Switzerland security reports

K

Kaufmännischer Verband Zürich

kfmv-zuerich.ch

59

The Kaufmännischer Verband Zürich is a well-established non-profit professional association serving employees and commercial professionals in the Zurich region. The organization provides membership services, legal and salary advice, career counseling, and organizes events and seminars to support its members. The website reflects a mature digital presence with a clear focus on community engagement and professional development. Technically, the site is built on the DNN CMS platform using ASP.NET WebForms, enhanced with modern JavaScript libraries and tracking tools. While the site is mobile-optimized and well-structured, some compliance gaps exist such as the absence of a privacy policy and terms of service pages. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and publishing incident response information. Overall, the domain registration data aligns well with the website content, supporting the legitimacy and trustworthiness of the organization.

K

Home | Kaufmännischer Verband Ostschweiz

kvostschweiz.ch

59

The website www.kvostschweiz.ch appears to be a small business site hosted on the Wix platform, targeting a Swiss audience. The content is minimal and primarily technical with no visible business descriptions, contact information, or policies. The technical infrastructure relies on Wix's standard scripts and hosting, indicating a basic digital maturity level. Security posture is weak due to the absence of security headers, privacy policies, and incident response contacts. No vulnerabilities or malicious content were detected, but the lack of transparency and business information limits trust. Overall, the site requires significant improvements in content, security, and compliance to enhance credibility and user trust.

K

Kaufmännischer Verband Luzern

kvluzern.ch

69

The Kaufmännischer Verband Luzern is a well-established non-profit organization based in Switzerland, focused on supporting employees and learners in the commercial and business sectors. With over 150 years of history, it offers a broad range of services including education through its Berufsfachschule and Berufsakademie, consulting, seminars, and networking opportunities. The website reflects a strong market position as a leading regional partner in Lucerne, providing valuable member benefits and career development resources. Technically, the site is built on modern technologies including Craft CMS, uses Google Analytics and Tag Manager for tracking, and implements security best practices such as HTTPS and CSRF protection. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. However, the site lacks explicit security policies and vulnerability disclosure information, which could be improved. Overall, the website is professional, trustworthy, and serves its target audience effectively.

K

Kaufmännischer Verband Bern Solothurn Aargau | Beratungen | Seminare | Mitgliedschaft

kv-verband.ch

63

The website www.kv-verband.ch represents a Swiss-based business or association, likely targeting a German-speaking audience. The site is built using the Wix platform, leveraging standard Wix scripts and polyfills, indicating a moderate level of technical infrastructure. The content is basic and informational, with no advanced interactive features or e-commerce capabilities detected. The website lacks critical privacy and cookie policies, contact information, and security headers, which impacts its compliance and security posture negatively. No signs of WAF or content blocking were detected, allowing full content accessibility. Overall, the site appears legitimate but basic in terms of business presentation and security maturity.

K

Kaufmännischer Verband Basel

kfmv-beidebasel.ch

61

The Kaufmännischer Verband Basel is a regional professional association serving the kaufmännisch (commercial) sector in the Basel region of Switzerland. It acts as a competence center for career development and education, offering membership benefits, consulting services, seminars, events, and discounts. The website reflects a well-structured business model focused on supporting professionals and apprentices in the commercial field. The organization maintains a strong regional presence with partnerships in education and a clear focus on social partnership and fair employment conditions. Technically, the website is built on the webIQ 6.3 framework, leveraging modern JavaScript libraries and responsive design to deliver a good user experience across devices. The site includes comprehensive privacy and cookie policies with a consent mechanism, reflecting good GDPR compliance practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are absent. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

S

Società impiegati commercio Svizzera

sicsvizzera.ch

62

Società impiegati commercio Svizzera is a longstanding Swiss non-profit association representing commerce employees, with a history spanning over 150 years. The organization focuses on advocating for fair and progressive working conditions, promoting lifelong learning, and supporting modern work models. Their market position is strong as the oldest active employee association in Switzerland, targeting professionals in the commerce sector. Technically, the website is built on TYPO3 CMS, hosted by RTP GmbH, and integrates modern compliance tools such as Cookiebot and Google Tag Manager, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, GDPR compliant, and trustworthy, with no signs of malicious content or blocking mechanisms.

S

Schweizerischer Kaufmännischer Verband (SKV)

buerogeschichten.ch

51

Bürogeschichten.ch is an educational website dedicated to documenting and showcasing the evolution of commercial professions in Switzerland over the past 150 years. It is affiliated with the Schweizerischer Kaufmännischer Verband (SKV), a Swiss commercial association, and serves as a niche resource for students, professionals, and historians interested in the history and development of office work and commercial careers. The site offers rich multimedia content including images, gifs, audio, and videos to engage its audience. Technically, the website is built on WordPress and leverages a modern technology stack including jQuery, Bootstrap, Lodash, Swiper, and LightGallery. It is well-optimized for mobile devices and includes standard SEO and accessibility features, although accessibility could be improved further. Performance is moderate, with a good balance of multimedia content and usability. From a security perspective, the site enforces HTTPS and includes important security headers such as Content-Security-Policy and Strict-Transport-Security. It implements a cookie consent mechanism and maintains a comprehensive privacy policy compliant with GDPR. However, it lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. Overall, the website is professional, trustworthy, and safe for general audiences. It demonstrates good privacy compliance and business credibility but could benefit from additional transparency in security policies and contact information to further strengthen its security and compliance stance.

S

Société suisse des employés de commerce

secsuisse.ch

64

The Société suisse des employés de commerce is a longstanding Swiss employee association specializing in labor and training competencies, boasting over 150 years of history. It holds a prominent market position as the oldest active employee association in Switzerland, targeting commerce sector employees and professionals. The website reflects a professional and consistent brand image, with content focused on its core services and audience. Technically, the site is built on TYPO3 CMS, hosted by RTP GmbH, and integrates modern cookie consent management via Cookiebot, ensuring GDPR compliance. The site demonstrates good SEO, accessibility, and mobile optimization, with moderate performance. Security posture is strong, featuring HTTPS, security headers, and no visible vulnerabilities. However, explicit contact information and security policies are not prominently found, suggesting areas for improvement. Overall, the site is trustworthy and professionally maintained, with extensive use of analytics and marketing tools from reputable providers.

S

Stiftung St. Martin

martinstiftung.ch

51

Stiftung St. Martin is a Swiss non-profit foundation dedicated to financing and implementing the 'Water is Life' drinking water project in Otélé, Cameroon, and supporting other charitable projects worldwide. The foundation has a clear mission focused on providing access to clean drinking water in developing countries, with a project history dating back to 1989. The website reflects a professional and consistent brand image, targeting donors, partners, and the general public interested in humanitarian aid. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and cookie consent mechanisms are missing. Overall, the domain registration and WHOIS data align well with the foundation's identity, indicating legitimacy and trustworthiness.

D

Datatrans AG

datatrans.ch

61

Datatrans AG is a Swiss-based company specializing in advanced payment solutions tailored for companies demanding high-performance and flexible payment platforms. Their service model emphasizes integration freedom with various financial partners, positioning them as a key player in the payment processing sector within Switzerland and potentially neighboring regions. The website reflects a professional and consistent brand image, targeting business clients seeking reliable payment infrastructure. Technically, the site employs modern JavaScript frameworks such as Vue.js, integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, and Ahrefs, and uses Cookiebot for GDPR-compliant cookie management. The site is well-optimized for mobile and SEO, with good performance metrics and accessibility features. Security-wise, the site enforces HTTPS, uses CSRF protection cookies, and provides a comprehensive cookie consent mechanism, though it lacks explicit security policy or incident response pages. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site demonstrates a mature digital presence with good privacy compliance and security posture, suitable for its business domain.

P

Payrexx AG

payrexx.com

67

Payrexx AG is a Swiss-based payment service provider established in 2013, offering a comprehensive suite of online and offline payment solutions tailored for businesses and merchants. Their platform enables acceptance of all major payment methods without complicated contracts, emphasizing simplicity, cost-effectiveness, speed, and reliability. The company targets a broad business audience seeking flexible payment processing capabilities, including white-label solutions and POS integrations. Payrexx maintains a solid market position within the finance sector, supported by a professional and consistent brand presence. Technically, the website is built on the Squarespace CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, HubSpot, and Piwik PRO for analytics and marketing. The site is hosted on Amazon AWS infrastructure via Squarespace, with good mobile optimization and SEO practices. The presence of multiple marketing and tracking tools indicates a mature digital marketing strategy, although accessibility features are basic. From a security perspective, the website enforces HTTPS with HSTS enabled, employs a cookie consent banner compliant with GDPR, and avoids exposing sensitive data. However, there is room for improvement by enabling DNSSEC, publishing explicit security policies, and adding vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious activities were detected, and the WHOIS data aligns well with the business information, supporting legitimacy. Overall, Payrexx.com presents a trustworthy, professional, and well-maintained online presence with a strong focus on payment services. Strategic recommendations include enhancing security transparency, expanding compliance documentation, and continuous monitoring of third-party scripts to maintain a robust security posture.

F

Flug Taxi

flug-taxi.ch

49

Flug Taxi is a small Swiss company specializing in paragliding tandem flights, flight school courses, and special experience flights in the Aletsch Arena region of Valais, Switzerland. The website presents a professional and well-structured digital presence targeting tourists and adventure seekers interested in paragliding experiences. The business model focuses on service delivery in the adventure tourism sector with clear offerings and gift voucher options. Technically, the site uses the phpComasy CMS with modern JavaScript libraries such as jQuery and Video.js, providing a good user experience with mobile optimization and multimedia content. Security posture is adequate with HTTPS enforced and a cookie consent banner, but lacks advanced security headers and formal privacy or terms of service documentation. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

H

Hotel Pollux

hotelpollux.ch

52

Hotel Pollux is a family-run 4-star hotel located centrally in Zermatt, Switzerland, offering accommodation, wellness, gastronomy, and meeting services. The website presents a professional and comprehensive digital presence with multilingual support and integrated booking platforms. The business targets tourists and travelers seeking quality hospitality experiences in the alpine region. Technically, the site uses modern JavaScript libraries and a CMS platform, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent, though some security headers and policies could be improved. Overall, the site is trustworthy, well-branded, and provides clear contact and booking information.

H

Hotel Sonne Zermatt / Family Forster

sonnezermatt.ch

52

Hotel Sonne Zermatt is a well-established family-run hospitality business located in Zermatt, Switzerland, offering accommodation, dining, wellness, and event services. The website reflects a strong market position with multiple awards and a focus on guest well-being and quality service. The technical infrastructure is modern, leveraging a proprietary CMS with common web technologies such as jQuery, Video.js, and cookie consent management tools. The site is mobile-optimized and SEO-friendly, providing a positive user experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and aligned with the business's hospitality focus.

R

Restaurant Haberbüni

haberbueni.ch

43

Restaurant Haberbüni is a small hospitality business located near Bern, Switzerland, offering quality dining experiences including lunch menus, evening meals, and event hosting. The website presents a professional and consistent brand image with clear contact information and reservation capabilities. Technically, the site uses a modern CMS (indual CMS) and includes popular JavaScript libraries and analytics tools such as Google Tag Manager and Hotjar, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS usage and asynchronous loading of tracking scripts, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

A

Allianz Digitale Inklusion Schweiz (ADIS)

adis.ch

57

The Allianz Digitale Inklusion Schweiz (ADIS) is a Swiss non-profit alliance dedicated to promoting digital inclusion and accessibility. Their mission is to remove digital barriers and create an inclusive digital future for all people in Switzerland. The organization operates through a membership model, hosting events such as the national Day of Digital Inclusion and offering educational programs including CAS courses. The website reflects a well-structured, professional presence with clear navigation and comprehensive content focused on their mission and activities. Technically, the website is built on the fuman CMS platform with modern JavaScript libraries such as Flickity and Masonry for UI components. It integrates Google Analytics with a consent mechanism and uses HTTPS exclusively, ensuring secure communications. The site is mobile-optimized and includes accessibility features, aligning with the organization's focus on inclusion. From a security perspective, the site enforces HTTPS and manages cookie consent properly but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or sensitive data exposures were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's Swiss base. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements could include adding security headers, publishing a security policy, and providing a vulnerability disclosure channel to enhance trust and security posture.

S

Swico

swico.ch

68

Swico is a prominent Swiss business association representing the ICT and online industry, providing services such as membership representation, recycling of electronic devices, and occupational safety solutions. The organization serves a broad audience ranging from startups to international corporations, positioning itself as a key player in Switzerland's digital economy. The website reflects a professional and well-maintained digital presence, with comprehensive content, clear navigation, and active engagement through news, events, and social media channels. Technically, the site employs modern web technologies, including JavaScript frameworks, Google Analytics, and tracking tools, while maintaining good performance and accessibility standards. Security posture is solid with HTTPS enforcement and monitoring tools like Sentry, though explicit security policies and incident response information are not publicly available. Overall, the site demonstrates a high level of trustworthiness and compliance with privacy regulations, including GDPR, supported by a clear cookie consent mechanism and a detailed privacy policy.

K

Kaufmännischer Verband Schweiz

kfmv.ch

65

Kaufmännischer Verband Schweiz is a longstanding Swiss non-profit association representing employees, with a history spanning over 150 years. The organization focuses on promoting fair and progressive working conditions, modern work models, and lifelong learning. Their market position as the oldest active employee association in Switzerland underscores their credibility and influence in labor and social policy. The website reflects this professionalism with a well-structured, multilingual presence and clear business focus. Technically, the website is built on TYPO3 CMS, hosted by RTP GmbH, and employs modern web technologies including Cookiebot for GDPR-compliant cookie management and Google Tag Manager for analytics. The site demonstrates good SEO practices, mobile optimization, and accessibility at a basic level. Performance is moderate, suitable for the target audience. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Privacy compliance is well addressed through comprehensive cookie consent mechanisms and a detailed privacy policy. Overall, the website and organization present a low-risk profile with strong business credibility and compliance. Strategic recommendations include publishing dedicated security and incident response policies, enhancing accessibility, and providing direct contact information for improved user trust and transparency.

T

Tocco AG

tocco.ch

75

Tocco AG is a Swiss company specializing in cloud-based ERP software solutions tailored for education, non-profit organizations, associations, and social institutions. With over 20 years of experience, Tocco offers a comprehensive SaaS platform that integrates functionalities such as eBill, E-Rechnung, newsletter management, and course administration, all hosted and operated within Switzerland to ensure data sovereignty. The company targets Swiss educational institutions, associations, and non-profits seeking efficient administrative and organizational tools. Technically, the website is built on a custom CMS framework with modern JavaScript libraries and integrates Google Analytics and Tag Manager for analytics and marketing purposes. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response contacts could be improved. Overall, the website presents a professional, trustworthy, and user-friendly digital presence aligned with the company's market position and business model.

S

Stiftung "Zugang für alle"

access-for-all.ch

48

Stiftung "Zugang für alle" is a Swiss non-profit organization serving as the national competence center and certification authority for digital accessibility. The organization offers expert consulting, accessibility testing, certification services, and training courses aimed at helping website and app owners achieve digital accessibility compliance. With over 25 years of experience, it holds a leading market position in Switzerland for digital accessibility services. The website is built on WordPress with modern plugins and analytics tools, demonstrating a mature digital infrastructure. Security posture is strong with HTTPS and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-optimized for accessibility and SEO.

S

Stiftung zuwebe

intermezzo-zug.ch

50

Intermezzo is a small, socially-driven crêperie located in Zug, Switzerland, operated as an integration project by Stiftung zuwebe. The business uniquely combines hospitality services with social inclusion by employing individuals with special support needs, guided by professional staff. Their market position is niche, targeting socially conscious customers and the local community. The website reflects this mission with clear content, good design, and comprehensive contact information. Technically, the site uses a modern CMS (MoveCMS), integrates Google Analytics and YouTube for media and tracking, and employs a robust cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and CSRF protections on forms, though some security headers and incident response information are missing. Overall, the site is trustworthy, privacy-conscious, and professionally maintained.

E

Elefant

elefant.ch

59

Elefant is a community-oriented hospitality and event venue located in Baar, Switzerland, operated under the parent organization Stiftung zuwebe. The website presents a well-structured and content-rich platform offering information about gastronomy, events, and educational training programs primarily in hospitality and kitchen sectors. The business targets a broad local audience including families and community members, emphasizing inclusivity and sustainability. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern plugins for event management and SEO optimization. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though it lacks explicit security policies and incident response contacts. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the site is professional, trustworthy, and well-positioned as a local community hub.

R

Restaurant Schlosserei

restaurant-schlosserei.ch

46

Restaurant Schlosserei is a socially responsible gastronomy business operating in Hünenberg, Switzerland, under the Stiftung zuwebe foundation. It offers breakfast and lunch menus with a focus on fresh, healthy meals and supports employment for people with disabilities. The website is well-structured, professionally designed, and provides clear contact and business information. It integrates modern tracking and consent management tools, ensuring GDPR compliance. The technical infrastructure includes Google Analytics, Google Tag Manager, and CookieYes for cookie consent, built on the MoveCMS platform. Security posture is solid with HTTPS and cookie management, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy and serves its target audience effectively.

S

Stiftung zuwebe

restaurant-story.ch

50

Restaurant Story is a socially responsible restaurant located in Baar, Switzerland, operated as a cooperative effort between Stiftung zuwebe and Alfred Müller AG. It offers breakfast and lunch with a focus on regional quality products and inclusive employment for people with and without disabilities. The restaurant also supports charitable projects such as water well funding in Cameroon. The website is professionally designed, mobile-optimized, and provides clear contact information and social media presence. Technically, it uses modern tools like Google Analytics, Tag Manager, and CookieYes for privacy compliance. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. Overall, the domain registration is consistent and legitimate, supporting the business claims.

S

Stiftung zuwebe

wertsache.ch

57

Stiftung zuwebe operates a Swiss-based non-profit e-commerce webshop specializing in gift and food products such as Apéroplatten, Chlaussäcke, and Geschenkboxen. The website is professionally designed with consistent branding and clear navigation, targeting a general audience interested in regional specialty products. The technical infrastructure is built on the PepperShop platform using modern libraries like jQuery and Bootstrap, providing a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not published. Overall, the site demonstrates good privacy compliance and business credibility with transparent contact information and social media presence.

D

Diwa Mediamatik

diwa.ch

66

Diwa Mediamatik is a small Swiss technology company specializing in web design, hosting, and media services with over 30 years of experience. Their business model focuses on providing end-to-end internet presence solutions including CMS, SEO consulting, and media production primarily targeting clients in the Aargau region. The website demonstrates a solid technical foundation using modern web technologies and a proprietary CMS named Jasmin. While the site is well-structured, mobile-optimized, and includes a cookie consent mechanism, it lacks explicit security policies and terms of service. Security posture is moderate with room for improvement in headers and incident response transparency. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

H

Hugi Pro Sport GmbH

hugiprosport.ch

49

Hugi Pro Sport GmbH is a Swiss-based company founded in 2011, serving as the official Swiss general representative for the tennis and squash brand Tecnifibre. The company operates a professional website targeting both end customers and registered dealers, offering an online shop for sports products. The business model combines B2C and B2B e-commerce, focusing on retail distribution within Switzerland. The website is well-branded, consistent, and provides clear contact information, enhancing trust and credibility. Technically, the website is built on Joomla CMS with modern frameworks like Bootstrap 5 and integrates various libraries such as jQuery and Smart Slider 3. It uses Google Analytics for visitor tracking and is mobile-optimized with good SEO practices. Performance is moderate, and accessibility is basic but functional. Security is enforced via HTTPS with anonymized IP tracking in analytics, though some security headers are missing, and no explicit cookie consent mechanism is present. The security posture is solid but could be improved by adding standard security headers and formalizing incident response policies. No vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the website presents a professional and secure platform for its retail operations. Strategic recommendations include implementing a cookie consent banner to enhance GDPR compliance, adding missing security headers, and publishing a security policy or incident response contact to improve transparency and readiness.

T

Tennis Academy System 4®

tennisparks-system4.com

62

Tennis Academy System 4® operates a local tennis academy based in Lutry, Switzerland, providing tennis training and related services. The website is built on the Wix platform, supporting multiple languages including French, German, and English, targeting tennis players and enthusiasts in the region. The business appears to be a small-scale service provider with a focus on tennis fundamentals and academy programs. Technically, the site uses Wix's Thunderbolt framework and standard JavaScript polyfills, with hosting and infrastructure managed by Wix.com. Performance and mobile optimization are moderate to good, but SEO and accessibility features are basic. Security posture is adequate with HTTPS enabled and some JavaScript security measures, but lacks important security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is safe, professional, and trustworthy for its intended audience but would benefit from enhanced privacy and security practices.

J

Joseph Tennisplatzbau AG

josephtennis.ch

45

Joseph Tennisplatzbau AG is a Swiss-based company specializing in tennis court construction, maintenance, and related services. Their offerings include various tennis court surfaces, lighting, irrigation, fencing, accessories, and training courses for court caretakers. The company operates an e-commerce platform powered by Prestashop, targeting tennis clubs, players, and coaches primarily within Switzerland. The website presents a professional and consistent brand image with clear navigation and product information. Technically, the site uses modern web technologies such as jQuery and Owl Carousel, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS and uses secure forms but lacks comprehensive security headers and published privacy or cookie policies, indicating compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

F

Fourteen SA

14fourteen.com

63

14Fourteen is a Swiss-based company specializing in premium tennis apparel and sportswear, emphasizing Swiss quality and Italian design. The website serves as a corporate information portal and links to an e-commerce shop for tennis gear and accessories. The company positions itself in the premium sportswear market targeting tennis players and enthusiasts. Technically, the site is built on the BigCommerce platform using the Stencil framework, with integration of modern web technologies such as Google Fonts and Google Analytics 4. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published privacy or security policies. No direct contact emails or phone numbers are found on the corporate site, which may impact user trust. Overall, the domain registration data supports the legitimacy and maturity of the business. Strategic improvements include publishing comprehensive privacy and terms of service pages, enhancing security headers, and providing clear contact information to improve trust and compliance.

D

Decathlon

decathlon.ch

55

Decathlon is a large international retailer specializing in sports equipment and apparel, with a strong presence in Switzerland as evidenced by this localized splash page. The website serves as a language selection gateway, offering German and French options, and is designed with a professional and consistent brand identity. The technical infrastructure includes modern web technologies such as JavaScript, CSS, JSON-LD structured data, and integration with third-party marketing and tracking services like Ysance DMP and TagCommander. Performance optimizations such as font preloading and responsive design are present, contributing to a good user experience. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, the absence of explicit security headers and privacy/cookie policies indicates room for improvement in compliance and security best practices. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency and security controls.

V

Vaudoise Assurances

vaudoise.ch

72

Vaudoise Assurances is a well-established Swiss insurance company founded in 1895, offering a broad range of insurance products and services to both private individuals and enterprises. The company holds a strong market position in Switzerland with diversified offerings including automobile, household, life, corporate, assistance, and savings insurance. The website reflects a professional and comprehensive digital presence with multi-language support and clear customer engagement channels. Technically, the site uses modern web technologies such as Google Tag Manager and Google Maps API, and is built on the Sitefinity CMS platform. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and secure forms, although some security headers are missing and no explicit security policy or incident response information is published. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the website is trustworthy, professional, and aligns well with the company's business profile.

N

Nerves

nerves.ch

62

Nerves is a Zurich-based creative agency specializing in digital strategy, design, branding, and digital services since 2009. The company targets ambitious brands and companies seeking to enhance their digital presence and brand identity. Their market position is that of an established, small-sized agency with a strong focus on creative digital solutions. The website reflects a professional and modern digital infrastructure, leveraging advanced JavaScript libraries such as Three.js for interactive 3D graphics and Google Analytics 4 for user tracking. The technical implementation is solid with good mobile optimization and SEO practices. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some improvements like security headers and incident response information could be added. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and professional, supporting the company's credibility in the creative media sector.

L

LCK Schweiz AG

lckschweiz.ch

61

LCK Schweiz AG is a Swiss-based company specializing in professional cleaning and care products for furniture and automotive interiors, with over 35 years of experience. The company offers a broad product catalog, professional cleaning services, and dealer support, positioning itself as a trusted regional player in the retail sector. The website is well-structured, content-rich, and targets both end consumers and business customers in Switzerland. Technically, the site uses legacy JavaScript libraries and custom-built components, with moderate performance and basic mobile optimization. Security posture is moderate, with no HTTPS or security headers explicitly detected in the provided data, and outdated libraries present potential risks. Privacy compliance is good, with clear cookie consent and privacy policy documents available. Contact information is transparent and complete, enhancing business credibility.

S

Schweizerische Bundesbahnen SBB

sbb.ch

77

The website www.sbb.ch serves as the official online portal for the Swiss Federal Railways (SBB), providing comprehensive travel information, ticketing services, and customer support for public transportation in Switzerland. It holds a strong market position as the national railway operator, offering services to a broad audience including daily commuters, tourists, and business travelers. The site is well-branded, multilingual, and professionally maintained, reflecting the enterprise scale and public sector nature of the organization. Technically, the site leverages modern web technologies including React and Next.js frameworks, supported by performance and monitoring tools such as New Relic and Adobe Launch. The infrastructure is optimized for fast loading, mobile responsiveness, and accessibility, ensuring a high-quality user experience. SEO and metadata are well implemented, enhancing discoverability and usability. From a security perspective, the website enforces HTTPS, employs multiple security headers, and integrates cookie consent mechanisms compliant with GDPR. While no explicit security policy or incident response information is published, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The domain registration is consistent with the official entity, reinforcing trust and legitimacy. Overall, the website demonstrates a high level of professionalism, security, and compliance, suitable for a critical national transportation service. Strategic recommendations include publishing dedicated security and incident response policies and enhancing transparency around vulnerability disclosures to further strengthen trust and security culture.

C

cyon GmbH

cyon.ch

59

cyon GmbH is a well-established Swiss web hosting provider based in Basel, offering a comprehensive range of services including domain registration, various tiers of web hosting, managed servers, agency servers, and a sitebuilder platform. With over 20 years of market presence and a strong reputation evidenced by high Google ratings, cyon targets individuals and businesses in Switzerland seeking reliable and secure web infrastructure solutions. The company emphasizes personal support, security, and sustainability in its offerings. Technically, the website employs modern web technologies such as Alpine.js for interactivity, Matomo for analytics, and Helpscout for customer support, ensuring a fast, mobile-optimized, and accessible user experience. The infrastructure appears robust with CDN usage and secure HTTPS enforcement. SEO and accessibility best practices are well implemented. From a security perspective, cyon demonstrates strong practices including HTTPS with excellent SSL configuration, security headers, and secure forms. However, there is room for improvement in publishing explicit security policies and incident response contacts. No vulnerabilities or suspicious activities were detected. Overall, cyon GmbH presents a low-risk profile with a mature digital presence, strong business credibility, and good privacy compliance. Strategic recommendations include enhancing transparency around security policies and incident response, and formalizing vulnerability disclosure mechanisms.

I

indual GmbH

yourbureau.ch

55

yourBureau is a Swiss-based web application developed by indual GmbH, offering comprehensive business software solutions tailored for small and medium-sized service companies. The platform provides features such as time tracking, customer management, invoicing, project budgeting, and expense management, positioning itself as a complete office solution for the Swiss market. The company emphasizes Swiss data hosting and security, appealing to clients valuing data sovereignty and compliance. Technically, the website leverages modern JavaScript libraries and a proprietary CMS, delivering a responsive and accessible user experience. Security measures include encrypted connections, two-factor authentication options, and encrypted sensitive data storage, although some improvements in security headers and incident response transparency are recommended. Overall, the website demonstrates a mature digital presence with strong business credibility and a good security posture.

I

indual GmbH

felizzio.com

54

felizzio.com is a Swiss-based SaaS platform developed and hosted in Switzerland by indual GmbH, offering an online voucher sales and management system tailored for Swiss businesses such as restaurants, hotels, and small enterprises. The platform emphasizes ease of use, flexibility, and GDPR compliance, providing multiple payment options and customizable voucher designs. The website is professionally designed, multilingual, and targets the Swiss hospitality and retail sectors. Technically, the site uses modern JavaScript libraries like jQuery and Slick Carousel, integrates Google Tag Manager for analytics, and employs HTTPS with IP anonymization for privacy. Security posture is generally good, though the absence of explicit security headers and cookie consent mechanisms are areas for improvement. The WHOIS data is missing or unavailable, which raises some concerns about domain legitimacy, but the professional presentation and clear business information mitigate these risks. Overall, felizzio.com presents a trustworthy and functional online voucher solution with room for enhanced security and privacy compliance.

I

indual GmbH

dodeley.com

49

Dodeley.com is a Swiss-based professional newsletter and email marketing platform operated by indual GmbH. The service targets small businesses and private users, offering an easy-to-use SaaS solution for creating, managing, and sending newsletters with features such as template creation, recipient management, scheduling, and detailed statistics. The website is well-established with a domain age of over 15 years, indicating a mature presence in the market. Hosting and legal compliance are aligned with Swiss regulations, enhancing trustworthiness. Technically, the website employs a custom CMS with a technology stack including jQuery, jQuery UI, and various JavaScript libraries for UI enhancements and functionality. Google Analytics and Google Tag Manager are used for user tracking and analytics. The site is mobile optimized and SEO friendly, though some libraries are outdated, which could pose security risks. Hosting is via Swiss DNS providers, and HTTPS is properly implemented. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and modern security headers. The use of older JavaScript libraries may expose the site to vulnerabilities. No explicit security or incident response policies are published, which could be improved. Privacy compliance is basic but present, with cookie consent banners and a privacy policy in German. Overall, the website presents a professional and trustworthy front with moderate technical and security maturity. Strategic improvements in security headers, library updates, and explicit security policies would enhance the security posture and compliance. The business model is clear and well-positioned in the Swiss SME market.

S

Swiss Tennis Padel

swisstennis-padel.ch

50

Swiss Tennis Padel is the official Swiss sports federation promoting the rapidly growing sport of Padel in Switzerland. The organization provides comprehensive information about the sport, organizes tournaments, supports clubs and coaches, and manages national facilities including a newly opened national performance center. The website reflects a professional and consistent brand aligned with Swiss Tennis, targeting players, clubs, and the broader sports community. Technically, the site uses a modern CMS (MoveCMS), integrates Google Analytics and Tag Manager for analytics, and employs CookieYes for GDPR-compliant cookie consent. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are not detected and no explicit security policy or incident response information is published. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site is trustworthy and credible, supporting the organization's mission effectively.

S

SWICA

swica.ch

76

SWICA is a prominent Swiss health insurance provider known for its high customer satisfaction ratings and comprehensive insurance offerings including basic, supplementary, and special insurance products. The company targets private customers primarily within Switzerland and emphasizes telemedicine and customer support services. The website reflects a mature digital presence with modern technologies such as Matomo analytics, Google Tag Manager, and a chatbot for customer interaction. Privacy and cookie policies are well implemented with consent mechanisms, aligning with GDPR requirements. Security posture is strong with HTTPS enforcement and security headers, though explicit security policy and incident response details are not publicly available. Overall, the website is professional, trustworthy, and well-optimized for performance and accessibility.

S

Swiss Tennis

kidstennis.ch

55

Swiss Tennis is the official national tennis federation of Switzerland, focusing on promoting tennis at all levels including a dedicated Kids Tennis program for children aged 5 to 12. The website serves as a comprehensive portal for information, training, events, and membership services, positioning Swiss Tennis as a leading sports federation in the country. The digital infrastructure is built on a CMS platform with modern web technologies, integrating analytics and cookie consent tools to ensure compliance and user experience. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. The site demonstrates high professionalism, clear navigation, and strong branding consistency. Overall, Swiss Tennis maintains a trustworthy and user-friendly online presence that supports its mission to grow tennis in Switzerland.

Eidg. Organisatorenprüfungen (EOP) is a Swiss non-profit organization specializing in professional certification and education in organizational management. The website provides comprehensive information about the Berufsprüfung (professional examination) for specialists in corporate organization and the Höhere Fachprüfung (advanced professional examination), which is being phased out from 2025. The target audience includes professionals seeking career advancement through recognized Swiss federal certifications. The organization maintains a professional online presence with clear contact information and partner affiliations, positioning itself as a trusted authority in its niche educational sector. Technically, the website employs a custom CMS with modern web technologies including jQuery, Google Analytics, and responsive design elements. The site is mobile optimized and performs moderately well, with good SEO practices and accessibility basics. However, it lacks some advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and user privacy. From a security perspective, the site uses HTTPS with a strong SSL configuration and does not expose sensitive data or vulnerable libraries. The absence of a published security policy or incident response contact is a gap that could be addressed to improve trust and readiness. User tracking is moderate via Google Analytics, but no explicit cookie consent or privacy banners were detected. Overall, the website is trustworthy, professional, and well-aligned with its business purpose. Strategic improvements in privacy compliance and security transparency would enhance its posture and user confidence.

I

indual GmbH

indual.ch

57

indual GmbH is a Swiss-based professional web agency specializing in custom web design, web development, and hosting services. They also develop proprietary software products such as yourBureau (office solution), felizzio (online voucher system), and dodeley (newsletter solution), targeting small to medium enterprises and local organizations primarily in the Wallis region of Switzerland. The company maintains a strong regional presence with clear contact details and legal compliance, including GDPR-aligned privacy and cookie policies. Their website demonstrates a high level of professionalism, modern technical infrastructure, and good user experience with mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site reflects a trustworthy and credible business with a moderate to high digital maturity level.

S

SGO Business School

sgo.ch

67

SGO Business School is a well-established Swiss educational institution specializing in business and management continuing education with over 50 years of tradition. It offers a broad portfolio of seminars, certifications, and degree programs in project management, business analysis, process management, lean management, product management, change management, and agile methodologies. The institution holds EduQua certification, reinforcing its quality and credibility in the education sector. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content tailored to professionals and organizations seeking advanced business education. Technically, the site is built on TYPO3 CMS with modern analytics and marketing integrations, ensuring a mature digital presence. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly disclosed. Overall, the site is trustworthy, compliant with GDPR, and provides transparent contact information and social media engagement.

H

hep Verlag

hep-verlag.ch

66

hep Verlag is a Swiss-based educational publishing company specializing in academic and professional training materials. The website presents a professional and modern design, targeting students and educators primarily within Switzerland. The business operates in the education sector with a medium-sized market presence. Technically, the site uses modern JavaScript frameworks such as Vue.js and Nuxt.js, along with Google Tag Manager for analytics and Adobe Typekit for fonts, indicating a contemporary digital infrastructure. However, there is a lack of visible privacy and cookie policies, and no explicit contact information was found in the provided HTML content. Security posture appears minimal with no detected security headers or incident response policies. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security best practices.

M

Meier Tobler AG

meiertobler.ch

66

Meier Tobler AG is a well-established Swiss company specializing in heating, climate, ventilation, and sanitary technology products and services. With over 80 years of experience and a large network of 400 service technicians nationwide, it holds a leading position in the Swiss energy and building technology market. The company targets both consumers and professionals, offering comprehensive solutions including heating system renewals, service, and maintenance. The website reflects a professional and trustworthy brand with consistent messaging and strong digital presence including social media and e-commerce integration. Technically, the website employs modern web technologies such as Vue.js, Google Tag Manager, and CookiePro for consent management, hosted on Netlify ensuring fast performance and good mobile optimization. Structured data is well implemented for SEO and business information. Privacy and cookie policies are present and GDPR compliant, though explicit security policies and incident response information are absent. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site could improve by publishing dedicated security policies and incident response contacts. Overall, the site is secure, performant, and compliant with privacy regulations, supporting the company's credibility and customer trust. The risk assessment is low with no critical issues detected. Strategic recommendations include enhancing transparency around security policies and incident response, and continuous monitoring of third-party scripts for vulnerabilities.

S

SJA Holding AG

sja-holding.ch

48

SJA Holding AG is a Swiss-based investment holding company specializing in direct and indirect equity participations and financing. The company targets innovative business ideas and supports founders through a structured investment evaluation process. Their market position is that of a niche player focusing on early-stage and active/passive investments. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant business content. Technically, the site uses standard web technologies including Google Analytics and Tag Manager, and is built on the MoveCMS platform. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and credible with clear contact information, though no phone numbers or social media presence are provided. The domain registration data aligns well with the business claims, supporting legitimacy.

S

Schweizerische Multiple Sklerose Gesellschaft

multiplesklerose.ch

51

The Schweizerische Multiple Sklerose Gesellschaft is a leading non-profit organization in Switzerland dedicated to supporting people affected by Multiple Sclerosis (MS). The website serves as a comprehensive resource offering information, peer support, counseling, events, and research initiatives. It positions itself as a neutral, pharma-independent authority with ISO 9001:2015 certification, reinforcing its commitment to quality and trust. The organization targets MS patients, their families, healthcare professionals, and the general public within Switzerland. The business model revolves around donations, memberships, and community engagement to fund research and support services. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates a mature digital presence with strong business credibility and trust indicators. It effectively balances user experience, content quality, and security, making it a reliable platform for its audience. No adult or questionable content is present, and the WHOIS data confirms the legitimacy and consistency of the organization’s identity. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and continuous monitoring of third-party scripts to maintain security and privacy standards.

M

Maltymore AG

maltymore.com

45

Maltymore AG operates a specialized e-commerce platform focused on whisky and spirits sales in Switzerland. The website offers a broad selection of products, including Scotch, world whiskies, spirits, and non-alcoholic beverages, targeting both private consumers and gastronomy businesses. The company emphasizes quality, variety, and convenience with online ordering and direct sales from their physical shop in Kemptthal. The site is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site uses a CMS (MoveCMS) and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Mouseflow, indicating a mature digital marketing approach. Security posture is solid with HTTPS, secure payment options, and CSRF protection, though explicit security headers and published security policies are lacking. WHOIS data is missing, which raises some legitimacy concerns, but the overall business presentation and contact information support trustworthiness. Privacy and cookie policies are present and GDPR compliant, with consent mechanisms implemented. Overall, the site is a well-functioning, professional retail platform with moderate security and privacy maturity.