indicating a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy and well-positioned for its target audience, but lacks explicit privacy and terms of service documentation.

T

Théâtre de Beausobre

beausobre.ch

54

Théâtre de Beausobre is a well-established Swiss cultural venue located in Morges, attracting over 42,000 visitors per season to attend a diverse program of approximately 60 performances including theatre, dance, music, and circus. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting ticket sales and subscriptions through a partnered external platform. Technically, the site leverages WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant, and serves its audience effectively.

S

Société Nautique de Genève

nautique.ch

64

Société Nautique de Genève is a prestigious and historic non-profit nautical sports club based in Switzerland, founded in 1872. It is the largest club in Switzerland with over 4500 members and a significant presence in European nautical sports. The club promotes various water sports, supports athletes, organizes regattas and events, and offers training and membership services. The website reflects a mature digital presence with a modern WordPress-based infrastructure, including WooCommerce for e-commerce and various plugins for enhanced user experience. Privacy and cookie compliance are well implemented, with a clear privacy policy and consent mechanism. Security posture is strong with HTTPS, security headers, and error monitoring via Sentry, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for its audience.

The International Institute in Geneva (IIG) is a private higher education institution based in Switzerland offering accredited undergraduate, graduate, and doctorate programs primarily in business administration, international relations, computer science, and digital marketing. The institution maintains strong international partnerships, notably with the University of Plymouth in the UK, enabling dual degree offerings. The website is professionally designed with clear navigation and comprehensive program information targeting prospective students and academic professionals. Technically, the site employs modern JavaScript libraries and tracking tools such as HubSpot and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though security headers and incident response information could be enhanced. Privacy and cookie policies are present and GDPR compliant, reflecting a mature privacy stance. Overall, the website reflects a credible and established educational entity with a strong market position in international higher education.

V

Ville de Genève

geneve.ch

72

The website www.geneve.ch is the official digital presence of the City of Geneva, Switzerland. It serves as a comprehensive portal for municipal information, including administrative procedures, city news, cultural events, and public services. The site targets residents, tourists, businesses, and associations, providing clear and accessible content in French with multilingual support via Weglot. The business model is that of a public sector municipal government, focusing on transparency and citizen engagement. Technically, the site is built on Drupal 10, leveraging modern web technologies such as Google Tag Manager for analytics and Weglot for translations. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for optimization. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though some security headers are not explicitly detected. From a security and compliance perspective, the site includes a comprehensive privacy policy and cookie consent banner aligned with GDPR requirements. However, explicit security policies and incident response contacts are not publicly available. WHOIS data confirms the domain's legitimacy and consistency with the official City of Geneva identity, supporting high trustworthiness. Overall, the website is professional, trustworthy, and well-maintained, serving its public sector role effectively. Strategic improvements could include publishing explicit security policies and enhancing security headers to further strengthen the security posture.

M

Mairie de Thônex

thonex.ch

70

The website www.thonex.ch serves as the official online presence for the commune of Thônex in Geneva, Switzerland. It provides comprehensive municipal information, local services, event calendars, and community resources primarily targeting residents and visitors of the commune. The site is well-positioned as a trusted government portal with clear contact details and official branding. Technically, the site is built on WordPress with a modern plugin ecosystem including SEO, event management, and cookie compliance tools. The infrastructure supports good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but could benefit from enhanced HTTP security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable resource for its audience.

M

Migros

migros.ch

65

Migros is a leading Swiss retail company offering an extensive online grocery shopping platform with over 12,500 products. The website demonstrates a mature digital presence using modern Angular technology and integrates cookie consent mechanisms via OneTrust, reflecting compliance with privacy regulations. The site is well-optimized for mobile users and provides a professional user experience with clear branding and consistent design. However, explicit privacy policies, terms of service, and contact information are not present in the analyzed HTML snapshot, which could be located elsewhere on the site. From a technical perspective, the infrastructure leverages modern frameworks and external services for fonts, images, and cookie management, indicating a robust and scalable platform. Performance is moderate with good mobile optimization, though accessibility features could be enhanced. Security posture is adequate with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected. The WHOIS data aligns well with the business identity, confirming legitimacy. Strategic improvements include adding explicit privacy and security policies, enhancing accessibility, and publishing vulnerability disclosure information to strengthen compliance and security transparency.

B

Butini

butini.ch

57

Butini is a Swiss-based senior care organization providing residential and day care services for elderly individuals with loss of autonomy or cognitive disorders. The website positions Butini as a community-centric care provider with personalized care plans and a vibrant social environment. Technically, the site is built on WordPress with modern SEO and privacy plugins, ensuring good digital maturity. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature healthcare service provider.

S

Smeetz SA

smeetz.com

65

Smeetz SA operates a sophisticated unified commerce platform tailored for visitor attractions such as amusement parks, zoos, museums, and live venues. Their AI-powered solutions focus on optimizing ticketing, retail, and F&B sales through centralized inventory management, dynamic pricing, marketing intelligence, and performance insights. The company positions itself as a modern leader in the hospitality technology sector, leveraging AI to enhance visitor experience and revenue growth. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content targeting B2B customers in the hospitality industry. Technically, the website is built on Webflow CMS and integrates multiple modern marketing and analytics tools including Google Tag Manager, Facebook Pixel, Hotjar, LinkedIn Insight Tag, and HubSpot forms. The site is well-optimized for performance, mobile responsiveness, and SEO, demonstrating a high level of digital maturity. Security best practices are observed with HTTPS enforcement and security headers, though explicit cookie consent mechanisms and incident response information are lacking. From a security perspective, the site shows a good posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain www.smeetz.com introduces some uncertainty regarding domain registration legitimacy. Despite this, the professional branding, customer testimonials, and active social media presence support the company's credibility. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent and GDPR explicit indicators could be improved. Overall, Smeetz SA presents a trustworthy and professional online presence with strong business and technical foundations. Strategic improvements in privacy compliance and transparency around security policies would further enhance trust and regulatory adherence.

S

Standout GmbH

standout.ch

55

Standout GmbH is a Swiss-based online marketing agency established in 2012, specializing in services such as SEO, Google Ads, social media marketing, lead generation, e-commerce marketing, and digital recruiting. The company holds reputable certifications including Google Premier Partner and Meta Business Partner, positioning it as a credible player in the Swiss digital marketing sector. Their website reflects a professional and modern design with clear navigation and comprehensive service offerings tailored to businesses seeking to enhance their online visibility and lead acquisition. Technically, the website leverages a modern technology stack including Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for privacy compliance. The use of Craft CMS is inferred from security cookies. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Cookie consent mechanisms are robust, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements security best practices such as CSRF protection and security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact is noted. Overall, the website demonstrates a high level of professionalism, security, and privacy compliance, making it a trustworthy digital presence for Standout GmbH. Strategic recommendations include publishing a security policy, providing incident response contacts, and establishing a vulnerability disclosure program to further enhance trust and security posture.

S

Standbau Hug AG

standbau-hug.ch

55

Standbau Hug AG is a Swiss-based company specializing in trade fair stand construction, event setup, and graphic design services. The company targets businesses and organizations requiring professional exhibition and event solutions. Their website reflects a focused business model with clear service offerings and a consistent brand presence. Technically, the site is built on WordPress using the Avada theme and includes modern plugins such as LayerSlider and a comprehensive cookie consent mechanism, indicating a moderate to good level of digital maturity. Security-wise, the website enforces HTTPS, employs standard security headers, and respects privacy compliance with GDPR-aligned cookie consent. However, it lacks published security policies and incident response information, which could be improved to enhance trust and readiness. Overall, the website is professional, secure, and compliant, with minor areas for enhancement in security transparency and contact information completeness.

A

Appenzeller Druckerei AG

trauer-zirkular.ch

61

The website trauer-zirkular.ch is an e-commerce portal operated by Appenzeller Druckerei AG, specializing in funeral and mourning print materials such as mourning circulars, thank you cards, and funeral meal cards. The site targets individuals in Switzerland seeking personalized funeral print products, offering a streamlined and personal ordering experience. The business operates in a niche market with a clear focus on quality and customer service. Technically, the website employs a custom or Websale-based e-commerce platform with modern web technologies including JavaScript, CSS, and AJAX. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Performance is moderate, and SEO and accessibility features are basic but adequate for the target audience. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contact. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a trustworthy and professional front for a small specialized business. Strategic recommendations include enhancing security headers, publishing a security policy, and expanding contact information to improve trust and compliance further.

Druckerei Appenzeller Volksfreund operates as a regional printing and media service provider in Switzerland, focusing on printing services including books, calendars, and supporting local media outlets such as Appenzeller Volksfreund and Anzeige-Blatt. The website serves primarily as an informational portal linking to partner sites and related media businesses. The technical infrastructure is modest, utilizing the Foundation CSS framework and jQuery, with basic mobile optimization and moderate performance. Security posture is minimal with no evident HTTPS enforcement or security headers, and no privacy or cookie policies are published, indicating gaps in compliance and security best practices. Overall, the site is safe for general audiences and does not contain any adult or questionable content. Strategic improvements in security, privacy compliance, and contact transparency are recommended to enhance trust and professionalism.

S

Solveva

actus.cloud

58

Actus by Solveva is a specialized software provider offering actuarial modelling and pricing tools primarily for the insurance and reinsurance sectors. The company positions itself as a leading partner with nearly two decades of experience, delivering modular and customizable software solutions to improve underwriting productivity and profitability. The website reflects a professional and consistent brand image with clear contact information and a focus on business clients in the finance industry. Technically, the website employs standard modern web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Fonts for typography. The site is moderately optimized for performance and mobile devices but lacks advanced frameworks or CMS platforms. No analytics or tracking tools are detected, indicating a privacy-conscious approach or minimal user tracking. From a security perspective, the domain is well-managed with domain locks in place, but the website lacks published privacy and cookie policies, security headers, and incident response information. SSL configuration details are not provided, and DNSSEC is not enabled, which suggests room for improvement in security hardening and compliance. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

H

Hoststar - Multimedia Networks AG

hoststar.ch

73

Hoststar - Multimedia Networks AG is a Swiss-based web hosting and domain registration provider established since 2013. The company offers a wide range of hosting solutions including shared hosting, reseller hosting, virtual servers, SSL certificates, and security services such as SiteLock and VPN. Their market position is that of a reputable mid-sized hosting provider serving individuals and businesses primarily in Switzerland. The website is professionally designed with good content quality and clear navigation, targeting customers seeking reliable and affordable hosting services. Technically, the website is built on Drupal CMS and integrates multiple third-party marketing and analytics tools including Google Analytics, Facebook Pixel, Intercom, and SalesManago. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and security headers. HTTPS is properly implemented, ensuring secure communications. From a security perspective, the site follows basic best practices such as HTTPS and offers security-related products. However, it lacks visible security policies, incident response contacts, and comprehensive security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which is a notable compliance gap. Overall, the website is trustworthy and legitimate, supported by consistent WHOIS data showing transparent Swiss company ownership and an appropriate domain age. The risk level is moderate, primarily due to privacy compliance shortcomings and limited security policy disclosures. Strategic recommendations include implementing clear privacy and cookie policies, enhancing security headers, and publishing incident response information to improve trust and compliance.

V

Volkswagen Schweiz

volkswagen.ch

72

Volkswagen Schweiz operates as the official Swiss website for Volkswagen, providing comprehensive information on current vehicle models, offers, customer portals, services, and accessories. The company is a large, well-established player in the Swiss automotive market, supported by its parent company Volkswagen AG and subsidiaries such as AMAG Import AG. The website targets both private and business customers, offering vehicle sales, financing, leasing, and digital services including e-mobility solutions. Technically, the site is built on Adobe Experience Manager with React components, leveraging modern web technologies and performance optimizations. Security posture is strong with HTTPS, security headers, and consent mechanisms implemented, though explicit security policy and incident response information are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

A

AMAG Group AG

cuprapartner.ch

71

The website cuprapartner.ch serves as the official CUPRA partner locator for Switzerland, operated under the AMAG Group AG umbrella, a prominent automotive distributor. It targets consumers interested in CUPRA vehicles by providing a platform to find authorized dealerships and access related services. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, it employs modern web technologies including React, Google Maps API, and tracking tools like Google Tag Manager and Visual Website Optimizer, all integrated with GDPR-compliant cookie consent mechanisms. Security measures are robust, featuring HTTPS, security headers, and no exposed sensitive data, although a dedicated security policy and incident response information are absent. WHOIS data confirms the domain's legitimacy and alignment with the business entity, reinforcing trustworthiness. Overall, the site demonstrates a mature digital presence suitable for its business purpose.

S

SEAT

seatpartner.ch

70

The website seatpartner.ch serves as an official SEAT partner locator for the Swiss market, providing users with information about SEAT dealerships and services. It is designed primarily for consumers interested in SEAT vehicles and related services within Switzerland. The site leverages modern web technologies including React and Google Maps API to deliver a functional and visually consistent user experience aligned with the Volkswagen Group branding. However, the content quality is basic, focusing mainly on dealership location without extensive additional information or resources. Technically, the site is well-structured with HTTPS enabled and uses custom fonts and icons to maintain brand identity. Security headers and privacy compliance mechanisms such as privacy and cookie policies are notably absent, representing compliance and security posture gaps. No contact information or incident response details are visible, limiting user support and transparency. Overall, the domain registration aligns well with the brand and market claims, indicating legitimacy and trustworthiness. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance the site's security posture and user trust.

S

Suzuki Schweiz

suzuki.ch

42

Suzuki Schweiz operates as the official Swiss web presence for Suzuki, focusing on promoting and linking to its automobile, motorcycle, and marine product lines. The website serves primarily as a gateway to specialized subdomains dedicated to each product category, targeting consumers and enthusiasts in Switzerland. The business model centers on brand representation and product information dissemination within the transportation sector. Technically, the site employs standard HTML5, CSS, and JavaScript technologies, including the Jssor Slider for visual content and Google Tag Manager for analytics and marketing. The site is moderately optimized for mobile devices and performance but lacks advanced SEO and accessibility features. Security posture is basic; while HTTPS is presumed, no security headers or explicit security policies are present, and no contact or incident response information is provided. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which may pose GDPR compliance risks. Overall, the domain registration aligns well with the brand's Swiss presence, indicating legitimacy and trustworthiness.

M

MM Automobile Schweiz AG

mitsubishi-motors.ch

55

Mitsubishi Motors Switzerland, operated by MM Automobile Schweiz AG, is a medium-sized automotive business focused on selling and leasing Mitsubishi vehicles, including advanced plug-in hybrid electric vehicles (PHEV). The website showcases a comprehensive range of models, leasing offers, and after-sales services, targeting Swiss consumers interested in modern, efficient vehicles. The company maintains a consistent brand presence and leverages social media channels to engage customers. Technically, the website is built on TYPO3 CMS and integrates modern web technologies such as Google Maps API, LiveChat, and YouTube Player API. The site is mobile-optimized with good SEO practices and moderate performance. Security is well addressed with HTTPS and Content Security Policy headers, although some improvements in privacy compliance and accessibility could be made. Security posture is strong with no critical vulnerabilities detected, but the absence of cookie consent and explicit security policies are areas for improvement. The WHOIS data confirms the legitimacy of the domain and its alignment with the business claims. Overall, the website presents a professional and trustworthy digital presence with room for enhanced privacy and security transparency. Strategic recommendations include implementing a cookie consent mechanism, publishing terms of service and security policies, enhancing accessibility, and providing clear contact information to improve user trust and regulatory compliance.

C

CH Regionalmedien AG

telezueri.ch

61

TeleZüri is a regional media company operating in Zurich, Switzerland, providing local news, television programming, and event coverage. The website offers live streaming, video news articles, and advertising opportunities, targeting residents interested in Zurich regional content. The business is positioned as a key regional media player under the parent company CH Regionalmedien AG. Technically, the website uses modern JavaScript frameworks, integrates with Kaltura for video delivery, and employs consent management and advertising networks to monetize content. Security posture is strong with HTTPS, security headers, and privacy compliance, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, serving a general audience with safe content.

Z

Zürcher Kantonalbank

frankly.ch

71

frankly is a digital pension solution platform developed by Zürcher Kantonalbank, a major Swiss universal bank. The platform focuses on providing simple, fully digital retirement planning services including pillar 3a and vested benefits accounts. The website positions frankly as an easy, secure, and cost-effective solution for Swiss residents to manage their pension savings via app or web. The business model leverages digital transformation to reduce costs and improve user experience in the financial services sector. Technically, the website is built on Adobe Experience Manager, uses modern web standards, and integrates Adobe Analytics and OneTrust for tracking and consent management. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit privacy policy and terms of service documents are not directly found on the homepage HTML, and no direct contact information is exposed, which slightly reduces privacy compliance and business credibility scores. Overall, frankly presents a professional, trustworthy, and technically sound digital financial service platform.

S

Swisscanto

swisscanto.com

76

Swisscanto operates as a Swiss financial services provider specializing in investment funds with a strong emphasis on sustainable investment products. The website targets private investors in Switzerland, offering a broad portfolio including ETFs, index funds, thematic investments, and real estate products. The company positions itself as a reputable and established player in the Swiss finance market, focusing on financial fitness and sustainability. Technically, the website is built on Adobe Experience Manager, leveraging modern JavaScript and SVG graphics, and implements a cookie consent mechanism compliant with GDPR. The site is well-structured, mobile-optimized, and professionally designed, providing a positive user experience. Security-wise, the site enforces HTTPS and uses consent management tools, though explicit security headers could be further verified. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and content. Overall, Swisscanto's digital presence reflects a mature and trustworthy financial institution with room for minor security enhancements.

V

von Rotz Online Shop

vonrotz-shop.ch

58

Von Rotz Online Shop is a Swiss-based e-commerce retailer specializing in accessories related to automotive, camping, house, and garden sectors. The website presents a professional and consistent brand image targeting general consumers interested in these product categories. The business operates a niche regional online store with a clear focus on retail sales. Technically, the website leverages modern web technologies including jQuery, Google Tag Manager, Google Analytics 4, and lazy loading for images, built on the JTL Shop e-commerce platform. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA, and implements cookie consent mechanisms, although it lacks explicit privacy and security policies publicly available. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is secure, functional, and trustworthy but would benefit from enhanced transparency in privacy and terms documentation.

T

TheMapleBrothers I Snacks, Cerealien & mehr I Ahornsirup

themaplebrothers.ch

62

The website www.themaplebrothers.ch is a small business site hosted on the Wix platform, targeting a German-speaking Swiss audience. The site appears to be in early stages or minimal content mode, with no explicit privacy, cookie, or terms of service pages detected. The technical infrastructure relies on Wix's Thunderbolt framework and includes standard polyfills and Facebook Pixel for marketing tracking. Security posture is moderate with HTTPS assumed and some script-based security hardening, but lacks explicit security policies or headers. Overall, the site shows basic digital maturity with room for improvement in privacy compliance and business transparency.

T

Terravigna AG

terravigna.ch

66

Terravigna AG operates a specialized e-commerce platform and physical retail stores focused on wine and spirits in Switzerland. The company offers a curated selection of wines, spirits, gift boxes, and organizes events and tastings, targeting wine enthusiasts and retail customers primarily in Switzerland. The website is built on the Magento platform, leveraging modern web technologies such as jQuery, Bootstrap, and integrates analytics and marketing tools like Google Analytics and Facebook Pixel. The digital infrastructure supports a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and use of invisible reCAPTCHA on forms, but lacks some security headers and explicit cookie consent mechanisms. Privacy and terms policies are present and comprehensive, supporting GDPR compliance. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

B

billbox AG

billbox.com

55

billbox AG is a Swiss-based technology company specializing in digital invoice management and financial process automation. With over two decades of experience, the company offers web-based software solutions that enable businesses to digitize and control their financial workflows efficiently. Their services include business partner management, reporting, and integration with various ERP and accounting systems, positioning them as a trusted partner for companies seeking digital transformation in financial operations. The website reflects a mature, professional business with a clear focus on innovation, security, and customer-centric services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security practices include HTTPS enforcement and data encryption, although some improvements like DNSSEC and security headers could enhance their posture. Overall, the domain's long history and consistent WHOIS data support the company's legitimacy. The site is fully accessible without WAF or blocking mechanisms, and privacy compliance is addressed through a privacy policy and cookie consent banner.

F

FutureLog AG

futurelog.com

63

FutureLog AG operates a professional, cloud-based procure-to-pay software platform tailored specifically for the hospitality industry. Their solutions cover ordering, invoicing, inventory, recipe management, and business intelligence, positioning them as a market leader in hospitality procurement software. The website is well-designed, mobile-optimized, and provides comprehensive resources and customer success stories, reflecting a mature digital presence. Technically, the site uses TYPO3 CMS with integrations for analytics and cookie consent, ensuring good performance and compliance. Security posture is strong with HTTPS and ISAE 3402 certifications, though some security headers and incident response details could be improved. The absence of WHOIS data for the domain is a notable anomaly that warrants further verification. Overall, FutureLog presents a credible and professional business with a strong focus on compliance and customer trust.

Geneva Helicopters is a specialized transportation company offering private helicopter transfers primarily from Geneva Airport to various alpine destinations. Established in 2005, the company operates under the parent company Mont Blanc Helicoptères and serves a niche market of affluent travelers seeking luxury and efficient air travel. Their services include helicopter transfers, private jet charter proposals, and last-minute flight options, targeting business and leisure travelers in Switzerland and neighboring regions. The website infrastructure is built on a custom platform utilizing legacy JavaScript libraries such as jQuery 1.4.2 and various jQuery plugins. Hosting and DNS services are managed through Infomaniak Network SA and Cloudflare, respectively. While the site uses HTTPS and Google Analytics for tracking, it lacks modern security headers and DNSSEC, indicating room for improvement in technical security and compliance. From a security perspective, the site demonstrates basic best practices like HTTPS enforcement and domain transfer protection but is hindered by outdated libraries and missing security headers. There is no visible cookie consent mechanism or comprehensive privacy compliance features, which may expose the company to GDPR compliance risks. Incident response and security policy information are not published, limiting transparency. Overall, Geneva Helicopters presents a professional and trustworthy business with a solid market position but should prioritize updating its technical stack, enhancing security measures, and improving privacy compliance to reduce risk and build greater customer trust.

LB Airpark SA operates a luxury jet park in Sion, Switzerland, targeting affluent private jet owners and operators. The business focuses on providing premium parking and aviation-related services, positioning itself as a niche luxury aviation real estate and service provider. The website reflects a small-sized company with a founding date consistent with the domain registration in 2013. The site content is minimal but professional, with consistent branding and clear navigation.

E

Eagle Valais

eaglevalais.ch

51

Eagle Valais is a specialized aerial work and transport company based in the Valais region of Switzerland, operating since 2002. The company offers a broad range of services including aerial work such as transport of materials, assembly, forest services, firefighting support, avalanche triggering, and media production via photo and film. Additionally, they provide passenger experiences like panoramic flights, VIP flights, parachutist drops, heliski, and operate a certified flight school (FHATO). Their market position is that of a trusted local expert with a professional online presence and active social media engagement. Technically, the website is built on WordPress using Elementor and several modern plugins, with good SEO practices and mobile optimization. The site employs HTTPS and cookie consent mechanisms, indicating a baseline of privacy compliance. Analytics are implemented via Google Analytics and SumoMe, with moderate user tracking. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional and trustworthy image with room for improvement in privacy policy publication and enhanced security headers. The risk level is low, but adding formal security and privacy documentation would strengthen compliance and trust.

S

Swiftcopters

swiftcopters.net

51

Swiftcopters is a specialized helicopter company based at Geneva International Airport, offering a range of luxury and professional aviation services including VIP flights, panoramic tours, pilot training, and maintenance. The company has a strong market position as the only IFR approved helicopter operator at this strategic location, targeting affluent clients and corporate customers in Switzerland and Europe. The website reflects a professional and consistent brand image with good content quality and clear service offerings. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics and Google Tag Manager. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and explicit policy disclosures. Overall, the domain registration data supports the legitimacy and trustworthiness of the business, with a domain age consistent with the company's founding date. Recommendations include adding comprehensive privacy and cookie policies, visible contact information, and incident response details to enhance compliance and user trust.

Le Pavé Gourmand is a Swiss-based restaurant integrated within a professional training center, providing culinary and hospitality apprenticeship training alongside public dining services. The website presents detailed weekly menus, business information, and social media links, reflecting a focused hospitality business model with a niche market position. Technically, the site uses legacy jQuery versions, Google Maps API, and Font Awesome icons, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage but lacks advanced security headers and vulnerability disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but requires improvements in security and privacy practices.

F

Fédération Fribourgeoise des Entrepreneurs

cppf-pbkf.ch

50

The Commission Professionnelle Paritaire Fribourgeoise du Secteur Principal de la Construction (CPPF) operates as a regional federation representing construction sector entrepreneurs in the canton of Fribourg, Switzerland. The organization provides key services including labor conventions, collective agreements, work calendars, salary scales, and professional cards, targeting construction professionals and companies within the region. The website serves as an information hub with news updates, downloadable resources, and partner information, positioning the CPPF as a trusted authority in its sector. Technically, the website is built on the Neos CMS platform leveraging the Flow PHP framework, with modern JavaScript libraries such as Swiper.js and Google Analytics integrations. The site is mobile-optimized with good SEO practices and structured data usage, reflecting a moderate to good level of digital maturity. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and uses anonymized IP tracking in analytics, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy and cookie consent mechanism present, though GDPR compliance indicators are limited. Overall, the website is professional, trustworthy, and safe for general audiences. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, expanding privacy and incident response disclosures, and continuing to monitor third-party scripts for vulnerabilities to improve security posture and compliance.

G

GenerazionePiù Anziani OCST

generazionepiu.ch

57

GenerazionePiù is a Swiss non-profit association focused on supporting elderly individuals who have reached retirement age and wish to remain active and socially engaged. The organization offers a variety of social activities, events, and publications tailored to its target audience in the Ticino region. The website reflects a local community-oriented business model with a clear mission to enhance the quality of life for seniors. Technically, the website is built on the Joomla CMS platform, utilizing the Yootheme framework and UIkit for responsive design. It incorporates modern JavaScript libraries such as jQuery and Awesomplete, and integrates a newsletter system via AcyMailing. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. From a security perspective, the site enforces HTTPS and employs Joomla's built-in security features. However, it lacks explicit security headers like Content-Security-Policy and X-Frame-Options, which could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially met with a privacy policy and GDPR consent in the newsletter form, but the absence of a cookie consent banner is a notable gap. Overall, the website presents a trustworthy and professional online presence for a small non-profit organization. Strategic improvements in security headers and privacy mechanisms would further strengthen its posture and compliance.

The website ospedaledelgiocattolo.ch currently displays a PHP version unsupported error page managed by Hostpoint AG, the largest Swiss web hosting provider. The site lacks any accessible business content, contact information, or compliance policies, indicating it is either under maintenance or misconfigured. The technical infrastructure relies on an outdated PHP version and includes jQuery 3.6.0, with no visible modern frameworks or CMS. Security posture is weak due to the unsupported PHP version and absence of security headers or HTTPS enforcement. Privacy compliance is non-existent, with no privacy or cookie policies found. Overall, the site presents a low trust profile and poor user experience.

C

Cassa disoccupazione cristiano sociale OCST

cd-ocst.ch

54

Cassa disoccupazione cristiano sociale OCST is a Swiss social unemployment fund primarily serving the Canton Ticino region. It holds a leading market position with 40% of the unemployed in the region choosing its services and is recognized by SECO as the fastest unemployment fund in Switzerland. The organization offers digital assistance, online tools, and educational resources to support unemployed individuals and companies. The website is built on WordPress and uses common plugins for analytics and cookie consent, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit published security policies. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements, though it could improve transparency around incident response and vulnerability disclosure.

F

FORMAT Lingua Sagl

formatlingua.ch

62

FORMAT Lingua Sagl is a Swiss-based language service provider established in 1999, offering translation services and language training courses for individuals and companies. The company holds EduQua certification and collaborates with recognized professional training centers, positioning itself as a trusted local player in the education sector. Their website is professionally designed, mobile-optimized, and provides clear information about their services and contact details. Technically, the site uses modern web technologies including Bootstrap, FontAwesome, Google Fonts, and Google reCAPTCHA v3 for security. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the website reflects a credible and professional organization with good digital maturity.

F

Franz Kaldewei GmbH & Co. KG

kaldewei.ch

58

Franz Kaldewei GmbH & Co. KG operates a professional website focused on manufacturing and retailing high-quality bathroom solutions such as bathtubs, shower surfaces, and washbasins made from steel enamel. The company targets a broad audience including consumers and professionals in Switzerland and other countries, supported by multiple localized domains. The website is built on TYPO3 CMS and incorporates modern web technologies including Google reCAPTCHA and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and anti-bot measures in place, though explicit security headers and a published security policy are absent. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy link. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position as an established manufacturer in the bathroom industry.

P

Preisvergleich Europe GmbH

preisvergleich.ch

66

Preisvergleich.ch is a well-established Swiss price comparison platform operated by Preisvergleich Europe GmbH. It offers users comprehensive product listings, buying guides, and test reports to facilitate informed purchasing decisions. The platform targets Swiss consumers seeking competitive prices and trustworthy product information. Technically, the site employs modern JavaScript libraries such as jQuery and Owl Carousel, integrates Google Tag Manager and Analytics for tracking, and uses JSON-LD structured data to enhance SEO and search capabilities. The website is mobile-optimized with good navigation and content quality. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks visible security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

S

SERV – Swiss Export Risk Insurance

serv-ch.com

70

SERV is a Swiss government-backed export risk insurance provider that supports Swiss companies in managing risks associated with export transactions and expanding into new markets. The website presents a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern web technologies to deliver a user-friendly experience. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and use of Google Tag Manager for controlled script loading. No critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS data for the domain is unavailable, which is inconsistent with the active and professional website presence and warrants further investigation. Overall, the website demonstrates a high level of trustworthiness and compliance with privacy regulations, making it a reliable resource for its target audience.

A

Auto Welt von Rotz AG

vonrotz.ch

55

Auto Welt von Rotz AG operates a comprehensive automotive dealership website based in Switzerland, offering over 500 new and used vehicles across multiple brands, along with extensive after-sales services including repairs, tuning, rentals, and an online accessories shop. The company maintains a strong market position as a large regional dealer with a diverse inventory and multiple customer engagement channels. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies such as Bootstrap, jQuery, and integrates marketing and analytics tools like Google Analytics, Google Tag Manager, and Facebook Pixel. The site demonstrates good SEO practices with structured data and meta tags, and provides a responsive user experience optimized for mobile devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website reflects a professional and trustworthy business presence with strong customer trust signals including numerous positive Google reviews.

A

Altenburg-Garage AG

altenburg-garage.ch

54

Altenburg-Garage AG is a well-established automobile dealership and service provider located in the Kanton Aargau region of Switzerland. Founded in 1977, the company represents multiple licensed car brands including Cupra, Mitsubishi, Seat, Suzuki, and VW. Their business model encompasses new and used car sales, leasing, professional car servicing, and a car wash facility, targeting local customers seeking quality automotive products and services. The website reflects a strong market position with comprehensive offerings and a focus on customer satisfaction. Technically, the website is built on WordPress with modern technologies such as Bootstrap, Swiper.js, and Google Tag Manager for analytics. It is optimized for mobile devices, loads quickly, and follows good SEO and accessibility practices. The presence of structured data and social media integration further enhances its digital maturity. From a security perspective, the site uses HTTPS with good SSL configuration and secure form handling. However, it lacks explicit security headers and a dedicated security or incident response policy page. Privacy compliance is partially addressed with clear privacy and cookie policies, though a cookie consent mechanism is missing. No vulnerabilities or suspicious activities were detected in the content. Overall, Altenburg-Garage AG’s website demonstrates high professionalism, trustworthiness, and business credibility. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its security posture and compliance standing.

Jsabelle Forrer is a small Swiss-based design service provider specializing in graphic, web, and app design as well as illustration. The website presents a professional design with clear focus on delivering quality design experiences to consumers. The technical infrastructure is based on BaseKit CMS and hosted by Hoststar, utilizing modern web fonts and iconography. However, the site lacks critical privacy and cookie policies, contact information, and security disclosures, which impacts its compliance and trustworthiness. Security posture is minimal with no detected security headers or incident response information. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

Appenzeller Druckerei AG is a regional printing and media services company based in Eastern Switzerland, specializing in offset and digital printing, specialized printing techniques, and media production. Their website reflects a well-structured business with multiple service offerings including print shops, editorial services, and digital publication solutions. The company targets businesses and individuals in the Ostschweiz region, positioning itself as a trusted local provider with multiple physical locations and a professional online presence. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies such as jQuery, FontAwesome, and responsive design elements, ensuring good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is partially met with a privacy policy and terms of service present, but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

D

diversified design

diversified.ch

49

diversified design is a Swiss-based small design agency founded in 2008, specializing in corporate identity, print media, photography, and electronic media services. The company targets businesses and individuals seeking comprehensive and tailored design solutions. The website is professionally designed using WordPress with modern plugins and demonstrates good content quality and branding consistency. Technical infrastructure includes WordPress CMS, Yoast SEO, WPBakery Page Builder, and Google Analytics for tracking. Security posture is solid with HTTPS enabled and no exposed sensitive data, though security headers and cookie consent mechanisms are lacking. The domain registration details align well with the business information, supporting legitimacy. Overall, the website is trustworthy and professional but could improve privacy compliance and security best practices.