Switzerland security reports

T

TPC - Transports publics du Chablais SA

aomc2030.ch

55

The website www.aomc2030.ch represents TPC - Transports publics du Chablais SA, a regional public transportation entity in Switzerland focused on the AOMC 2030 infrastructure project. The site provides detailed project updates, images, and information aimed at the general public and local community, emphasizing safety and service improvements. The business operates in the transportation sector with a medium-sized organizational footprint. Technically, the website is built on WordPress, leveraging modern JavaScript libraries such as jQuery, Fancybox, and Slick Carousel, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security headers and incident response policies. Privacy compliance is well addressed with GDPR-aligned cookie consent and a privacy policy in French. Overall, the site is professional, trustworthy, and safe, with no signs of malicious activity or adult content.

A

Agussol Orthodontie

agussol.ch

52

Agussol Orthodontie is a specialized orthodontic healthcare provider based in Sierre, Switzerland. The company offers orthodontic treatments for children and adults, emphasizing personalized care and a variety of orthodontic techniques. The website reflects a local, small-sized healthcare practice with a professional and consistent brand presence. The target audience is general public seeking orthodontic services. The business model focuses on direct patient care with no evident e-commerce or large-scale service platform. Technically, the website is built on WordPress CMS using modern libraries such as jQuery, Fancybox, and Slick Carousel, providing a good user experience with mobile optimization and clear navigation. The site implements GDPR-compliant cookie consent mechanisms and uses HTTPS with good SSL configuration, though it lacks some advanced security headers and explicit security policies. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy, secure, and professionally maintained, suitable for its healthcare sector and local market position.

A

Association des Communes de Crans-Montana

cransmontana.ch

58

The Association des Communes de Crans-Montana operates as a local government association serving the communes of Crans-Montana, Icogne, and Lens in Switzerland. The website provides information about various municipal services including emergency services, police, economic promotion, and community activities. It targets residents and local businesses, positioning itself as a central hub for community engagement and public service information. The business model is that of a public sector entity focused on service provision and community support. Technically, the website employs modern web technologies such as Google Fonts, Bootstrap CSS classes, and Google Analytics for visitor tracking. The CMS appears to be Umbraco, inferred from cookie consent scripts. The site is mobile-optimized with good navigation and a professional design, though some SEO and accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS (implied by canonical link with http but likely redirects), includes a cookie consent mechanism, and avoids exposing sensitive data. However, no advanced security headers were detected, and there is no published privacy policy or terms of service, which are compliance gaps. Incident response and vulnerability disclosure information are absent, limiting transparency in security matters. Overall, the website is trustworthy and professional, serving its public sector role effectively. The main risks relate to compliance with privacy regulations and enhancing security posture through headers and published policies. Strategic improvements in these areas would strengthen user trust and regulatory adherence.

A

Association Valaisanne des Banques

banques-valais.ch

49

The Association Valaisanne des Banques is a regional banking association in Switzerland focused on representing and promoting the interests of banks in the Valais region. The website serves as an informational and promotional platform highlighting banking careers, apprenticeship opportunities, and news relevant to the local banking sector. The site features partnerships with major Swiss banks, reinforcing its credibility and regional influence. Technically, the website uses modern web technologies including jQuery, Bootstrap, and tracking pixels from major platforms, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

A

Avalems

avalems.ch

63

Avalems is a regional association representing all EMS (Etablissements Médico-Sociaux) in the Valais region of Switzerland. It focuses on advocating for quality health and social policies, supporting member institutions in providing adapted living spaces for the elderly, and enhancing the public image of EMS. The website is professionally designed using WordPress with modern SEO and cookie consent tools, providing clear navigation and multilingual support. Contact information and social media presence are transparent and accessible. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and serves its target audience effectively.

S

Schweizerische Bundeskanzlei (BK)

ch-info.swiss

60

The website ch-info.swiss is an official Swiss government portal managed by the Schweizerische Bundeskanzlei (Swiss Federal Chancellery). It primarily serves as an information dissemination platform providing editions of magazines about Switzerland's political system and governance. The site targets the general public interested in Swiss government affairs and offers multilingual content in English, German, French, and Italian. The business model is focused on government transparency and public education, positioning itself as a trusted official source within the government sector. Technically, the website employs modern frontend technologies including Vue.js and Vuetify, hosted via Hostpoint with DNS managed by Google Cloud DNS. The site demonstrates good mobile optimization and a moderate performance profile. Analytics are implemented using Matomo, indicating a preference for privacy-conscious tracking. However, the site lacks DNSSEC and security headers, which are recommended for enhanced security. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data or forms, reducing attack surface. Nonetheless, the lack of DNSSEC and security headers, as well as missing privacy and cookie policies, represent areas for improvement. No incident response or vulnerability disclosure information is present, which could be enhanced to improve security posture and compliance. Overall, the website is legitimate, trustworthy, and professionally maintained, but could improve privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, implementing security headers, publishing privacy and cookie policies, and providing clear contact information for security and general inquiries.

C

CS2 AG

zweiblog.com

72

CS2 AG is a well-established Swiss digital and web agency founded in 1997, specializing in digital strategy, consulting, web development, and hosting services primarily for SMEs and large enterprises. Their website, Zweiblog, serves as a knowledge hub offering expert insights on CMS, e-commerce, AI, and web technologies tailored for the Swiss market. The company demonstrates a mature digital infrastructure using TYPO3 CMS and integrates modern analytics and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and privacy policy pages could be improved. The absence of public WHOIS data slightly reduces domain transparency but does not detract significantly from the company's legitimacy. Overall, the website is professional, well-branded, and trustworthy, serving its target audience effectively.

P

Prospective Media Services PMS AG

prospective.ch

69

Prospective Media Services PMS AG is a Swiss-based company specializing in digital recruiting solutions, offering tools such as JobBooster for multiposting job ads, access to a wide range of recruiting channels, and expert consulting services. The company targets HR professionals and recruiters aiming to optimize their hiring processes. The website is well-structured, professionally designed, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site runs on WordPress with modern plugins for SEO, analytics, and GDPR compliance, ensuring a robust infrastructure. Security measures include HTTPS, reCAPTCHA, and cookie consent management, though some security headers could be improved. Overall, the site demonstrates a strong security posture with no evident vulnerabilities or suspicious content. The WHOIS data confirms the legitimacy and consistency of the business registration, enhancing trust. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and compliance.

I

If International Foundation

if-foundation.ch

50

If International Foundation is a Swiss independent non-profit organization dedicated to improving living conditions and life prospects for vulnerable populations worldwide. The foundation focuses on supporting education, integration, social entrepreneurship, health, and research in technological, medical, ethical, environmental, and cultural domains. The website reflects a professional and consistent brand image with clear mission and vision statements, targeting partners and beneficiaries in the social and health sectors globally. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Owl Carousel, with Google Analytics for visitor tracking. The site is mobile optimized and provides a good user experience with clear navigation. However, it lacks visible privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. Security posture is moderate with HTTPS usage but missing advanced headers and incident response contacts. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

M

MaRaVal Maladies Rares Valais

maraval.ch

51

MaRaVal Maladies Rares Valais is a small non-profit patient association based in the Valais canton of Switzerland, founded in 2017. The organization focuses on supporting patients with rare diseases through advocacy and community engagement. The website serves as an informational and outreach platform for the association, targeting patients and stakeholders in the region. Technically, the site is built on WordPress using the Divi theme, enhanced with Yoast SEO and Google Tag Manager for analytics and marketing. The site demonstrates moderate digital maturity with good SEO and mobile optimization but lacks comprehensive privacy and cookie policies, which are critical for compliance. Security posture is adequate with HTTPS enabled but could be improved by adding more security headers and explicit incident response contacts. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

F

Fondation Sanfilippo

fondation-sanfilippo.ch

55

Fondation Sanfilippo Suisse is a specialized non-profit organization dedicated to accelerating research and treatment discovery for Sanfilippo disease, a rare degenerative childhood illness. Established in 2008, the foundation operates primarily in Switzerland with international scientific collaborations. It provides funding for research programs, organizes scientific conferences, raises public awareness, and supports affected families. The foundation relies on donations and fundraising events as its main business model. The website reflects a professional and trustworthy image with clear donation mechanisms and transparent contact information. Technically, the website is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance. It uses Google Analytics and Tag Manager for tracking, and Complianz for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Performance is moderate, with room for optimization. Security posture is good with HTTPS enforced, reCAPTCHA protection on forms, and cookie consent mechanisms. However, explicit security headers like CSP and X-Frame-Options are not detected and should be implemented. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies in French, aligned with GDPR requirements. Overall, the foundation's website is a secure, compliant, and professional platform that effectively supports its mission. Strategic recommendations include enhancing security headers, publishing a security policy or vulnerability disclosure, and conducting regular security audits to maintain and improve security posture.

P

Pictet

group.pictet

70

Pictet is a well-established independent investment partnership specializing in wealth management, asset management, and asset servicing with over 200 years of global investment leadership. The website reflects a mature and professional financial services firm targeting high-net-worth individuals and institutional clients. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and consent management tools to ensure compliance and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

F

Fondation Louis-Jeantet

jeantet.ch

56

Fondation Louis-Jeantet is a Geneva-based non-profit foundation dedicated to supporting biomedical research, both fundamental and clinical, to advance medicine and foster innovation throughout researchers' careers. The foundation organizes awards, public conferences, and provides venue rental services, positioning itself as a reputable entity within the biomedical research community. The website is professionally designed with clear navigation and content relevant to its mission, targeting researchers and the scientific community. Technically, the site is built on WordPress with common libraries such as jQuery and OwlCarousel, and integrates Google Tag Manager and Analytics for tracking. Mobile optimization is good, though accessibility features are basic. Security posture is adequate with HTTPS enforced but lacks some security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism despite tracking scripts. WHOIS data confirms legitimacy with consistent registrant information matching the foundation's identity and location in Switzerland.

Z

Zoé4Life

zoe4life.org

56

Zoé4Life is a small Swiss non-profit organization founded in 2013 dedicated to supporting children with cancer, their families, and pediatric cancer research. The website is professionally designed using WordPress with Elementor and Yoast SEO, providing a good user experience and clear navigation. The organization maintains an active presence through social media and regularly updates content related to events and research. Technically, the site uses modern web technologies and is hosted on Infomaniak servers with proper SSL configuration. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Contact is primarily via a contact form, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy, well-maintained, and aligned with its mission.

A

Anouk Foundation

anouk.org

69

Anouk Foundation is a small non-profit organization based in Geneva, Switzerland, focused on enhancing healthcare environments through art. Their mission is to create positive, healing spaces by designing murals that improve the well-being of patients and residents in social and medical institutions. The website reflects a professional and consistent brand image, targeting healthcare providers and institutions seeking to improve patient experience through art. Technically, the website is built on a modern platform with JavaScript, CSS, and HTML5 technologies, including service workers for progressive web app capabilities and Cookiebot for GDPR-compliant cookie management. The site is mobile-optimized, accessible, and performs moderately well, hosted likely on a CDN associated with multiscreensite.com. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for non-profits, and no suspicious patterns were found. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding a terms of service page to improve transparency and trust.

F

Foundation Le Solstice Switzerland

lesolstice.org

59

Foundation Le Solstice Switzerland is a small non-profit organization dedicated to supporting children and young adults in pursuing education, as well as assisting other civil society organizations with their projects. The website is professionally designed using the Wix platform, featuring a consistent brand presence and clear messaging focused on philanthropy and education support. The technical infrastructure relies on Wix's Thunderbolt framework and standard JavaScript polyfills, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and some cookie handling best practices, though the absence of security headers and privacy policies indicates room for improvement. Overall, the website presents a trustworthy and professional image suitable for its non-profit mission.

F

Fondation Dora

fondationdora.org

60

Fondation Dora is a small non-profit organization based in Geneva, Switzerland, dedicated to aiding children with special needs. The foundation focuses on supporting research, prevention, training, and care initiatives. The website is professionally designed using the Wix platform, presenting clear and relevant content targeted at stakeholders interested in child welfare. The technical infrastructure leverages Wix's Thunderbolt framework and includes modern JavaScript polyfills, ensuring good mobile optimization and moderate performance. Security posture is moderate with HTTPS usage and some JavaScript security hardening, but lacks explicit security headers and formal privacy or cookie policies. No WHOIS data is available due to privacy protection or malformed queries, but the website content and structured data indicate legitimacy. Overall, the site is safe, trustworthy, and suitable for general audiences.

F

Fondation Minkoff

fondation-minkoff.ch

54

Fondation Minkoff is a Swiss philanthropic foundation established in 2009, focusing on supporting projects in social action, culture, education, and scientific research. The website presents a professional and consistent brand image, targeting non-profit organizations, students, researchers, and cultural actors. The business model is centered on philanthropy and financial support for general interest projects. Technically, the website is built on WordPress using Elementor and Yoast SEO, with performance optimization via WP Rocket. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced, but lacks explicit security headers and detailed security policies. Privacy compliance is partial, with privacy and cookie policies present but no consent mechanism. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the domain registration data aligns well with the website content, supporting legitimacy and trustworthiness.

D

DA VINCI-AIR AG

davinci-air.ch

55

DA VINCI-AIR AG operates a professional helicopter flight school and offers helicopter trial flights, pilot training, and balloon rides primarily targeting customers in Switzerland. The company maintains a consistent brand presence with active social media channels and a well-structured website built on WordPress with Elementor and Smart Slider 3. The website is well-optimized for SEO and mobile devices, providing a good user experience. Technically, the site uses modern web technologies and performance optimization plugins like WP Rocket. Security posture is solid with HTTPS and some security best practices, though explicit security headers and incident response policies are absent. Privacy compliance is strong with GDPR-aligned privacy and cookie policies. Overall, the site reflects a trustworthy and professional business with a moderate to good security and compliance maturity.

C

CHS Central Helicopter Services AG

centralheli.ch

46

CHS Central Helicopter Services AG is a Swiss-based helicopter service provider with over 20 years of experience offering passenger flights, work flights, and pilot training. Operating primarily from Buttwil airfield near Luzern, they serve Central Switzerland and nearby urban centers with a range of services including sightseeing tours, heliski, business taxi flights, and flight school programs. The company maintains a professional online presence with clear branding and comprehensive service descriptions. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are not explicitly detected. Privacy compliance is basic, with a privacy policy present but lacking explicit GDPR details and no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professionally maintained, supporting the company’s market position as a reputable regional helicopter service provider.

Chablais Heli Club is a small Swiss helicopter flight school and service provider based at the Bex aerodrome near the Swiss Alps. The company offers a range of helicopter pilot training licenses, including private, professional, and instructor certifications, as well as helicopter rental services. Their market position is regional, targeting individuals interested in helicopter flight training and recreational flying. The website is built on WordPress with a modern tech stack including Visual Composer, Bootstrap, and various JavaScript libraries. It features multimedia content and social media integration, providing a good user experience and mobile optimization. Security posture is moderate with HTTPS enabled and CAPTCHA on forms, but lacks important security headers and explicit privacy and cookie policies, indicating compliance gaps. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security hardening.

Fresh Interactive AG is a Swiss-based digital marketing agency established since 1998, specializing in services such as online marketing, web design, branding, real estate marketing, and Shopware e-commerce solutions. The company targets small and medium enterprises, particularly in the real estate and retail sectors, positioning itself as a reliable and professional partner in the Zurich region. The website reflects a mature digital presence with comprehensive service offerings and a strong portfolio of references. Technically, the website employs a modern but slightly dated technology stack including jQuery 1.11.3, FlexSlider, and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements are recommended such as enabling DNSSEC and updating libraries. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent management. Overall, the website demonstrates high professionalism and trustworthiness with minor technical and security enhancements suggested.

A

AXA Switzerland

axa.ch

70

AXA Switzerland is a leading enterprise-level insurance and pension provision company serving private customers in Switzerland. The website offers a comprehensive range of insurance products including liability, car, household, legal protection, and pension services. The company is part of the global AXA Group and maintains a strong market position supported by extensive customer reviews and certifications. Technically, the website is built on Adobe Experience Manager with modern marketing and analytics tools such as Adobe Target and Google Tag Manager, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

The website mfgb.ch currently presents only a security verification page employing Google reCAPTCHA v3, indicating that access to the actual content is restricted by a web application firewall or bot protection mechanism. Due to this, no business-related content, contact information, or policies are accessible for analysis. The site uses modern frontend technologies such as Bootstrap 5.3.3 and integrates invisible reCAPTCHA for security. However, the lack of visible security headers and absence of privacy or cookie policies limit the assessment of its security posture and compliance. The domain WHOIS data is privacy protected, which is common for small or security-conscious entities but reduces transparency. Overall, the site’s security posture shows basic bot protection but lacks visible advanced security measures or compliance documentation. The content quality and business credibility cannot be properly assessed due to the blocked content.

S

Skydive Luzern

paraclub.ch

61

Skydive Luzern is a professional skydiving center based in Switzerland, offering tandem jumps, initial jumps, skydiving training, events, and equipment sales and maintenance. The website is built on the Wix platform and demonstrates a good level of digital maturity with modern tracking tools such as Google Analytics and Facebook Pixel. The site is well-designed, mobile-optimized, and provides clear contact information including phone and physical address. However, it lacks critical privacy and cookie policies, which impacts its compliance posture. Security-wise, the site uses HTTPS and some security hardening scripts but could improve by adding explicit security headers and vulnerability disclosure mechanisms. Overall, the business appears legitimate and trustworthy with a solid online presence but should address privacy compliance gaps to enhance user trust and regulatory adherence.

V

Verein Gletscherpiloten

gletscherpiloten.ch

48

Verein Gletscherpiloten is a small Swiss aviation club specializing in mountain and glacier flying training and experiences. The website provides detailed information about their unique flight services in the Alpine region, targeting pilots and aviation enthusiasts interested in specialized mountain flying. The business operates as a non-profit club with a niche market position focused on aviation education and recreational flights. Technically, the website uses basic HTML, CSS, and JavaScript with jQuery 1.7.1 and Nivo Slider for image slideshows. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS. Security posture is limited, with no visible security headers and use of outdated JavaScript libraries, posing potential vulnerabilities. Privacy compliance is minimal, with a privacy policy present but no cookie consent mechanism despite tracking pixels. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but would benefit from technical and security improvements to enhance trust and compliance.

E

ERNE Gruppe

erne-gruppe.ch

70

ERNE Gruppe is a Swiss construction and real estate group offering innovative building solutions and comprehensive services in construction, wood construction, system construction, and real estate management. The company targets both B2B and B2C audiences within Switzerland, positioning itself as an established medium-sized player in the Swiss construction sector. The website is built on TYPO3 CMS and integrates modern technologies including Google Tag Manager, Google Analytics, reCAPTCHA, and various marketing pixels, all managed with a GDPR-compliant consent mechanism. The site is multilingual, supporting German and French, and demonstrates good design quality and user experience. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though some security headers could be improved. Overall, the website reflects a professional and trustworthy business presence with good privacy compliance and marketing transparency.

C

CS2 AG

cs2.ch

78

CS2 AG is a well-established Swiss digital and web agency founded in 1997, specializing in full-service digital solutions including corporate websites, e-commerce platforms, and custom applications primarily based on open-source technologies such as TYPO3, Magento, and Laravel. The company targets small to medium enterprises and large corporations within Switzerland, positioning itself as a trusted partner with over 800 successful projects. The website reflects a mature digital infrastructure with modern technologies, comprehensive GDPR compliance, and a strong focus on user experience and accessibility. Security posture is solid with HTTPS enforcement and consent management, though there is room for improvement in explicit security headers and incident response transparency. Overall, CS2 AG demonstrates a high level of professionalism, trustworthiness, and technical competence, making it a credible and reliable digital agency in its market.

W

Wanda Multimedia Schaffhausen

wanda-multimedia.ch

49

Wanda Multimedia Schaffhausen is a small, professional full-service internet, design, and advertising agency based in Schaffhausen, Switzerland. The company offers a comprehensive range of services including website development, online marketing, SEO, logo and corporate design, print media, and technical support. Their market position is focused on local businesses and organizations seeking integrated digital and offline media solutions. The website is built on WordPress with modern plugins and tools, reflecting a good level of digital maturity and SEO optimization. The presence of cookie consent and privacy policies indicates attention to privacy compliance. Security posture is adequate with HTTPS enforced, though security headers could be enhanced. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence.

B

Bundeskanzlei BK

bundeskanzlei.ch

72

The Bundeskanzlei BK website serves as the official digital presence of the Swiss Federal Chancellery, providing comprehensive information about its role in supporting the Federal Council, managing political rights, and driving digital transformation within the Swiss federal administration. The site is well-structured, multilingual, and rich in authoritative content, targeting Swiss citizens, government officials, and political stakeholders. It maintains a strong market position as a central government entity with clear branding and trust signals. Technically, the website leverages Adobe Experience Manager as its CMS, uses modern JavaScript libraries like jQuery and Granite UI, and employs Matomo for privacy-conscious analytics. The site is hosted on Swiss government infrastructure, optimized for mobile devices, and demonstrates good SEO and accessibility practices. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, includes anti-clickjacking measures, and uses CSRF protection scripts. However, it lacks explicit cookie consent mechanisms and published security policies or incident response contacts, which are recommended for enhanced compliance and transparency. No vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professional, and secure, reflecting the high standards expected of a federal government portal. Strategic improvements in privacy compliance and security transparency would further strengthen its posture.

P

Parlamentarische Gruppe Digitale Nachhaltigkeit

digitale-nachhaltigkeit.ch

65

Parldigi is a Swiss parliamentary group dedicated to promoting digital sustainability and responsible digital transformation. The organization focuses on advocacy, education, and information dissemination related to digital sovereignty, data protection, and inclusion. Their website serves as a hub for news, events, and resources targeted primarily at Swiss policymakers and the interested public. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and social media integration widgets. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and standard secure libraries but lacks visible security headers and formal security policies. Privacy compliance is partial, with no explicit cookie consent mechanism or detailed privacy policy page, which could be improved to meet GDPR standards. Overall, the domain registration and WHOIS data align well with the website's governmental and non-profit nature, indicating legitimacy and trustworthiness.

Workshop-Tage is a Swiss-based community event organizer focused on Open Source software and technology workshops. The website promotes a multi-day event featuring workshops on Open Source topics and soft skills, targeting enthusiasts and professionals in the Open Source community. The event has a history dating back to 2017 and is supported by notable Swiss educational institutions and organizations, positioning it as a reputable and established community event in the technology sector. Technically, the website is built on WordPress with a modern tech stack including Bootstrap 4 and jQuery. SEO is enhanced using Yoast SEO Premium, and privacy-conscious analytics are implemented via Matomo. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some privacy compliance elements such as explicit privacy and cookie policies are missing. From a security perspective, the site uses HTTPS with good SSL configuration and does not expose sensitive data. However, it lacks explicit security headers and does not provide incident response or vulnerability disclosure information, which are areas for improvement. The absence of privacy and cookie policies also impacts compliance with GDPR and related regulations. Overall, Workshop-Tage presents a trustworthy and professional online presence for its community event, with solid technical foundations and good business credibility. Strategic improvements in privacy compliance and security transparency would enhance its security posture and regulatory adherence.

Open Education Day is an educational event organized by CH Open, focusing on open source technologies and open educational resources in the Swiss education sector. The website presents a professional and well-structured platform for event information, partner promotion, and community engagement. The technical infrastructure is based on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is adequate with HTTPS and privacy-conscious analytics, though lacking explicit security policies and cookie consent mechanisms. Overall, the site is trustworthy and serves its niche audience effectively.

D

DINAcon – Konferenz für digitale Nachhaltigkeit

dinacon.ch

46

DINAcon is a Swiss-based conference organizer specializing in digital sustainability events, targeting professionals interested in technology and sustainability. The website presents information about upcoming conferences, ticketing, and program details, positioning itself as a niche player in the technology event sector within Switzerland. Technically, the site is built on WordPress with Elementor and uses modern web technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. Security-wise, the site benefits from HTTPS but lacks visible security headers and formal security policies, indicating room for improvement in security posture and compliance. Privacy compliance is weak due to the absence of privacy and cookie policies, which could expose the organization to regulatory risks. Overall, the site is professional and trustworthy but should enhance its compliance and security transparency to strengthen user trust and regulatory adherence.

S

SwissAccounting

swissaccounting.org

66

SwissAccounting is a prominent Swiss association specializing in accounting, controlling, and financial management education and professional networking. With approximately 10,000 members, it holds a leading market position in Switzerland's finance education sector. The website offers comprehensive information about membership benefits, educational programs, seminars, and events, targeting finance professionals and aspiring accountants. The organization emphasizes practical knowledge transfer and political advocacy for the profession. Technically, the website is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and marketing tools such as Google Analytics and Facebook Pixel. It is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS with domain status locks but lacks DNSSEC and explicit security policies. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. Overall, the website is trustworthy, professional, and well-maintained, though it could improve security posture by enabling DNSSEC and publishing incident response information.

S

Sempachersee Tourismus

sempachersee-tourismus.ch

57

Sempachersee Tourismus operates a regional tourism website focused on promoting the Sempachersee area in Switzerland. The site provides comprehensive information on local events, leisure activities, accommodation options, and regional highlights, targeting tourists and visitors interested in the region. The business model centers on regional tourism promotion and information dissemination, positioning itself as a key regional tourism authority. Technically, the website is built on TYPO3 CMS with modern JavaScript frameworks such as Vue.js and React, integrating analytics tools like Google Analytics, Google Tag Manager, and Piwik PRO. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is adequate with HTTPS enforced but lacks security headers and explicit incident response policies. Privacy compliance is weak due to missing privacy and cookie policies and absence of consent mechanisms. WHOIS data confirms the domain's legitimacy and consistency with the business focus. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security practices.

R

ROTAIR Helicopter

rotair.ch

46

ROTAIR Helicopter is a Swiss-based helicopter flight service provider offering sightseeing tours, pilot training, and customized charter flights. The company targets tourists and aviation enthusiasts seeking aerial experiences over iconic Swiss landmarks. The website is built on WordPress with WooCommerce for e-commerce capabilities and uses modern SEO and analytics tools. While the site is professionally designed and mobile-optimized, it lacks explicit privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the business appears legitimate and well-positioned within its niche, but improvements in privacy compliance and security transparency are recommended.

S

Segelfluggruppe Pilatus SGP

sgpilatus.ch

51

Segelfluggruppe Pilatus SGP is a well-established Swiss gliding club founded in 1967, operating from Flugplatz Luzern-Beromünster. The club offers gliding training, flying experiences, and community activities targeting aviation enthusiasts and prospective pilots. The website reflects a focused and consistent brand presence with clear information about the club's history and services. Technically, the site uses modern front-end libraries such as jQuery and AOS for animations, and is likely powered by Craft CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, HTTPS is enforced, but there is a lack of visible security headers and no explicit cookie consent mechanism, which could be improved for better compliance and protection. No forms or direct contact emails are present on the homepage, but contact information is clearly provided in the footer. The domain registration data aligns well with the club's identity and history, supporting legitimacy and trustworthiness.

H

Heli GmbH

helikopterflug.ch

69

Heli GmbH operates a specialized e-commerce platform offering helicopter flight experiences, including sightseeing tours, pilot experiences, and VIP taxi flights primarily in Switzerland. The company targets general consumers interested in unique aerial experiences and gifts. The website is built on the Shopify platform, leveraging modern web technologies and third-party marketing and analytics tools to provide a professional and user-friendly experience. The site includes comprehensive privacy and cookie policies with active consent mechanisms, reflecting good compliance with GDPR standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although formal security policies and incident response information are absent. Overall, the website is trustworthy, well-maintained, and suitable for its niche market.

F

FLUBAG Flugbetriebs AG

flubag.ch

52

FLUBAG Flugbetriebs AG operates a flight training school and aviation services at the Luzern-Beromünster airport in Switzerland. The company offers pilot training for Private Pilot License (PPL) and Light Aircraft Pilot License (LAPL), scenic flights, and related aviation activities. The website targets aviation enthusiasts and prospective pilots primarily in the Swiss region. The business model focuses on training and flight experience services with a regional market position supported by partnerships with related aviation and local service providers. Technically, the website is built on Drupal 11 CMS with jQuery and custom styling. It is moderately performant, mobile-optimized, and accessible with good SEO practices. The site is fully accessible without WAF or blocking mechanisms, indicating a mature digital presence. However, some improvements in privacy compliance and security headers could enhance the technical posture. Security-wise, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. A security policy page exists, but incident response and vulnerability disclosure information are missing. Cookie policy is present but lacks a consent mechanism, indicating partial GDPR compliance. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include adding a privacy policy, implementing cookie consent, publishing incident response contacts, and enhancing security headers to improve compliance and security posture.

S

Skydive Luzern

skydive-luzern.ch

61

Skydive Luzern is a professional skydiving center based in Switzerland offering tandem jumps, initial jumps, skydiving training, events, and equipment sales and maintenance. The company targets sports enthusiasts and individuals interested in skydiving within Switzerland. The website is built on the Wix platform, leveraging Wix Thunderbolt framework, and integrates common analytics and tracking tools such as Google Analytics and Facebook Pixel. The technical infrastructure is modern and moderately optimized for performance and mobile devices. Security posture is good with HTTPS enabled and some security hardening scripts, though explicit security headers and privacy policies are missing. Overall, the site is professional and trustworthy but could improve privacy compliance and transparency.

G

Gammeter Media AG

gammeterweb.ch

48

Gammeter Media AG is a Swiss-based small technology company specializing in custom web design solutions, including individually programmed websites, template-based Webkit Smart sites, e-commerce platforms, SEO marketing, progressive web apps, and digital magazines. The company targets businesses and organizations seeking tailored digital presence enhancements. Their market position is that of a regional digital agency with a strong focus on personalized service and technical innovation. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and Google services for analytics and security. The site is well-structured, mobile-optimized, and includes comprehensive privacy and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and reCAPTCHA integration, though it lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence. The WHOIS data aligns well with the business claims, indicating legitimacy and transparency.

H

Helicopter School Association

hsa.ch

45

The Helicopter School Association (HSA) is a Swiss non-profit organization dedicated to promoting professional and standardized helicopter pilot training across Switzerland. Founded in 2004, it holds recognized certifications such as FTO under JAR FCL and an Approved Training Organisation (ATO) under EASA Part FCL since 2014. The website serves as an information portal for courses, certifications, and partner organizations, targeting helicopter pilots and aviation professionals within Switzerland. The business model focuses on education and certification services within the transportation sector, maintaining a small but established presence.

C

Codia GmbH

codia.ch

61

Codia GmbH is a small Swiss digital and web agency based in Toggenburg, specializing in web design, software development, webshops, and multimedia production such as photography and video. The company targets businesses seeking customized digital solutions and positions itself as a creative, modern agency with a strong regional presence. The website is professionally designed, mobile-optimized, and rich in content, showcasing client testimonials and a portfolio of projects. Technically, the site leverages modern web technologies including Webflow CMS, Vimeo for video content, and tracking tools like Google Analytics and Facebook Pixel, hosted likely on Webflow's infrastructure. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. WHOIS data is privacy protected, which is typical for small businesses, and no suspicious patterns are detected. Overall, the site demonstrates a mature digital presence with good compliance and trust indicators.

C

Camping Tamaro Resort

campingtamaro.ch

66

Camping Tamaro Resort is a well-established hospitality business located in Tenero, Switzerland, offering camping pitches, bungalows, and various services including a restaurant and wellness activities. The website is professionally designed using modern technologies such as Next.js and DatoCMS, providing a good user experience with mobile optimization and clear navigation. Security posture is strong with HTTPS and security headers properly configured, though privacy compliance could be improved by adding explicit privacy and terms of service pages. The business maintains an active social media presence and integrates booking services via a partner domain. Overall, the site is trustworthy and suitable for its target audience.

Bosco Gurin is a regional tourism and hospitality website focused on promoting outdoor activities, events, and accommodations in the Bosco Gurin area of Switzerland. The site targets tourists interested in winter and summer sports, nature, and local culture, providing live webcams, event news, and ticketing links. The business model centers on tourism promotion and facilitating visitor engagement through digital content and external ticket sales. Technically, the website uses a traditional tech stack including jQuery 1.11.1, Google Analytics, and Google Tag Manager. The site is well-structured with good mobile optimization and moderate performance. However, some technical debt is evident with the use of an outdated jQuery version and lack of modern security headers. SEO and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS and no visible sensitive data exposure. However, it lacks security headers and a formal security or incident response policy. Privacy compliance is addressed through a comprehensive Iubenda privacy policy, but no cookie consent mechanism is implemented, which is a compliance gap. Contact information is clearly provided, enhancing trust. Overall, the website is professional, trustworthy, and suitable for its purpose but would benefit from technical and security improvements to enhance compliance and resilience. The risk level is moderate with no critical vulnerabilities detected.

H

Hôpitaux Universitaires Genève

divisionprivee-hug.ch

62

The website represents the Division privée of the Hôpitaux Universitaires Genève (HUG), a premier university hospital in Switzerland. It offers high-end private medical care combining university-level medical expertise with premium hospitality services. The site targets patients seeking personalized and comfortable healthcare services in Geneva. The business model focuses on delivering coordinated expert medical treatments with concierge and hotel-like services, positioning itself as a leader in private healthcare within the Swiss market. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies such as Font Awesome 6 and Google reCAPTCHA for security. Analytics are handled via Piwik PRO, indicating a privacy-conscious approach. The site is mobile-optimized and accessible, with good SEO basics, though some improvements in privacy and cookie policy disclosures are needed. Security posture is solid with HTTPS enforced and secure form handling, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy consistent with the hospital's identity. Overall, the website is professional, trustworthy, and well-maintained, but could enhance compliance by adding privacy and cookie policies and improving security transparency.

U

Université de Genève

unige.ch

69

Université de Genève is a prominent public university in Switzerland offering a wide range of academic programs and research activities. The website serves students, researchers, collaborators, and the public with information about faculties, courses, research, and services. The institution maintains a professional online presence with consistent branding and multilingual support. Technically, the website is built on the concrete5 CMS platform and utilizes modern JavaScript libraries such as jQuery, Isotope, and Nivo Slider. It employs Matomo for analytics and OneTrust for cookie consent management, indicating a moderate level of digital maturity and privacy awareness. The site is mobile optimized and provides a good user experience with clear navigation. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data confirms the domain's legitimacy and consistency with the university's identity. Overall, the website is trustworthy and professionally maintained, with room for improvement in security policy transparency and contact information availability.

F

Fondation privée des HUG

fondationhug.org

63

Fondation privée des HUG is a well-established non-profit foundation linked to the Hôpitaux universitaires de Genève and the University of Geneva Faculty of Medicine. It focuses on funding essential medical research and healthcare quality projects through transparent and rigorous management of donations. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, it uses Drupal 10 CMS and integrates Piwik PRO for analytics, indicating a modern and privacy-conscious infrastructure. Security posture is strong with HTTPS and security headers, though DNSSEC is not enabled and cookie consent mechanisms are missing, representing areas for improvement. The domain registration is consistent and appropriate for the organization's history, enhancing trustworthiness. Overall, the site is professional, trustworthy, and serves its philanthropic mission effectively.

A

avisec ag

panorama-camera.com

47

Avisec AG operates as a specialized technology company focused on panoramic camera systems, photo webcams, and cloud-based visualization solutions primarily targeting the hospitality and alpine tourism sectors. The company is positioned as a market leader in delivering high-resolution panoramic imaging solutions that enhance project quality and location marketing. Their offerings include advanced 360° panorama cameras, time-lapse video production, and drone filming services, catering to business customers and distribution partners. The website reflects a professional digital presence with strong branding and multimedia content showcasing their products and services. Technically, the site is built on WordPress with Themify Builder and optimized for performance and SEO, including privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and privacy-respecting analytics, though improvements are recommended in security headers and privacy compliance documentation. Overall, the domain registration is transparent and consistent with the business profile, supporting high legitimacy. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response and vulnerability disclosure information to strengthen trust and compliance.