Switzerland security reports

S

Seitz Phototechnik AG

roundshot.com

66

Roundshot, operated by Seitz Phototechnik AG, is a Swiss-based company specializing in high-precision 360° panoramic cameras and webcam solutions. The company emphasizes quality manufacturing with CNC-milled aluminum parts and hand assembly, targeting professional and business customers requiring advanced imaging technology. Their product portfolio includes Livecam webcams, VR Drive automated stitching heads, and software for cross-media image distribution. The website reflects a niche market leader with a consistent brand and comprehensive product offerings. Technically, the site uses modern JavaScript libraries, a govis CMS, and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and published security policies. WHOIS data is unavailable, which slightly reduces trust but the professional content and contact information support legitimacy. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations.

F

Fliegerschule Birrfeld

birrfeld.ch

54

Fliegerschule Birrfeld AG operates the Flugplatz Birrfeld, the leading aviation and flight training center in the canton of Aargau, Switzerland. Established in 1937, it serves as a hub for pilots, flight students, and aviation enthusiasts offering motor and glider flight training, maintenance services, and recreational flights. The website reflects a mature business with a strong local market position and a comprehensive range of aviation-related services. Technically, the site is built on WordPress with modern plugins and SEO optimizations, providing a good user experience across devices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is trustworthy, professional, and well-aligned with its business objectives.

E

Europavia (Suisse) SA

europavia.ch

50

Europavia (Suisse) SA is a Swiss-based company serving as the official representative for Airbus Helicopters in Switzerland and Liechtenstein. The company specializes in helicopter sales, maintenance services, and customer support, targeting helicopter operators and buyers within its regional market. The website reflects a professional and consistent brand image, emphasizing its partnership with Airbus and related service providers. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and integrates Google Analytics for visitor tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance statements. Overall, the website is trustworthy and professionally maintained, with clear contact information and social media presence.

C

Centaurium Aviation Ltd.

centaurium-aviation.com

48

Centaurium Aviation Ltd. is a Swiss-based company specializing in helicopter sales and brokerage services, acting as an official sales agent for Bell Helicopter in Switzerland and Guimbal Cabri G2 internationally. The company targets aviation professionals and helicopter buyers and sellers, providing expert assistance throughout the purchase and sales process. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and reCAPTCHA usage, though lacking some security headers and cookie consent mechanisms. The domain registration is consistent with the business claims, showing no suspicious patterns and a legitimate presence since 2019.

A

Air Travel Assist GmbH

airtravel.ch

37

Air Travel Assist GmbH operates a specialized travel service website focused on aviation-related travel experiences such as flight shows worldwide and tailored travel packages. The company targets aviation enthusiasts and travelers interested in niche aviation events, offering services including flight show trips, hotel bookings, and airport services at Zurich Airport. The website is built on TYPO3 CMS and uses Google Tag Manager for analytics, indicating a moderate level of technical maturity. The site is mobile optimized with a clear navigation structure and professional design, though accessibility and SEO could be improved. Security posture is moderate with HTTPS implied but no visible security headers or published security policies. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website presents a professional image but would benefit from enhanced compliance and security measures.

S

Swiss Red Cross

redcross.ch

67

The Swiss Red Cross is a well-established non-profit humanitarian organization dedicated to improving the lives of disadvantaged and vulnerable people in Switzerland and globally. The website reflects its mission with clear messaging, multilingual support, and strong calls to action for donations and volunteering. The organization holds recognized certifications such as ZEWO, reinforcing its credibility and trustworthiness. Technically, the website is built on modern frameworks like Next.js and React, with integration of analytics and consent management tools such as Google Tag Manager and Usercentrics. The site demonstrates excellent performance, mobile optimization, and accessibility features, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS, employs standard security headers, and manages cookie consent effectively. However, it lacks a dedicated security policy or incident response page and does not provide a vulnerability disclosure program, which are areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic enhancements in security transparency and incident response readiness would further strengthen its security posture.

G

Gesundheitsförderung Schweiz

gesundheitsfoerderung.ch

52

Gesundheitsförderung Schweiz is a Swiss non-profit organization mandated by law to initiate, coordinate, and evaluate health promotion and disease prevention measures. The organization supports various actors in the health promotion and prevention sector to encourage healthy behaviors and create health-promoting environments across Switzerland. Their website reflects a professional and comprehensive digital presence, leveraging Drupal 10 CMS, with multilingual support and a strong focus on user experience and accessibility. The site includes extensive resources, project funding information, campaigns, and an online shop for printed brochures. Technically, the site uses modern analytics tools such as Matomo and Google Analytics, combined with a GDPR-compliant cookie consent mechanism powered by CookieYes. Security posture is solid with HTTPS enforced and bot protection cookies in use, though some security headers could be explicitly added for enhanced protection. Overall, the website is trustworthy, well-maintained, and aligned with the organization's mission.

The website represents the Schweizerischer Fachverband für gesundheitsbezogene Soziale Arbeit SAGES, a Swiss professional association focused on social work within healthcare and public health sectors. It serves over 1300 members and 150 institutions, providing advocacy, professional development, and networking opportunities. The organization is well-established nationally with a clear mission and active event calendar. Technically, the site is built on WordPress using the Avada theme and several popular plugins including Contact Form 7 and WPML for multilingual support. It employs Google Analytics and Google Tag Manager for tracking and uses Google reCAPTCHA v3 for form security. The site is mobile-optimized and has good SEO practices but lacks some accessibility features. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but no visible security headers or published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but should improve privacy compliance and security best practices to reduce risk and enhance user trust.

D

diff

diff.ch

60

diff.ch is a Swiss-based branding and web agency located in Bern, specializing in creating services in branding and web solutions. The website presents a professional image with clear descriptions of their offerings and a focus on delivering communicative solutions that add value and enjoyment. The target audience appears to be businesses and organizations seeking branding and web development services within Switzerland. The business model is service-oriented, focusing on client projects in branding and web solutions. The company positions itself as a regional player with a consistent brand presence and a small-sized agency profile.

C

Careum

careum.ch

73

Careum is a Swiss healthcare organization dedicated to advancing the health sector through education, training, and consulting services. The website reflects a professional and consistent brand presence targeting healthcare professionals and organizations. The technical infrastructure leverages modern JavaScript frameworks such as Vue.js and includes cookie consent mechanisms, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and published security policies. Privacy compliance is limited due to the absence of a clear privacy policy and terms of service. Overall, the website is trustworthy and functional but would benefit from enhanced privacy and security documentation to improve compliance and user trust.

I

Innosuisse

innosuisse.ch

75

Innosuisse is the Swiss Innovation Agency dedicated to supporting science-based innovation for the benefit of the economy and society. As a government-backed entity, it provides funding, coaching, and networking services primarily targeting startups, SMEs, and research institutions in Switzerland. The website reflects a professional and consistent brand image aligned with its government affiliation. Technically, the site employs modern frontend technologies such as Nuxt.js and Tailwind CSS, offering good mobile responsiveness and user experience. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are important for compliance and security transparency. The domain is a legitimate Swiss government domain with consistent WHOIS data, indicating high trustworthiness. Overall, the site is credible and functional but could improve its security posture and privacy compliance to enhance user trust and regulatory adherence.

P

polsan AG

polsan.ch

50

polsan AG is a Swiss political and communication agency specializing in services for non-profit organizations and associations. The company emphasizes ethical values and sustainable client relationships, positioning itself as a niche provider with a strong focus on political consulting, communication, and association management. The website is professionally designed, bilingual (German and French), and targets non-profit sector clients primarily within Switzerland. The business model revolves around providing expert communication and political advisory services to organizations that align with their values. Technically, the website employs modern tracking and widget technologies such as Google Analytics and Elfsight social media integrations, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and email obfuscation implemented, though additional security headers and explicit security policies are absent. Privacy compliance is addressed with clear privacy and cookie policies, including a consent mechanism, aligning with GDPR requirements. Overall, the website reflects a credible and trustworthy business presence with clear contact information and active social media engagement.

INTERPRET is a Swiss non-profit organization specializing in intercultural interpreting and mediation services. It provides certification, training, and organizes annual conferences to support communication in multilingual and intercultural contexts. The website is professionally designed, multilingual, and targets professionals and institutions requiring interpreting services and qualifications. Technically, the site uses a proprietary CMS (fuman), modern JavaScript, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and a cookie consent mechanism. Overall, the site is trustworthy and well-maintained, though improvements in privacy compliance and security policies are recommended.

The website akkreditierungsrat.ch is currently inaccessible, returning a 503 Service Temporarily Unavailable error indicating maintenance or capacity issues. Due to the lack of accessible content, no meaningful business, technical, or security information could be extracted or analyzed. The absence of metadata, contact details, policies, or scripts prevents any assessment of the site's digital maturity or compliance posture. Consequently, the overall risk assessment is limited by the unavailability of data, and no definitive conclusions about the organization's security or business operations can be drawn at this time.

W

Werbekompass

werbekompass.ch

51

Werbekompass is a Swiss-focused media and advertising information platform providing comprehensive data, statistics, glossaries, publications, and news about the Swiss advertising market. Supported by a network of reputable partners and associations, it serves marketing professionals and stakeholders seeking deep insights into the market. The website is built on WordPress with modern SEO and tracking technologies, including Google Tag Manager and reCAPTCHA, ensuring a professional and secure user experience. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with clear cookie consent and a comprehensive privacy policy. Overall, Werbekompass presents a trustworthy and authoritative resource in its niche.

A

Artionet.Group

artionet.group

66

Artionet.Group is a Swiss-based digital transformation company established in 2001, offering agile methodology-driven services combining strategy, design, and technology. The company operates multiple brands targeting diverse sectors including SMEs, public administrations, large groups, associations, and sports events. Their services range from custom website and e-commerce development to digital governance and video production. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information. Technically, the site uses modern web technologies and a proprietary CMS (IceCube2.Net), hosted on a reliable infrastructure with HTTPS enforced. Security posture is good but could be improved by adding security headers and updating analytics tools. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms pages detected. WHOIS data is unavailable, limiting domain trust verification, but the website content and branding indicate a legitimate and established business.

C

CO-OPERAID

co-operaid.ch

55

CO-OPERAID is a Swiss non-profit humanitarian organization dedicated since 1981 to providing educational opportunities for children and youth in underprivileged regions of Africa and Asia. The organization focuses on primary and vocational education projects in countries including Uganda, Kenya, Bangladesh, Cambodia, and Laos. Their business model relies on donations, sponsorships, and partnerships, supported by a strong reputation evidenced by ZEWO certification and transparent communication. The website is professionally designed, mobile-optimized, and provides clear navigation and calls to action for donors and supporters. Technically, the website is built on Drupal 10 with modern web technologies and demonstrates good performance and accessibility standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, though some security headers could be improved. Privacy compliance is good with a comprehensive privacy policy and cookie policy present, but lacks an active cookie consent mechanism. Contact information is clearly provided, though no direct contact email was found in the HTML content. Overall, the website and organization present a trustworthy and credible profile with a high level of professionalism and transparency. There are no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, implementing a cookie consent banner, and publishing explicit security and incident response policies to further strengthen trust and compliance.

Bayer's Switzerland website presents a professional corporate presence for its operations in the Swiss market, covering healthcare, consumer care, and agriculture sectors. The site is well-structured, multilingual, and uses modern web technologies including Drupal 11 and OneTrust for cookie consent management. The content is targeted at a broad audience including consumers, business partners, investors, and job seekers. The website demonstrates a strong brand consistency aligned with Bayer's global identity. Technically, the site is well-implemented with good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and security scripts in place, though explicit security headers could be enhanced. Privacy compliance is partially addressed via cookie consent but lacks a clearly linked privacy policy and terms of service. WHOIS data is unavailable, which slightly reduces trust but is not uncommon for large corporations using privacy services. Overall, the site is trustworthy, professional, and safe for general audiences.

S

Schweizerisches Arbeiterhilfswerk SAH

sos-svizzera.ch

49

The Schweizerisches Arbeiterhilfswerk SAH is a Swiss non-profit organization dedicated to social and vocational integration, education, and counseling services across Switzerland. It operates through a network of 10 regional associations active in 18 cantons and 37 cities, coordinated by a national secretariat. The website reflects a mature digital presence with multilingual support and a professional design, targeting individuals seeking social support and integration services. Technically, the site is built on WordPress with modern plugins and frameworks, including WPML for multilingual content and Alpine.js for interactivity. Security posture is solid with HTTPS and consent management for cookies, though explicit security headers and policies are lacking. Privacy compliance is partial, with cookie consent implemented but no visible privacy policy or terms of service on the homepage. Overall, the domain registration data aligns well with the organization's claims, indicating legitimacy and trustworthiness.

S

Schweizerisches Arbeiterhilfswerk SAH

oseo-suisse.ch

49

SAH Schweiz is a Swiss non-profit organization dedicated to social and professional integration through education, counseling, and employment services. It operates a network of 10 regional associations across 18 cantons with approximately 850 employees, positioning itself as a key player in the Swiss social sector. The website is multilingual, professionally designed, and provides comprehensive information about its services and initiatives.

O

OWNBIT GmbH

ownbit.agency

55

OWNBIT GmbH is a Swiss web agency specializing in creating custom websites and web applications primarily for Swiss small and medium-sized enterprises (KMU). The company emphasizes user-centered digital solutions and has a strong market presence with over 12 years of experience and more than 200 clients. Their key services include bespoke website development, WordPress solutions, and client-specific web portals. The website is professionally designed using modern technologies such as Vue.js and Gridsome, ensuring excellent performance, mobile optimization, and user experience. Security-wise, the site employs HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information. WHOIS data is privacy-protected, which is typical for small agencies, and no suspicious patterns were detected. Overall, OWNBIT demonstrates a mature digital presence with strong business credibility and trust indicators.

P

PH Zürich

phzh.ch

67

PH Zürich is a well-established educational institution in Switzerland focused on teacher education, continuing education, research, and educational services. The website reflects a professional and comprehensive digital presence targeting students, educators, and researchers. The institution maintains a strong market position within the Swiss education sector, supported by accreditations and a broad range of educational offerings. Technically, the website employs modern technologies including Blazor, Matomo analytics, and Monsido for accessibility and heatmaps, hosted on a secure HTTPS platform with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements can be made in cookie consent and security policy transparency. Overall, the website is trustworthy, professional, and compliant with GDPR, though it lacks explicit cookie consent mechanisms and published security policies. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing incident response information to further strengthen compliance and trust.

S

Schweizerischer Verband für Weiterbildung SVEB

weiterbildung.swiss

48

weiterbildung.swiss is a Swiss online course portal operated in association with the Schweizerischer Verband für Weiterbildung SVEB, providing a comprehensive database of continuing education courses across Switzerland. The platform targets adult learners and professionals seeking courses in various fields such as management, IT, languages, and health. It aggregates offerings from approximately 230 course providers, facilitating course search and comparison with filters for region, price, and certifications. Technically, the website uses a custom CMS (InnoWAYtor by 3way.ch) with a modern tech stack including jQuery, Google Tag Manager, and responsive design frameworks, delivering a good user experience with mobile optimization and accessibility considerations. Security posture is moderate with HTTPS implied but lacking explicit security headers; cookie consent and privacy policies are implemented aligning with GDPR requirements. WHOIS data is privacy protected as per Swiss Registry policies, consistent with the domain's legitimate educational purpose. Overall, the site demonstrates a professional and trustworthy presence in the Swiss education sector.

I

Infomaniak Network SA

infomaniak.com

78

Infomaniak Network SA is a well-established Swiss cloud service provider specializing in sovereign cloud hosting, domain registration, and collaborative tools. Founded in 1994, the company positions itself as a leader in European independent cloud services, emphasizing data sovereignty and confidentiality. Their target audience primarily includes businesses and professionals seeking secure and compliant cloud solutions. The website reflects a mature business model with a strong market presence in the technology sector, particularly within Switzerland and Europe. Technically, the website is built using modern frameworks such as Gatsby and React, ensuring fast performance, mobile optimization, and good accessibility. Security is robust, with HTTPS enforced, comprehensive security headers, and ISO 27001 certification, indicating a strong commitment to information security and privacy. Privacy policies and GDPR compliance are clearly articulated, with mechanisms for cookie consent and data protection officer contact information readily available. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable platform for its users.

A

Artionet Web Agency

artionet.com

61

Artionet Web Agency is a Swiss-based digital agency specializing in comprehensive web solutions including site creation, e-commerce, content management, and digital marketing. Established in 2001, it serves a broad clientele with over 1,500 projects completed, positioning itself as a trusted regional player in the technology sector. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site uses a modern CMS (IceCube2.Net), integrates Google Analytics and Tag Manager for tracking, and employs responsive design techniques for mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and a formal security policy are absent. Privacy compliance is addressed with a GDPR-related privacy policy and cookie banner. Contact information is clearly presented, enhancing business credibility. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security best practices and privacy transparency.

S

Sichtbar Online Marketing AG

sichtbar.ag

55

Sichtbar Online Marketing AG is a Swiss-based digital marketing agency specializing in website development, SEO, and SEA services. The company targets businesses seeking to improve their online visibility and lead generation, primarily in German-speaking markets. The website demonstrates a strong market position supported by extensive customer reviews and a comprehensive service offering. Technically, the site is built on WordPress with modern plugins and optimization tools, ensuring fast performance and excellent mobile responsiveness. Security posture is robust with HTTPS, security headers, and privacy compliance mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website reflects a professional and trustworthy digital presence with room for enhanced transparency in security governance.

B

Bergpunkt

bergpunkt.ch

66

Bergpunkt is a Swiss-based company specializing in mountain sports education and guided tours, including mountaineering, climbing, ski touring, and snowshoeing. The website presents a professional and well-structured digital presence targeting outdoor enthusiasts interested in mountain activities. The technical infrastructure leverages modern web technologies such as Vue.js and Nuxt.js, with integrations for maps (Leaflet), rich text editing (TinyMCE), and anti-bot protection (Google reCAPTCHA). While the site is well-designed and mobile-optimized, it lacks some critical compliance elements such as a privacy policy and terms of service pages. Security posture is generally good with HTTPS and reCAPTCHA, but the absence of security headers and incident response information indicates room for improvement. Overall, the website is legitimate and trustworthy but would benefit from enhanced compliance and security transparency.

A

AB3 Creative Collective GmbH

ab3.ch

62

AB3 Creative Collective GmbH is a Swiss-based marketing and digital transformation agency founded in 2019, specializing in branding, e-commerce, SEO, marketing automation, and digital visibility. Positioned as a creative collective, AB3 serves a diverse clientele including SMEs, e-commerce brands, cultural projects, and service providers primarily in Switzerland but also internationally. The company leverages partnerships with Shopify and Webflow and employs a modern technology stack to deliver tailored digital solutions. Technically, the website is built on Webflow CMS, hosted on a CDN with fast performance and excellent mobile optimization. It integrates multiple modern JavaScript libraries and marketing tools such as Google Analytics, Google Tag Manager, LinkedIn Insight Tag, and cookie consent mechanisms, reflecting a mature digital infrastructure. The site demonstrates good SEO practices and accessibility features. From a security perspective, the site uses HTTPS with a solid SSL configuration and implements cookie consent for GDPR compliance. However, explicit security headers and a public security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data, which aligns well with the company's Swiss registration and business claims. Overall, AB3 presents a professional, trustworthy, and technically sound online presence with strong business credibility and compliance posture. Strategic enhancements in security transparency and incident response readiness would further strengthen their security posture and client trust.

F

Friendly

friendly.ch

63

Friendly is a Swiss software company specializing in privacy-focused web analytics and marketing automation solutions. Their flagship products, Friendly Analytics and Friendly Automate, provide businesses with tools to optimize website performance and automate marketing workflows while ensuring compliance with Swiss data protection laws (nFADP) and the EU GDPR. The company positions itself as a Swiss market leader emphasizing data sovereignty, transparency, and security certifications such as ISO 27001 and ISO 9001. Their open startup approach further enhances trust by publicly sharing financial and operational data. Technically, the website is built on WordPress with modern SEO and analytics integrations, including Matomo and Mautic, reflecting a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices. Hosting and data storage are Swiss-based, aligning with their privacy commitments. Security posture is strong with HTTPS enforced, certified standards, and privacy-conscious analytics configurations. However, the absence of a visible cookie consent mechanism and lack of published incident response or vulnerability disclosure policies represent areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Friendly demonstrates a high level of business credibility, technical maturity, and privacy compliance, making it a trustworthy provider in the privacy-centric analytics and marketing automation market. Strategic recommendations include enhancing cookie consent transparency, publishing security incident contacts, and adding security headers to further harden the website.

M

MD Systems GmbH

digital-storytelling.ch

62

MD Systems GmbH operates the website digital-storytelling.ch, promoting Primer, a Drupal 10-based content management system tailored for organizations, products, and campaigns. The company positions itself as a provider of cost-effective, easy-to-use CMS solutions with a focus on online marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including a contact form, email, phone, and physical address in Switzerland. The presence of partner logos and client references such as Paul Scherrer Institut and UNICEF enhances credibility. Technically, the site is built on Drupal 10, leveraging modern web technologies including JavaScript and CSS. It employs cookie compliance mechanisms with opt-in consent and integrates Google Analytics for user tracking. Security posture is solid with HTTPS enforced and anti-bot protections on forms, though it lacks explicit security headers and published security policies. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital infrastructure suitable for its business goals. The domain registration data aligns well with the business identity, supporting legitimacy. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy. However, the absence of terms of service and incident response information suggests areas for improvement. The risk profile is low with no critical security issues found. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

C

CIPA IGAB CIFC

cipa-igab.ch

44

CIPA IGAB CIFC is a Swiss non-profit community focused on supporting caregivers (Proches aidants). The website serves as an informational platform with content primarily in French, targeting individuals involved in caregiving. The site uses WordPress with the Divi theme, indicating a moderate level of digital maturity but lacks advanced technical or security features. The absence of privacy, cookie, and terms of service policies suggests limited compliance with data protection regulations. Security posture is minimal, with no evident security headers or incident response information. Overall, the site is accessible and safe but would benefit from enhanced security and compliance measures.

B

Brücke Le Pont

bruecke-lepont.ch

51

Brücke Le Pont is a Swiss non-profit organization dedicated to promoting fair work and improving labor and living conditions for disadvantaged populations in West Africa and Latin America. The organization operates through its flagship program 'Arbeit in Würde' and relies on donations, volunteer engagement, and partnerships to achieve its mission. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. It effectively communicates its mission, projects, and opportunities for involvement to its target audience of donors, volunteers, and supporters. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for interactive elements. It is mobile-optimized and includes SEO best practices such as structured data (JSON-LD) and meta tags. Performance is moderate with room for improvement in accessibility features. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the website demonstrates a high level of professionalism and trustworthiness, supported by certifications like ZEWO and transparent contact information. No critical security vulnerabilities or suspicious content were detected. Strategic recommendations include publishing a formal security policy, adding incident response information, and enhancing accessibility and security headers to further strengthen the security posture.

V

Verein ARC, Bildungsinstitut für Arbeitnehmende

formation-arc.ch

63

Verein ARC is a Swiss non-profit educational institute focused on providing continuing education and training for employees, particularly those affiliated with labor unions such as Travail.Suisse, Syna, transfair, SCIV, and swissPersona. The organization operates under the umbrella of Travail.Suisse and offers courses aimed at enhancing skills in customer handling, member engagement, and organizational effectiveness. The website reflects a professional and consistent brand identity with clear messaging targeted at employees and union members in Switzerland. Technically, the website is built on Drupal 10 with Bootstrap and FontAwesome, ensuring a modern and responsive user experience. The site is well-optimized for mobile devices and accessibility, with good SEO practices and social media integration. Performance is moderate, with no significant technical debt or errors observed. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and a published incident response or vulnerability disclosure policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's organizational claims, indicating legitimacy and transparency. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

A

Associazioni Cristiane Lavoratori Internazionali SVIZZERA

acli.ch

57

ACLI.CH is a Swiss non-profit association dedicated to supporting Christian international workers through social, cultural, and legal services. The website presents a well-structured platform with clear navigation and relevant content focused on community engagement, events, and patronage services. The organization maintains a consistent brand presence and targets a niche audience within Switzerland. Technically, the site leverages WordPress with Elementor and The7 theme, ensuring a modern and responsive user experience. Security measures include HTTPS enforcement, cookie consent mechanisms, and standard security headers, although explicit security policies and incident response information are absent. Overall, the website demonstrates a solid digital maturity suitable for its non-profit mission, with room for enhanced transparency in security and contact information.

A

Angestellte Drogisten Schweiz

drogisten.org

45

Angestellte Drogisten Schweiz is a Swiss employee association representing the interests of employees in the drugstore sector. The organization provides services such as legal advice, health insurance, and legal protection insurance. The website is professionally designed using WordPress and Elementor, with content primarily in German and a French alternate version. The business model focuses on membership and employee representation within a niche retail sector in Switzerland. The domain is well-established since 2010 and hosted by hosttech.ch, indicating a stable technical infrastructure. Security posture is basic with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. No direct contact information or incident response policies are published on the homepage, which may limit user trust and compliance. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

A

AV Angestellte ABB

avabb.ch

52

AV Angestellte ABB operates as an employee association representing the workforce of ABB Switzerland, focusing on member support and representation within the energy sector. The website serves as an informational portal primarily in German, targeting ABB employees in Switzerland. Technically, the site is built on WordPress using the Divi theme, incorporating modern web technologies and SEO best practices. Security posture is solid with HTTPS enforcement and appropriate security headers, though there is room for improvement in privacy compliance and transparency. No blocking or WAF mechanisms hinder access, allowing full content visibility. Overall, the site is professional and trustworthy but would benefit from adding explicit privacy and terms of service policies and clearer contact information.

F

fh-ch

fh-ch.ch

49

fh-ch is a Swiss non-profit association representing educators and researchers at Swiss universities of applied sciences. It acts as a national umbrella organization advocating for the rights, working conditions, and educational quality for its members. The website is professionally designed using WordPress, with multilingual support and standard web technologies. While the site is accessible and well-structured, it lacks explicit privacy, cookie, and security policies, which are important for compliance and trust. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosures. Overall, the organization appears legitimate and trustworthy with a clear mission and target audience.

V

Verband der Personalvertretungen der Schweizerischen Elektrizitätswirtschaft

vpe.ch

55

The Verband der Personalvertretungen der Schweizerischen Elektrizitätswirtschaft (VPE) is the largest employee organization within the Swiss electricity sector, representing over 12,000 employees. The website serves as a portal for members and prospective members, offering legal advice, legal protection, training courses, and various member benefits. The site is primarily in German with French language support, targeting employees in the electricity industry in Switzerland. The business model revolves around membership subscriptions and providing services to these members. Technically, the website uses a combination of jQuery, Google Analytics, Google Tag Manager, and Adobe Typekit fonts. The site appears to be custom-built or uses a proprietary CMS, with moderate performance and good mobile optimization. The site includes multiple forms for member login, password reset, and newsletter subscription, indicating active user engagement and data collection. From a security perspective, the site uses HTTPS and secure form submission methods but lacks visible security headers such as CSP or HSTS. There is no visible privacy or cookie policy, which is a compliance gap. Tracking via Google Analytics is present without an explicit consent mechanism, which may pose privacy compliance risks. No social media or incident response contacts are provided. Overall, the website is professional and trustworthy with good business credibility but requires improvements in privacy compliance and security hardening to meet modern standards fully.

T

transfair

transfair.ch

62

transfair.ch is the official website of a Swiss public service union dedicated to advocating for fair wages and modern working conditions for employees in the public sector. The website is professionally designed with a clear focus on its target audience of public service workers in Switzerland. It employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers present, although explicit security policies and incident response contacts are not publicly visible. The website complies with GDPR requirements, offering comprehensive cookie consent mechanisms and privacy information. Overall, the site presents a trustworthy and professional image consistent with its business mission.

S

SCIV - Syndicats chrétiens du Valais

sciv.ch

55

SCIV is a prominent trade union representing workers in the Valais francophone and Chablais regions of Switzerland. The organization provides a broad range of services including legal support, training, insurance, and advocacy for workers across all economic sectors. The website reflects a well-established regional union with a clear mission to support and represent its members. Technically, the site uses a custom CMS with legacy JavaScript libraries such as jQuery 1.6.4 and includes standard web technologies like Fancybox for UI elements. The site is served over HTTPS with cookie consent mechanisms in place, reflecting a good level of privacy compliance. However, there is room for improvement in security headers and updating legacy libraries. No direct contact emails or phone numbers are published; contact is facilitated via forms. Social media presence is active on Facebook and Instagram, and a newsletter is available via Substack. Overall, the site is professional, trustworthy, and safe for general audiences.

H

Hotel & Gastro Union

hotelgastrounion.ch

64

Hotel & Gastro Union (HGU) is the largest Swiss professional organization representing the hospitality and gastronomy sectors, including bakery and confectionery professions. Founded in 1886, it provides membership services such as networking, education, legal advice, and industry representation. The website reflects a mature organization with a clear market position and a comprehensive service offering tailored to professionals in the Swiss hospitality industry. The target audience includes hospitality workers, employers, and trainees within Switzerland. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, TikTok Pixel, and Google Tag Manager, with appropriate consent mechanisms in place. The site is mobile-optimized and offers good SEO and accessibility features, though some accessibility improvements could be made. Security posture is strong with HTTPS enforced, security headers present, and use of reCAPTCHA for form protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-aligned with the organization's business goals.

S

Syna

syna.ch

57

Syna is a well-established Swiss trade union dedicated to advocating for fair working conditions and balancing work and leisure for employees across various sectors. The website serves as a platform for membership engagement, legal advice, campaigns, and regional contact points. It targets employees in Switzerland and promotes petitions and initiatives relevant to labor rights. Technically, the site is built on Joomla CMS with modern UIkit framework and uses popular analytics and marketing tools such as Matomo, Facebook Pixel, and Google Tag Manager. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security headers and published security policies. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the site is professional and trustworthy but could improve privacy compliance and contact transparency.

M

Mamagenda

mamagenda.ch

50

Mamagenda.ch is a Swiss-based informational platform dedicated to supporting employers, employees, and future parents in managing pregnancy and maternity in the workplace. The website is supported by Swiss government entities and non-profit organizations, providing legal information, guidance, and practical tools to its target audience. It operates as a free service funded by donations, emphasizing accessibility and multilingual support in French, German, and Italian. The platform occupies a niche market position focused on workplace pregnancy management in Switzerland. Technically, the site is built on WordPress using the Divi theme, hosted by a reputable Swiss provider, and incorporates modern web technologies and progressive web app capabilities. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its stated mission.

I

Info Work and Care, Schweiz |

info-workcare.ch

46

Info-workcare.ch is a Swiss national informational platform dedicated to supporting working individuals who care for their relatives, primarily focusing on elderly care. The website provides valuable information, tips, and contact addresses to facilitate the balance between professional work and caregiving responsibilities. It positions itself as the first national platform in Switzerland addressing this niche, targeting working caregivers. Technically, the website is built on Drupal 7, utilizing jQuery, Bootstrap, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. The site is mobile-optimized and offers multilingual support in German, French, and Italian. Security-wise, the site uses HTTPS and basic Google Analytics privacy features but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response channels are explicitly provided, limiting user trust and compliance transparency. Overall, the platform serves its informational purpose well but requires enhancements in privacy, security policies, and contact transparency to improve trust and compliance.

T

Travail.Suisse

swype.swiss

46

Swype is a Swiss educational project operated by Travail.Suisse and its member associations, offering vocational experience and language courses abroad, primarily targeting young professionals. The website is built on Drupal 10 and hosted with Cloudflare DNS services, featuring a clean, professional design with good mobile optimization and accessibility. Security posture is adequate with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with a cookie consent banner and a linked privacy policy hosted on the parent organization's site. No direct contact information or security policies are published on the main site, which could be improved. Overall, the site is trustworthy, well-branded, and serves a niche educational market in Switzerland.

T

Travail.Suisse

respect8-3.ch

45

RESPECT8-3.CH is a Swiss non-profit platform dedicated to combating salary discrimination by promoting transparency and compliance with salary equality laws. It is operated under the auspices of Travail.Suisse, a recognized Swiss labor organization. The platform offers a white list of companies compliant with salary equality analysis and a black list for those failing to comply, allowing anonymous employee reporting. The website is well-structured, professionally designed, and targets companies with 50 or more employees as well as employees concerned about salary equality in Switzerland. Technically, the site is built on WordPress using the Divi theme, with standard plugins and Google Analytics integration. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and serves a clear advocacy purpose.

H

Hinto

hinto.ch

61

Hinto is a Swiss-based event listing platform providing multilingual information about local events and activities, primarily focused on Switzerland. The website uses a custom CMS called fuman and integrates Google Maps API for enhanced location-based services. The platform targets general users interested in discovering events in various Swiss cities and towns. Technically, the site is moderately performant, mobile-optimized, and implements essential security headers with HTTPS enforced. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is solid with no evident vulnerabilities, but incident response and vulnerability disclosure mechanisms are absent. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and transparency.

F

FÄGER

faeger.ch

47

FÄGER is a community-focused organization providing holiday and leisure activities for children and youth aged 5 to 17 in Bern, Switzerland. The website serves as an information and registration platform for various events including sports, creativity, learning, and inclusive activities. The organization collaborates with multiple local partners to enhance its offerings and community reach. Technically, the website is built on the fuman CMS platform, utilizing modern JavaScript libraries such as Flickity and Masonry for UI components. Google Analytics is used with IP anonymization to track user engagement. Security posture is moderate with HTTPS implied but no visible advanced security headers or explicit security policies published. Privacy compliance is basic with a privacy policy page present but no cookie consent mechanism detected. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, well-branded, and trustworthy, serving its target audience effectively.

P

Pro Infirmis

eurokey.ch

54

Eurokey, operated by Pro Infirmis, provides a universal locking system widely used across Europe to enhance accessibility and freedom of movement for users, particularly those with disabilities. The website reflects a medium-sized organization focused on accessibility solutions within Switzerland and Europe. The digital infrastructure is built on TYPO3 CMS and integrates multiple modern tracking and analytics tools, including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, managed via Google Tag Manager. Cookie consent is managed through Cookiebot, ensuring compliance with cookie regulations. Security posture is strong with HTTPS and security headers implemented, though explicit privacy and terms of service pages are missing, which slightly impacts compliance and trust scores.

W

Wirtschaftsschule KV Winterthur

wskvw.ch

47

Wirtschaftsschule KV Winterthur (WSKVW) is a leading vocational and continuing education institution in the Winterthur region of Switzerland, specializing in business and commerce education. The website clearly presents its educational offerings including basic vocational training (Grundbildung), continuing education (Weiterbildung), and vocational baccalaureate programs. It targets students and professionals seeking business-related qualifications and career advancement. The institution holds recognized certifications such as eduQua and SBFI, reinforcing its market position and trustworthiness. Technically, the website is built on WordPress 6.7 with WooCommerce integration and uses modern plugins like WPBakery Page Builder and Slider Revolution. It employs standard web analytics tools including Google Analytics and Facebook Pixel, and implements cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the domain's legitimacy and consistency with the institution's Swiss location and educational purpose. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the educational institution. Strategic improvements in security headers and accessibility would further enhance its posture.