Switzerland security reports

G

Gammeter Media AG

gammetermedia.ch

47

Gammeter Media AG is a regional communication solutions provider based in Switzerland's Engadin region. They specialize in print, content creation, photography, video production, and web design services tailored to local businesses and organizations. The company positions itself as a trusted partner offering end-to-end communication solutions from concept to final product. Technically, the website is built on TYPO3 CMS with modern frontend technologies including JavaScript frameworks and Google services for analytics and security. The site is well-structured, mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and use of reCAPTCHA, though formal security policies and incident response contacts are not published. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

S

Skyguide S.A.

skyguide.ch

57

Skyguide S.A. is the leading Swiss air navigation service provider, offering comprehensive air traffic control and related services across Switzerland and delegated airspaces. The company maintains a strong market position with key services including flight information, aeronautical information management, drone flight coordination, and commercial aviation services. The website reflects a professional and well-structured digital presence, targeting aviation professionals, industry stakeholders, and job seekers. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, integrates multiple analytics and marketing tools with user consent, and is optimized for mobile and accessibility. Security posture is robust with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting Skyguide's reputation as a reliable aviation service entity.

D

Dept (formerly Hinderling Volkart)

hinderlingvolkart.com

67

The website represents the rebranding of Hinderling Volkart as part of the global digital agency Dept. It positions itself as a leading full-service digital agency in Switzerland with a broad range of services from strategy to experience design. The site is professionally designed with modern technologies such as Vue.js and Nuxt.js, and integrates analytics and marketing tools like Google Analytics and Google Tag Manager. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and explicit privacy and terms policies. The missing WHOIS data is a concern but the website's professional appearance and parent company affiliation mitigate trust issues. Overall, the site is a credible digital agency landing page with room for improvement in compliance transparency and security hardening.

Z

Zürcher Kantonalbank

zkb.ch

75

Zürcher Kantonalbank is a well-established Swiss universal bank with over 150 years of history, offering a broad range of financial services including private banking, retail banking, mortgages, investment, and digital banking solutions. The website reflects a mature digital presence with comprehensive service information targeting private clients in Switzerland. The bank positions itself as a secure and trusted financial institution with strong local roots. Technically, the site uses Adobe Experience Manager as its CMS, integrates OneTrust for cookie consent, and employs Adobe Analytics for user tracking. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response contacts are not found. Overall, the domain registration and WHOIS data align well with the bank's identity, supporting legitimacy and trust.

T

ti&m AG

ti8m.com

76

ti&m AG is a Swiss-based technology company specializing in digital solutions and security products, serving clients primarily in Switzerland and the European Union. Positioned as a market leader, the company focuses on innovation projects and digital transformation services. Their website reflects a professional and modern digital presence, emphasizing their expertise and leadership in the technology sector. The company targets business clients seeking advanced digital and security solutions, leveraging certifications such as ISO 27001 to reinforce trust and credibility. The technical infrastructure of the website includes modern web technologies and multiple analytics tools such as Google Analytics, Microsoft Clarity, Hotjar, and LinkedIn Insight Tag, integrated with a consent management platform (OneTrust) to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital strategy. However, the absence of explicit CMS or hosting provider details limits full infrastructure transparency. From a security perspective, the website enforces HTTPS with strong SSL configuration and employs privacy-conscious tracking practices like IP anonymization. While security headers are implied, explicit implementation details are not fully visible. The presence of ISO 27001 certification suggests a robust internal security framework, though the lack of a dedicated security policy or incident response page indicates room for improvement in transparency and readiness. Overall, the website presents a trustworthy and professional image with good privacy compliance and security posture. The main risk factor is the lack of WHOIS data, which raises questions about domain registration transparency. Strategic recommendations include enhancing security header implementation, publishing detailed security policies, and establishing clear incident response contacts to further strengthen trust and compliance.

P

Puzzle ITC

puzzle.ch

70

Puzzle ITC is a Swiss-based technology company specializing in open source software and sustainable IT solutions. They offer a broad range of services including digital transformation, software development, platform engineering, cloud infrastructure, AI, IT security, and mobility IT services. Their market presence is focused on Switzerland and parts of Germany, targeting businesses and organizations seeking innovative and sustainable IT solutions. The company demonstrates a solid market position with reputable client partnerships and a professional online presence. Technically, the website is built on WordPress with modern technologies such as Yoast SEO, Matomo analytics, and Google reCAPTCHA, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. Performance is moderate, and the site uses structured data for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics (Matomo). However, it lacks explicit security policies, incident response contacts, and security headers, which are areas for improvement. Privacy compliance is partial, with no visible privacy or cookie policies and no consent mechanisms, which could pose compliance risks. Overall, Puzzle ITC presents a trustworthy and professional business with a good security posture but should enhance privacy and security transparency to meet higher compliance standards and user trust expectations.

M

mp technology AG

mptechnology.ch

62

mp technology AG is a Swiss-based software development company specializing in custom business and mobile applications for both B2B and B2C markets. The company positions itself as an agile development specialist with award-winning projects such as the Smile App, indicating a strong market presence in Switzerland's technology sector. Their service offerings include e-business applications, enterprise solutions, technology consulting, and mobile app development using modern frameworks like Vaadin and Angular. Technically, the website is built on WordPress with a moderate tech stack including jQuery and FontAwesome, showing a blend of modern and legacy technologies. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

I

Inventage AG

inventage.com

70

Inventage AG is a Swiss-based technology company specializing in custom software solutions leveraging modern web technologies and open-source components. Established in 2000, the company targets businesses and organizations seeking tailored digital solutions. Their market position is that of a trusted, established provider with a focus on quality and innovation. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting credibility and trust. Technically, the website uses modern web standards with JavaScript and CSS, and integrates Matomo Analytics for privacy-conscious user tracking. Hosting is provided by Cloud DNS Ltd, and the domain is well-maintained with a long history. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. From a security perspective, HTTPS is enforced, and domain status includes clientTransferProhibited, indicating domain transfer protection. However, DNSSEC is not enabled, and no security headers were detected, which could be improved. No explicit security policies or incident response contacts are published, representing an area for enhancement. Privacy compliance is good with a comprehensive privacy policy, but no cookie consent mechanism was found. Overall, the website and business demonstrate a solid risk posture with no critical vulnerabilities or suspicious indicators. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and implementing cookie consent to enhance compliance and trust.

Fincons Group AG is a well-established IT business consulting and system integration company with over 40 years of experience. The company operates internationally with offices across Europe and the US, serving industries such as media, financial services, energy, transportation, manufacturing, public administration, and international institutions. Their business model focuses on providing consulting, system integration, proprietary solutions, and smart-shore services, supported by a strong partnership ecosystem. The website reflects a professional and consistent brand image targeting enterprise clients and organizations seeking digital transformation solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Slick Carousel, with integration of Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility enhancements could be made. The CMS used is Kali, a custom solution, indicating a tailored digital infrastructure. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing transparent and consistent registration information, supporting the legitimacy of the business. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Recommendations include enhancing security headers, publishing a security policy or incident response contact, and improving accessibility features to further strengthen compliance and trust.

E

ERNI

betterask.erni

73

ERNI is a Swiss-based software engineering consultancy specializing in advising companies on innovation and technology to enhance performance through software and digitalization of critical business processes. The company positions itself as a leading provider in software engineering and digital transformation with a broad portfolio of services including software engineering, requirements engineering, quality assurance, architecture advisory, design, embedded software, digital business solutions, agile consulting, DevOps, cloud, data and AI, and cybersecurity. The website reflects a mature digital presence with multilingual support and professional branding consistent with a large enterprise. Technically, the website is built on WordPress using Elementor and several modern plugins for SEO, multilingual support, and GDPR compliance. It employs Google Analytics and Hotjar for analytics and user behavior tracking. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and vulnerability disclosure policies could be improved. The WHOIS data is privacy-protected but consistent with the corporate identity of Erni Group Holding AG, indicating legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the website demonstrates a professional, secure, and compliant digital presence suitable for its business domain. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and making incident response contacts more visible to strengthen trust and security posture.

E

Emineo - so geht digital

emineo.ch

51

Emineo is a well-established Swiss IT consulting and software engineering company with over 200 employees and nearly two decades of experience. The company specializes in SAP consulting, software engineering, business applications, data analytics, digital supply chain, and artificial intelligence services. Their market position is strong within Switzerland, targeting businesses and organizations seeking digital transformation and IT solutions. The website reflects a professional and consistent brand image with comprehensive service offerings and a clear focus on technology-driven solutions. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, with SEO optimizations and structured data implemented. The site is mobile-optimized and performs moderately well, leveraging common marketing and analytics tools including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could benefit from explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though terms of service and data protection officer information are not evident. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, Emineo presents a trustworthy and professional digital presence with room for enhancements in security transparency and privacy documentation. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing accessibility features to further strengthen compliance and user trust.

E

ELCA Informatique SA

elca.ch

80

ELCA Informatique SA is a leading independent Swiss IT company specializing in business and technology solutions, including IT consulting, software development, and systems integration. With over 2300 employees and a turnover of CHF 339 million in 2024, ELCA holds a strong market position in Switzerland and Europe, serving diverse sectors such as energy, transportation, finance, and public administration. The company emphasizes tailored digital transformation solutions and maintains a broad portfolio of subsidiaries and partner companies. Technically, ELCA employs modern web technologies including Next.js and React, integrates advanced analytics tools like Matomo and Hotjar, and uses robust consent management via Cookiebot. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, although a dedicated security policy and incident response contact channels are not explicitly published. Overall, ELCA demonstrates a professional, trustworthy online presence aligned with its business stature.

D

Deimos AG

deimos.ch

60

Deimos AG is a Swiss technology company specializing in the development of high-quality software applications and IT system integrations. The company targets businesses and organizations seeking tailored IT integration, web and software applications, AI solutions, and business analysis with UX design. Their market position is that of a specialized, small-sized player focused primarily on the Swiss market, offering niche services such as API gateways and AI chatbots leveraging modern AI frameworks like LangChain and OpenAI's ChatGPT. Technically, the website is built on a modern CMS platform with integration of popular libraries and services such as jQuery, FontAwesome, Vimeo, and Google Tag Manager, demonstrating a moderate to good level of digital maturity and performance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional, well-branded, and trustworthy, with clear contact information and compliance with GDPR indicated by privacy and cookie policies. No critical vulnerabilities or suspicious patterns were detected, supporting a high legitimacy score.

C

CSS

css.ch

79

CSS is a large, established Swiss health insurance company providing a broad range of insurance products including basic, supplementary, and additional insurances. The company emphasizes its role as a health partner, offering digital services such as the myCSS client portal and mobile app, as well as health promotion programs. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content tailored to private customers in Switzerland. Technically, the site leverages modern technologies including Adobe Experience Manager, Vue.js, and integrates advanced analytics and consent management tools. Security posture is strong with HTTPS enforcement, secure cookies, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, CSS presents a trustworthy, professional online presence consistent with its market position as a leading Swiss health insurer.

Astina AG is a Swiss technology company specializing in e-commerce, process digitization, and system integrations. Their business model focuses on providing tailored digital transformation solutions to other businesses, leveraging platforms such as the Paloma Platform and various e-commerce and automation services. The company maintains a professional online presence with a clear focus on customer success and digital innovation, supported by a portfolio of reputable clients and partners. Technically, the website employs standard web technologies including JavaScript, CSS, and HTML5, with a responsive design optimized for mobile devices. While the site performs moderately well, there is room for improvement in accessibility and SEO enhancements. No CMS or hosting provider details were explicitly identified. From a security perspective, the website uses HTTPS, indicating basic encryption standards. However, there is a lack of visible security headers and no published security or incident response policies, which could be improved to enhance trust and compliance. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Overall, the website is trustworthy and professionally maintained, with clear business contact information and no signs of malicious content or blocking mechanisms. Strategic improvements in privacy compliance and security transparency would further strengthen the company's digital maturity and customer trust.

A

Adcubum AG

adcubum.com

68

Adcubum AG is a leading Swiss software company specializing in core insurance systems for the health and accident insurance sectors. Recently acquired by the Helsana Group, Adcubum continues to operate independently, providing modular, cloud-capable software solutions such as Syrius ad.Cloud. The company targets insurance providers in Switzerland, emphasizing digital transformation and operational efficiency. The website reflects a mature digital presence with modern technologies including React and Next.js, hosted on Vercel, and integrates comprehensive cookie consent and privacy compliance mechanisms. Security posture is strong with HTTPS, security headers, and CSRF protections in place. However, WHOIS data is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy given the business context and parent company ownership. The site is well optimized for performance, mobile use, and SEO, with clear branding and professional content. No critical security vulnerabilities or compliance gaps were detected in the analyzed content.

A

Abacus Research AG

abacus.ch

79

Abacus Research AG is a well-established Swiss company specializing in ERP and business software solutions, serving over 65,000 companies with a broad partner network. Their website reflects a mature digital presence built on TYPO3 CMS, incorporating modern web technologies and a clear focus on user experience and accessibility. The company demonstrates strong compliance with privacy regulations, including GDPR, through comprehensive privacy and cookie policies with active consent mechanisms. Security posture is robust with HTTPS enforcement and no visible vulnerabilities, though incident response details and vulnerability disclosure mechanisms could be improved. Overall, the website and business presence indicate a trustworthy and professional organization with a strong market position in the Swiss technology sector.

Z

Zühlke Group

zuehlke.com

66

Zühlke Group is a well-established global technology and innovation service provider specializing in digital transformation, software engineering, and business innovation. The company targets enterprise clients seeking to modernize and innovate their business processes and products. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content that aligns with the company's market positioning and services. Technically, the site leverages modern frameworks such as Nuxt.js and includes advanced UI components like Plyr and Flickity, ensuring a fast and responsive user experience across devices. Security is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, complemented by comprehensive privacy and cookie policies that demonstrate GDPR compliance. However, the absence of WHOIS registration data limits domain trust analysis, though the website's professionalism and certifications like ISO 27001 support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and technical maturity.

N

Netcetera AG

netcetera.com

64

Netcetera AG is a well-established Swiss technology company specializing in tailored software solutions for sectors including banking, payments, healthcare, mobility, and publishing. The company positions itself as a trusted partner with over 25 years of industry experience and a strong client base including major financial institutions. Their business model focuses on B2B software development, AI integration, and cloud services, emphasizing security and user experience. Technically, the website employs modern web technologies such as Google Tag Manager, Matomo Analytics, and Usercentrics for consent management, with responsive design and accessibility features. The site demonstrates good SEO practices and a professional user experience. However, some security best practices like explicit security headers and published security policies are missing. From a security perspective, the site uses HTTPS and secure forms but lacks visible incident response contacts and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is a notable anomaly, reducing trustworthiness despite the professional web presence. Overall, the website is high quality and trustworthy in content and design but would benefit from improved transparency in domain registration and enhanced security disclosures to strengthen its risk posture and compliance standing.

Ergon Informatik AG is a well-established Swiss IT company founded in 1984, specializing in custom software development, digital transformation consulting, security solutions, and advanced technologies such as artificial intelligence and blockchain. The company holds a strong market position in Switzerland and Germany, serving diverse industries including finance, healthcare, retail, and government. Their business model focuses on delivering tailored software solutions and consulting services to ambitious organizations seeking digital innovation and operational excellence. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the website employs modern web technologies including JavaScript frameworks (likely Vue.js), CSS, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager for analytics. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a high level of digital maturity. Security measures such as HTTPS enforcement, security headers, and privacy compliance mechanisms are in place, demonstrating a responsible approach to user data protection. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive information. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and trust. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. Overall, Ergon Informatik AG presents a trustworthy and professional online presence with robust technical and privacy standards. Strategic recommendations include publishing explicit security policies, adding vulnerability disclosure information, and enhancing incident response readiness to further strengthen their security posture and stakeholder confidence.

B

bbv Software Services AG

bbv.ch

61

bbv Software Services AG is a well-established Swiss technology company specializing in digital consulting, software development, and digital transformation services. With a medium-sized workforce and a history dating back to 1995, bbv positions itself as a trusted partner for companies seeking to innovate and scale digital businesses. Their offerings include software engineering, AI consulting, data management, cybersecurity, and cloud services, targeting enterprises aiming to leverage modern technologies for sustainable success. The website reflects a mature digital presence with multilingual support and comprehensive content tailored to business clients. Technically, the website is built on WordPress with modern plugins and tools such as Yoast SEO, WPML for multilingual support, and advanced cookie consent management aligned with GDPR and Google Consent Mode. The site demonstrates good performance, mobile optimization, and SEO practices, supporting a positive user experience. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA to protect forms, and manages cookie consent effectively. However, explicit security headers and published security policies are lacking, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected. Overall, bbv.ch presents a professional, trustworthy, and compliant digital presence suitable for its business domain. Strategic recommendations include enhancing security headers, publishing incident response information, and establishing a vulnerability disclosure policy to further strengthen security posture and stakeholder confidence.

M

Mimacom AG

mimacom.com

77

Mimacom AG is a Swiss-based software engineering and consulting company specializing in digital transformation services including cloud, data, automation, and AI. The company targets enterprise clients across multiple industries such as banking, insurance, manufacturing, retail, and life sciences. Mimacom positions itself as a trusted partner with a comprehensive portfolio of services and a strong customer base. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not prominently published. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for companies of this nature. Overall, Mimacom demonstrates a mature digital presence with professional branding and compliance practices.

W

webways ag

webways.ch

65

webways ag is a Swiss internet agency based in Basel with over 25 years of experience specializing in digital solutions for healthcare and social sectors, including homes, Spitex, and associations. The company offers web design, content management systems, custom web applications, and support services, positioning itself as a niche player in the Swiss market. Their business model focuses on providing tailored digital tools and platforms to healthcare and social organizations, supported by a professional and consistent online presence. The website reflects a mature digital infrastructure using a proprietary CMS and modern JavaScript libraries, with good mobile optimization and user experience. Security posture is moderate, with cookie consent mechanisms and obfuscated emails, but lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though improvements in security policies and transparency are recommended.

The website www.zug.ch serves as the official online portal for the canton and city of Zug in Switzerland, providing a wide range of government-related information and public services. It targets residents, businesses, and visitors by offering access to political bodies, administrative departments, education, health, social services, tax information, and more. The portal links extensively to official canton and city subdomains, reinforcing its role as a trusted government resource. Technically, the site employs established JavaScript libraries such as jQuery and jQuery UI to deliver interactive features like accordions and carousels. The use of HTTPS ensures secure communication, and the site appears to be mobile-optimized with responsive CSS stylesheets. However, the absence of explicit privacy and cookie policies, as well as missing security headers, indicates areas for improvement in compliance and security hardening. From a security perspective, the site shows no signs of WAF blocking or security challenges, and no vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the official government entity, confirming the domain's legitimacy and trustworthiness. Nonetheless, the lack of published privacy and cookie policies and incident response contacts reduces the overall privacy compliance score. Overall, www.zug.ch is a credible and professional government portal with good content quality and technical implementation. Strategic enhancements in privacy compliance and security headers would further strengthen its security posture and user trust.

S

sfb Bildungszentrum

sfb.ch

57

sfb Bildungszentrum is a Swiss educational institution specializing in practical and career-oriented training and continuing education, primarily targeting technical and commercial professionals. The website presents a well-structured, professional platform offering a variety of study programs, seminars, and career upgrade options across multiple Swiss locations. The institution maintains a strong market position as a medium-sized education provider with a clear focus on skill development and career advancement. Technically, the site is built on WordPress and integrates modern analytics and tracking tools, reflecting a mature digital infrastructure. Security posture is robust with HTTPS, security headers, and privacy compliance mechanisms in place, though there is room to enhance transparency with dedicated security policies and incident response information. Overall, the site is trustworthy, user-friendly, and compliant with GDPR, supporting a positive user experience and business credibility.

T

TEKO Schweizerische Fachschule AG

teko.ch

56

TEKO Schweizerische Fachschule AG is a Swiss educational institution specializing in technical and business education with campuses in Basel, Bern, Luzern, Olten, and Zürich. The website presents a professional and well-structured platform offering a variety of higher education programs, seminars, and preparation courses for federal professional exams. The institution holds recognized certifications such as ISO and eduQua, reinforcing its credibility in the education sector. The target audience includes students and professionals seeking advanced education in technology and business fields within Switzerland. Technically, the website employs modern JavaScript frameworks and analytics tools including Google Tag Manager, Google Analytics, Facebook Pixel, Matomo, and Olark live chat. The CMS appears to be Pimcore, supporting a responsive and user-friendly design optimized for mobile devices. SEO and accessibility are adequately addressed, though accessibility could be enhanced further. From a security perspective, the site uses HTTPS with good SSL configuration and implements Google reCAPTCHA v3 for bot protection. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found in the provided content. Overall, the website is trustworthy, professional, and secure with room for improvement in privacy and security policy transparency. The domain registration data aligns well with the website's claims, indicating legitimacy and consistency. Strategic recommendations include publishing comprehensive privacy and security policies, adding security headers, and enhancing accessibility features.

The website thefork.ch is currently inaccessible due to a CAPTCHA challenge implemented via an external bot mitigation service (captcha-delivery.com). This prevents retrieval of actual site content, metadata, or business information. The visible page contains only minimal HTML with embedded CAPTCHA iframe, indicating a WAF or security layer blocking automated access. Due to this, no privacy, cookie, or terms of service policies are detectable, nor are any contact details or company information. The technical infrastructure appears to include third-party CAPTCHA services but lacks visible security headers or SSL configuration details. Overall, the site’s security posture cannot be fully assessed, but the presence of bot mitigation indicates some level of security awareness. The lack of accessible content and policies limits trust and compliance evaluation.

A

avisec ag

avisec.ch

43

avisec ag is a Swiss-based company specializing in high-quality construction site cameras, time-lapse cameras, panoramic cameras, crane cameras, and cloud-based image data solutions. Founded in 2009, the company positions itself as a market leader in Switzerland, providing comprehensive visual documentation and monitoring services for construction projects. Their offerings include hardware, cloud services, and professional film production including drone footage, targeting construction professionals, project managers, and marketing teams. The website demonstrates a mature digital presence with strong SEO, structured data, and multimedia content. Technically, the site is built on WordPress with modern plugins and analytics tools, optimized for performance and mobile devices. Security posture is good with HTTPS and anti-spam measures, though some security headers could be improved. Privacy compliance is basic with cookie consent but lacks explicit privacy and terms pages. Overall, avisec presents a trustworthy and professional online presence aligned with its business claims.

S

Società Elettrica Sopracenerina SA (SES)

ses.ch

65

Società Elettrica Sopracenerina SA (SES) is a regional Swiss energy company primarily engaged in the distribution and production of electricity, focusing on renewable sources such as hydroelectric and photovoltaic power. The company serves private customers, businesses, municipalities, and installers within Ticino and surrounding areas. SES maintains a strong market position as a trusted energy provider with a commitment to sustainability and customer service excellence. The website reflects a professional and well-structured digital presence, supporting customer engagement through multiple channels including online forms, newsletters, and social media. Technically, the website employs modern web technologies including jQuery and Matomo analytics, ensuring privacy-conscious user tracking. The site is mobile-optimized and demonstrates good performance and SEO practices. Security-wise, SES holds ISO/IEC 27001:2022 certification, indicating a mature information security management system. HTTPS is enforced, and security headers are present, contributing to a robust security posture. However, incident response contact details and vulnerability disclosure mechanisms are not explicitly provided. Overall, SES's website is a reliable and secure platform that effectively supports its business operations and customer interactions. The company demonstrates compliance with GDPR and cookie consent regulations, enhancing user trust. Strategic recommendations include publishing incident response contacts, enhancing accessibility, and formalizing vulnerability disclosure policies to further strengthen security and compliance.

G

Gammeter Media AG

webkit-smart.ch

50

Webkit Smart, operated by Gammeter Media AG, is a Swiss-based company offering subscription-based professional website creation and management services targeted at small and medium businesses. Their offerings include tiered subscription plans with personal training, SEO audits, and additional multimedia services. The company emphasizes local support, cost transparency, and ease of content management for clients. Technically, the website is built on TYPO3 CMS with modern frontend libraries and integrates Google Analytics and reCAPTCHA for analytics and security. The security posture is solid with HTTPS, daily backups, and cookie consent mechanisms, though some security headers could be improved. Overall, the website is professional, well-structured, and trustworthy, with clear contact information and social media presence.

E

Engadiner Post / Posta Ladina

engadinerpost.ch

43

Engadiner Post / Posta Ladina is a regional media outlet serving the Engadin region in Switzerland, providing local news, community information, and advertising services. The website offers subscription options, e-paper digital editions, and a platform for local announcements and classifieds. The target audience includes residents and visitors interested in regional news and events. Technically, the site employs modern JavaScript frameworks, Google Tag Manager for analytics, and Revive Adserver for advertising. The design is responsive and optimized for mobile devices, with clear navigation and good content relevance. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is adequate with a privacy policy and cookie consent mechanism present. WHOIS data confirms the legitimacy and consistency of the domain registration with the business focus. Overall, the website is professional, trustworthy, and well-positioned in its regional media market.

J

Java User Group Switzerland

jug.ch

48

Java User Group Switzerland (JUG Switzerland) is a non-profit community organization dedicated to promoting Java technology in Switzerland. It serves as a platform for Java developers and technology professionals to share knowledge and experience through workshops, seminars, and conferences. The organization is supported by multiple corporate sponsors and partners, indicating a strong community presence and market position within the Swiss technology sector. The website provides detailed event information, sponsor listings, and community engagement channels, including a Mastodon social media presence.

S

skyguide

skybriefing.com

69

Skybriefing.com is a professional aviation service website operated under the brand skyguide, providing essential services such as flight plan filing, NOTAM briefings, weather briefings, and access to aviation publications primarily for the Swiss aviation community. The website is well-structured, uses modern web technologies including Vaadin and Liferay, and maintains a consistent brand identity aligned with its parent organization. The domain is well-established since 2012, with registration details consistent with the business profile. Privacy and cookie policies are implemented with GDPR compliance in mind, and user tracking is conducted via Google Analytics with event tracking for downloads and form interactions. However, direct contact information such as emails or phone numbers is not prominently displayed, and no explicit security or incident response policies are published on the site.

C

Computer Online AG

on-res.com

48

The website on-res.com is operated by Computer Online AG, a Swiss company specializing in providing an online reservation and administration system tailored for aviation clubs, flight schools, and charter services. The platform offers real-time flight scheduling, digital flight logs approved by Swiss aviation authorities (BAZL), technical maintenance logs, and integration with Swiss accounting software (Comatic). The business model is that of an Application Service Provider (ASP), targeting niche aviation organizations primarily in Switzerland. The company has been established since 2002, indicating a mature presence in its market segment. Technically, the website employs basic web technologies including HTML, CSS, JavaScript, and jQuery 2.2.4. It supports multiple browsers and mobile devices such as iPads and iPhones, though mobile optimization is basic. The site lacks modern CMS frameworks and advanced SEO or accessibility features, reflecting a functional but dated technical infrastructure. From a security perspective, the domain is registered with a reputable registrar and has a long history, supporting legitimacy. However, the site lacks DNSSEC, security headers, and published privacy or cookie policies, which are notable compliance and security gaps. No WAF or blocking mechanisms are detected, and no analytics or tracking scripts are present, indicating minimal user tracking. Contact information is clearly provided, enhancing trust. Overall, the website scores moderately on content quality and business credibility but lower on technical implementation and privacy compliance. Strategic improvements in security headers, privacy documentation, and modernizing the technical stack would enhance the site's security posture and user trust.

S

Swiss Bankers Association

swissbanking.ch

67

The Swiss Bankers Association (SBA) is a prominent industry association representing Swiss banks and financial institutions. The website serves as a comprehensive platform for advocacy, information dissemination, and engagement with stakeholders in the Swiss banking sector. It offers detailed content on banking stability, regulation, digital finance, and sustainable finance, targeting banks, financial intermediaries, clients, and regulators. The SBA holds a strong market position as the leading representative body for Swiss banking, providing key services such as publications, events, and political engagement. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript integrations including Google Tag Manager and Usercentrics for consent management. The site is mobile-optimized with good SEO and accessibility features, though some accessibility aspects could be improved. Performance is moderate, with a professional and consistent design that enhances user experience. From a security perspective, the site enforces HTTPS with excellent SSL configuration and uses a consent management platform for cookies, reflecting good privacy compliance. However, explicit security headers are not detected, and there is no publicly available security policy or incident response contact information. No vulnerabilities or exposed sensitive data were found, indicating a solid security posture but with room for improvement in transparency and security best practices. Overall, the SBA website is a trustworthy, professional, and well-maintained platform that effectively supports its business objectives. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

B

Bank Cler

cler.ch

76

Bank Cler is a Swiss financial institution focused on providing comprehensive banking services to private customers, including investment strategies and mobile banking solutions. The website reflects a mature digital presence with multilingual support and clear navigation tailored to its target audience. Technically, the site employs modern tracking and consent management tools such as Google Tag Manager and OneTrust, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates professionalism and trustworthiness consistent with a reputable banking entity.

B

Banque Cantonale du Valais

bcvs.ch

64

Banque Cantonale du Valais (BCVs) is a well-established Swiss cantonal bank providing a broad range of financial services including retail and corporate banking, mortgages, wealth management, and digital banking solutions. The website reflects a strong regional focus on the Valais canton with comprehensive service offerings tailored to private individuals and businesses. The digital infrastructure is built on TYPO3 CMS with modern web technologies and includes responsive design and accessibility features, ensuring a positive user experience across devices. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms such as cookie consent and a detailed privacy policy. However, explicit security policies and incident response information are not publicly detailed, and no vulnerability disclosure mechanism is present. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with Swiss and EU privacy regulations.

L

Lucerne Tourism

luzern.com

59

The website www.luzern.com serves as the official tourism guide for the city of Lucerne and the Lake Lucerne region in Switzerland. It provides comprehensive information on sightseeing, events, accommodations, excursions, and travel planning, targeting tourists and visitors. The site is well-branded and professionally designed, reflecting its role as a regional tourism authority. Technically, it is built on TYPO3 CMS with modern frontend frameworks such as Vue.js and React, ensuring a fast, mobile-optimized, and accessible user experience. Security best practices are observed with HTTPS and security headers, though explicit security policies and incident response contacts are not published. The absence of WHOIS registration data raises concerns about domain legitimacy, but the website content and structure appear trustworthy and official. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is a reliable resource for tourism information but would benefit from clarifying domain registration and enhancing security transparency.

E

Eventfrog

eventfrog.ch

76

Eventfrog is a Switzerland-based event calendar and ticket sales platform, positioning itself as the largest event calendar in the country with over 25,000 published events. The platform enables users to discover events and sell tickets easily and free of charge, targeting a broad general audience interested in events and parties. The website is professionally designed with consistent branding and clear business contact information, enhancing its credibility and trustworthiness. Technically, the website employs standard web technologies including JavaScript and CSS, with moderate performance and good mobile optimization. SEO practices are well implemented with comprehensive meta tags and Open Graph data, although accessibility features are basic. The site uses tracking pixels from Meta and Google Tag Manager for marketing and analytics purposes but lacks a visible cookie consent mechanism, which may impact privacy compliance. From a security perspective, the site enforces HTTPS and includes domain verification meta tags for Google, Facebook, and Microsoft, indicating some level of security awareness. However, no explicit security headers or vulnerability disclosure information are present, and privacy and cookie policies are not found in the provided content. The WHOIS data is consistent with the website's claims, showing legitimate registration and no privacy protection, which supports the domain's trustworthiness. Overall, Eventfrog presents a solid business and technical foundation with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and providing vulnerability disclosure and incident response information to enhance user trust and regulatory compliance.

B

Berner Fachhochschule

digisus-lab.ch

61

Berner Fachhochschule's Digital Sustainability Lab is a research and development unit focused on enhancing digital and innovative capabilities within the public sector. The lab offers software development, UI/UX design, data visualization, and consulting services related to digital transformation, open source, and AI. The website reflects a well-established academic institution with a clear mission to foster sustainable digital solutions for public administration. Technically, the site uses modern web technologies including Google Tag Manager and OneTrust for cookie consent, ensuring good performance and compliance with basic privacy standards. Security posture is solid with HTTPS and obfuscated emails, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and serves its target audience effectively.

C

Colegram

colegram.ch

52

Colegram is a small, Geneva-based communication agency specializing in 360-degree communication services including digital and field operations to develop brands and engage audiences. The website is built on WordPress using the Divi theme and incorporates modern technologies such as lazy loading scripts, Yoast SEO, and tracking pixels from Facebook, LinkedIn, and Google Analytics. The site demonstrates good technical maturity with HTTPS and performance optimizations but lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is solid with no blocking or WAF detected, but security headers could be improved. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and visible contact information.

O

OnzeWeb

onzeweb.ch

58

OnzeWeb is a small, Geneva-based web agency specializing in custom website creation, development, and design services. The company positions itself as a partner for businesses and individuals seeking modern, performant, and SEO-optimized web solutions. Their market presence is supported by collaborations with multiple local creative and communication agencies and a partnership with Infomaniak as their hosting provider. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Google Analytics. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit contact emails and phone numbers are not publicly listed, with contact primarily via a form.

S

S agence

s-agence.ch

47

S agence is a Geneva-based communication agency specializing in branding, content creation, and digital marketing services. The company serves a diverse clientele including public institutions and private enterprises, positioning itself as a regional leader in creative communication solutions. Their website showcases a professional portfolio and client list, reflecting a strong market presence in the media sector. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

L

Loterie Romande

loro.ch

70

Loterie Romande operates as the legal and responsible lottery and sports betting provider in the Suisse romande region of Switzerland. The organization offers multiple lottery games including EuroDreams, Euromillions, Swiss Loto, and sports betting services through PMU and other platforms. The website is professionally designed with a focus on responsible gaming and public utility benefit distribution. Technically, the site is built on Drupal CMS with modern front-end technologies and video content hosted on Infomaniak. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response contacts. Privacy compliance is partially met with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its market segment.

C

Conseil d'éthique

conseil-dethique.ch

53

Le Conseil d'éthique is a small, regionally focused non-profit organization affiliated with AVALEMS, dedicated to promoting and overseeing ethical standards within medico-psychosocial institutions in the Valais region of Switzerland. The website serves as an informational and contact portal for healthcare professionals, families, and related stakeholders, providing ethical guidelines, member information, and contact facilities. The business model centers on advisory and ethical oversight services rather than commercial activities. Technically, the website uses a custom CMS with legacy JavaScript libraries and basic mobile optimization, indicating moderate digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms but is weakened by outdated libraries and missing security headers. Privacy compliance is well addressed with clear cookie consent and privacy policy pages. Overall, the site is professional, trustworthy, and well-aligned with its mission, though technical and security improvements are recommended.

T

Transports Publics du Chablais

tpc.ch

53

Transports Publics du Chablais (TPC) is a regional public transportation provider serving 23 communes in the Chablais region of Switzerland. The company offers train and bus services and supports tourism-related mobility. The website is professionally designed using WordPress with Elementor and Astra theme, providing good user experience and clear navigation. It targets local commuters and tourists with relevant content in French. The technical infrastructure includes modern web technologies and integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. Security posture is adequate with HTTPS enforced and cookie consent implemented, though explicit security headers and policies are not published. Contact information and physical address are clearly provided, enhancing business credibility. No privacy policy or terms of service pages were found, indicating room for compliance improvement.

P

Procamed AG

procamed.ch

54

Procamed AG is a Swiss market leader specializing in life-saving medical devices and systems, with over 30 years of experience. Their product portfolio includes defibrillators, automatic CPR devices, ventilators, patient monitors, infusion technology, and emergency products from renowned brands such as ZOLL Medical and Mindray. The company targets emergency responders, hospitals, clinics, first responders, and laypersons, offering comprehensive solutions including sales, rentals, maintenance, and training courses. Technically, the website employs modern JavaScript libraries and tracking tools, is mobile-optimized, and features a professional design with clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements are possible by adding security headers and incident response information. Overall, the website reflects a trustworthy and professional healthcare business with strong market positioning and customer trust.

S

SWISSFEEL

swissfeel.com

51

SWISSFEEL is a Swiss-based company specializing in sustainable and washable hotel bedding solutions, targeting the hospitality industry. Their website presents a professional image with detailed product information, customer testimonials, and multimedia content, positioning them as a niche provider focused on hygiene and sustainability in hotel mattresses. The technical infrastructure is based on Weblication CMS with modern frontend components, providing a good user experience and mobile optimization. However, the security posture is moderate due to missing security headers and lack of visible privacy and cookie policies. The WHOIS data is incomplete or unavailable, which raises some concerns about domain registration transparency. Overall, the website is functional and credible but would benefit from enhanced security and compliance disclosures.

P

Procamed AG

aed.ch

52

Procamed AG is a well-established Swiss medical technology company specializing in defibrillators and resuscitation solutions. As the general importer for ZOLL AED defibrillators and partner to other reputable manufacturers, they hold a leading market position in Switzerland. Their website offers comprehensive information on AED products, training courses, and services, targeting healthcare providers, businesses, and individuals seeking life-saving equipment and education. The company emphasizes quality, reliability, and expert consultation. Technically, the website is built on the webEdition CMS platform and incorporates modern web technologies including jQuery, Google Tag Manager, Facebook Pixel, and Trustpilot widgets. The site is mobile-optimized with good SEO and accessibility practices, providing a professional user experience. Privacy and cookie policies are clearly presented with active consent mechanisms, reflecting compliance with GDPR requirements. From a security perspective, the site uses HTTPS with strong SSL configuration and employs standard tracking and marketing tools responsibly. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. No vulnerabilities or suspicious content were detected, and WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, Procamed AG's website demonstrates a mature digital presence with strong business credibility and privacy compliance. Strategic enhancements in security transparency and incident response readiness would further strengthen their security posture and trustworthiness.

ArcInfo is a regional news media organization providing comprehensive news coverage for the cantons of Neuchâtel and Jura in Switzerland, along with national and international news. The website targets a general audience interested in regional developments and broader news topics. It holds a strong market position as a trusted regional news source with a consistent brand presence and active social media engagement. Technically, the website is built on modern JavaScript frameworks, specifically Nuxt.js, and integrates Google Tag Manager for analytics and marketing purposes. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO practices are adequately implemented through meta tags and structured data. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating awareness of privacy regulations. However, it lacks visible security headers, a published security policy, or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the provided content. Overall, ArcInfo presents a professional and trustworthy online presence with room to enhance privacy compliance and security posture. Strategic improvements in these areas would further solidify its credibility and user trust.