Switzerland security reports

S

Stiftung zuwebe

zuwebe.ch

52

Stiftung zuwebe is a well-established Swiss non-profit foundation founded in 1967, providing educational, employment, and housing services for people with learning disabilities, intellectual disabilities, and psychological impairments primarily in the canton of Zug. The organization promotes social inclusion through various programs and offers a broad range of services including supported education, sheltered workplaces, and diverse living arrangements. Their market position is strong regionally with a clear focus on social impact and community integration. Technically, the website is built on MoveCMS by MovePeople.ch, leveraging modern technologies such as Google Tag Manager, Google Analytics, and CookieYes for consent management. The site is mobile-optimized, accessible (WCAG 2 AA certified), and implements a comprehensive cookie consent mechanism with granular user controls. Performance is moderate with good SEO and accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, it lacks explicit security policy pages and incident response contacts, and could improve by adding security headers and publishing vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. Overall, Stiftung zuwebe's website demonstrates a high level of professionalism, privacy compliance, and trustworthiness appropriate for a non-profit social services organization. Strategic improvements in security transparency and incident response readiness would further enhance their security posture and stakeholder confidence.

I

Intercoop House & Garden Cooperative

intercoophg.com

48

Intercoop House & Garden Cooperative is a leading European procurement organisation specializing in retail cooperatives. Established in 2009, it serves 14 members across 11 countries, managing over 5,000 stores and a purchasing volume exceeding €3 billion annually. The organisation focuses on strategic product categories including garden, pet, house, and DIY products, providing direct procurement, volume bundling, and price negotiations at a European level. Technically, the website is built on MoveCMS with integrations such as Google Maps API and CookieYes for cookie consent, hosted by Hostpoint AG. The site demonstrates good mobile optimization, SEO, and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit policies could be improved. Overall, the domain registration is consistent and legitimate, supporting the business claims. No critical vulnerabilities or suspicious content were detected.

S

SBB Cargo International

sbbcargo-international.com

54

SBB Cargo International operates as a major rail freight transportation provider in Europe, specializing in secure and timely cargo transport by rail. The company leverages its parent company Swiss Federal Railways' brand and infrastructure to serve logistics customers requiring cross-border and domestic freight solutions. The website reflects a professional business presence with clear service descriptions and a focus on quality and reliability. Technically, the site uses modern tracking and consent management tools such as Google Analytics and OneTrust, and is built on the MoveCMS platform. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. The absence of WHOIS data for the domain is a concern for domain registration transparency, though the website content and branding suggest legitimacy. Overall, the site scores well on content quality and business credibility but would benefit from enhanced security header implementation and clearer domain registration information.

P

PostFinance

postfinance.ch

71

PostFinance is a leading Swiss financial services provider specializing in payments, investments, retirement planning, and financing for private customers. The website targets private individuals seeking comprehensive financial solutions. The business is well-positioned in the Swiss banking sector with a strong brand presence and a broad portfolio of financial products. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager, and Adobe Experience Manager CMS, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforced and secure login mechanisms, though explicit security headers and published security policies are absent. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the website is professional and trustworthy, with room for improvement in transparency and privacy disclosures.

S

SITAG AG

sitag.ch

61

SITAG AG is a well-established Swiss manufacturer specializing in seating and office furniture, operating as a medium-sized enterprise under the parent company Nowy Styl. The company emphasizes Swiss quality, sustainability, and design innovation, targeting businesses and organizations requiring tailored office furnishing solutions. Their website reflects a mature digital presence with comprehensive product offerings and multiple contact channels. Technically, the site uses modern web technologies and tracking tools, though it lacks a visible cookie consent mechanism and dedicated security policy pages. Security posture is strong with HTTPS and security headers implemented, but improvements in privacy compliance and incident response transparency are recommended. Overall, SITAG AG presents a trustworthy and professional online presence aligned with its business history and market position.

X

X-Tra Production AG

x-tra.ch

44

X-Tra Production AG operates the X-TRA event location and hotel in Zurich, Switzerland, established since 1997. The company provides a multifunctional music and event ecosystem including concerts, parties, event planning, music professional services, and co-living accommodations. The website reflects a mature business with a clear market position in hospitality and entertainment sectors, targeting event organizers, music professionals, and the general public. Technically, the site uses modern web technologies including MoveCMS, Google Tag Manager, and reCAPTCHA, hosted by cloudWEB Digitale Medien. The site is mobile optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are missing. No critical vulnerabilities or adult content were detected. WHOIS data confirms domain legitimacy and consistency with business claims.

S

Swiss Tennis

swisstennis.ch

55

Swiss Tennis is the official national tennis federation of Switzerland, serving as the central hub and competence center for tennis activities in the country. The organization provides comprehensive services including tournament management, player rankings, coach education, and support for clubs and regional associations. The website reflects a mature digital presence with extensive content tailored to tennis players, coaches, and enthusiasts. It maintains a strong market position as the authoritative body for tennis in Switzerland, supported by partnerships with related platforms such as myTennis and myKidsTennis. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, CookieYes for consent management, and Google Maps API. The CMS used is MoveCMS by MovePeople.ch. The site is mobile-optimized, well-structured, and performs moderately well. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility features. From a security perspective, the site enforces HTTPS and uses secure login mechanisms via Microsoft B2C OAuth. A comprehensive cookie consent mechanism is implemented, supporting GDPR compliance. However, explicit security headers like CSP and X-Frame-Options are not clearly detected and could be enhanced. No critical vulnerabilities or exposed sensitive data were found. Overall, Swiss Tennis presents a trustworthy, professional, and user-friendly website that aligns well with its role as a national sports federation. Strategic recommendations include enhancing security headers, publishing a security policy, and improving accessibility compliance to further strengthen its security posture and user trust.

G

Groupe Mutuel Assurances

groupemutuel.ch

68

Groupe Mutuel is a major Swiss insurance group offering a broad range of insurance products including health, life, patrimony, and professional activity insurance for both private and corporate clients. The website is professionally designed with clear navigation and multilingual support, targeting Swiss residents and businesses. The technical infrastructure includes modern JavaScript libraries and analytics tools such as Google Tag Manager and Dynatrace RUM, indicating a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are lacking. Privacy compliance is partial due to missing explicit privacy and cookie policies on the analyzed page. Overall, the website is trustworthy and well-positioned in the Swiss insurance market.

M

MovePeople

movepeople.ch

54

MovePeople is a Swiss-based web agency specializing in innovative web technologies to support marketing and sales through corporate websites, webshops, and web applications. The company positions itself as a creative and forward-looking partner, focusing on delivering tailored digital solutions that leverage modern technologies. Their client portfolio includes notable organizations, reflecting a strong market presence in Switzerland. Technically, the website is built on a custom CMS (MoveCMS) using standard web technologies such as HTML5, CSS3, JavaScript, PHP, and MySQL. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security-wise, the site enforces HTTPS, uses standard security headers, and implements a comprehensive cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a mature digital infrastructure and a professional security posture, supporting the company's credibility and trustworthiness.

S

SGO Schweizerische Gesellschaft für Organisation und Management

sgo-verein.ch

52

SGO Schweizerische Gesellschaft für Organisation und Management operates as a Swiss-based interdisciplinary community focused on excellence in organization and management. The organization facilitates knowledge exchange, professional development, and networking among organizations and professionals, particularly targeting Fach- und Führungskräfte (specialists and executives). Their business model centers on membership services, events, and communities of practice, positioning them as a niche but established player in the Swiss professional development market. Technically, the website is built on the indual CMS platform, leveraging modern JavaScript libraries such as jQuery and Fancybox, and includes video content and cookie consent mechanisms, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible with good SEO practices.

O

Opera AG

opera-ag.ch

51

Opera AG is a Swiss-based company specializing in event technology services, supporting events such as symposia, congresses, sports events, and Special Olympics. The company presents itself as a professional and established service provider in the regional event technology market. Their website is well-structured, primarily in German, and targets event organizers and companies requiring technical event support. The business model focuses on providing technical event solutions and project support. Technically, the website uses a moderate technology stack including jQuery, Fancybox, GSAP, and Google Analytics with IP anonymization. However, some libraries are outdated, and mobile optimization is basic. Security posture is moderate with HTTPS implied but no visible security headers or advanced security policies. Privacy compliance is minimal with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional but could improve in security and privacy compliance.

Intertime is a Swiss-based company specializing in the design and manufacture of premium seating furniture, including sofas, armchairs, and functional chairs. The company emphasizes a combination of design excellence, seating comfort, and product variation, collaborating with renowned designers and its internal design team. Their business model includes direct retail through their website and a network of dealers, complemented by an online shop for furniture care products operated by a trusted partner. The website is professionally designed, multilingual, and targets consumers and retailers seeking high-quality seating solutions. Technically, the website is built on WordPress using the Avada theme and Fusion Builder, integrating modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website reflects a credible and established business with a good digital presence.

M

MOLINOTEQ

molinoteq.ch

50

MOLINOTEQ is a Swiss-based technology company specializing in AI-powered digital marketing, web design, and e-commerce solutions. Positioned as a Swiss AI specialist, the company targets businesses seeking to enhance their online presence through tailored AI-driven marketing and web services. The website reflects a professional and modern digital infrastructure leveraging WordPress and Elementor, integrated with advanced marketing and analytics tools such as Google Analytics, Google Ads, Hotjar, and CookieYes for compliance and user experience optimization. Security posture is solid with HTTPS enforced and reCAPTCHA implemented, though explicit security headers and policies are absent. Overall, MOLINOTEQ presents a credible and trustworthy business front with clear contact channels and active social media presence.

H

Hightech Zentrum Aargau AG

hightechzentrum.ch

57

Hightech Zentrum Aargau AG is a regional innovation consultancy and network hub focused on supporting small and medium-sized enterprises (KMU) in the Aargau canton of Switzerland. The organization offers innovation consulting, project funding, networking opportunities, and events to foster technological advancement and business growth. Their market position is that of a trusted regional partner with a strong focus on practical innovation support for manufacturing, energy, and technology sectors. The website is professionally designed, content-rich, and targets primarily German-speaking SMEs with an English alternative available. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating marketing and analytics tools such as Google Analytics, Google Tag Manager, LinkedIn Insight Tag, and Salesforce forms. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no visible sensitive data exposure, but lacks some security headers and explicit incident response information. Overall, the security posture is solid but could be improved by implementing cookie consent mechanisms and publishing security policies. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. No blocking or WAF challenges were detected, allowing full content access and analysis. Strategic recommendations include enhancing privacy compliance with cookie consent, adding security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party scripts for vulnerabilities to maintain trust and security.

M

medienjobs.ch

medienjobs.ch

54

medienjobs.ch is a specialized Swiss job board focused on the media, communication, marketing, and related sectors. It offers a platform for employers to post job listings and for job seekers to find relevant employment opportunities in Switzerland. The website features a professional design, clear navigation, and comprehensive job listings with structured data to enhance SEO. The platform targets professionals and companies within the media and communication industries, positioning itself as a niche market leader in this domain. Technically, the site is built on WordPress, leveraging modern web technologies and analytics tools such as Google Analytics, Google Tag Manager, and Matomo, ensuring good digital maturity and performance. Security-wise, the site enforces HTTPS, employs standard security headers, and maintains privacy and cookie policies with consent mechanisms, reflecting a solid security posture. No critical vulnerabilities or suspicious activities were detected. Overall, medienjobs.ch presents a trustworthy, professional, and well-maintained online job marketplace for the Swiss media sector.

P

Proton AG

simplelogin.io

74

SimpleLogin is a privacy-focused, open source email aliasing service operated by Proton AG, a Swiss company. It enables users to create and manage email aliases to protect their real email addresses from spam, phishing, and tracking. The service offers browser extensions, mobile apps, and supports custom domains, positioning itself as a niche leader in privacy-enhancing email solutions. The website is professionally designed, content-rich, and highly accessible, reflecting a mature digital presence. Technically, it uses modern web technologies including Hugo, Vue.js, and Bootstrap, and is hosted on reputable infrastructure with Cloudflare DNS and Proton/UpCloud servers. Security posture is strong with HTTPS, open source transparency, and advanced features like PGP encryption and 2FA, though DNSSEC and security headers could be improved. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

I

ISSX IT & Security Swiss Conference

issxconference.ch

71

The ISSX IT & Security Swiss Conference website represents a professional event platform focused on IT security, cloud technologies, and cyber resilience targeted at IT managers, partners, and experts in Switzerland. The site offers a comprehensive agenda, networking opportunities, and expert sessions, positioning itself as a key player in the Swiss IT security conference market. Technically, the website employs modern web technologies including service workers for PWA capabilities, Google Tag Manager for analytics, and a third-party consent management system to handle cookie policies. The site is hosted on a platform likely provided by multiscreensite.com, ensuring moderate performance and good mobile optimization. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and visible privacy policies or terms of service, which are recommended for compliance and trust. The WHOIS data indicates privacy protection, which is typical and justified for this business type. Overall, the website is safe, professional, and trustworthy with room for improvement in privacy and contact transparency.

I

ictjobs.ch

ictjobs.ch

56

ictjobs.ch is a specialized online job board platform focused on IT and technology job listings in Switzerland. It serves IT professionals and employers by providing a comprehensive and regularly updated listing of IT-related job opportunities. The platform is well-positioned in the Swiss IT recruitment market, offering services such as job search, filtering by categories, and employer job posting capabilities. The website is primarily German language focused, targeting the Swiss IT job market with a professional and user-friendly interface. Technically, the site is built on WordPress CMS with a modern tech stack including JavaScript libraries like Owl Carousel and Font Awesome for UI enhancements. SEO is well implemented using the All in One SEO Pro plugin, and analytics are managed via Google Tag Manager and Bing Ads. The site is mobile optimized and performs moderately well, with good accessibility and SEO practices. From a security perspective, the website enforces HTTPS, uses standard security headers, and includes CSRF tokens in forms, indicating a good security posture. However, it lacks a dedicated security policy or incident response page and does not publish a vulnerability disclosure or security.txt file. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature privacy stance. Overall, ictjobs.ch presents a trustworthy and professional platform for IT job seekers and employers in Switzerland. The site is well maintained with good content quality, technical implementation, and privacy compliance. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen trust and compliance.

D

DR. PASCAL SIEBER & PARTNERS AG

sieberpartners.com

67

DR. PASCAL SIEBER & PARTNERS AG is a Swiss-based independent consulting firm specializing in digital business transformation and ICT strategy. The company offers a broad range of consulting services including strategy, business, software, project, and IT consulting, as well as executive training through their Academy. Their market position is that of a specialist partner for companies and organizations undergoing digital transformation, with a focus on delivering innovative strategies and supporting clients from ideation to implementation. The website is professionally designed, well-structured, and targets business leaders and managers seeking digital excellence. Technically, the site is built on Squarespace CMS, leveraging modern web technologies and integrates Google Analytics and Tag Manager for marketing and analytics purposes. The site is mobile optimized and SEO friendly, providing a good user experience. Security-wise, the site uses HTTPS but lacks some important security headers such as HSTS and CSP, which could be improved to enhance protection against common web threats. Privacy compliance is well addressed with a visible cookie banner and a dedicated privacy policy page in German, indicating GDPR awareness. However, the WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy and should be verified. Overall, the website presents a trustworthy and professional image but could benefit from enhanced security headers and verification of domain registration details.

K

KMU SWISS AG

kmuswiss.ch

59

KMU SWISS AG operates a Swiss-based business networking platform focused on small and medium-sized enterprises (SMEs). The company organizes a variety of events such as symposiums, meetups, and digital networking opportunities to facilitate knowledge sharing, motivation, and business connections. Their market position is that of a well-established SME network in Switzerland with a strong partner ecosystem and a membership-driven business model. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its target audience of entrepreneurial professionals. From a technical perspective, the website uses a combination of jQuery, Slick Carousel, and third-party analytics and marketing tools such as Mouseflow and Google Tag Manager. The CMS powering the site is MoveCMS. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the site lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security maturity. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic but present, with a privacy policy and cookie banner aligned with GDPR requirements. Overall, KMU SWISS AG presents a trustworthy and professional online presence with a strong business focus and moderate technical sophistication. Strategic improvements in security headers and incident response transparency would further strengthen their security posture and trustworthiness.

P

Proton AG

protonvpn.com

71

Proton AG operates Proton VPN, a leading privacy-focused VPN service developed by scientists from CERN and MIT. The company offers a suite of encrypted services including email, calendar, cloud storage, password management, and VPN, targeting privacy-conscious users globally. Proton VPN is recognized for its no-logs policy, open-source applications, and strong encryption standards, positioning it as a top-tier VPN provider with a robust market presence and excellent user trust. The website demonstrates a mature technical infrastructure leveraging modern frameworks like Astro and React, hosted via Cloudflare for performance and security. Security posture is strong with HTTPS enforcement, advanced encryption protocols, and features like kill switch and DNS filtering. However, explicit incident response and vulnerability disclosure policies are not prominently published, representing an area for improvement. Overall, Proton VPN's digital presence reflects a professional, secure, and privacy-compliant service with high trustworthiness and excellent user experience.

D

Desitin Pharma GmbH

desitin.ch

59

Desitin Pharma GmbH is a Swiss pharmaceutical company specializing in epilepsy-related products and medical information services. The company maintains a professional and multilingual website targeting both patients and healthcare professionals, offering resources such as the Vademecum Antiepilepticum Helveticorum and the AmiKo Desitin App. The website reflects an established market position with international regional sites, indicating a broad European presence. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses various plugins for SEO, cookie management, and user interaction. The site is mobile-optimized and employs Google Analytics for user tracking, with a clear cookie consent mechanism in place. Performance is moderate, with good SEO and accessibility basics. From a security perspective, the site uses HTTPS and has implemented cookie consent and privacy policies compliant with GDPR. However, explicit security policies and incident response information are absent. No critical vulnerabilities or suspicious activities were detected, but improvements in security headers and disclosure practices are recommended. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic enhancements in security transparency and accessibility would further strengthen its posture.

I

ITBusiness

itbusiness.ch

61

ITBusiness is a well-established Swiss ICT media outlet providing daily news and professional content for the IT and ICT industry. With over 20 years of history, it serves a professional audience interested in technology, cybersecurity, and industry developments. The website is powered by Joomla CMS and integrates modern web technologies including Bootstrap, jQuery, and Google services such as Analytics and reCAPTCHA. The site features a cookie consent mechanism and uses HTTPS to secure communications. However, explicit privacy policies and terms of service are not found, which could be improved for compliance and transparency. Security posture is solid with HTTPS and form protections, but lacks published security policies or incident response contacts. Overall, the site is professional, content-rich, and trustworthy, targeting ICT professionals in Switzerland.

V

Veeam Company

veeam.com

79

Veeam Software is a well-established enterprise specializing in backup, disaster recovery, and intelligent data management software for virtual, physical, and multi-cloud infrastructures. Founded in 2006 and headquartered in Baar, Switzerland, it operates under the parent company Insight Partners. The website presents a professional and comprehensive digital presence, targeting IT professionals and enterprises seeking robust data portability and resilience solutions. The company emphasizes secure backup, rapid recovery, and data management freedom across cloud and physical platforms. Technically, the website leverages modern web technologies including Adobe DTM for tag management, Font Awesome for icons, and structured data (JSON-LD) for enhanced SEO and business information representation. The site is mobile-optimized, fast-loading, and well-structured, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs best practices such as canonical URLs and structured data but lacks explicit security headers and published security policies or incident response contacts. The absence of WHOIS domain registration data is a notable anomaly, raising questions about domain transparency despite the legitimate business content and branding. Overall, the site is trustworthy and professional but could improve privacy compliance and security transparency.

I

INDUCS AG

inducs.com

58

INDUCS AG operates as a manufacturer and provider of induction cooking appliances targeted at professional kitchens and the commercial foodservice industry. The company is part of the Welbilt group, a recognized brand in commercial kitchen equipment, which strengthens its market position. The website presents a professional image with clear product offerings, service and support information, and downloadable resources, catering to industry professionals and businesses requiring reliable induction cooking solutions. The target audience includes commercial kitchen operators and foodservice providers seeking efficient and powerful cooking appliances. Technically, the website employs modern web technologies including Bootstrap for responsive design, jQuery for scripting, and Microsoft Application Insights for telemetry and analytics. The site is well-structured with good mobile optimization and accessibility features, indicating a mature digital infrastructure. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the website uses HTTPS with excellent SSL configuration and includes a cookie consent mechanism, demonstrating awareness of privacy compliance. However, there is a lack of explicit security policies, incident response contacts, and security headers, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that slightly impacts trustworthiness but does not negate the professional presentation and association with Welbilt. Overall, the website is professionally maintained, secure at a basic level, and compliant with privacy regulations. The main risk lies in the missing WHOIS data which should be monitored. Strategic recommendations include publishing detailed security policies, adding incident response information, and enhancing security headers to improve the security posture and trust further.

Preprints.org is a multidisciplinary preprint platform operated by MDPI AG, a reputable academic publisher based in Switzerland. The platform enables researchers to share their manuscripts openly prior to peer review, supporting the academic community with rapid dissemination of scientific knowledge. The website is professionally designed, mobile-optimized, and provides comprehensive privacy and cookie policies, reflecting a mature digital presence. Technically, the site uses modern frameworks such as Tailwind CSS and implements strong security headers and HTTPS, ensuring a secure user experience. However, explicit security policies and incident response contacts are not publicly detailed, representing an area for improvement. Overall, the domain and website exhibit high legitimacy and trustworthiness consistent with an established academic publisher.

Sciforum.net is a well-established academic event management platform operated by MDPI AG, a reputable Swiss publishing company. The platform facilitates organizing and participating in scientific events, webinars, and conferences, supporting the open science movement. It targets researchers, academics, and event organizers, offering a comprehensive suite of tools including schedule building, online registration, submission management, and post-event surveys. The website is professionally designed with excellent content quality and consistent branding, reflecting a mature digital presence.

Retouren Online is a specialized online platform operated by Pharmed Solutions AG, designed to streamline the pharmaceutical returns process for pharmacies and group practices in Switzerland. The website guides users through entering their GLN, defining pickup data, capturing articles, and printing return slips, facilitating efficient returns management. The platform is positioned as a niche healthcare logistics service with partnerships including major pharmaceutical companies such as Bayer and MSD. Technically, the site leverages the Aurelia framework and Bootstrap for a responsive and user-friendly interface, though some modern SEO and accessibility enhancements could be made. Security posture is moderate, with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and security features.

Preissenkung Online is a Swiss healthcare-focused online platform operated by Pharmed Solutions AG, providing a structured tool for pharmaceutical providers and pharmacies to manage price reductions and stock value compensation. The platform guides users through a multi-step process involving GLN input, stock quantity capture, and payment information submission. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript frameworks such as Aurelia and Bootstrap for responsive UI design. While the site is functional and professionally presented, it lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS enforced and basic input validation, but the absence of security headers and incident response information indicates room for improvement. Overall, the website is legitimate and trustworthy, with clear business information and partner affiliations, but should enhance privacy compliance and security best practices to reduce risk and improve user confidence.

S

Stiftung Refdata

swiss-rx-login.ch

60

Swiss RX Login is a specialized login portal designed for healthcare professionals in Switzerland, operated by Stiftung Refdata and supported by major healthcare industry associations. The website provides a free service enabling registered medical and academic professionals to access healthcare-related digital services. It has a solid market position with tens of thousands of registered users and is clearly targeted at the Swiss healthcare sector. The site content is professional, well-structured, and localized primarily in German with options for French and English. Technically, the website uses a simple but modern stack centered around jQuery and client-side validation scripts. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. However, there is no evidence of advanced frameworks or CMS platforms, and performance is moderate. SEO and accessibility features are basic but adequate for the site’s purpose. From a security perspective, the site appears to use HTTPS (assumed), but no explicit security headers or advanced security policies are detected. There is no cookie consent mechanism or privacy policy directly on the site, though links to external Refdata pages provide some compliance information. No vulnerability disclosure or incident response information is published. The WHOIS data is consistent with the website’s claims, showing no privacy protection or suspicious registration patterns, supporting legitimacy. Overall, the website is a trustworthy, professional portal serving a niche healthcare audience in Switzerland. Security and privacy compliance could be improved by adding explicit policies, security headers, and incident response details. The site’s technical implementation is solid but could benefit from modernization and enhanced accessibility.

S

Sandoz Pharmaceuticals AG

mysandoz.ch

54

Sandoz Pharmaceuticals AG operates a professional customer portal targeting healthcare professionals and customers in Switzerland. The website provides secure login options including native Sandoz password authentication and integration with Swiss-rx-login, facilitating access to pharmaceutical services and information. The site is well-branded and consistent with the company's healthcare industry positioning. Technically, the website uses modern analytics tools such as Google Analytics and Matomo, and employs OneTrust for cookie consent management, reflecting a mature approach to privacy compliance. However, explicit privacy policies and terms of service are not directly found on the landing page, which could be improved for transparency. Security practices include CSRF protection on forms and HTTPS usage, but lack visible HTTP security headers and published security policies or incident response contacts. Overall, the website is professional, secure, and compliant with cookie consent regulations, but could enhance its security posture and privacy disclosures to better align with best practices.

S

Spirig HealthCare AG

spirig-healthcare.ch

71

Spirig HealthCare AG is a well-established Swiss pharmaceutical company with a 75-year history, specializing in generics, specialty care, and consumer healthcare products. As part of the international STADA Arzneimittel AG group, it holds a strong market position as the third largest generics provider in Switzerland. The company targets healthcare professionals, pharmacies, and consumers, offering a broad product portfolio and emphasizing quality and affordability. The website reflects a professional and consistent brand image with comprehensive product and corporate information. Technically, the website employs modern web technologies including Amazon Cloudfront CDN, Google Tag Manager, and Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and clear navigation. The use of HTTPS and consent mechanisms indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses consent management tools, but could improve by explicitly implementing and verifying security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and compliance pages are present and comprehensive, supporting GDPR adherence. Overall, Spirig HealthCare AG's website demonstrates a high level of professionalism, security, and compliance, supporting its credibility and trustworthiness in the healthcare sector. Strategic improvements in security headers and ongoing monitoring of third-party scripts are recommended to maintain and enhance security posture.

S

Sandoz

sandoz-pharmaceuticals.ch

60

Sandoz Schweiz operates as a leading pharmaceutical company specializing in generic and biosimilar medicines, serving the Swiss healthcare market. The company is part of the Novartis group and positions itself as a global leader in its sector. The website reflects a professional and consistent brand image, targeting healthcare professionals, patients, and partners in Switzerland. The digital infrastructure is modern, leveraging React-based Next.js framework, integrated video content, and Google Tag Manager for analytics. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie compliance require enhancement. Contact information is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the site is trustworthy and well-maintained, but could improve transparency around privacy and security policies.

M

Mepha Pharma AG / Teva Pharma AG

mepha.ch

68

Mepha Pharma AG and Teva Pharma AG operate a professional pharmaceutical website targeting both the general public and medical professionals in Switzerland. The site offers comprehensive health information, product catalogs, and controlled access to specialized content via secure login portals. The business is positioned as a leading generics and pharmaceutical provider in the Swiss market, supported by a strong parent company, Teva Pharmaceutical Industries Ltd. The website demonstrates a mature digital presence with modern tracking and consent mechanisms, reflecting compliance with GDPR and privacy best practices. Technical infrastructure includes Microsoft Application Insights and Google Tag Manager, with a custom or enterprise CMS platform. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-optimized for user experience and compliance.

I

iQone Healthcare Switzerland

iqone-healthcare.com

55

iQone Healthcare Switzerland presents itself as a healthcare solutions provider focused on delivering cutting-edge services and patient care excellence. The website is professionally designed using HubSpot CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for cookie consent management. The content is relevant to healthcare stakeholders and is safe for general audiences. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy and trustworthiness. The website lacks explicit privacy policy and terms of service pages, and no direct contact information is provided, which may impact user trust and compliance. Technically, the site performs moderately well with good mobile optimization but could benefit from enhanced security headers and accessibility improvements.

E

eMosaik Web Solutions

emosaik.com

63

eMosaik Web Solutions is a Switzerland-based small technology company specializing in WordPress web design, development, management, and consulting services. Established in 2016, the company targets small and medium enterprises seeking optimized, high-performance websites with strong SEO and user experience. The website reflects a professional and consistent brand presence with active social media channels and modern WordPress infrastructure. Technically, the site uses WordPress 6.8.2 with Kadence theme and blocks, Yoast SEO, WP Rocket caching, and Cloudflare DNS, indicating a mature and performance-optimized digital infrastructure. Security posture is good with HTTPS enabled and domain registration protections in place, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy disclosures and security policies.

I

Intergenerika

biosimilar.ch

55

Intergenerika is a Swiss healthcare association dedicated to promoting biosimilars and generics to reduce healthcare costs and ensure sustainable medication supply. The website provides comprehensive information, expert opinions, market data, and educational videos targeting healthcare professionals, policymakers, and patients in Switzerland. The digital infrastructure is built on the Ibexa CMS platform, utilizing modern web technologies and integrating third-party services like Vimeo, YouTube, and Google Tag Manager. The site is well-optimized for mobile and accessibility, with a clear navigation structure and professional design. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, professional, and compliant with privacy regulations, serving as a credible resource in the Swiss healthcare sector.

Z

Zentiva

zentiva.ch

73

Zentiva is a large pharmaceutical company specializing in generic medicines, providing affordable, high-quality healthcare products primarily in Europe and select international markets. The website reflects a mature digital presence with a focus on corporate transparency, sustainability, and extensive international operations through multiple subsidiaries. The technical infrastructure employs modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance, with a responsive design and good accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the site is professional and trustworthy, supporting Zentiva's market position as a key player in the generics pharmaceutical sector.

The website spezialitaetenliste.ch is an official Swiss government platform managed by the Bundesamt für Gesundheit (BAG) that provides authoritative pharmaceutical specialty lists (Spezialitätenliste and Geburtsgebrechen-Spezialitätenliste) for healthcare stakeholders in Switzerland. It serves healthcare professionals, insurers, and pharmaceutical companies by offering searchable databases and downloadable data files related to medication reimbursement and regulation. The site is positioned as a trusted government resource with consistent branding and relevant content. Technically, the website is built on a classic ASP.NET Web Forms framework with JavaScript for interactivity. While functional, the site shows basic mobile optimization and accessibility features, with moderate performance. There is no evidence of modern CMS or advanced SEO techniques. Security-wise, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The security posture is moderate with no detected vulnerabilities or blocking mechanisms. Contact information is limited to an official email address, with no phone or physical address provided. No tracking or advertising scripts were found, indicating minimal user tracking. Overall, the site is safe, professional, and trustworthy but could enhance privacy compliance and security best practices. Recommendations include implementing comprehensive privacy and cookie policies, adding security headers, improving mobile responsiveness, and providing incident response contacts to strengthen trust and compliance.

I

Intergenerika

intergenerika.ch

53

Intergenerika is a Swiss healthcare association dedicated to promoting generic medicines and biosimilars to reduce healthcare costs and ensure sustainable medication supply. The website positions the organization as a key player in the Swiss generics market, highlighting significant cost savings and market share. Technically, the site is built on the Ibexa CMS platform with modern web technologies, offering good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving healthcare professionals and stakeholders effectively.

T

Tangem AG

tangem.com

66

Tangem AG is a Swiss-based technology company specializing in secure cryptocurrency hardware wallets and non-custodial software solutions. Their flagship product is a cold wallet in the form of cards and rings that provide users with secure, offline private key storage and easy transaction signing. Tangem targets both crypto newcomers and experts, emphasizing security, simplicity, and convenience. The company holds strong market positioning supported by independent security audits, EAL6+ certification, and a 25-year warranty, reflecting product durability and trustworthiness. Their business model combines hardware sales with software services and third-party crypto transaction integrations, serving a global audience with multilingual support and extensive community engagement.

The Global Biosimilars Week 2025 website is a professionally designed digital campaign platform managed by the International Generic and Biosimilar Medicines Association (IGBA). It serves as a global advocacy and awareness initiative focused on biosimilar medicines, targeting patients, healthcare professionals, and government organizations. The site provides educational resources, social media toolkits, and partnerships with recognized healthcare organizations such as WHO. Technically, the site is built on WordPress with modern plugins and tracking tools, including Google Analytics and LinkedIn Insight, ensuring good SEO and user experience. Security posture is solid with HTTPS and reCAPTCHA protections, though improvements like DNSSEC and enhanced security headers are recommended. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration is transparent and consistent with the business timeline, supporting the site's legitimacy.

D

DAAily platforms AG

daaily.com

64

DAAily platforms AG is a Swiss-based media company specializing in architecture and design content, collaborating with well-known platforms such as designboom.com, architonic.com, and archdaily.com. The company has been established since 2011 and maintains a professional online presence with clear business and legal information. The website serves a niche audience of architecture and design professionals and enthusiasts, offering curated content and platform partnerships. Technically, the website uses modern tools such as Google Tag Manager and a consent management platform to ensure GDPR compliance, hosted on Google Cloud DNS infrastructure. Security posture is adequate with HTTPS and privacy mechanisms in place, though improvements such as enabling DNSSEC and additional security headers are recommended. Overall, the site is trustworthy, professionally maintained, and compliant with relevant privacy regulations.

N

Norient

norient.com

53

Norient.com is a well-established digital media platform founded in 2003, specializing in global sound and music culture. It offers quality journalism, multimedia projects, podcasts, digital publications, and curated events targeting music enthusiasts, researchers, and cultural communities worldwide. The website is built on Drupal 8 and hosted by Hoststar, featuring a professional design with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain protection flags, though it lacks DNSSEC and security headers. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the platform demonstrates high business credibility and content quality, serving a niche but engaged audience.

Z

Zondax

zondax.ch

79

Zondax is a Switzerland-based technology company specializing in blockchain innovation and software engineering. Their website presents a professional and modern digital presence, emphasizing quality solutions and agility in blockchain development. The company targets blockchain developers and enterprises seeking cutting-edge blockchain services. Technically, the site is built on modern frameworks such as Next.js and Material UI, hosted likely on Vercel, ensuring fast performance and excellent mobile optimization. Security-wise, the site enforces HTTPS, includes standard security headers, and implements cookie consent mechanisms, though it lacks a dedicated security policy or incident response contact. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness. The website is safe, free from adult or questionable content, and demonstrates good privacy compliance.

B

Boris Verks

borisverks.com

58

Boris Verks is a seasoned product designer with over 10 years of experience specializing in UX/UI and branding. The website serves as a professional portfolio showcasing his work, case studies, and references, targeting businesses and product teams seeking design and product ownership expertise. The site is well-structured, visually appealing, and optimized for mobile devices, reflecting a high level of digital maturity. Technically, the site leverages modern web technologies including Webflow, Google Fonts, and PostHog analytics, hosted likely on Webflow's platform. Security posture is moderate; while HTTPS is implied, no explicit security headers or privacy policies are present, which are areas for improvement. The absence of WHOIS data raises concerns about domain legitimacy, though the professional content and external references mitigate some risk. Overall, the site is a credible and professional portfolio but would benefit from enhanced security and compliance measures.

G

GetYourGuide

getyourguide.dk

76

GetYourGuide is a leading global online platform specializing in booking tours, attractions, and travel experiences worldwide. Founded in 2008 and headquartered in Switzerland, the company offers a comprehensive marketplace connecting travelers with local suppliers for sightseeing tours, excursions, and activities. The website demonstrates a strong market position with a large user base and extensive service offerings tailored to a global audience. Technically, the site employs modern JavaScript frameworks such as Vue.js, integrates advanced tracking and fraud prevention tools like Google Tag Manager, Hotjar, and Forter, and implements robust privacy and consent management via Usercentrics. Security posture is strong with HTTPS, Content Security Policy, and no visible vulnerabilities, although explicit security policies and incident response details are not publicly disclosed. Overall, the platform exhibits high professionalism, excellent user experience, and compliance with GDPR, making it a trustworthy and mature digital service.

G

GIZATECH AG

gizatech.xyz

62

Giza, operated by GIZATECH AG, is a technology company focused on providing infrastructure for autonomous financial markets through non-custodial algorithmic agents that execute sophisticated DeFi strategies. The company targets retail and institutional DeFi users as well as protocol partners, positioning itself as an emerging player in the decentralized finance ecosystem. Their flagship product, ARMA, exemplifies their approach to automated stablecoin yield generation. Technically, the website is built using Framer, featuring modern design and moderate performance with good mobile optimization. The site integrates Markfi analytics but lacks explicit privacy and cookie policies, which impacts compliance. Security posture is adequate with HTTPS and script integrity but could be improved with additional headers and incident response contacts. Overall, the domain registration is consistent with the business identity, supporting legitimacy. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

B

Brandfetch

brandfetch.io

74

Brandfetch is a well-established technology company founded in 2006, specializing in providing a comprehensive platform for accessing brand assets such as logos, colors, and fonts. It serves a target audience of designers, marketers, and developers by offering a centralized repository and API services to maintain brand consistency across projects. The company holds a strong market position as a leading source with over 44 million brands hosted and partnerships with over 100 sites for brand synchronization. Technically, Brandfetch employs a modern infrastructure leveraging React and Next.js frameworks, hosted on Cloudflare, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not publicly detailed. Privacy compliance is robust with clear privacy and cookie policies, and contact information is available via verified support email and social media channels. Overall, Brandfetch demonstrates a mature digital presence with high-quality content and professional branding.

T

The DFINITY Foundation

dfinity.org

76

The DFINITY Foundation is a Swiss-based non-profit organization that plays a major role in the development of the Internet Computer blockchain. It operates with a large R&D team and focuses on blockchain research, grants, hackathons, and scientific publications. The website reflects a professional and well-established entity with a clear focus on technology and community engagement. Technically, the site uses modern frameworks like Svelte, is hosted on Cloudflare, and employs Matomo for privacy-conscious analytics. Security posture is strong with HTTPS, client transfer protection on the domain, and a public bug bounty program, although DNSSEC is not enabled and some security policies are not explicitly published. Privacy compliance is good with clear privacy and cookie policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and targeted at developers, researchers, and blockchain enthusiasts.