Switzerland security reports

Buchknacker is an online library platform operated by the SBS Schweizerische Bibliothek für Blinde, Seh- und Lesebehinderte, targeting children and youth with dyslexia, AD(H)S, and other reading impairments. It offers free access to audiobooks, e-books, and text-audio books, focusing on accessibility and educational support. The platform is positioned as a niche service within the education and non-profit sectors in Switzerland, providing specialized content and services for its audience. Technically, the website employs a moderate technology stack including Dojo Toolkit, jQuery, and Google Tag Manager, running on the Iguana CMS platform. The site is moderately optimized for performance and mobile use, with good accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts. The absence of a cookie consent mechanism despite using tracking scripts indicates partial privacy compliance. Overall, the security posture is adequate but could be improved with better transparency and controls. The website is trustworthy and professional, with consistent branding and clear business information. No adult or unsafe content is present, making it safe for its intended audience. The domain registration aligns well with the organization, supporting legitimacy. Strategic improvements in privacy compliance and security transparency would enhance the platform's trust and compliance standing.

C

CH Open

ch-open.ch

46

CH Open is a Swiss non-profit association dedicated to promoting open source software and open standards within Switzerland. Established in 1982, it has a strong market presence with a diverse membership base including premium, collective, individual, student, and honorary members. The organization actively engages its community through events such as business apéros, cafés, lunches, workshops, and conferences like DINAcon and Open Education Day. It also offers services like an open source video conferencing server and maintains the OSS Directory platform for news, jobs, and resources related to open source. Technically, the website is built on WordPress with modern frameworks such as Bootstrap 4 and uses performance optimizations like lazy loading and caching via WP Rocket. It employs Matomo analytics for privacy-conscious user tracking and integrates social media channels for broader community engagement. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers, a published security policy, incident response contacts, and a vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance statements. Overall, CH Open presents a trustworthy and professional online presence aligned with its mission. To enhance its security posture and compliance, it should implement cookie consent, publish detailed privacy and security policies, and provide clear incident response contacts.

P

Parlamentarische Gruppe Digitale Nachhaltigkeit

parldigi.ch

65

Parldigi is a Swiss parliamentary group dedicated to promoting digital sustainability and responsible digital transformation within the public sector. The organization advocates for digital sovereignty, open source adoption, and sustainable digital policies, targeting Swiss parliamentarians, government bodies, and related stakeholders. Their activities include policy advocacy, organizing hearings, publishing news, and educational MasterClass programs. The website is professionally designed using WordPress and integrates modern web technologies, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

F

flake GmbH

flake.ch

54

flake GmbH is a Swiss-based WordPress agency specializing in web design, development, hosting, security, SEO, and WooCommerce services. The company targets businesses and organizations seeking professional WordPress solutions, positioning itself as a niche provider with a focus on quality and customer support. The website reflects a professional and consistent brand image with comprehensive service descriptions and contact information. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, jQuery, Google Maps API, and Matomo analytics. The site demonstrates good SEO practices, mobile optimization, and moderate performance. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and some best practices such as honeypot protection on forms and privacy-focused analytics. Nonetheless, it lacks several important security headers and explicit cookie consent mechanisms, which are recommended for enhanced security and compliance. Overall, the website is trustworthy and professionally maintained, with no signs of malicious activity or suspicious content. Strategic improvements in security headers, privacy consent, and incident response transparency would further strengthen its security posture and compliance.

I

Inventaire

inventaire.ch

54

Inventaire is a communication agency based in Suisse romande, Switzerland, specializing in branding, visual identity, graphic design, website creation, motion design, video production, and social media management. The company targets businesses and organizations seeking professional communication and branding services within the regional market. The website is built on WordPress using the Divi theme, incorporating modern web technologies and marketing tools such as Facebook Pixel and LinkedIn Insight Tag. Cookie consent is managed via CookieYes, demonstrating some privacy compliance efforts. Security posture is solid with HTTPS enabled and standard security headers present, though explicit security policies and contact information are lacking. Overall, the website presents a professional image but would benefit from enhanced privacy and security disclosures to improve compliance and trust.

O

OCS

caisse-chomage.ch

51

OCS is a regional unemployment insurance fund operating in Switzerland, primarily serving individuals facing unemployment and companies requiring support with indemnities. The website presents a professional and consistent brand image with clear navigation and relevant content in French, targeting the Valais and Vaud regions. The business model focuses on providing unemployment insurance services without restrictions, positioning itself as a trusted regional government-related entity. Technically, the site uses legacy jQuery and standard web technologies with moderate performance and basic mobile optimization. Security posture is moderate with cookie consent implemented but lacking advanced security headers and modern library versions. No blocking or WAF mechanisms were detected, and WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the site is safe, trustworthy, and compliant with GDPR principles, though improvements in security and technical modernization are recommended.

S

SCIV - Syndicats chrétiens du Valais

scivlesyndicat.ch

46

SCIV - Syndicats chrétiens du Valais is a regional Christian trade union organization based in Switzerland's Valais region. The website primarily serves as a portal for membership contract submissions, targeting workers and professionals seeking union representation. It offers detailed membership forms collecting personal and professional data, with integrated digital signature capture and anti-bot protections via Google reCAPTCHA v3. The organization is linked to larger federations such as SYNA and Travail.Suisse, indicating established union affiliations. The website content is professional and relevant to its audience, with clear references to union statutes and regulations via linked PDFs. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and RSForm! Pro for form management, with standard libraries like jQuery and Bootstrap for UI. Google Analytics and Tag Manager are used for visitor tracking, but no explicit privacy or cookie policies are present, representing a compliance gap. Security posture is moderate with HTTPS enforced and reCAPTCHA integration, but lacks visible security headers and formal incident response or vulnerability disclosure policies. WHOIS data aligns well with the website's regional and organizational claims, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

M

MEDIPACK AG

medipack.ch

49

MEDIPACK AG is a Swiss-based medium-sized company specializing in comprehensive packaging solutions for the medical industry. Their offerings span from product development, cleanroom blister production, sealing technology, to packaging services and machinery tailored for medical applications. The company positions itself as a system supplier with a strong emphasis on quality, evidenced by ISO 13485:2016 certification and industry awards such as the Swiss Packaging Award 2025. The website is professionally designed, multilingual, and provides clear contact and product information targeting medical industry clients and partners. Technically, the website is built on the webEdition CMS platform, utilizing jQuery and custom plugins for interactive UI elements. It demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism offering granular user control. However, there is room for improvement in implementing additional security headers and publishing incident response or vulnerability disclosure information. Overall, the website reflects a mature digital presence with a solid security foundation and compliance with privacy regulations. The absence of social media links and analytics tools suggests a focus on direct B2B engagement rather than broad marketing. The domain registration data aligns well with the business claims, reinforcing trustworthiness. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, improving accessibility, and maintaining regular audits of third-party libraries to sustain security and compliance standards.

Z

Zürcher Arbeitsgemeinschaft Lehrpersonenweiterbildung

zal.ch

52

ZAL (Zürcher Arbeitsgemeinschaft Lehrpersonenweiterbildung) is a Swiss educational organization focused on providing continuing education and professional development courses for teachers, school assistants, school leadership, and childcare staff in the Canton of Zürich. The website offers a broad range of services including in-person and online courses, seminars, coaching, and administrative support for school-related training. The organization positions itself as a regional leader in teacher training with a strong emphasis on practical, affordable, and accessible learning opportunities. Technically, the website is built on WordPress with a modern tech stack including React, Backbone.js, and jQuery. It integrates several plugins for SEO (Yoast), consent management (Ownbit Consent Manager), social media feeds (Instagram via Spotlight), and email marketing (Mailchimp). The site is mobile-optimized, SEO-friendly, and employs HTTPS with strong security headers, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent management, and spam protection via Google reCAPTCHA. However, explicit security policies and incident response information are not published, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, ZAL's website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its target audience with clear contact information, comprehensive content, and transparent privacy practices. The domain registration data aligns well with the business claims, supporting its legitimacy and credibility.

E

ERNE AG Bauunternehmung

erne.ch

71

ERNE AG Bauunternehmung is a well-established Swiss construction company with over 110 years of experience, specializing in high-quality services across Hochbau, Tiefbau, Umbau, and general contracting. The company targets construction clients in Switzerland, including public and private sectors, and emphasizes innovation and sustainability. The website is built on TYPO3 CMS with a modern tech stack, optimized for mobile and SEO, and includes comprehensive privacy and cookie policies compliant with GDPR. Security posture is strong with HTTPS, security headers, and secure form handling. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy digital presence.

S

sasag Kabelkommunikation AG

sasag.ch

62

sasag Kabelkommunikation AG is a regional telecommunications provider based in Switzerland offering high-quality internet, mobile, TV, and telephony services tailored for both private and business customers. The company emphasizes bundled service offerings with competitive pricing and local customer support. Their market position is that of a trusted regional player with a focus on customer-centric solutions and modern technology adoption. The website reflects a mature digital presence with comprehensive service information and promotional offers.

M

Malix.Studio

malix.studio

57

Malix.Studio is a specialized media production company based in the Jura region of Switzerland, offering professional video production services including studio rental, live streaming, webinars, and virtual studio capabilities. Their business model focuses on providing high-quality, customizable video production environments tailored to the needs of SMEs in the Swiss market. The website demonstrates a solid digital presence with professional design and clear service offerings. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and performance optimization, though minor backend errors and lack of explicit privacy policies indicate areas for improvement. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit policies. Overall, the site is trustworthy and professional, with moderate risk due to minor technical and compliance gaps.

A

Artionet

eseances.ch

51

eSéances is a Swiss-based digital governance software solution developed by Artionet.Group, targeting public and private organizations requiring efficient session and meeting management. The platform offers a comprehensive suite of tools including agenda preparation, document consultation, decision tracking, and automated minutes generation, emphasizing security and collaboration. The website reflects a mature digital presence with integration of modern web technologies and marketing tools, supporting a medium-sized business with a strong foothold in the Swiss market. Security posture is solid with HTTPS and encryption practices, though lacks publicly accessible privacy and cookie policies, which are critical for compliance. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

A

Artionet

egov4.ch

58

egov4.ch is a Swiss-based digital governance solutions provider developed by Artionet, offering a comprehensive suite of e-government products tailored for public institutions and private enterprises. The company has a strong market position in Switzerland with over 1,500 clients and emphasizes secure, compliant, and paperless digital transformation. Their key services include digital forms, secure data sharing, digital signatures, meeting management, and virtual service desks, all hosted and developed in Switzerland to ensure data sovereignty and security. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and AutopilotHQ for marketing automation. The site is well-designed with good navigation and mobile optimization, though some accessibility features could be improved. Hosting appears to be Swiss-based, aligning with the company's data residency claims. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS and integrates SuisseID for legally valid digital signatures, indicating a strong security posture. However, the absence of explicit security headers and published security policies represents an area for improvement. Privacy compliance is limited due to the lack of visible privacy and cookie policies, which could pose regulatory risks. Overall, egov4.ch presents a professional and trustworthy digital presence with solid business credibility and technical implementation. Strategic enhancements in privacy compliance and security transparency would further strengthen their position and reduce potential risks.

D

Dunkel

dunkel.cc

51

Dunkel is a Swiss-based creative agency specializing in branding, web development, UI/UX design, and motion design. Founded in 2010 and located in Bern, the company serves a discerning clientele including government entities and corporate clients. Their business model focuses on delivering purpose-driven, user-friendly digital and communication solutions, positioning themselves as a niche provider with a strong emphasis on quality and creativity. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript with jQuery. It uses Matomo analytics configured to disable cookies, demonstrating a privacy-conscious approach. The site is mobile optimized and SEO friendly, though it lacks some advanced security headers. Performance is moderate, with room for optimization. Hosting details are not explicitly disclosed. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and public security policies suggests opportunities for strengthening the security posture. No incident response or vulnerability disclosure information is publicly available. Overall, Dunkel's website presents a trustworthy and professional front with strong business credibility and privacy compliance. The risk profile is low, but security enhancements and transparency improvements are recommended to further solidify trust and resilience.

B

Bürgenstock Resort Lake Lucerne

buergenstock.ch

51

Bürgenstock Resort Lake Lucerne is a prestigious luxury hospitality business offering high-end accommodation, dining, spa, and event services in Switzerland. The website reflects a mature digital presence with comprehensive content targeting affluent travelers and wellness seekers. The technical infrastructure leverages modern web technologies including Vue.js, multiple analytics platforms, and a robust cookie consent mechanism, indicating a well-managed digital environment. Security posture is solid with HTTPS, reCAPTCHA, and domain protections, though there is room for improvement in DNSSEC and security headers. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site projects professionalism and trustworthiness aligned with its luxury market position.

B

Baloise Group

baloise.ch

75

Baloise Group is a well-established Swiss insurance and financial services provider with a strong market position in Switzerland. The company offers a broad range of insurance products tailored for private clients, including car, travel, motorcycle, legal, and home contents insurance. The website reflects a professional and comprehensive digital presence, targeting private clients with clear navigation and relevant content. The business model focuses on providing insurance and banking solutions, supported by a large enterprise infrastructure and a history dating back to 1863. Technically, the website employs modern web technologies such as Web Components, Google Tag Manager for analytics, and Usercentrics for consent management, indicating a mature digital infrastructure. The site is optimized for mobile devices and accessibility, with good SEO practices and fast performance. Hosting details are not explicitly disclosed but appear stable and secure. From a security perspective, the website enforces HTTPS, implements key security headers, and manages user consent for cookies effectively. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact page suggests room for improvement in transparency and readiness. The domain WHOIS data aligns well with the business claims, reinforcing legitimacy and trustworthiness. Overall, Baloise's website demonstrates a high level of professionalism, security, and compliance, suitable for a large financial services enterprise. Strategic recommendations include publishing explicit security policies and vulnerability disclosure mechanisms to enhance trust and security posture further.

Z

ZHAW Zürcher Hochschule für Angewandte Wissenschaften

zhaw.ch

68

ZHAW Zürcher Hochschule für Angewandte Wissenschaften is a leading Swiss university of applied sciences offering education, research, continuing education, and services. The institution is well-established with a strong market position in Switzerland's education sector, providing bachelor and master programs, research projects, and professional development courses. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, responsive design, and comprehensive navigation tailored to students, researchers, and partners. Security posture is strong with HTTPS, security headers, and consent management implemented, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the institution's mission and audience.

S

Schweizerischer Verband für Weiterbildung SVEB

formazionecontinua.swiss

47

formazionecontinua.swiss is a Swiss-based educational platform focused on providing a comprehensive search engine for continuing education courses across various sectors including management, economics, IT, coaching, languages, health, and culture. Supported by the Schweizerischer Verband für Weiterbildung SVEB, it aggregates offerings from approximately 230 Swiss course providers, targeting adult learners and professionals seeking further education. The platform emphasizes ease of use with advanced filtering options and regional selections, positioning itself as a key national resource in the Swiss continuing education market. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and a proprietary CMS (InnoWAYtor by 3way.ch). The site is mobile-optimized, accessible, and uses HTTPS with good performance metrics. However, there is room for improvement in security headers and explicit incident response disclosures. Advertising and analytics are managed primarily through Google services, with basic privacy compliance mechanisms such as cookie consent banners in place. From a security perspective, the site demonstrates a solid baseline with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The lack of detailed security policies and incident response information suggests an opportunity to enhance trust and compliance further. WHOIS data is privacy protected, which is typical for Swiss domains, and the domain appears legitimate and well-maintained. Overall, formazionecontinua.swiss presents a trustworthy, professional, and functional platform with good business credibility and technical implementation. Strategic improvements in security headers, transparency, and vulnerability disclosure would further strengthen its security posture and compliance standing.

S

Schweizerischer Verband für Weiterbildung SVEB

formationcontinue.swiss

49

formationcontinue.swiss is a Swiss-based online platform aggregating continuing education courses from approximately 230 providers across Switzerland. Powered by the Schweizerischer Verband für Weiterbildung (SVEB) and the Fédération suisse pour la formation continue (FSEA), it offers users a comprehensive searchable database of courses in management, economics, IT, coaching, languages, health, and culture. The platform targets individuals seeking professional development or leisure learning opportunities within Switzerland. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, and the YAML CSS framework, with a CMS named InnoWAYtor by 3way.ch. The site is mobile-optimized, accessible, and uses HTTPS with cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. Security posture is solid but could be improved with additional headers and documented incident response processes. WHOIS data is privacy protected, typical for Swiss .swiss domains, and the domain appears legitimate and consistent with the business purpose. Overall, the platform is professional, trustworthy, and well-positioned in the Swiss continuing education market.

K

Kellerhals Carrard

kellerhals-carrard.ch

58

Kellerhals Carrard is a prominent Swiss law firm offering high-quality legal and industry-specific services across multiple Swiss cities and international desks. The firm emphasizes a unique business culture founded on collaboration, passion, and client-focused legal support. Their website reflects a strong market position with comprehensive content, multiple office locations, and active social media engagement on professional platforms such as LinkedIn and Twitter. Technically, the website is built using modern JavaScript frameworks (Vue.js) and employs Typekit fonts, delivering a good user experience with mobile optimization and clear navigation. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and explicit incident response contacts. Privacy compliance is mostly met with a comprehensive privacy policy, though cookie consent mechanisms are absent. Overall, the website is professional, trustworthy, and well-aligned with the firm's business identity.

C

CSFO

csfo.ch

48

CSFO is a Swiss public institution agency specializing in vocational training and professional, university, and career orientation services. It operates under the Swiss Conference of Cantonal Ministers of Education (CDIP) and is supported by the Swiss Confederation. The website provides comprehensive information and services targeted at education specialists and partners across Swiss cantons. The agency offers coordination of qualification procedures, information media, online platforms, and continuing education programs. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and is well-optimized for mobile and accessibility. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and well-aligned with its public service mission.

D

Der Bundesrat

admin.ch

66

The website www.admin.ch/gov/de/start.html is the official portal of the Swiss Federal Council (Der Bundesrat), providing authoritative information on government decisions, media conferences, legal documents, and federal departments. It serves a broad audience including citizens, media, and political stakeholders, positioning itself as a trusted source of Swiss federal government information. The site offers comprehensive content about government members, their roles, and legislative processes, supported by official branding and consistent updates. Technically, the website is built on Adobe Experience Manager (AEM) with a modern tech stack including jQuery and Matomo analytics. It employs HTTPS with strong SSL configuration and anti-clickjacking measures, ensuring secure user interactions. The site is mobile-optimized and accessible, with good SEO practices and clear navigation, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit published security policies, incident response contacts, and a cookie consent mechanism, which are areas for improvement to enhance compliance and user trust. Overall, the website is highly credible and trustworthy, reflecting its status as a government portal. It maintains a high standard of content quality and technical implementation, with minor gaps in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen its security posture and regulatory adherence.

S

Schweizerische Konferenz der kantonalen Erziehungsdirektoren EDK

edk.ch

58

The website www.edk.ch represents the Schweizerische Konferenz der kantonalen Erziehungsdirektoren (EDK), a Swiss governmental body responsible for national coordination in education and cultural policy. The site provides comprehensive information about the Swiss education system, policy updates, and resources for educators and the public. It holds a strong market position as the authoritative source for education coordination in Switzerland, targeting education professionals, policymakers, and citizens interested in education matters. The business model is non-profit and government-funded, focusing on policy coordination and information dissemination. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, styled with Tailwind CSS, and integrates Vimeo for video content and Matomo for analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Hosting appears to be Swiss-based, enhancing trust and compliance with local regulations. From a security perspective, the site enforces HTTPS, employs standard security headers, and avoids exposing sensitive data. However, it lacks a visible cookie consent mechanism and dedicated security or incident response policies, which are areas for improvement to enhance GDPR compliance and user trust. No vulnerabilities or suspicious activities were detected. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in privacy compliance and security transparency. Strategic recommendations include implementing a cookie consent banner, publishing security policies, and adding vulnerability disclosure information to strengthen the security posture and regulatory adherence.

S

SDBB (Schweizerisches Dienstleistungszentrum Berufsbildung)

panorama.ch

64

Panorama.ch is an official Swiss vocational education news platform operated by SDBB with support from cantonal and federal authorities. It provides comprehensive news, updates, and resources related to vocational training, higher education, labor market developments, and career counseling in Switzerland. The platform targets professionals, educators, students, and policymakers involved in the Swiss education system. The website is well-branded, consistent, and trusted due to its government backing and professional content. Technically, the site uses a proprietary CMS (PC3 by The Toolpark Corporation AG) with modern JavaScript libraries such as jQuery and GSAP. It employs Matomo for analytics, indicating a privacy-conscious approach. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit incident response information. Overall, the site is secure, professional, and compliant with privacy regulations, though it would benefit from implementing a cookie consent mechanism and publishing security policies. The domain registration aligns well with the website's claims, reinforcing its legitimacy. No adult or questionable content is present, making it safe for general audiences.

Berufsbildung.ch is the official Swiss portal dedicated to vocational education, providing comprehensive information and practical tools for various stakeholders including vocational trainers, apprentices, and educational institutions. Supported by the Swiss cantons and federal authorities, it holds a strong market position as a trusted resource in the education sector. The website offers key services such as downloadable documents, quality assessment tools, and guidance for vocational trainers, enhancing the vocational training ecosystem in Switzerland. Technically, the site leverages modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though some security headers could be explicitly documented. Privacy compliance is good with a clear privacy policy, though cookie consent mechanisms could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with its official educational mission.

S

SDBB | CSFO

berufsberatung.ch

69

The website www.berufsberatung.ch serves as the official Swiss information portal for career, study, and professional guidance. It provides comprehensive resources including job and apprenticeship searches, educational pathways, and career planning tools targeted at students, professionals, educators, and foreigners in Switzerland. The portal is well-positioned as a trusted national resource with multilingual support and extensive content coverage. Technically, the site employs modern JavaScript libraries and analytics tools, with a custom CMS backend. The site is mobile-optimized and accessible, offering a professional user experience. Security-wise, HTTPS is enforced and forms use anti-forgery tokens, but additional security headers and explicit privacy disclosures are recommended. Overall, the site demonstrates a strong business credibility and technical maturity with room for enhanced privacy compliance and security transparency.

T

Terminal8 GmbH

terminal8.ch

52

Terminal8 GmbH is a small, professional web design and development agency based in Bern, Switzerland, specializing in TYPO3 CMS-based responsive websites, branding, and print design. The company positions itself as a creative and experienced partner for businesses seeking distinctive digital and print presence. Their website reflects a high level of professionalism with comprehensive service descriptions and a strong focus on user experience and accessibility. Technically, the site leverages modern JavaScript libraries and frameworks, including TYPO3 CMS, jQuery, Plyr, and Mapbox GL JS, ensuring a responsive and engaging user interface. Privacy is respected through a detailed cookie consent mechanism and the use of Matomo analytics, which is privacy-friendly. Security posture is good with HTTPS enforced and CAPTCHA protection on forms, though formal security policies and vulnerability disclosures are not published. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

S

Swisscom AG

blue.ch

67

Swisscom AG operates a comprehensive and professional website offering blue TV subscriptions, streaming services, and telecommunications products primarily targeting residential customers in Switzerland. The company is a market leader in Swiss TV and telecommunications, providing a wide range of channels, sports, films, and series with additional streaming packages. The website reflects a mature digital infrastructure leveraging Adobe Experience Manager CMS, modern JavaScript frameworks, and advanced video streaming technologies. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Contact information is clear, supporting customer engagement. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity.

B

blue Entertainment Programm AG

bluewin.ch

63

bluewin.ch is a comprehensive Swiss news and entertainment portal operated by blue Entertainment Programm AG, a subsidiary of Swisscom AG. The website offers a wide range of content including national and international news, sports coverage, entertainment, weather updates, email services, and video content. It targets a general audience in Switzerland and maintains a strong market position as a leading media and telecommunications content provider. The business model relies on advertising revenue, subscription services, and integrated digital offerings. The website demonstrates consistent branding and high-quality content presentation.

S

Swisscom AG

swisscom.ch

71

Swisscom AG is the leading telecommunications provider in Switzerland, offering a comprehensive range of services including mobile, internet, and TV subscriptions targeted at residential customers. The company operates an enterprise-grade website with excellent content quality, clear navigation, and strong branding consistency. Their digital infrastructure leverages modern technologies such as Adobe Experience Manager, web components, and advanced tag management systems, reflecting a mature and well-maintained technical environment. Security posture is robust, with HTTPS enforced, modern security headers, and publicly available security policies and incident response contacts. Privacy compliance is strong, featuring comprehensive privacy and cookie policies with consent mechanisms aligned with GDPR requirements. Overall, Swisscom demonstrates high business credibility and trustworthiness, supported by consistent WHOIS data and domain legitimacy.

E

Excom Media AG

excommedia.ch

48

Excom Media AG is a Swiss-based company specializing in digital advertising solutions focused on retail, healthcare, and street-level advertising. The company targets businesses within these sectors, providing tailored digital advertising services to enhance visibility and engagement. The website presents a professional design with clear navigation and mobile optimization, reflecting a moderate level of digital maturity. The technical infrastructure includes the use of Google Tag Manager and jQuery 2.1.4, indicating some reliance on established but older technologies. Security posture is basic, with HTTPS enabled but lacking advanced security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices to improve trust and compliance.

A

Admeira AG

admeira.ch

64

Admeira AG is a Swiss media company specializing in TV advertising sales and marketing, representing major broadcasters such as SRG SSR and CANAL+. The company targets Swiss advertisers aiming to reach diverse audiences across all language regions with high-quality TV content including live sports and original programming. The website reflects a professional and consistent brand image with comprehensive service offerings and clear contact channels. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates Matomo analytics with privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

W

Weischer.Cinema Schweiz GmbH

weischer-cinema.ch

55

Weischer.Cinema Schweiz GmbH is a well-established owner-managed company specializing in cinema advertising services across Switzerland, boasting over 60 years of industry experience. The company offers a broad portfolio of advertising options including national and local cinema screens, DOOH cinema advertising, below the line advertising, spot creation, and spot delivery services. Their target audience primarily consists of advertisers and marketing professionals seeking impactful cinema advertising solutions. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for GDPR-compliant cookie management. It employs Google Tag Manager for analytics and tracking, and uses jQuery and Tiny Slider for interactive elements. The site is mobile optimized and demonstrates good SEO and accessibility practices, though hosting details are not explicitly identified. From a security perspective, the site enforces HTTPS with excellent SSL configuration and integrates cookie consent mechanisms. While explicit security headers like Content-Security-Policy are not detected, the site shows no exposed sensitive data or vulnerable libraries. There is no visible security policy or incident response information published, which could be improved. Overall, the security posture is strong with room for enhancement in formal security disclosures. The domain registration data is consistent with the business claims, showing no suspicious patterns and supporting the legitimacy of the website. The site is free from adult or questionable content, targeting a general audience with professional media services. Strategic recommendations include adding a security.txt file, publishing a security policy, and enhancing security headers to further strengthen trust and compliance.

T

TX Group

tx.group

70

TX Group is a large Swiss enterprise operating across multiple sectors including media, advertising, digital marketplaces, real estate, and social responsibility. The company positions itself as a multi-faceted organization offering innovative perspectives to customers, employees, and stakeholders. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. The technical infrastructure is based on TYPO3 CMS, enhanced with modern tracking and consent management tools such as Google Analytics and OneTrust. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some advanced security headers and explicit security policies are not publicly disclosed. WHOIS data is limited due to TLD restrictions and privacy policies but shows no suspicious indicators. Overall, the website and domain appear legitimate and professionally managed.

R

Ringier Advertising

ringier-advertising.ch

67

Ringier Advertising is a prominent Swiss advertising company operating under the parent company Ringier AG. The company specializes in providing diverse advertising solutions leveraging strong media brands and innovative technologies to support marketing campaigns. Their market position is strong within Switzerland's media and advertising sector, targeting advertisers and marketing professionals. The website reflects a mature digital infrastructure built on WordPress, integrating advanced marketing and analytics tools such as Google Analytics, Pardot, Hotjar, and LinkedIn Insight, indicating a high level of digital maturity. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting Ringier Advertising's credibility and business operations.

N

NZZone

nzzone.ch

54

NZZone is a Swiss media advertising platform specializing in premium brand advertising across print, digital, events, and sponsoring formats. The company targets advertisers seeking high-quality, targeted advertising opportunities within Switzerland. The website demonstrates a professional and consistent brand presence with multi-language support and a comprehensive offering of premium media brands. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, implementing security headers, and providing clearer contact and incident response information.

L

Livesystems AG

livesystems.ch

54

Livesystems AG is a prominent Swiss company specializing in digital out-of-home and online advertising, operating across multiple locations with a medium-sized workforce. The company benefits from being part of Swiss Post, enhancing its market credibility and reach. The website reflects a professional digital presence with multilingual support, modern design, and clear marketing messaging targeting advertisers in Switzerland. Technically, the site is built on WordPress with a robust tech stack including SEO and cookie compliance plugins, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure and compliance with GDPR, supporting its business credibility and trustworthiness.

G

Goldbach

goldbach.com

65

Goldbach is a well-established Swiss media and advertising company founded in 1998, offering a broad range of advertising solutions across TV, online, audio, and outdoor channels. The company leverages data-driven approaches and programmatic platforms to deliver targeted advertising campaigns. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and client success stories. Technically, the site uses modern JavaScript frameworks (Nuxt.js) and integrates third-party marketing and tracking tools such as Google Tag Manager and Adform. Security posture is good with HTTPS enforced and domain status protections, but lacks DNSSEC and explicit security headers. Privacy compliance is limited by the absence of visible privacy and cookie policies, though a cookie consent mechanism is present. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

A

APG|SGA

apgsga.ch

75

APG|SGA is a leading Swiss outdoor advertising company offering a comprehensive portfolio of analogue and digital out of home advertising spaces across Switzerland. Established in 1900, it holds a strong market position with over 150,000 advertising spaces and a broad target audience including advertisers, agencies, and property owners. The website reflects a mature digital infrastructure with modern technologies such as Django backend, Google Tag Manager, and responsive design, ensuring excellent user experience and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

M

Mediapulse AG

mediapulse.ch

58

Mediapulse AG is an independent Swiss media research organization specializing in the collection and provision of data related to radio, TV, and online media usage. The company positions itself as transparent, neutral, and independent, serving media industry professionals, broadcasters, advertisers, and researchers. Their product offerings include various data services such as TV Data, Radio Data, Online Audience Data, and specialized surveys. The website is built on WordPress with Bootstrap, offering a multilingual experience and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site reflects a professional and credible organization with good technical implementation and user experience.

H

Health Info Net AG (HIN)

hin.ch

67

Health Info Net AG (HIN) is a Swiss company specializing in secure communication services tailored for healthcare professionals. Established in 2003, it has positioned itself as the standard provider for secure email, identity management, electronic signatures, messaging, and document sharing within the Swiss healthcare sector. The company operates multiple offices in Switzerland and offers membership-based access to its trusted communication network, the HIN Community. The website reflects a professional and comprehensive digital presence with multi-language support and clear service offerings.

P

Promozione Salute Svizzera

promozionesalute.ch

48

Promozione Salute Svizzera is an official Swiss health promotion organization mandated by the Confederation to coordinate and evaluate health promotion and disease prevention efforts nationwide. The website serves as a comprehensive platform offering information on programs, projects, publications, and campaigns aimed at improving public health in Switzerland. It targets a broad audience including cantonal authorities, health organizations, and the general public. Technically, the site is built on Drupal 10 with modern analytics and cookie consent tools, providing a responsive and accessible user experience. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

P

Promotion Santé Suisse

promotionsante.ch

50

Promotion Santé Suisse is a Swiss national organization mandated by law to initiate, coordinate, and evaluate health promotion and disease prevention measures. The website reflects a mature digital presence with comprehensive content targeting health professionals, organizations, and the general public in Switzerland. The technical infrastructure is modern, leveraging Drupal 10 CMS, Matomo analytics, and Google Tag Manager, with privacy and cookie consent mechanisms in place. Security posture is strong with HTTPS and best practices observed, though explicit security policies and vulnerability disclosures are absent. Overall, the site is trustworthy, professional, and aligned with its public health mission.

U

Universität Bern

unibe.ch

68

Universität Bern is a well-established public university in Switzerland, founded in 1834, offering a broad range of academic programs and research opportunities. The website serves as a comprehensive portal for students, researchers, and staff, providing detailed information on studies, research, innovation, and lifelong learning. The institution holds a strong market position as a leading Swiss university with extensive academic and organizational resources. Technically, the website is built on the ZMS CMS platform, employs modern web standards, and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, includes essential security headers, and uses etracker for analytics with cookie consent, though explicit security policies and incident response information are not prominently published. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting the university's credibility and commitment to privacy.

E

Entrepreneurship Training

entrepreneurship-training.ch

45

Entrepreneurship Training is a consortium-led educational platform commissioned by Innosuisse, providing free entrepreneurship training modules (Module 1, 2, and 2+) targeted at aspiring entrepreneurs in the central region of Switzerland. The website is professionally designed using WordPress with modern plugins and themes, offering a good user experience and clear navigation. The technical infrastructure includes Google reCAPTCHA for form security and a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced, though some security headers could be improved. Contact information is transparent and linked to reputable academic institutions, enhancing trust. Overall, the website is a credible and well-maintained resource for entrepreneurship education.

S

sesamnet GmbH

sesamnet.ch

57

sesamnet GmbH is a Swiss-based web design and hosting agency specializing in TYPO3 CMS solutions, serving primarily the Bern and Freiburg regions. As a subsidiary of digifor GmbH, it offers a comprehensive suite of services including web design, hosting, digital printing, and IT solutions. The company targets small to medium-sized enterprises seeking tailored and professional web solutions. The website reflects a solid regional market position with clear branding and consistent messaging. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as Bootstrap, Font Awesome, and jQuery. It employs Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and demonstrates good SEO practices, though accessibility could be improved. Hosting is described as high-quality with modern colocation facilities, though specific hosting providers are not named. From a security perspective, the site uses HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and does not publish a security policy or incident response information. Cookie consent mechanisms are absent, which may pose GDPR compliance risks. Tracking tools are used moderately, with some privacy compliance gaps. Overall, the website is professional, trustworthy, and technically sound but would benefit from enhanced privacy compliance and security transparency. Strategic improvements in cookie consent, security policies, and accessibility would strengthen its security posture and regulatory adherence.

T

TUAG Triebwerk Unterhalt AG

tuag.ch

52

TUAG Triebwerk Unterhalt AG is a specialized helicopter engine maintenance and repair company based in Geneva, Switzerland. It operates as an official Safran Helicopter Engines approved center, servicing key engine models such as Arriel, Arrius, and Makila. The company is part of the Europavia Group, which provides a broader ecosystem of helicopter sales, maintenance, and spare parts services. TUAG's market position is solid within the European helicopter maintenance sector, serving clients in Switzerland, France, Belgium, and globally. The website reflects a professional business with clear service offerings and certifications, targeting helicopter operators and aviation maintenance providers. Technically, the website is built on Joomla CMS with common web technologies like jQuery and Bootstrap. It features a responsive design with moderate performance and basic SEO and accessibility features. The site uses HTTPS but lacks advanced security headers, which is a notable area for improvement. The contact mechanisms include multiple emails, phone numbers, and a contact form with a simple CAPTCHA, indicating basic data collection practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data but misses several security best practices such as security headers and robust CAPTCHA solutions. There is no visible privacy or cookie consent mechanism, which may impact GDPR compliance. The WHOIS data is consistent with the business claims, showing a legitimate and established domain registration. Overall, TUAG's website presents a trustworthy and professional image with room for enhancement in privacy compliance and security hardening. Strategic improvements in these areas would strengthen the company's digital trust and regulatory adherence.

S

Swiss Helicopter Maintenance AG

shm-ag.ch

50

Swiss Helicopter Maintenance AG is a specialized service provider in the helicopter maintenance sector, holding key certifications such as EASA Part-145 and CAMO approvals. The company operates multiple service centers in Switzerland and Liechtenstein, offering maintenance, avionics, continuing airworthiness management, and logistics services. Their market position is strong within the aviation maintenance niche, supported by authorized partnerships with major helicopter manufacturers and avionics dealers. The website reflects a professional and consistent brand image with clear service offerings targeted at helicopter operators and aviation clients. Technically, the website is built on Joomla CMS using the Astroid framework and SP Page Builder, incorporating modern web technologies such as jQuery and FontAwesome. It is mobile-optimized with good SEO practices and uses Matomo for analytics, indicating a moderate level of digital maturity. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the business claims, enhancing trustworthiness. Overall, the security posture is solid but could be improved by adding security headers and formal policies. The overall risk assessment is low, with the website presenting a trustworthy and professional front for its business operations. Strategic recommendations include enhancing security transparency, adding incident response contacts, and continuous monitoring of third-party components to maintain security and compliance.

I

Idea Creation GmbH

e-guma.ch

71

Idea Creation GmbH operates the e-guma platform, a comprehensive voucher and ticketing system targeted at businesses in Switzerland and surrounding regions. The company provides SaaS solutions enabling clients to sell, manage, and market vouchers, tickets, and related products through customizable online shops integrated directly into their websites. The platform supports both online and on-site sales with real-time redemption and administrative tools. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a well-established market position. Technical infrastructure is based on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though a dedicated security policy and incident response information are absent. Overall, the site demonstrates high business credibility and compliance with GDPR, supported by visible contact information and trust signals such as client testimonials and social media presence.