Switzerland security reports

H

Hotel Schweizerhof Bern & Spa

schweizerhof-bern.ch

50

Hotel Schweizerhof Bern & Spa is a premium 5-star luxury hotel located centrally in Bern, Switzerland. The hotel offers upscale accommodation, gourmet dining options, a spa and wellness center, and facilities for meetings and events. It targets luxury travelers, business guests, and event organizers, positioning itself as a leading hospitality provider in the Swiss capital. The website reflects a high level of professionalism with rich content, clear navigation, and strong branding consistent with a luxury hospitality business. Technically, the site uses modern web technologies including Vue.js, Google Tag Manager, and Matomo Analytics, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic with cookie consent implemented but no explicit privacy or terms of service pages detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

O

ODEC - Schweizerischer Verband der dipl. HF

odec.ch

57

ODEC is a Swiss non-profit umbrella association representing graduates of Higher Vocational Schools (HF) across all disciplines. With over 14,000 members, it provides networking, career services, and promotes recognition of HF diplomas to enhance professional opportunities. The website is well-structured, professionally designed, and targets HF graduates and students in Switzerland. Technically, the site is built on Drupal 10, uses modern analytics tools like Google Analytics and Microsoft Clarity, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

E

edu-suisse

edu-suisse.ch

62

edu-suisse is a Swiss association dedicated to promoting educational diversity and strengthening the vocational education sector in Switzerland. It represents private educational institutions, associations, and professional organizations, facilitating dialogue with economic bodies and government. The website reflects a medium-sized organization with a clear focus on education advocacy and member support. Technically, the site is built on the Squarespace platform, leveraging standard web technologies and providing a moderate performance and good mobile experience. Security posture is solid with HTTPS and HSTS enabled, though some advanced security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

The Ombudsstelle Kanton Zug website serves as the official online presence for the canton Zug's ombudsman office, providing independent, neutral, confidential, and free services to citizens facing conflicts or difficulties with cantonal or municipal authorities. The site targets local residents seeking assistance with administrative disputes and offers key services including mediation, information, and a whistleblowing reporting channel. The website is professionally designed with clear navigation and consistent branding, reflecting its government affiliation and public service mission. Technically, the website employs a simple technology stack primarily based on jQuery and custom JavaScript, with responsive design elements for mobile optimization. While the site performs moderately well and includes essential meta tags, it lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident from the data. The absence of analytics and tracking scripts suggests minimal user tracking, aligning with privacy considerations. From a security perspective, the site appears to use HTTPS (implied by domain), but no explicit security headers or advanced security policies are detected. There are no visible vulnerabilities or exposed sensitive data, but the lack of privacy and cookie policies represents a compliance gap, especially under GDPR. Incident response and vulnerability disclosure mechanisms are not publicly documented, which could be improved to enhance trust and security posture. Overall, the website is trustworthy and professional, serving an essential government function with clear contact information and a transparent mission. However, to strengthen compliance and security, the organization should implement and publish privacy and cookie policies, enforce security headers, and consider formalizing incident response and vulnerability disclosure processes.

C

CURAVIVA

curaviva.ch

58

CURAVIVA is a Swiss-based professional association serving institutions and service providers for elderly and people with support needs. It holds a strong market position with approximately 3,100 members and offers a broad range of services including specialized courses, legal and insurance consulting, data protection, and innovation initiatives. The website reflects a mature digital presence with professional design, clear navigation, and relevant content tailored to its target audience of healthcare and social service providers. Technically, the site uses a modern CMS (sitesystem), integrates multiple analytics platforms (Matomo, Google Analytics, Facebook Pixel), and embeds multimedia content securely via HTTPS. Security posture is good with encrypted connections and privacy-conscious analytics configurations, though it lacks some security headers and explicit cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and compliant with GDPR principles, though it could improve transparency around cookies and incident response. The WHOIS data confirms legitimacy and consistency with the organization's Swiss location and branding.

I

INSOS

insos.ch

59

INSOS is a Swiss non-profit association serving as the industry federation for service providers supporting people with disabilities. It operates as a key player in the Swiss social sector, offering a broad range of services including legal advice, insurance services, inclusion measurement tools, and professional development courses. The organization is closely linked with the ARTISET federation and maintains a strong presence in the Swiss market with over 3,100 members. The website reflects a professional and consistent brand image, targeting service providers and professionals in the disability support sector. Technically, the website is built on the sitesystem CMS platform, utilizing modern JavaScript libraries such as jQuery and integrates analytics tools like Google Analytics and Matomo with privacy-conscious configurations. The site is mobile-optimized, accessible, and performs moderately well. However, it lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. From a security perspective, the site enforces HTTPS and employs error tracking via Sentry. Analytics are configured to anonymize IPs and disable cookies, indicating a baseline privacy awareness. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website's claims, confirming legitimacy and transparency. Overall, INSOS presents a trustworthy and professional online presence with room to enhance privacy compliance and security hardening to meet best practices fully.

W

webways AG

sozjobs.ch

69

sozjobs.ch is a specialized online job portal focused on social and healthcare professions in Switzerland, operated by webways AG. It holds a strong market position as the largest Swiss job portal in its niche, offering comprehensive job listings, employer profiles, and user-friendly search and application features. The website is professionally designed, mobile-optimized, and provides clear navigation and detailed filtering options tailored to its target audience of job seekers and employers in the social and healthcare sectors. Privacy and cookie policies are well implemented, reflecting GDPR compliance.

G

GLARNAIR Flugdienstleistungen

glarnair.ch

53

GLARNAIR Flugdienstleistungen is a Swiss-based aviation company established in 2009, offering flight school services, charter and taxi flights, and customized sightseeing flights with airplanes and helicopters. The company targets individuals aspiring to become pilots as well as customers seeking private charter or scenic flights. The website is professionally designed using WordPress with the Avada theme and integrates SEO best practices via Yoast SEO. It includes structured data for enhanced search engine understanding and uses Google Analytics for visitor tracking. Contact information is clearly presented, enhancing business credibility. Technically, the website employs modern web technologies including HTTPS, jQuery, and SEO plugins, ensuring moderate performance and good mobile optimization. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. No forms collecting personal data are present on the homepage, reducing immediate privacy risks. From a security perspective, the site uses HTTPS and a honeypot anti-spam plugin, but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. WHOIS data confirms the legitimacy of the domain and its alignment with the business claims, indicating a trustworthy entity. Overall, the website is safe, professional, and credible but could benefit from enhanced privacy and security features. Strategic recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to improve transparency and trust.

A

Anderthalb.ch

anderthalb.ch

57

Anderthalb.ch is a Swiss-based web agency specializing in programming, consulting, design, hosting, and support services primarily targeting businesses and organizations seeking comprehensive web solutions. The company positions itself as a regional expert with a focus on delivering more than just websites, emphasizing quality and client satisfaction. The website reflects a professional and consistent brand image with clear service offerings and client showcases. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and GSAP for animations, and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with good SEO and accessibility basics, although there is room for improvement in accessibility features and additional security headers. From a security perspective, the website enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and uses session and CSRF protection cookies. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious activities were detected. Overall, Anderthalb.ch presents a trustworthy and professional online presence with solid technical implementation and privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility to further strengthen the security posture and user experience.

W

Websamurai AG

websamurai.ch

50

Websamurai AG is a Swiss-based innovative web agency with offices in Aarau and Zürich, specializing in web design, programming, online shops, mobile apps, APIs, CMS systems, and online marketing services. The company targets both B2B and B2C clients and has nearly a decade of experience, positioning itself as a trusted and creative partner in the digital space. Their website reflects a professional and modern digital presence, leveraging WordPress CMS and various marketing and analytics tools to optimize user engagement and performance. Security posture is strong with HTTPS, reCAPTCHA, and obfuscated emails, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, with active consent mechanisms. Overall, the company demonstrates a mature digital infrastructure and a solid market position in the Swiss technology sector.

C

Careerplus

careerplus.ch

63

Careerplus is a leading Swiss personnel consultancy specializing in the recruitment of qualified professionals for permanent and temporary positions across various sectors including finance, healthcare, energy, and manufacturing. The company targets job seekers and employers within Switzerland, offering services such as recruitment, salary consulting, assessments, and interim management. The website is professionally designed, multilingual, and provides a comprehensive job search experience with detailed filtering options. Technically, the site is built on Drupal 10 and integrates modern analytics and marketing tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS and secure forms, though explicit security and privacy policies are not prominently published. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

Achermann Sport is a well-established Swiss retail company specializing in ski, langlauf, running, and outdoor adventure equipment. With physical stores in Stans and Engelberg and a robust online shop, the company offers a wide range of products and services including equipment rental, ski service, and running shoe consultation. The website reflects a professional and trustworthy brand with clear business information and strong regional presence. Technically, the site is built on WordPress with WooCommerce and uses modern optimization and marketing tools, ensuring good performance and SEO. Security posture is solid with HTTPS and secure payment integration, though minor improvements in CSP and cookie consent are recommended. Overall, the site is safe, user-friendly, and compliant with GDPR requirements.

V

Victorinox

victorinox.com

72

Victorinox is a well-established Swiss brand known globally for its Original Swiss Army Knife and a broad range of quality products including cutlery, watches, travel gear, and fragrances. The website reflects a mature e-commerce platform with a strong brand presence and comprehensive product offerings targeting general consumers seeking premium Swiss quality. Technically, the site leverages modern web technologies such as React and Next.js, hosted on SAP cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and monitoring scripts in place, although the absence of public WHOIS data slightly impacts trust assessment. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and user-friendly, supporting Victorinox's market position as a premium retail brand.

Hamilton Watch Company is a well-established luxury watch brand offering a wide range of men's and women's watches that combine American heritage with Swiss precision. The website serves as the official e-commerce platform, showcasing collections such as Khaki, Ventura, and Jazzmaster. The brand is positioned strongly in the luxury retail market and is owned by the Swatch Group, a major player in the watchmaking industry. The site targets watch enthusiasts and general consumers seeking quality timepieces. Technically, the website is built on Magento, leveraging modern web technologies and performance monitoring tools, hosted likely via Akamai CDN, ensuring fast and reliable user experience. The site is mobile-optimized and accessible, with good SEO practices in place. Security posture is strong with HTTPS enforced, security headers implemented, and no visible vulnerabilities. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. However, explicit security policies and incident response information are not published, and no vulnerability disclosure program is evident. Overall, the website is professional, trustworthy, and secure, though it could improve transparency on security and incident handling. The WHOIS data is missing or protected, which slightly reduces trust but is mitigated by the brand's reputation and website quality.

M

Metaloop AG

metaloop.ch

50

Metaloop AG is a Swiss-based creative agency specializing in brand strategy, design, and identity development. The company targets businesses and organizations seeking comprehensive branding solutions to enhance their market presence. Their website reflects a professional and consistent brand image, showcasing their portfolio and emphasizing strategic creativity. Technically, the site is built on WordPress with Elementor and optimized for performance and SEO, indicating a mature digital infrastructure. Security posture is solid with HTTPS and no visible vulnerabilities, though some improvements in security headers and privacy compliance could be made. Overall, the website presents a trustworthy and credible business with clear contact information and partner affiliations.

B

blue Cinema

bluecinema.ch

64

blue Cinema is a regional cinema chain operating in Switzerland, offering movie screenings, events, and ticket booking services. The website targets general moviegoers and provides up-to-date movie listings and showtimes. The business model focuses on entertainment and leisure through cinema experiences, with additional offerings such as games and special events. The company maintains a consistent brand presence and a professional online interface.

E

ENAIP Internationaler Bund GmbH

enaip-ib.ch

62

ENAIP Internationaler Bund GmbH operates the website www.enaip-ib.ch, providing adult education and vocational training primarily in Luzern and Zürich, Switzerland. The company offers a broad range of courses including construction trades, language courses, IT, and company-specific training. The website reflects a well-established educational institution with over 48 years of experience and eduQua certification, indicating quality standards in Swiss adult education. The target audience is adults seeking professional development and continuing education in the region. Technically, the website uses modern frameworks such as Bootstrap and integrates Google reCAPTCHA and Altcha CAPTCHA for security. The presence of Google Analytics and Google Adsense indicates moderate user tracking and advertising practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact information is comprehensive and transparent, including phone, email, physical addresses, and social media channels. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

C

Centro di Formazione Professionale OCST

cfp-ocst.ch

65

Centro di Formazione Professionale OCST is a well-established vocational training center based in Switzerland, offering a wide range of professional courses including languages, construction, commerce, accounting, and IT. The organization targets adults and professionals seeking continuing education and qualification preparation. The website reflects a mature digital presence with a modern tech stack and good mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though dedicated security and incident response policies are not publicly detailed. The business demonstrates high credibility with clear contact information, certifications such as eduQua, and membership in Travail.Suisse Formation. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

H

Hotellerie Gastronomie Verlag (Abteilung der Hotel & Gastro Union)

gastrojob.ch

69

Gastrojob.ch operates as a specialized job platform serving the hospitality, gastronomy, and tourism sectors primarily in Switzerland. It is affiliated with the Hotellerie Gastronomie Verlag and the Hotel & Gastro Union, providing a trusted channel for employers and job seekers within these industries. The platform offers categorized job listings, direct access to applicant profiles, and subscription-based job alerts, positioning itself as a key resource in the Swiss hospitality employment market. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Google Tag Manager and reCAPTCHA for analytics and security. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Security posture is solid with HTTPS enforced and form protections in place, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR. Overall, Gastrojob.ch presents a professional, trustworthy, and functional online presence with room for enhancement in security transparency and direct contact information.

G

gastroagentur

gastroagentur.ch

50

gastroagentur is a specialized communications agency focused on the hospitality and tourism sectors in Switzerland. They offer a comprehensive suite of services including content creation, media relations, storytelling, graphic design, and digital marketing tailored to the needs of the guest service industry. Their market position is that of a niche provider with deep industry knowledge, serving small to medium-sized clients in the hospitality domain. The website reflects a professional and consistent brand image with clear messaging and a user-friendly interface. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The use of Matomo analytics and Google reCAPTCHA v3 demonstrates attention to privacy and security. The site is mobile optimized and performs moderately well, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS and has implemented anti-bot measures on its contact form. However, it lacks explicit security headers and does not provide a security policy or incident response contact, which are areas for improvement. No vulnerabilities or suspicious content were detected. Overall, gastroagentur presents a trustworthy and professional online presence with minor compliance gaps, particularly in privacy and cookie policies. Strategic enhancements in security policies and compliance documentation would further strengthen their digital maturity and trustworthiness.

M

Monoplan AG

monoplan.ch

50

Monoplan AG is a professional interdisciplinary design firm specializing in architecture, interior, graphic, and product design, with a strong focus on project management and international experience. The company serves clients primarily in the real estate and hospitality sectors, offering a broad range of services from concept studies to brand development. Their market position is supported by a well-maintained portfolio and active social media presence. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for mobile and SEO, and secured with HTTPS. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is generally good with HTTPS and cookie consent, but lacks published security policies or incident response information. Overall, the website is professional and trustworthy, but domain registration verification is recommended.

D

Delivros Orell Füssli AG

delivros-orellfuessli.ch

50

Delivros Orell Füssli AG is a leading Swiss service provider specializing in the procurement, distribution, and utilization of media. The company positions itself as the top media procurement partner in Switzerland, targeting businesses and institutions requiring centralized media services. The website reflects a professional business model focused on media services with a clear market leadership claim within the Swiss market. Technically, the website is built on WordPress using Elementor and enhanced with Yoast SEO for search optimization. Cookie consent is managed via CookieYes, and Google Tag Manager is used for analytics and marketing tracking. The site demonstrates good mobile optimization and a moderate performance profile. Security-wise, HTTPS is enforced, but there is a lack of advanced security headers and explicit security or privacy policies, which could be improved to enhance trust and compliance. No signs of WAF or content blocking were detected, allowing full content accessibility. Overall, the website is credible and professionally maintained but would benefit from enhanced privacy and security disclosures to meet higher compliance standards.

K

kv zürich

kvz-moodle2.ch

68

The analyzed website is a Microsoft Azure Active Directory login portal for the kvzschulech.onmicrosoft.com tenant, serving the educational institution 'kv zürich' in Switzerland. It facilitates secure user authentication for access to services such as the kvz-moodle2.ch learning platform. The site leverages Microsoft's identity platform technologies, including OAuth2 and OpenID Connect, ensuring robust security and compliance with privacy standards. The presence of official Microsoft privacy and terms of service links further reinforces trustworthiness. From a technical perspective, the site is hosted on Microsoft Azure infrastructure, utilizing modern JavaScript frameworks and secure authentication flows. Performance and mobile optimization are good, with accessibility features implemented. Security headers and HTTPS enforcement are in place, contributing to a strong security posture. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital infrastructure aligned with enterprise-grade security practices. The lack of direct contact information on the login page is typical for such portals, with user support likely managed through the parent educational organization. The domain is a Microsoft-managed subdomain, consistent with the service provided, and no WHOIS data is available for the subdomain, which is expected. The risk assessment is low, with no critical issues identified. Strategic recommendations include maintaining up-to-date security libraries, conducting regular security audits, and monitoring for phishing attempts targeting the login portal to ensure continued protection of user credentials and data.

S

SV Restaurant

sv-restaurant.ch

70

SV Restaurant is a hospitality business operating a restaurant chain in Switzerland, offering menu plans and multiple store locations. The website is built using modern Angular framework and includes cookie consent mechanisms with default denial of ad and analytics storage, reflecting a basic level of privacy compliance. However, the site lacks explicit privacy policy, terms of service, and contact information, which are important for user trust and regulatory compliance. The technical infrastructure is modern but could benefit from enhanced security headers and accessibility improvements. Overall, the security posture is moderate with room for improvement in transparency and incident response readiness. Strategic recommendations include implementing comprehensive privacy and security policies, adding contact details, and enhancing security headers to improve trust and compliance.

C

Conférence romande des bureaux de l’égalité

egalite.ch

52

egalite.ch is a regional governmental and non-profit platform representing the Conférence romande des bureaux de l’égalité, which coordinates and promotes gender equality initiatives across French-speaking Swiss cantons. The website serves as an information hub and project coordinator for equality offices in cantons such as Berne (French part), Fribourg, Genève, Neuchâtel, Jura, Valais, and Vaud. It targets public institutions and citizens interested in gender equality and provides project information, news, and resources. Technically, the website is built on WordPress 6.8.3, leveraging modern web technologies including jQuery and WP Rocket for performance optimization. It uses standard plugins for GDPR compliance and cookie consent management, ensuring privacy compliance. The site is mobile-optimized with good SEO and accessibility features, although some accessibility aspects could be improved. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and should be implemented. No critical vulnerabilities or exposed sensitive data were found. Incident response and security policies are not publicly available, which is a potential area for improvement. Overall, the website demonstrates a solid digital presence with good content quality and compliance posture. The domain registration is consistent with the organization's claims, enhancing trustworthiness. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding a vulnerability disclosure mechanism to further strengthen security and trust.

A

Administration cantonale valaisanne

vs.ch

50

The website www.vs.ch serves as the official digital portal for the Administration cantonale valaisanne, representing the government of the Canton of Valais in Switzerland. It provides comprehensive information about governmental organization, public services, news, and thematic portals targeting residents and stakeholders within the canton. The site is well-branded with consistent governmental logos and offers multilingual support primarily in French and German. The business model is purely governmental, focusing on public service and information dissemination without commercial intent. Technically, the site is built on the Liferay CMS platform, leveraging modern web technologies including React, Alloy UI, AngularJS legacy components, and Matomo for analytics. The infrastructure appears robust with good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with strong security headers and nonce-based Content Security Policy, indicating a mature security posture. Cookie consent mechanisms are implemented, reflecting GDPR compliance. Security-wise, the site demonstrates good practices such as secure authentication endpoints (OAuth2), no visible vulnerabilities, and no exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, the site is trustworthy, professional, and safe for general audiences. Strategically, the site should consider publishing detailed security and incident response policies, adding vulnerability disclosure information, and enhancing contact transparency to further strengthen trust and compliance.

S

Seismo Verlag

seismoverlag.ch

51

Seismo Verlag is a specialized academic publisher based in Switzerland focusing on social science books, journals, and open access publications. The website is multilingual (German, French, English) and targets researchers, academics, and professionals in social sciences. The business model centers on publishing scholarly content with a niche market position in Swiss social science academia. The site features rich content including new releases, journal issues, and author interviews, reflecting a strong content strategy and professional presentation. Technically, the website uses a custom CMS with JavaScript libraries such as jQuery 2.2.4, Modernizr, and lazy loading for images. The site is moderately performant and mobile-optimized with good SEO practices. However, some modernization opportunities exist, such as updating libraries and improving accessibility features. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is present. No signs of WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the provided content. Overall, the website is professional, content-rich, and trustworthy for its academic audience but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

K

Kanton Zug

zg.ch

71

The website zg.ch is the official online portal for the Canton of Zug, Switzerland, serving as a comprehensive resource for residents, businesses, and visitors. It provides extensive information on public services including education, health, economy, social services, mobility, environment, politics, and security. The site is well-structured with clear navigation and a professional design consistent with government standards. Technically, it employs modern web technologies such as Bootstrap and Matomo analytics, ensuring a responsive and moderately performant user experience. Security posture is adequate with HTTPS enforced and asynchronous script loading, but lacks explicit security headers and published security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies or consent mechanisms. Overall, the domain registration and WHOIS data confirm the site's legitimacy as a government entity, with no suspicious indicators detected.

S

Stadt Zürich

stadt-zuerich.ch

65

The website www.stadt-zuerich.ch serves as the official digital portal for the city of Zurich, Switzerland. It provides comprehensive information about city administration, public services, and online resources for residents and businesses. The site is well-positioned as a trusted government resource, offering current news, event information, and service highlights tailored to its local audience. The business model is centered on public service delivery and transparent communication with the community. Technically, the site is built on Adobe Experience Manager (AEM) and employs modern web components, ensuring a responsive and accessible user experience. The infrastructure supports good performance and SEO optimization, with clear navigation and mobile-friendly design. Analytics are implemented via Adobe Analytics, though a visible cookie consent mechanism is absent. From a security perspective, the site enforces HTTPS and includes key security headers, reflecting a strong security posture. However, it lacks publicly visible security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and compliance. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a high level of professionalism and trustworthiness appropriate for a government entity. Strategic improvements in privacy compliance and security transparency would further strengthen its position and user confidence.

F

Fédération Fribourgeoise des Entrepreneurs

ffe-fbv.ch

53

The Fédération Fribourgeoise des Entrepreneurs (FFE-FBV) is a regional business federation based in Switzerland, primarily serving the construction and manufacturing sectors. The organization offers a range of services including professional training (initial, continuing, and advanced), administrative and technical support, labor market organization, and advocacy for its members. The website reflects a well-established entity with a clear market position supported by recognized certifications such as eduQua and ISO 9001. Their target audience includes entrepreneurs, construction professionals, trainees, and local businesses within the Fribourg region. The business model is membership-based, focusing on providing value-added services and fostering professional development.

P

Presseportal.ch

presseportal.ch

61

Presseportal.ch is a comprehensive Swiss media and press information platform operated by news aktuell schweiz, a subsidiary of the Nachrichtenagentur sda. It serves as a leading database and distribution service for press releases, media content, and newsroom hosting primarily targeting media professionals, journalists, and PR agencies within Switzerland. The platform offers a wide range of services including press release distribution, media monitoring, and access to a rich media database. The website is professionally designed with consistent branding and good content quality, supporting multiple languages and providing a user-friendly experience.

The website represents the Tripartite Berufsbildungskonferenz (TBBK), a Swiss governmental entity under the Staatssekretariat für Bildung, Forschung und Innovation (SBFI). It serves as a coordination platform linking operational committees with national political vocational education meetings. The site provides news, reports, and information about vocational education initiatives, targeting stakeholders in Swiss vocational training and government officials. The business model is governmental coordination and information dissemination with a medium-sized organizational footprint in Switzerland. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, using Matomo for privacy-conscious analytics. The site is mobile-optimized and professionally designed with consistent branding. Security posture is good with HTTPS and form protections but lacks security headers and explicit privacy/cookie policies, which are compliance gaps. Overall, the domain registration and WHOIS data align well with the website's governmental nature, indicating high legitimacy and trustworthiness.

S

Staatssekretariat für Bildung, Forschung und Innovation SBFI

berufsentwicklung.swiss

50

The website berufsentwicklung.swiss is an official platform managed by the Swiss State Secretariat for Education, Research and Innovation (SBFI). It serves as a comprehensive resource for vocational education and career development in Switzerland, providing detailed handbooks, ongoing revision information, and related documents. The site targets organizations of the working world and stakeholders involved in vocational training, positioning itself as a trusted government information portal. Technically, the site is built on WordPress with modern SEO and analytics tools like Matomo, hosted under a reputable registrar and DNS provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS and domain transfer protections, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy linked but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its governmental mission.

Sky Switzerland appears to be a company specializing in customs clearance services within Switzerland, targeting businesses and individuals requiring such services. The website content is currently inaccessible due to an HTTP 403 error page that blocks access when VPN or proxy services are detected, indicating a security access control mechanism. The visible content is minimal and limited to an error message with contact information including a phone number and a link to a support contact form. The technical infrastructure appears basic, with static HTML and CSS and hosting of assets on Amazon S3. No advanced frameworks, CMS, or analytics tools are detected. Security posture is weak due to lack of security headers, absence of privacy and cookie policies, and no visible incident response or vulnerability disclosure information. Overall, the website is poorly accessible and lacks comprehensive content and security best practices.

B

blue Entertainment AG

blueplus.ch

23

blue Entertainment AG operates the blue+ platform, a leading Swiss streaming service offering sports, TV shows, series, movies, and cinema ticketing. The platform targets Swiss consumers seeking comprehensive entertainment options via subscription and pay-per-view models. The website is professionally designed, mobile-optimized, and integrates modern web technologies including React/Next.js and CDN services for performance. Security posture is strong with HTTPS and security headers implemented, though explicit cookie consent and security policy disclosures could be improved. The domain registration aligns well with the business identity, reinforcing legitimacy and trust.

B

BEGASOFT AG

begasoft.ch

58

BEGASOFT AG is a Swiss IT company based in Bern, specializing in sustainable and innovative digital solutions. With 25 years of experience, it offers managed cloud infrastructure, IT operations and security, custom software development, SaaS products, and AI services. The company operates its own data center infrastructure hosted in a Tier IV, ISO 27001 certified Swisscom facility, ensuring high availability and security. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Security posture is strong with HTTPS and certified data center usage, though some advanced security headers and incident response disclosures could be improved. Overall, BEGASOFT AG presents a trustworthy and credible business profile with a focus on Swiss market sectors including government, healthcare, finance, and non-profits.

S

SDBB | CSFO

orientamento.ch

69

orientamento.ch is the official Swiss portal dedicated to professional, university, and career orientation. It provides comprehensive information on apprenticeship positions, professions, educational programs, and career planning tools primarily targeting students, apprentices, job seekers, educators, and parents within Switzerland. The portal is multilingual and maintained by SDBB | CSFO, indicating a government affiliation and high trustworthiness. Technically, the site uses JavaScript libraries such as jQuery and Zepto.js, along with Piwik (Matomo) for analytics, and features a secure login form with anti-CSRF tokens. The website is well-structured, mobile-optimized, and accessible, offering an excellent user experience. However, it lacks publicly linked privacy and cookie policies, which is a compliance gap. Security posture is strong with HTTPS and secure forms, but missing security headers and incident response information are areas for improvement. Overall, the site is professional, trustworthy, and serves as a key resource for educational and career guidance in Switzerland.

S

SDBB | CSFO

orientation.ch

69

orientation.ch is the official Swiss portal dedicated to providing comprehensive information on professional, university, and career orientation. It serves a broad audience including students, job seekers, educators, parents, and foreigners in Switzerland. The portal offers extensive resources such as apprenticeship place searches, profession databases, training offers, career planning tools, and multilingual support, positioning itself as a key educational resource in Switzerland. Technically, the website employs modern JavaScript libraries including Zepto.js and Piwik analytics for user tracking, with a custom CMS likely tailored for the Swiss educational sector. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. Security-wise, the site enforces HTTPS and uses secure login forms with anti-CSRF tokens, though explicit security headers and privacy policies are not evident in the provided content. Overall, the site is trustworthy and professionally maintained but would benefit from publishing clear privacy, cookie, and incident response policies to enhance compliance and user trust.

W

WOOHW! Swiss OOHM

woohw.ch

59

WOOHW! Swiss OOHM is a small Swiss business focused on out-of-home media advertising services. The website is built on the Wix platform and supports multiple languages, targeting business clients interested in advertising in Switzerland. The technical infrastructure is standard for Wix sites, with moderate performance and basic mobile optimization. However, the site lacks critical security and privacy features such as privacy policies, cookie consent mechanisms, security headers, and incident response contacts. No contact information or certifications are provided, which limits business credibility and trust. Overall, the site presents basic marketing content but requires significant improvements in security posture and privacy compliance to meet modern standards.

M

Monoplan AG

monoplan.com

49

Monoplan AG is a professional interdisciplinary design firm specializing in architecture, interior design, branding, and project management with a strong international presence. The company showcases a portfolio of projects primarily in the real estate and hospitality sectors, targeting businesses and clients seeking creative and comprehensive design solutions. The website is well-structured, visually appealing, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress using modern libraries such as jQuery and Swiper.js, with SEO enhancements via Yoast plugin. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers and explicit security policies are absent. The WHOIS data is missing, which raises concerns about domain registration legitimacy despite the professional appearance and valid contact information. Overall, the site demonstrates a solid business and technical foundation but would benefit from improved transparency in domain registration and enhanced security practices.

P

Passion for Excellence - Carsten K. Rath

passionforexcellence.ch

47

Passion for Excellence - Carsten K. Rath is a consulting and keynote speaking business specializing in service excellence, leadership, and hospitality consulting primarily targeting businesses in the hospitality sector. The company is positioned as a recognized expert in the German-speaking market, offering strategic consulting, service concept development, and leadership performance keynotes. The website is built on WordPress with modern plugins and SEO tools, providing a professional and user-friendly experience with good mobile optimization. Security posture is solid with HTTPS and some security best practices, though additional security headers could enhance protection. Privacy and cookie policies are present and GDPR compliant, but explicit contact emails and phone numbers are not directly visible, relying on social media and forms for contact. Overall, the domain registration details align well with the business claims, indicating high legitimacy and trustworthiness.

D

Die 101 Besten CH

die-101-besten.ch

43

Die 101 Besten CH operates a professionally designed WordPress website focused on ranking and promoting luxury hotels primarily in Switzerland and Germany. The site targets luxury travelers and hospitality professionals, offering categorized hotel rankings, special editions, and partner promotions. The business holds a niche market position within the hospitality industry in Switzerland. Technically, the site uses modern technologies including WordPress CMS, jQuery, and performance optimization plugins like WPRocket. Cookie consent is managed via Borlabs Cookie, and analytics are implemented through Google Analytics and Google Tag Manager. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and formal security policies are absent. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is safe, professional, and trustworthy but could improve transparency and security practices.

E

ELIZA AG

eliza.swiss

66

ELIZA AG is a Swiss-based technology company specializing in cloud software solutions for quality management, process management, corporate leadership, and human resources management, primarily targeting small and medium enterprises (KMU). Founded in 2019, ELIZA has established a strong market presence in Switzerland and Germany, serving over 120 customers across 15 industries. Their SaaS business model offers modular solutions with trial options, emphasizing compliance with ISO 9001 standards and GDPR regulations. Technically, the website is built using the Hugo static site generator, leveraging modern frameworks like Bootstrap and FontAwesome, and integrates multiple analytics and marketing tools such as Google Tag Manager, Plausible Analytics, and LinkedIn Insight Tag. Hosting and DNS services utilize Cloudflare, with private cloud hosting in Switzerland and Germany, ensuring data sovereignty and security. The site is well-optimized for performance, mobile responsiveness, and SEO. From a security perspective, ELIZA AG demonstrates good practices including HTTPS enforcement, domain security flags, and cookie consent mechanisms. However, DNSSEC is not enabled, and explicit security headers are not visible, representing minor areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and GDPR compliant, though incident response contact details and vulnerability disclosure mechanisms are absent. Overall, ELIZA AG presents a professional, trustworthy, and secure online presence aligned with its business objectives. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing security header implementation to further strengthen their security posture and compliance.

M

Movetia

movetia.ch

59

Movetia is a Swiss national agency dedicated to promoting exchange and mobility in the education sector. It operates on behalf of the Swiss federal and cantonal governments to finance and support educational exchange projects, including class exchanges, internships, and cooperation projects. The website targets educational institutions, youth, and professionals involved in education and mobility. It offers funding opportunities, advisory services, event information, and project management portals. The agency maintains a strong market position as a trusted government-related entity in Switzerland's education ecosystem. Technically, the website employs modern web technologies including ES modules, Vite build tools, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site is well-optimized for performance, mobile responsiveness, and accessibility, with structured data enhancing SEO. The content is professionally designed, multilingual, and rich in relevant information. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, explicit security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the legitimacy of the domain and its alignment with the agency's identity. Overall, Movetia's website demonstrates a high level of professionalism, security, and compliance suitable for a government-affiliated educational agency. Strategic improvements could include adding explicit security headers, publishing a security policy, and enhancing incident response transparency.

S

SVEB Schweizerischer Verband für Weiterbildung

eduqua.ch

53

SVEB Schweizerischer Verband für Weiterbildung operates alice.ch, a leading Swiss portal for adult education and quality certification, notably the eduQua label. The website serves as an authoritative source for information on eduQua certification, educational standards, and related services, targeting educational institutions, authorities, and learners in Switzerland. The organization holds a strong market position as a trusted non-profit association in the education sector. Technically, the site is built on WordPress with modern SEO and privacy compliance tools, including Yoast SEO and Complianz GDPR Cookie Consent. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and a formal security policy could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR, providing clear contact information and certifications. No critical vulnerabilities or suspicious content were detected.

T

Travail.Suisse Formation

ts-formation.ch

54

Travail.Suisse Formation is a Swiss non-profit organization focused on improving access to public continuing education for all adults, especially targeting people with disabilities and low qualifications. It operates under a government performance agreement with the Swiss State Secretariat for Education, Research and Innovation (SBFI). The website is professionally designed using Drupal 10, with good mobile optimization and accessibility features. It provides comprehensive information about its projects, partners, and news related to inclusive education. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent registration. Overall, the site is trustworthy, compliant with privacy regulations, and serves as a credible resource in the Swiss education sector.

F

Frontify AG

frontify.com

65

Frontify AG operates a sophisticated brand management SaaS platform designed to streamline digital asset management, brand guidelines, and collaboration for marketing teams and agencies globally. The company positions itself as a leader in brand consistency and efficiency, offering integrations and developer tools to enhance brand ecosystems. The website reflects a mature digital presence with modern technologies such as Webflow CMS, Google Tag Manager, Cookiebot for privacy compliance, and Vimeo for media delivery. Security posture is strong with HTTPS, content security policies (though currently report-only), and cookie consent mechanisms integrated. However, the absence of WHOIS registration details introduces a minor trust gap, though this is mitigated by the professional presentation and comprehensive privacy and security policies. Overall, Frontify demonstrates a robust business and technical infrastructure suitable for enterprise clients seeking brand management solutions.

The website raisenow.io is currently inaccessible due to an Access Denied error, indicating that the content is blocked or restricted. This prevents any direct analysis of the website's content, metadata, forms, or security features. The domain is registered to RaiseNow ltd, a Swiss company founded in 2019, with a legitimate and consistent WHOIS record. Hosting appears to be on Amazon AWS based on the nameservers. Due to the blocked content, no assessment of the website's technical infrastructure, security posture, or privacy compliance can be performed. The lack of accessible content also means no contact information, policies, or business descriptions are available for review.

W

WIGL

wigl.ch

60

WIGL operates as a specialized digital learning platform focused on personalized education and professional development, primarily targeting the hospitality and gastronomy sectors in Switzerland. The platform supports lifelong learning through interactive tools such as digital content, e-portfolios, quizzes, and instructional videos. The company positions itself as an innovative player in the education technology space, leveraging modern web technologies and a user-friendly interface to enhance learning experiences. Technically, the website is built on WordPress with Elementor and Yoast SEO, incorporating modern JavaScript libraries like Lottie and Swiper for animations and interactive elements. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, explicit security headers are not detected, and no formal security or incident response policies are published. Cookie consent is managed via CookieYes, indicating GDPR awareness. No vulnerability disclosure or security.txt files are present, suggesting an area for improvement. Overall, the website is professional, trustworthy, and well-aligned with its business goals. The domain registration details support legitimacy, and the site maintains a strong presence with testimonials and social media integration. Strategic recommendations include enhancing security headers, publishing security policies, and implementing a vulnerability disclosure mechanism to strengthen trust and compliance.

A

Art Deco Hotel Montana

hotel-montana.ch

60

Art Deco Hotel Montana is a boutique hospitality business located in Switzerland, offering hotel accommodation with scenic views of the lake, mountains, and Luzern. The website presents a professional and consistent brand image with good content quality and user experience, targeting tourists and travelers seeking a unique Art Deco hotel experience. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager, Google Analytics with IP anonymization, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and consent mechanisms in place, but lacks explicit security headers and published privacy or terms of service policies, which are important for compliance and trust. Overall, the website is accessible without WAF or blocking mechanisms, and WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims.