Switzerland security reports

F

Fondation Esprit Francophonie

evalang.ch

58

Evalang.ch is a website dedicated to providing information about the Evalang language proficiency test, operated under the Fondation Esprit Francophonie. The site primarily serves individual candidates and educational institutions interested in language testing services in the French-speaking region of Switzerland. The business model focuses on offering test ordering and general information, with partnerships including France Education International and the Fondation Esprit Francophonie. The website content is minimal and directs users to a new primary site for detailed information, indicating a transition or migration of services. Technically, the website is built on TYPO3 CMS with the Bootstrap Package framework, incorporating Google Analytics with IP anonymization and Google reCAPTCHA for bot protection. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. No forms or direct contact information are present on the homepage, limiting direct user engagement. From a security perspective, the site uses HTTPS and implements cookie consent with opt-out for analytics, but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain uses privacy protection for WHOIS data, which is justified given the foundation's nature. Overall, the security posture is moderate but could be improved with better header implementation and transparency. The overall risk assessment indicates a low risk environment with no critical issues detected. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, improving accessibility and SEO, and providing clearer contact information to increase trust and compliance.

F

Fondation Esprit Francophonie

formafle.ch

62

Fondation Esprit Francophonie operates the FormaFLE website as a non-profit organization dedicated to promoting French language evaluation and continuing education in Switzerland. Established in 2010, the foundation offers recognized certifications such as DELF and DALF, alongside training and coaching services for French language educators and learners. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its educational audience. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and demonstrates good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit policies could enhance protection. WHOIS data confirms domain legitimacy and consistency with the foundation's history. Overall, the site is trustworthy, safe, and well-positioned within its niche, though improvements in security transparency and contact information accessibility are recommended.

F

Fondation Esprit Francophonie

fef.education

59

Fondation Esprit Francophonie is a Swiss non-profit organization dedicated to promoting the French language within Switzerland. Founded in 2010, it provides quality educational resources for teachers and learners, supports official French language certifications such as DELF and DALF, and offers language evaluation tests and professional training for FLE teachers. The foundation holds a reputable position as a key reference for French language promotion in the Swiss Confederation, supported by partnerships with recognized institutions including France Éducation international and the French Embassy in Switzerland. Technically, the website is built on TYPO3 CMS with Bootstrap 5, jQuery, and other modern web technologies ensuring good mobile optimization, accessibility, and SEO. The site includes a cookie consent mechanism and uses HTTPS, although explicit security headers are not detected in the provided data. The website is well-structured, professionally designed, and provides clear navigation and relevant content for its target audience. From a security perspective, the site demonstrates basic good practices such as HTTPS and cookie consent but lacks visible advanced security headers and explicit incident response or vulnerability disclosure policies. WHOIS data is unavailable due to privacy protection, which is reasonable for this type of non-profit organization. No signs of malicious activity or vulnerabilities were detected. Overall, the site is trustworthy and safe for its users. The overall risk is low, but improvements in security headers, explicit security policies, and WHOIS transparency (if possible) would enhance trust and compliance. The foundation’s digital presence supports its mission effectively with a solid technical foundation and good content quality.

F

Fondation Esprit Francophonie

fondation-esprit-francophonie.ch

62

Fondation Esprit Francophonie is a Swiss non-profit organization established in 2010 dedicated to promoting the French language within Switzerland. It serves as a key reference for French language education, providing quality resources for teachers and learners, organizing official DELF and DALF certifications, and offering professional training for FLE educators. The foundation maintains partnerships with reputable institutions such as France Éducation international and the French Embassy in Switzerland, reinforcing its authoritative position in the education sector. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap 5 and jQuery, ensuring a responsive and user-friendly experience. The site is well-structured with good SEO practices and basic accessibility features, although some improvements could be made in accessibility and performance optimization. The presence of a cookie consent banner indicates attention to privacy compliance. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy entity. Overall, the foundation's website demonstrates a solid business and technical foundation with room for enhanced security and privacy practices. Strategic recommendations include implementing security headers, publishing security policies, and providing direct security contact information to strengthen trust and compliance.

A

Accesstech AG

accesstech.ch

49

Accesstech AG is a Swiss-based company specializing in assistive IT solutions for blind and visually impaired individuals. Their website showcases a range of products including mobile and stationary screen readers, scanner reading devices, magnification software, speech output systems, Braille displays, and printers. The company positions itself as a niche provider with a strong focus on accessibility and social inclusion through technology. The website is professionally designed, accessible, and provides clear contact information, reflecting a trustworthy and customer-focused business. Technically, the website is built on WordPress with a modern tech stack including jQuery and accessibility-focused plugins. It demonstrates good mobile optimization and accessibility features such as font size adjustments and contrast toggles. Performance is moderate, and SEO practices are adequately implemented. However, there is room for improvement in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site uses HTTPS with a good SSL configuration and no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information suggests potential areas for strengthening security practices. No WAF or blocking mechanisms were detected, allowing full content access. Overall, Accesstech AG's website reflects a solid business presence with a focus on assistive technology, good technical implementation, and a generally strong security posture. Strategic improvements in privacy compliance and security policies would further enhance trust and regulatory adherence.

T

Trägerverein Energiestadt

energiestadt.ch

48

Trägerverein Energiestadt is a Swiss non-profit association established in 1991 that unites municipalities across Switzerland committed to sustainable energy use and climate protection. It offers certification programs such as Energiestadt and Energiestadt Gold, along with consulting, training, and networking services to support local energy and climate policies. The organization is well-established with a strong market position and recognized certifications like the European Energy Award. Technically, the website is built on the fuman CMS platform, uses modern JavaScript libraries, and integrates Google Analytics for user insights. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though additional security headers and a security.txt file could enhance protection. Contact information is clear and professional, supporting trust and credibility. Overall, the website reflects a mature digital presence aligned with its mission and audience.

«Das Beste der Region» is a Swiss non-profit association that acts as an umbrella organization for regional brands and farmers' associations across several Swiss cantons. The organization supports regional producers by promoting certified regional products under the national quality label regio.garantie. Their website serves as an information and marketing platform targeting both producers and consumers interested in regional and sustainable products. Technically, the website is built on the fuman CMS platform, uses modern JavaScript libraries such as Flickity for UI components, and integrates Google Analytics and Facebook Pixel for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policies or incident response information. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, though it could improve by adding security headers and vulnerability disclosure information.

E

Euresearch

euresearch.ch

59

Euresearch is a Swiss government/non-profit entity providing comprehensive guidance and advisory services on European research and innovation funding, primarily focusing on the EU Framework Programme Horizon Europe. The organization targets Swiss universities, companies, SMEs, and non-profit organizations seeking cooperation and funding opportunities in European research. Their key services include information dissemination, advisory support, and networking facilitation. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its audience. Technically, the website is built on the fuman CMS platform with modern web technologies including JavaScript and CSS. It employs Google Analytics for user tracking with a GDPR-compliant cookie consent mechanism. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be enhanced. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, indicating a legitimate and trustworthy domain. Overall, Euresearch presents a secure, professional, and user-friendly online presence suitable for its mission. Strategic improvements in security policy transparency and technical security headers would further enhance its posture and trustworthiness.

S

Stiftung Landschaftsschutz Schweiz

sl-fp.ch

47

Stiftung Landschaftsschutz Schweiz (SL-FP) is a well-established Swiss non-profit foundation dedicated to the protection, preservation, and enhancement of natural and cultural landscapes in Switzerland. Founded in 1970, it operates across all governmental levels and engages with partners and the public to promote sustainable landscape management. The website reflects a professional and consistent brand presence, offering comprehensive information about its mission, projects, and landscape awards. Technically, the site uses a custom CMS (fuman), modern JavaScript libraries, and Google Analytics with IP anonymization, indicating moderate digital maturity. Security posture is good with HTTPS and some security best practices, though improvements in security headers and privacy compliance (cookie consent) are recommended. Overall, the site is trustworthy, accessible, and serves its target audience effectively.

S

SDBB – Schweizerisches Dienstleistungszentrum

sdbb.ch

51

SDBB is a Swiss service center institution affiliated with the Swiss Conference of Cantonal Ministers of Education (EDK) and supported by the federal government. It provides services primarily in vocational education and career counseling, targeting professionals in these sectors. The organization plays a central role in coordinating qualification procedures, managing data services, and offering informational and advisory products. The website reflects a professional and consistent brand image with clear navigation and multilingual support for German, French, and Italian audiences. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery, Tobii, and Plyr, and uses Matomo for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. Security is well-handled with HTTPS and no visible vulnerabilities, although explicit security headers and incident response information are absent. The security posture is solid but could be improved by adding security headers and a formal incident response contact. Privacy compliance is good with a clear privacy policy and cookie policy, though lacking an explicit cookie consent mechanism. Overall, the site is trustworthy, professionally maintained, and aligned with its institutional role. Strategically, SDBB should enhance its security transparency and privacy mechanisms to further build trust and comply with evolving regulations. The technical infrastructure is modern but could benefit from continuous performance tuning and security hardening.

P

Pro Infirmis

proinfirmis.ch

57

Pro Infirmis is a well-established Swiss non-profit organization dedicated to advising, supporting, and advocating for people with disabilities and their families across Switzerland. The website reflects a professional and consistent brand presence, targeting individuals seeking disability-related services and inclusion advocacy. The organization leverages a mature digital infrastructure based on TYPO3 CMS, integrating modern analytics and marketing tools such as Google Analytics, LinkedIn Insight, Facebook Pixel, and Adform, all managed with a robust cookie consent mechanism via Cookiebot. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security and incident response policies are not publicly documented. Overall, the website and WHOIS data indicate a legitimate, trustworthy entity with a solid market position in the non-profit sector.

P

Pro Infirmis

kulturinklusiv.ch

49

Pro Infirmis operates the Fachstelle Kultur inklusiv, a Swiss non-profit organization dedicated to promoting cultural inclusion nationwide. The website serves as a competence center offering services such as consultation, networking, and communication to foster visibility and recognition of inclusive culture. The organization holds a strong market position within the cultural inclusion sector in Switzerland, supported by its network and charter for cultural inclusion. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates multiple third-party marketing and tracking tools, including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Accessibility is a key focus, evidenced by WCAG 2 AA certification and ReadSpeaker integration. Security posture is solid with HTTPS enforcement and reCAPTCHA usage, though improvements are recommended in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and privacy mechanisms.

Z

Zentrum Paul Klee

zpk.org

62

Zentrum Paul Klee is a prominent cultural institution located in Bern, Switzerland, dedicated to the works of Paul Klee and contemporary art. It offers a wide range of services including exhibitions, concerts, readings, guided tours, and educational programs, positioning itself as a leading art and cultural center. The website reflects a mature digital presence with a modern tech stack based on React and Next.js, integrated with Drupal as a headless CMS, and includes e-commerce capabilities for ticket sales. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility.

K

Kunstmuseum Bern

kunstmuseumbern.ch

63

Kunstmuseum Bern is a prominent Swiss art museum with a strong international reputation, offering a diverse collection of classical modernism and contemporary art. The institution provides a variety of services including exhibitions, guided tours, workshops, and provenance research, targeting art lovers, families, and researchers. The website reflects a mature digital infrastructure built on modern technologies such as React, Next.js, and Drupal as a headless CMS, ensuring fast performance and excellent mobile optimization. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policy and incident response information are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and user-friendly, supporting the museum's mission and community engagement.

Ö

öbu

oebu.ch

47

öbu is a Swiss association dedicated to promoting sustainable business practices across companies in Switzerland. The organization offers a range of services including working groups, workshops, projects, events, and informational resources to support businesses in implementing the UN Sustainable Development Goals and the Agenda 2030. The website reflects a well-established entity with a clear focus on sustainability and community engagement within the Swiss market. Technically, the website employs modern tracking and user experience technologies such as Google Analytics, Google Tag Manager, and Flickity for carousels, alongside a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and basic privacy compliance, though additional security headers and explicit security policies could enhance the security maturity. Overall, the site is professional, trustworthy, and provides comprehensive content relevant to its audience.

A

AMS Agro-Marketing Suisse

suissegarantie.ch

46

Suisse Garantie is a Swiss agricultural certification organization that promotes and guarantees quality, freshness, sustainability, and Swiss origin of agricultural products. The website serves as an informational and marketing platform targeting Swiss consumers and agricultural partners. It provides certification details, campaigns, and seasonal product information. The technical infrastructure uses modern JavaScript libraries, asynchronous analytics, and video embeds, indicating a mature digital presence. Security posture is good with HTTPS and no visible vulnerabilities, but lacks explicit security policies and privacy compliance documentation. Overall, the site is professional and trustworthy but should improve privacy and cookie policy transparency.

P

PremierePlace.CH

premiereplace.ch

52

PremierePlace.CH is a Swiss-based web agency established in 2006, specializing in website creation, SEO, Google Ads management, e-marketing, video marketing, and digital training. The company positions itself as a partner for business success, serving clients primarily in Switzerland and France with over 125 references. The website reflects a mature digital presence with comprehensive service offerings and strong branding consistency. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Google Tag Manager, ensuring good SEO and analytics integration. Performance optimizations like WP Rocket and lazy loading are implemented, contributing to fast load times and excellent mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a clear privacy policy and cookie management in French, aligned with GDPR requirements. Overall, the site demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable digital asset for the agency. Strategic recommendations include enhancing security headers and continuous monitoring of third-party scripts to maintain security standards.

S

Snowflake Productions GmbH

snowflake-group.ch

60

Snowflake Productions GmbH is a Swiss digital agency founded in 1999, specializing in digital solutions with business value. The company offers a broad range of services including WordPress and TYPO3 CMS web development, e-commerce, online marketing, and accessibility checks. It maintains strategic partnerships and memberships with reputable organizations, enhancing its market position and service capabilities. The website reflects a professional and consistent brand image targeting businesses seeking comprehensive digital solutions. Technically, the site is built on TYPO3 CMS with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security policies and incident response details are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

L

Lernloft GmbH

lernloft.ch

50

Lernloft GmbH operates the LernloftTreff website, providing free or low-cost adult education, coaching, and learning support services primarily in Switzerland. The company targets adult learners seeking professional development and personal coaching, positioning itself as a regional educational resource with partnerships in Swiss cantons such as Thurgau and Graubünden. The website content is well-structured, professionally designed, and consistent with the company's educational mission. Technically, the site uses modern Blazor Server technology, indicating a contemporary web framework choice. The site is mobile-optimized and performs moderately well, though some accessibility and SEO optimizations could be improved. The absence of a CMS suggests a custom or lightweight solution. No major performance bottlenecks or errors were detected. From a security perspective, the website enforces HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security header implementation, and more transparent contact details to improve user trust and regulatory adherence.

IceCube.Net is a Swiss-based software company specializing in an enterprise content management system named IceCube2.Net. The website presents a professional image targeting enterprise customers who require efficient content management with features like inline editing. The company has been established since 2010, aligning with the domain registration date, and positions itself as a niche player in the CMS market. The website content is clear, relevant, and well-structured, supporting a good user experience and moderate mobile optimization. Technically, the site leverages ASP.NET technology with integrations of modern JavaScript libraries such as jQuery and VideoJS, alongside marketing and analytics tools including Google Analytics and AutopilotHQ. Hosting and DNS services are provided via Cloudflare, ensuring good SSL configuration and performance. However, DNSSEC is not enabled, and no advanced security headers are detected, indicating room for security improvements. From a security perspective, the site uses HTTPS and Google reCAPTCHA v3 to protect form submissions, but lacks published privacy and cookie policies, which impacts GDPR compliance. No incident response or vulnerability disclosure information is available, and no contact emails or phone numbers are explicitly provided, limiting direct communication channels. The domain registration data is consistent with the business claims, enhancing trustworthiness. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but falls short in privacy compliance and security best practices. Strategic improvements in policy transparency, security headers, and contact information would enhance trust and compliance.

A

Artionet Web Agency

artionet.ch

61

Artionet Web Agency is a well-established Swiss digital agency specializing in comprehensive web solutions including site creation, e-commerce, content management, SEO, and digital communication. Founded in 2001, it serves a broad range of clients with tailored services and maintains a strong regional presence. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site uses modern web technologies and a proprietary CMS (IceCube2.Net), with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent implemented, though explicit security headers and policies could be improved. Overall, the site is trustworthy and business credible, with clear contact information and active social media engagement.

F

Friendly LLC

friendlyautomate.ch

63

Friendly LLC operates Friendly Automate, a Swiss-based marketing automation software positioned as a privacy-focused alternative to HubSpot. The company targets SMEs, NGOs, and various sectors including banking and education, emphasizing compliance with Swiss and EU data protection laws. Their product suite includes lead generation, CRM, email marketing, and workflow automation, leveraging open source Mautic technology and integrations with popular no-code tools. The website is professionally designed, mobile-optimized, and SEO-friendly, hosted on Swiss infrastructure to ensure data sovereignty. Security posture is strong, supported by ISO 27001 and ISO 9001 certifications, HTTPS enforcement, and privacy-conscious analytics via Matomo. However, the absence of a visible cookie consent mechanism and incident response details are areas for improvement. Overall, the site demonstrates high business credibility and technical maturity.

I

Interkantonale Hochschule für Heilpädagogik

zusammenarbeitanschulen.ch

60

Zusammenarbeit an Schulen is an educational initiative hosted by the Interkantonale Hochschule für Heilpädagogik, focusing on providing tools and resources to support multiprofessional collaboration and inclusion in schools. The website offers free downloadable materials, introductory videos, research information, and training opportunities targeted at educators and school teams. The platform positions itself as a niche educational resource within the Swiss education sector, collaborating with reputable institutions such as the Pädagogische Hochschule Zürich and the Volksschulamt Zürich. Technically, the website is built on WordPress with a modern theme, delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though it lacks some advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy, professional, and well-aligned with its educational mission.

E

EnableMe Foundation

safe-space.io

61

SafeSpace is a digital B2B tool developed by the EnableMe Foundation in collaboration with the University of St. Gallen's Competence Center for Diversity, Disability and Inclusion. It supports employees with non-visible health impairments in making informed decisions about disclosing their conditions at the workplace, aiming to foster inclusion and improve employee satisfaction and productivity. The service is positioned as a niche non-profit offering with strong academic backing and a clear social mission. Technically, the website leverages modern frontend technologies such as Vue.js and PrimeVue, hosted on Hetzner infrastructure, with good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-conscious analytics, though some security headers and policies could be improved. Privacy and cookie policies are present with consent mechanisms, but no terms of service or explicit security policies were found. WHOIS data shows privacy protection typical for non-profit projects, with no suspicious indicators. Overall, the website is professional, trustworthy, and well-aligned with its mission.

EnableMe Foundation is a well-established non-profit organization dedicated to empowering people with disabilities worldwide through information dissemination, peer communities, and digital services. The organization operates multiple country-specific platforms and offers services such as job portals and apprenticeship programs, positioning itself as a global leader in disability inclusion. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the site uses modern JavaScript frameworks, Matomo analytics, and a consent management platform, indicating a mature digital infrastructure. Security posture is good with HTTPS and privacy mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and compliant with privacy regulations, though WHOIS data is unavailable, likely due to privacy protection. The absence of direct contact emails and phone numbers suggests a preference for contact via forms, typical for non-profits. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and compliance.

S

Swisscom AG

swisscom.com

68

Swisscom AG is a leading telecommunications provider in Switzerland offering a wide range of residential services including mobile, internet, and TV subscriptions. The website reflects a mature digital presence with comprehensive service offerings and strong branding consistency. The technical infrastructure leverages modern web technologies such as Adobe Experience Manager and JavaScript ES modules, ensuring fast performance and mobile optimization. Security posture is robust with HTTPS enforcement, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates high professionalism and trustworthiness.

B

BURRI public elements AG

burri.world

72

BURRI public elements AG is a well-established Swiss company specializing in products and projects for public spaces, including outdoor furniture, lighting, and mobility infrastructure. The website reflects a mature digital presence with multilingual support and a focus on inclusion and sustainability. Technically, the site uses modern web technologies and integrates popular analytics and marketing tools, though it lacks explicit privacy and cookie policies. Security posture is strong with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and clearer privacy compliance. Overall, the site is professional and trustworthy, supporting the company's market position as a leader in public space elements.

P

Poinz AG

poinz.ch

71

Poinz AG operates a leading cashback platform in Switzerland, providing consumers with effortless cashback rewards for online and in-store purchases. The company partners with over 400 trusted brands and boasts a large user base exceeding 200,000 active users. Their services include online cashback, digital vouchers, deals, digital stamp cards, and branded credit cards, positioning them as a market leader in the Swiss cashback ecosystem. Technically, the website is built on modern frameworks such as Next.js and React, with extensive use of analytics and marketing pixels to optimize user engagement and conversion. Security posture is strong with HTTPS, security headers, and anti-bot measures like Google reCAPTCHA Enterprise, although explicit security policies and incident response contacts are not published. Overall, the website is professional, well-optimized for mobile, and compliant with GDPR, reflecting a mature digital presence.

W

WEMF AG für Werbemedienforschung

wemf.ch

55

WEMF AG für Werbemedienforschung is a well-established Swiss media research organization founded in 1964, providing independent and neutral auditing and research services for the media and advertising industry in Switzerland and Liechtenstein. Their offerings include media audits, comprehensive media studies, data solutions, and consulting services, positioning them as a trusted authority in their sector. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Tag Manager and Alpine.js, with a good security posture including HTTPS and security headers. However, the site lacks explicit privacy and cookie policies and consent mechanisms, which are critical for GDPR compliance. Overall, the site is secure, professional, and trustworthy but could improve transparency around privacy and incident response.

S

Scuola universitaria federale per la formazione professionale SUFFP

suffp.swiss

69

The website www.suffp.swiss represents the Scuola universitaria federale per la formazione professionale SUFFP, a Swiss federal institution specializing in vocational education and training. It serves as a national center of expertise offering bachelor and master degree programs, professional school teaching, continuing education, research, and international cooperation. The site targets students, educators, and professionals involved in vocational education. The business model is that of a public educational institution with a strong national presence in Switzerland's education sector. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including SVG graphics and Matomo analytics for user tracking. The site is mobile-optimized, accessible, and SEO-friendly with structured navigation and multilingual support. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS with excellent SSL configuration and employs basic bot protection. However, it lacks visible security headers and explicit privacy or cookie policies, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected by the Swiss Registry, which is typical for government-related domains, and no suspicious patterns were found. Overall, the website is professional, trustworthy, and well-maintained, but could improve privacy compliance and security posture by adding explicit policies and security headers.

H

Haute école fédérale en formation professionnelle HEFP

hefp.swiss

69

The Haute école fédérale en formation professionnelle HEFP is a Swiss federal institution specializing in vocational education and training. It offers a wide range of educational programs including Bachelor and Master degrees, professional teacher training, continuing education certifications, and conducts research and development in vocational education. The institution serves professionals, educators, and students involved in vocational training across Switzerland, positioning itself as an authoritative expert in the field. The website reflects a mature digital presence with multilingual support and comprehensive content tailored to its audience. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating Matomo analytics hosted on a Swiss domain, indicating a focus on data privacy. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Security is well-implemented with HTTPS, security headers, and no visible vulnerabilities, although explicit privacy and cookie policies are not clearly presented. From a security perspective, the site demonstrates a strong posture with encrypted communications and best practices in place. However, the absence of explicit privacy and cookie consent mechanisms and lack of visible contact information for security incidents represent areas for improvement. The WHOIS data is privacy protected, which is justified given the nature of the institution and the .swiss domain usage. Overall, the website is professional, trustworthy, and safe for general audiences, with recommendations to enhance privacy compliance and transparency to further strengthen user trust and regulatory adherence.

S

Swiss Federal University for Vocational Education and Training SFUVET

sfuvet.swiss

68

The Swiss Federal University for Vocational Education and Training SFUVET is a reputable Swiss federal institution specializing in vocational education and training. It offers a broad range of educational programs including basic and continuing training, bachelor's and master's degrees, and conducts extensive research and development in vocational education. The institution also supports international cooperation and the development of occupations, with campuses in key Swiss regions. The website reflects a professional and comprehensive digital presence aligned with its educational mission. Technically, the website is built on Drupal 10, leveraging modern web technologies and Matomo for analytics, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security measures such as HTTPS and security headers are properly implemented, though there is room for improvement in privacy compliance with the addition of a cookie consent mechanism. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. However, the absence of a public security policy and incident response contact details suggests an opportunity to enhance transparency and preparedness. The WHOIS data is privacy protected, which is justified given the institutional nature of the domain, though it limits direct verification of registrant details. Overall, the website is trustworthy, professional, and well-maintained, serving its audience effectively. Strategic recommendations include implementing cookie consent, publishing a security policy, and establishing a vulnerability disclosure channel to further strengthen compliance and security posture.

L

Layer

layer.swiss

56

Layer is a Swiss-based technology service provider specializing in advanced and digital analytics to deliver data-driven customer and user insights. The company positions itself as a partner guiding businesses through complex user and customer data to enable data-driven decision-making. The website is professionally designed using modern tools such as Framer and incorporates Matomo analytics for user tracking. However, it lacks explicit privacy, cookie, and terms of service policies, as well as visible contact information, which impacts compliance and transparency. Security posture is moderate with no detected security headers and unknown SSL configuration. Overall, the website is accessible and professional but would benefit from enhanced privacy compliance and security measures.

S

Swiss Health Network for Equity

health-equity-network.ch

53

Swiss Health Network for Equity is a Swiss non-profit organization dedicated to promoting fairness and equity in the Swiss healthcare system. It operates as a collaborative network involving healthcare experts, policymakers, scientists, and civil society, supported by key Swiss institutions such as the Federal Office of Public Health and the State Secretariat for Migration. The organization offers networking, educational resources, and advocacy services to its members and the broader community. The website reflects a professional and consistent brand presence with multilingual support and institutional partnerships.

S

Swiss Healthcare Startups

swisshealthcarestartups.com

64

Swiss Healthcare Startups is a prominent networking organization dedicated to fostering collaboration within the Swiss healthcare ecosystem. It connects startups with investors, healthcare providers, and industry partners through events, a digital directory (SHS Cortex), and targeted networking. The organization is well-positioned as a leading entity in Swiss healthcare innovation and startup support. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, with a responsive design and moderate performance. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the website is professional and trustworthy, though improvements in privacy and security documentation are recommended.

E

Entrepreneurship Center

entrepreneurship-bern.ch

43

The Entrepreneurship Center at the University of Bern is a specialized educational and outreach institution focused on fostering entrepreneurship and innovation. It offers continuing education programs such as CAS Corporate Strategy and CAS Entrepreneurship, practical start-up training modules in collaboration with Innosuisse, and organizes the STAGE UP business creation competition. The center targets students, researchers, entrepreneurs, and professionals seeking to develop entrepreneurial skills and business acumen. Its strong affiliation with the University of Bern and partnerships with regional academic and private entities position it as a credible and trusted resource in the Swiss entrepreneurship ecosystem. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WPBakery Page Builder, and GDPR-compliant cookie management. The site is well-optimized for SEO, mobile responsive, and uses structured data for enhanced search visibility. Performance is moderate with good accessibility features, though some improvements in accessibility and security headers could be made. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and avoids exposing sensitive data. However, explicit security policies and incident response information are absent, and security headers are not detected. No vulnerabilities or suspicious activities are evident. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance, making it a reliable platform for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility to further strengthen its posture.

B

be-advanced AG

be-advanced.ch

53

be-advanced AG is a Swiss company specializing in innovation coaching and business development services for SMEs and startups primarily in the Bern region. Their offerings include tailored coaching programs for KMUs, startup acceleration programs, founder consulting, and ecosystem networking. The website is professionally designed, content-rich, and targets entrepreneurs and small businesses seeking growth and innovation support. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes Google Analytics for user insights. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the site demonstrates a mature digital presence with good privacy compliance and user experience.

Inventus Bern Stiftung is a Swiss non-profit foundation dedicated to supporting applied research and innovation projects primarily for students and researchers at the Bern University of Applied Sciences in the fields of technology and computer science. The foundation provides financial support, including grants and loans, to foster technological transfer and assist students with outstanding achievements. The website is built on WordPress with a moderate technical infrastructure and uses modern technologies such as Bootstrap and jQuery. It is hosted likely by MyHostpoint and employs HTTPS with a valid SSL certificate, ensuring secure communications. However, the site lacks advanced security headers and cookie consent mechanisms, which are areas for improvement. The foundation's contact information is clearly presented, enhancing business credibility. Overall, the website is professional, content-rich, and safe for general audiences, but could benefit from enhanced privacy compliance and security policies.

N

NTN Innovation Booster - User-Centred HealthTech

ucht.ch

46

The NTN Innovation Booster - User-Centred HealthTech is a Swiss-based innovation support program focused on the healthcare technology sector. It aims to assist partners by connecting them with experts to address business challenges in health technology. The website indicates that the program has concluded its activities, providing informational content and contact details primarily for legacy or reference purposes. The business model centers on innovation facilitation within a niche market, targeting healthcare and technology partners. The organization maintains a modest online presence with social media links and affiliation to the Innosuisse innovation booster programs. Technically, the website is built on WordPress using common plugins such as Modern Events Calendar Lite and Sassy Social Share. The site is moderately optimized for mobile devices and SEO, with a basic but consistent design. HTTPS is enforced, ensuring secure communications. However, the site lacks advanced security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows a basic security posture with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure mechanisms. No forms are present on the homepage, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. The domain registration is privacy protected but consistent with the business age and type, indicating legitimacy. Overall, the website is safe and professional but minimalistic, reflecting a concluded program rather than an active service. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing incident response contacts to enhance compliance and security posture.

The Ernst Göhner Stiftung is a Swiss foundation holding participations in various companies and significant real estate assets. It focuses on philanthropic activities supporting culture, social causes, environmental projects, education, and science. The foundation operates with a clear market position as a medium-sized non-profit entity with subsidiaries such as Seewarte Holding AG and EGS Beteiligungen AG. The website is professionally designed, multilingual, and provides clear navigation and relevant content for its target audience of non-profit organizations and project applicants. Technically, the site uses Concrete CMS with modern libraries like jQuery and Bootstrap, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy and well-maintained, reflecting the foundation's reputable status.

The Gottfried und Julia Bangerter-Rhyner-Stiftung is a Swiss non-profit foundation established in 1970 to support medical research and social projects in Switzerland. It has a strong market position as one of the larger grant-giving institutions in the Swiss medical research sector. The website provides clear information about the foundation's history, mission, and contact details, targeting researchers, social project stakeholders, and potential grant applicants. Technically, the website uses modern JavaScript and Google Tag Manager for analytics, with a responsive design and good SEO practices. However, no CMS or hosting provider details are evident. The site performs moderately well with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with a privacy policy and cookie banner. Overall, the site is trustworthy and professional, with no blocking or WAF interference. Recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and improving accessibility features to strengthen security and compliance posture.

A

Allianz Gesundheitskompetenz

allianz-gesundheitskompetenz.ch

48

Allianz Gesundheitskompetenz is a Swiss non-profit platform dedicated to promoting health literacy by connecting stakeholders from healthcare, science, education, politics, economy, and media. The organization develops strategic concepts, supports projects, organizes symposiums, and awards the Gesundheitskompetenz-Preis to foster health literacy in Switzerland. The website reflects a well-established entity with a clear focus on public health education and collaboration. Technically, the site uses modern web technologies including Cmsbox CMS, Google Analytics, Google Tag Manager, and reCAPTCHA v3, ensuring a functional and moderately performant user experience with good mobile optimization. Security posture is solid with HTTPS and basic security best practices, though some security headers and policies could be improved. Privacy compliance is evident with cookie consent and a privacy policy, aligned with GDPR requirements. Overall, the website is professional, trustworthy, and serves its target audience effectively.

B

Bern University of Applied Sciences

bfh.ch

60

Bern University of Applied Sciences (BFH) is a prominent Swiss higher education institution offering a broad range of bachelor's and master's degree programs alongside continuing education courses. The website reflects a well-established educational entity with a clear focus on applied sciences, research, and professional development. The institution targets students, researchers, and professionals seeking advanced education and training. The site is professionally designed with consistent branding and multi-language support, enhancing accessibility and user experience. Technically, the website employs modern tools such as Google Tag Manager for analytics and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. However, the CMS platform is not explicitly identified, suggesting a custom or proprietary solution. From a security perspective, the site enforces HTTPS and includes standard security headers, contributing to a strong security posture. No critical vulnerabilities or exposed sensitive data were detected. Nonetheless, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms represents areas for improvement to enhance transparency and trust. Overall, BFH's website demonstrates a high level of professionalism and trustworthiness, suitable for its role as an educational institution. Strategic enhancements in privacy and security documentation would further solidify its compliance and user confidence.

N

Niwotron AG

niwotron.ch

48

Niwotron AG is a Swiss-based distributor specializing in consumer electronics, targeting resellers with a broad portfolio of exclusive brands and products. The company emphasizes fast and reliable delivery, catering primarily to the B2B market within Switzerland. The website reflects a professional and consistent brand image, providing detailed product information, catalogs, and support resources. Technically, the site uses a ColdFusion backend with modern frontend libraries such as jQuery, FlexSlider, and FontAwesome, delivering a moderate performance and basic mobile optimization. Security-wise, the site employs HTTPS and avoids exposing sensitive data but lacks advanced security headers and formal privacy or cookie policies, indicating room for compliance improvements. Overall, the website is trustworthy and well-positioned in its market segment but should enhance privacy compliance and security practices to align with best standards.

S

SAMedia AG

cockpit.aero

51

SAMedia AG operates the website cockpit.aero, which hosts 'Cockpit,' the leading aviation magazine in Switzerland. The magazine offers comprehensive coverage of national and international aviation and aerospace topics, targeting professionals and enthusiasts in the aviation sector. The business model centers on media publishing, including subscriptions, advertising, and event promotion. The website demonstrates a professional and consistent brand presence with high-quality content and clear navigation. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and performs moderately well. Privacy and cookie policies are implemented with GDPR compliance and user consent mechanisms. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of explicit security headers and lack of published security policies or incident response contacts suggest room for improvement. WHOIS data is unavailable due to registry restrictions, which slightly impacts trust but does not detract from the professional appearance and legitimacy of the site. Overall, the website is a credible and authoritative source in its niche, with strong business credibility and good technical implementation. Strategic enhancements in security headers and transparency around security policies would further strengthen its posture.

T

Three Way AG

anforderungsprofile.ch

47

Anforderungsprofile.ch is an educational platform operated by Three Way AG, based in Switzerland, providing tools to explore and compare occupational profiles. The website targets students, teachers, career counselors, training companies, and associations, offering a niche service in vocational guidance. The platform is professionally designed with a clear focus on usability and accessibility, leveraging modern web technologies such as Bootstrap, jQuery, and FontAwesome. Google Analytics is used for traffic analysis, indicating moderate user tracking. Security posture is adequate with HTTPS usage and secure form handling, but lacks explicit security headers and privacy compliance documentation. The WHOIS data confirms the legitimacy of the domain and its alignment with the business entity. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security policies to improve compliance and user trust.

S

Samen Mauser AG

samen-mauser.ch

53

Samen Mauser AG operates a professional e-commerce platform specializing in high-quality seeds, tulips, bulbs, bioproducts, and gardening accessories. The company targets gardeners and horticulture enthusiasts primarily in Switzerland, offering a broad product catalog and services such as newsletters and customer login. The website demonstrates a solid market position as an established Swiss retailer with a consistent brand presence and trust signals including Trusted Shops certification. Technically, the site employs modern JavaScript libraries like jQuery and FlexSlider, uses a custom CMS (InnoWAYtor by 3way.ch), and integrates payment solutions such as Saferpay. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and secure forms, but could benefit from additional security headers and a formal security policy. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-suited for its business purpose.

S

Swiss Air-Rescue Rega

rega.ch

58

Swiss Air-Rescue Rega is a well-established non-profit organization providing air medical rescue services in Switzerland and abroad. The organization operates a fleet of rescue helicopters and ambulance jets, offering 24/7 medical assistance. Their website reflects a strong market position with comprehensive patronage and donation services, targeting the general public and emergency service users. The site is multilingual and professionally designed, supporting user engagement through newsletters and media content. Technically, the website is built on TYPO3 CMS, integrates modern analytics and tracking tools like Google Tag Manager and Hotjar, and embeds video content via Vimeo. The infrastructure supports good performance, mobile optimization, and accessibility standards. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though formal security policies and incident response contacts are not explicitly published. WHOIS data confirms domain legitimacy and consistency with the organization's Swiss base. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

W

welante GmbH

welante.ch

55

welante GmbH operates a specialized web-based course and seminar management software platform targeting organizations requiring efficient event and course administration. The company positions itself as a niche provider with modular SaaS offerings, emphasizing process optimization and cloud deployment. The website reflects a mature digital presence built on WordPress with modern plugins and analytics integrations. Security posture is solid with HTTPS enforcement and anti-clickjacking measures, though explicit security policies and incident response contacts are absent. Privacy compliance is partially addressed via cookie consent mechanisms but lacks a visible privacy policy or terms of service. Overall, the site is professional, trustworthy, and well-structured, supporting the company's credibility in its sector.

T

Threeway AG

3way.ch

62

Threeway AG is a Swiss-based technology company specializing in the technical implementation of webshops, TYPO3 websites, email marketing, and custom configurators primarily for communication agencies and ERP integrators. Established in 1996, the company emphasizes accessibility and high-quality technical solutions, positioning itself as a trusted partner in the digital services market. Their website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including SVG graphics and JavaScript. The site is mobile-optimized, accessible, and includes SEO best practices such as meta tags and structured data. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent for privacy compliance. However, there is no explicit security policy or incident response information published, which could be improved. No vulnerabilities or exposed sensitive data were detected, and the use of trusted third-party analytics is transparent. Overall, the website and business demonstrate a high level of professionalism and trustworthiness with minor areas for improvement in security transparency and formal policies. The risk profile is low, and the company appears legitimate and well-established in its niche.