Switzerland security reports

P

Papers AG

papers.ch

53

Papers AG operates as a specialized web3 venture studio based in Switzerland, focusing on software engineering and venture development within blockchain, cryptography, and online security sectors. The company supports the entire lifecycle of innovative web3 products, from concept to market fit, targeting developers and founders in the web3 ecosystem. Their business model leverages in-house talent and investment partnerships to build and scale ventures. The website reflects a professional and consistent brand image with a clear portfolio of projects and active social media engagement.

B

Base58

base58.ch

70

Base58 is a technology-driven investment firm specializing in cryptoassets, offering asset management, agency brokerage, OTC services, and blockchain network participation. The company targets investors and traders seeking exposure to crypto markets with tailored and technology-enhanced solutions. Their market position is that of a specialized boutique firm leveraging software development to optimize investment operations and trade execution. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Analytics, Google Tag Manager, and reCAPTCHA for security. The site is mobile-optimized with good SEO and accessibility basics, hosted on Webflow infrastructure. Performance is moderate with a professional design and clear navigation. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, but lacks visible security headers and published incident response or vulnerability disclosure policies. Privacy compliance is strong with clear privacy and cookie policies and explicit user consent mechanisms. Business credibility is supported by consistent WHOIS data, professional content, and presence of trust signals. Overall, the website presents a trustworthy and professional front for a cryptoasset investment firm, with room for improvement in security headers and incident response transparency.

u-blox is a globally recognized technology company specializing in positioning and wireless communication technologies, serving automotive, industrial, and consumer markets. The company offers a broad portfolio of products including positioning chips, short-range radio modules, and IoT platforms, positioning itself as a leader in its sector. The website reflects a mature and professional digital presence with comprehensive product and corporate information, targeting technology integrators and industry professionals. Technically, the website is built using modern frameworks such as Gatsby and React, hosted on Netlify, ensuring fast performance and excellent mobile optimization. The use of Google Tag Manager and HubSpot forms indicates a moderate level of user tracking balanced with privacy compliance through cookie consent mechanisms. From a security perspective, the site enforces HTTPS and includes a security management page, but lacks some advanced security headers and a published security.txt file. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data aligns well with the company's public information, supporting the legitimacy of the domain. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance, making it a trustworthy and professional platform. Strategic improvements in security headers and incident response transparency could further enhance its security maturity.

R

Relai AG

relai.app

70

Relai AG is a Swiss-based financial service provider specializing in Bitcoin purchase and custody solutions through its award-winning mobile app. The company targets individual investors, private clients with high-volume trading needs, and small to medium-sized businesses seeking to add Bitcoin to their balance sheets. Relai emphasizes security, self-custody, and regulatory compliance, holding ISO 27001 certification and membership in the Swiss VQF self-regulatory organization. The website reflects a mature digital presence with multilingual support, modern technology stack, and strong SEO practices.

A

AlpenPionier

alpenpionier.ch

50

AlpenPionier is a Swiss-based company specializing in organic hemp food products sourced locally from the Alps. The company operates an e-commerce platform offering a range of hemp-based foods, emphasizing sustainability, organic certification (Bio-Suisse), and local production. Their market position is niche but well-defined, targeting health-conscious consumers interested in plant-based nutrition. The website is professionally designed using WordPress and WooCommerce, with multilingual support and integrated social media channels. Technical infrastructure includes modern SEO and analytics tools, though some security headers and privacy policies are missing. The security posture is adequate with HTTPS and no visible vulnerabilities, but privacy compliance requires improvement. Overall, the business demonstrates credibility and digital maturity appropriate for a small to medium-sized retail operation.

Y

Yokoy Schweiz AG

yokoy.io

63

Yokoy Schweiz AG operates a professional spend management software platform targeting businesses seeking to optimize and automate their expense processes. The website is built on WordPress using Elementor and integrates modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent. The technical infrastructure is solid with HTTPS and good hosting by Hostpoint AG. Security posture is adequate but could be improved by publishing explicit security policies, incident response contacts, and adding security headers. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the website presents a credible and professional business presence with consistent WHOIS data supporting legitimacy.

S

Smallpdf AG

smallpdf.com

73

Smallpdf AG operates a globally recognized SaaS platform specializing in PDF file management and editing tools. Founded in 2013 and headquartered in Switzerland, Smallpdf offers a comprehensive suite of PDF solutions including conversion, compression, editing, signing, and AI-enhanced features. The company holds a strong market position as a trusted provider with a freemium business model complemented by Pro subscriptions. Their digital presence is robust, featuring well-structured content, consistent branding, and active social media engagement. Technically, Smallpdf leverages modern web technologies, including React and AWS infrastructure, ensuring fast performance and excellent mobile optimization. Security practices are solid, with HTTPS enforcement, domain transfer protection, and a dedicated vulnerability disclosure channel. The domain registration details align well with the business claims, supporting legitimacy and trustworthiness. Overall, Smallpdf demonstrates a mature digital and security posture suitable for its industry and customer base.

B

Brandfetch

brandfetch.com

76

Brandfetch is a well-established technology company founded in 2006, specializing in providing a comprehensive platform for accessing brand assets such as logos, colors, and fonts. It serves a broad audience including designers, marketers, and developers, positioning itself as a leading repository with over 44 million brands. The business model centers on offering free brand hosting while monetizing through API services that enable seamless integration of brand data into applications. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, Brandfetch employs modern web technologies including React and Next.js, supported by Cloudflare DNS services. The site is optimized for performance and mobile responsiveness, with good SEO and accessibility features. Analytics and tracking are implemented via Google Tag Manager and PostHog, indicating a moderate level of user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS with strong SSL configuration and domain transfer protections. However, DNSSEC is not enabled, and explicit security policies or incident response information are not publicly available. No vulnerabilities or suspicious content were detected. Privacy and cookie policies are comprehensive and GDPR compliant, supporting good privacy practices. Overall, Brandfetch presents a low-risk profile with a strong market position and professional online presence. Strategic improvements could include enabling DNSSEC, publishing detailed security and incident response policies, and establishing a vulnerability disclosure program to further enhance trust and security posture.

Q

quitt. - ServiceHunterAG

quitt.ch

65

quitt.ch is a Swiss online platform operated by ServiceHunterAG that facilitates the legal employment and insurance of household helpers. The website targets private individuals and households in Switzerland, offering services such as employment contracts, insurance coverage, and payroll processing. The platform is positioned as a leading service in its niche within Switzerland, providing multilingual support in German, French, English, and Italian. The business model revolves around simplifying domestic employment compliance through digital tools and services. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, WPML for multilingual support, and various analytics and marketing tools such as Google Tag Manager, Visual Website Optimizer, and multiple tracking pixels. The site demonstrates good mobile optimization and SEO practices, although accessibility features appear basic. Performance is moderate, with asynchronous loading of scripts to enhance user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR. However, explicit security headers are not clearly present, and no published security or incident response policies were found. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is consistent with the business identity, indicating a legitimate and trustworthy domain registration. Overall, quitt.ch presents a professional and trustworthy online presence with a solid business focus and adequate technical infrastructure. To enhance trust and compliance, the site should publish explicit privacy, terms of service, and security policies, and provide clear contact information for security incidents.

N

nexoya

nexoya.com

66

Nexoya is a technology company specializing in AI-powered digital advertising optimization, targeting performance marketing leaders and marketers. Their platform offers automated portfolio management, AI-driven performance maximization, transparency, scenario simulation, and dedicated customer success support. The website is professionally designed, multilingual, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site leverages WordPress with modern libraries such as jQuery and Swiper.js, enhanced by WP Rocket for performance. Security posture is good with HTTPS and some security best practices, though there is room for improvement in security headers and published policies. The absence of WHOIS data is a notable concern, suggesting the need for verification of domain registration and ownership. Overall, Nexoya presents as a credible and professional SaaS provider in the marketing technology sector.

U

Urban Connect AG

urban-connect.com

55

Urban Connect AG operates a multimodal mobility platform targeting corporate clients and their employees, offering integrated solutions including e-bikes, e-scooters, e-cars, and public transportation options. The platform includes a mobility budget system and carbon-neutral features such as emissions tracking and offsetting. The company is positioned as a trusted provider with over 40,000 employees from reputable companies using its services. The website reflects a professional and modern digital presence with strong SEO and user experience. Technically, the site is built on WordPress with advanced analytics and marketing integrations, optimized for performance and mobile use. Security posture is good with HTTPS and consent-based cookie management, though some security headers and policies could be improved. Overall, the domain registration data supports the legitimacy of the business, and no critical security or compliance issues were detected.

A

Aktionariat AG

aktionariat.com

68

Aktionariat AG is a Swiss-based company specializing in blockchain-based equity tokenization solutions. Their platform enables companies to tokenize shares, manage legal frameworks, set up SPVs, and operate primary and secondary markets for tokenized equity. The company targets businesses seeking to leverage blockchain technology for investor relations and capital raising, positioning itself as a niche leader with a growing client base and investor community. Technically, the website is built on Webflow with integrations for analytics and marketing tools such as HubSpot, Google Tag Manager, and MailerLite, reflecting a modern and performant digital infrastructure. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. The absence of WHOIS data for the domain is a notable concern, impacting domain legitimacy trust scores. Overall, Aktionariat presents a professional, trustworthy, and technologically advanced offering in the fintech space.

D

DeepJudge AG

deepjudge.ai

69

DeepJudge AG operates a professional B2B SaaS platform providing precision AI search solutions tailored for legal teams, including law firms, in-house legal departments, and government agencies. The company leverages advanced enterprise search technology to enable instant access to institutional knowledge, supporting AI applications, multi-step workflows, and LLM agents. Positioned as a leading legal AI product, it has received recognition as the #1 Most Recommended Legal AI Product. The website reflects a mature digital presence with modern design and user-friendly navigation, supported by Webflow CMS and integrated marketing and analytics tools such as HubSpot and Google Analytics. Security posture is strong with HTTPS enforcement and cookie consent compliance, though explicit security headers and incident response policies are not publicly disclosed. Overall, the site demonstrates a trustworthy and professional business with privacy protections in place for domain registration.

L

Laser Digital Holdings AG

laserdigital.com

77

Laser Digital Holdings AG is a well-established financial services firm specializing in digital asset trading, asset management, liquidity solutions, and venture investments. Founded in 2000 and backed by Nomura, the company bridges traditional finance and crypto markets, targeting institutional clients with professional-grade services. The website reflects a mature digital presence with comprehensive service descriptions and regulatory disclosures. Technically, the site is built on WordPress with modern plugins and analytics integrations, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with GDPR cookie consent and clear privacy and terms pages. Overall, the site projects high business credibility and trustworthiness.

P

payoff

payoff.ch

53

payoff.ch is a well-established Swiss financial information portal specializing in structured products, derivatives, and ETFs. It offers a comprehensive suite of services including news, research, events, and multiple financial publications, positioning itself as a leading independent source in the Swiss investment market. The website demonstrates strong market positioning supported by partnerships with reputable financial institutions and a consistent brand presence. Technically, the site is built on WordPress with modern JavaScript libraries and SEO best practices, delivering a good user experience with mobile optimization and accessibility considerations. Security posture is solid with HTTPS enforcement, security headers, and cookie consent mechanisms, though there is room for improvement in publishing dedicated security policies and incident response information. Overall, payoff.ch presents a professional, trustworthy, and compliant digital presence with moderate tracking and advertising practices aligned with industry standards.

L

LEXR AG

lexr.com

66

LEXR AG is a specialized law firm serving tech, fintech, and digital companies primarily in Switzerland and Germany, with offices in Berlin, Zurich, St.Gallen, and Lausanne. The firm offers comprehensive legal services including corporate law, M&A, financing rounds, employee participation plans, and contracts tailored for startups, investors, and tech companies. Their business model emphasizes transparent, flat-fee pricing and subscription services, positioning them as a trusted partner for over 1,000 tech clients. The website demonstrates a strong market presence with professional branding, client testimonials, and a broad partner ecosystem. Technically, the website is built on WordPress with a modern tech stack including jQuery, HubSpot forms, Calendly scheduling, and various analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Borlabs Cookie for consent management. The site is well-optimized for SEO, mobile responsive, and fast loading, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements multiple security headers, and uses secure third-party integrations. However, there is no publicly available security policy or incident response contact information, and the WHOIS data for the domain is unavailable, which slightly reduces trustworthiness. No vulnerabilities or exposed sensitive data were detected. Overall, LEXR presents a professional, trustworthy online presence with strong business credibility and technical maturity. The main risk lies in the lack of WHOIS transparency and absence of published security policies, which should be addressed to enhance trust and compliance.

A

AirGap

airgap.it

52

AirGap is a Swiss-based technology company specializing in secure self-custody solutions for cryptocurrency assets. Their flagship offering is a two-device system comprising the AirGap Vault, an offline smartphone app for secure key storage, and the AirGap Wallet, an everyday smartphone app for transaction management. The company emphasizes security, usability, and transparency, with all components fully open source and audited by third parties. AirGap also offers physical recovery plates and enhanced device security through AirGap Knox. Their market position is that of a niche but trusted provider in the crypto security space, supported by partnerships with major blockchain foundations.

M

Maverix Securities AG

mavx.com

49

Maverix Securities AG is a Swiss financial services company specializing in structured products, asset management companies, and digital assets. Established in 2006, it has positioned itself as a leading Swiss Securities House offering innovative financial solutions to professional asset managers, banks, institutional, and retail investors. The company leverages next-generation technology combined with deep human expertise to deliver its services. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation. Technically, the site uses modern frameworks and analytics tools, hosted on a reputable provider, and implements security best practices such as HTTPS and reCAPTCHA on forms. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website and domain registration data indicate a trustworthy and credible business with a strong market position in the Swiss financial sector.

O

OST – Ostschweizer Fachhochschule

ost.ch

68

OST – Ostschweizer Fachhochschule is a regional Swiss educational institution offering forward-looking degree programs, research, and continuing education across multiple campuses. The website demonstrates a mature digital infrastructure leveraging TYPO3 CMS and integrates multiple reputable analytics and marketing platforms such as Google Analytics, Hotjar, and Microsoft Bing. Privacy compliance is robust, with a detailed cookie consent mechanism and a comprehensive privacy policy in German, indicating GDPR adherence. Security posture is strong with HTTPS enforcement, security headers, and Cloudflare CDN usage, though explicit security policies and incident response information are not publicly available. Overall, the website is professional, trustworthy, and well-optimized for users, with no critical vulnerabilities or suspicious content detected.

S

Scuola universitaria professionale della Svizzera italiana (SUPSI)

supsi.ch

69

The Scuola universitaria professionale della Svizzera italiana (SUPSI) is a recognized Swiss professional university offering Bachelor, Master, and continuing education programs. The website reflects a well-established educational institution with a strong market position in Switzerland's higher education sector. It targets students, professionals, and regional stakeholders with a comprehensive range of academic and research services. Technically, the site is built on the Liferay CMS platform, utilizing modern web technologies such as React and Bootstrap, and integrates Matomo for analytics. The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is evident with cookie consent mechanisms and privacy policies, although explicit security and incident response policies are not prominently published. Overall, the site is professional, trustworthy, and well-maintained, with a high legitimacy score based on WHOIS data and content alignment.

M

Mt Pelerin Group Ltd

mtpelerin.com

64

Mt Pelerin Group Ltd is a Swiss fintech company specializing in cryptocurrency exchange, mobile wallet services, and asset tokenization. The company positions itself as a trusted Swiss gateway to the crypto world, offering services such as buying, selling, swapping cryptocurrencies, and providing a crypto-fiat gateway for businesses. Their Bridge Wallet app enhances user control over crypto assets, and their Bridge Protocol enables security token issuance on public blockchains. The company enjoys a strong market presence with multiple partnerships and positive customer reviews, supported by a comprehensive multilingual website and active social media channels. Technically, the website employs modern web technologies including JavaScript frameworks, Bootstrap, and lazy loading for performance optimization. The site is mobile-optimized, SEO-friendly, and integrates Google Tag Manager for analytics. Security-wise, the site enforces HTTPS and links to a bug bounty program, indicating a proactive security posture. However, explicit security policies and incident response contacts are not prominently published. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration transparency. Despite this, the website content, business registration references, and external trust signals strongly support the legitimacy of the business. Overall, the website is professional, secure, and compliant with privacy regulations, making it a reliable platform for cryptocurrency services. Strategic recommendations include publishing detailed security policies, adding a security.txt file for vulnerability disclosures, and maintaining vigilance on third-party script security to further enhance trust and security posture.

B

BlogaTech AG

ajuna.io

60

Ajuna.io is a blockchain gaming platform operated by BlogaTech AG, focusing on creating a future for gaming through blockchain technology. The platform offers a suite of products including NFT-based games (AAA), a crosschain gasless NFT marketplace (Wildcard), and an SDK for game developers integrating blockchain features. It also operates dedicated parachains on the Polkadot and Kusama networks, leveraging Trusted Execution Environments for performance and security. The company targets blockchain game developers, gamers, and NFT enthusiasts, positioning itself as an innovative player in the web3 gaming ecosystem. Technically, the website is built on Webflow CMS with modern web technologies such as Google Fonts and JavaScript libraries. It includes a cookie consent mechanism indicating some level of privacy compliance. The site is mobile-optimized and provides clear navigation and professional design. However, the absence of a visible privacy policy and terms of service reduces compliance transparency. WHOIS data is unavailable, limiting domain trust assessment. Security posture is moderate with HTTPS implied but no explicit security headers detected. No vulnerability disclosure or incident response information is provided. The site links to multiple social media and community platforms, enhancing engagement and trust. Overall, the platform appears legitimate and professionally presented but would benefit from improved transparency and security practices. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, providing vulnerability disclosure channels, and improving WHOIS transparency to enhance trust and compliance.

B

Bitcoin Suisse AG

bitcoinsuisse.com

69

Bitcoin Suisse AG is a Swiss-based premium crypto finance service provider established in 2016. The company positions itself as a leading player in the Swiss crypto finance market, offering a cohesive product suite and expert client services tailored for crypto investors and institutions. The website reflects a modern technical infrastructure built on React and Next.js frameworks, hosted on Azure, with a professional design and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is functional and professional but could improve transparency and security documentation to enhance trust.

A

Aleph Zero Foundation

alephzero.org

77

Aleph Zero Foundation operates a cutting-edge blockchain platform focused on privacy and scalability, targeting developers and enterprises in the Web3 space. The website reflects a mature digital presence with comprehensive ecosystem support and partnerships with notable organizations such as Deutsche Telekom and Nasdaq. Technically, the site employs modern web technologies, including Google Tag Manager and Hotjar for analytics, and is hosted via Cloudflare ensuring good performance and security. The security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Privacy compliance is well addressed with a visible cookie consent mechanism and a privacy policy linked in the documentation. Overall, the site is professional, trustworthy, and well-structured, supporting Aleph Zero's position as an enterprise-grade blockchain solution.

R

Rainfall Inc.

rainfall.one

61

Rainfall Inc. operates a privacy-focused, decentralized personal AI platform that empowers users to control and monetize their personal data securely. The company targets individuals concerned with data privacy and the benefits of AI, positioning itself as an emerging player in the personal AI and data sovereignty market. The website is professionally designed with clear messaging, an invite-only waitlist, and multiple user engagement points such as contact forms and social media links. Technically, the site uses modern frontend technologies including React and Font Awesome, hosted with Google Domains DNS services. Analytics are implemented via Google Tag Manager and Google Analytics, with basic cookie consent mechanisms in place. Security posture is moderate with HTTPS enforced and privacy-by-design principles stated, but lacks DNSSEC and security headers, and no formal security or incident response policies are published. The domain is privacy protected but legitimately registered since 2019, consistent with a startup profile. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in security transparency and DNS security are recommended.

Polkadot is a leading blockchain platform focused on interoperability, scalability, and security for Web3 applications. It offers a multi-chain network enabling developers and users to build and participate in decentralized ecosystems. The platform is supported by a strong community, developer tools, and governance via DAO structures. Technically, the website leverages modern frameworks such as Next.js and React, hosted on AWS infrastructure, with integrated analytics and consent management tools. Security posture is robust with HTTPS, domain transfer protections, and a public bug bounty program, though DNSSEC is not enabled and no security.txt file is published. Overall, the site is professional, well-structured, and compliant with privacy regulations, reflecting a mature and credible business entity.

D

Decentralized Security AG

chainsecurity.com

62

ChainSecurity, operated by Decentralized Security AG, is a Swiss-based company specializing in smart contract audits and blockchain security consulting. Since 2017, it has established itself as a trusted partner for leading DeFi protocols, central banks, and international corporations. The company offers comprehensive smart contract auditing services, leveraging expertise in decentralized finance and blockchain technology to ensure security and reliability for its clients. The website reflects a professional and well-branded digital presence, emphasizing transparency through public audit reports and client testimonials. Technically, the website is built on the Webflow CMS platform, utilizing modern JavaScript libraries such as jQuery, GSAP, and Swiper.js for enhanced user experience and interactivity. The site is well-optimized for mobile devices, loads quickly, and includes accessibility features. Security measures include HTTPS enforcement and the use of Google reCAPTCHA to protect forms, although explicit security headers and cookie consent mechanisms are absent. From a security posture perspective, the site demonstrates good practices but could improve by adding security headers, publishing a vulnerability disclosure policy, and implementing cookie consent to enhance privacy compliance. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, although the business content and client references strongly support its authenticity. Overall, ChainSecurity presents a credible and professional front in the blockchain security space, with recommendations to strengthen technical security and privacy compliance to further solidify trust and regulatory adherence.

Sygnum Bank is a pioneering regulated digital asset bank with Swiss and Singapore heritage, offering a comprehensive suite of crypto-related financial services including trading, custody, staking, tokenization, and asset management. Positioned as a trusted player in the digital asset economy, Sygnum targets institutional and retail investors seeking secure and compliant crypto banking solutions. The website reflects a mature digital presence with professional design, clear navigation, and extensive service descriptions. Technically, the site is built on WordPress with modern analytics and marketing integrations, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and consent management, though explicit security policies and incident response details are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but is common in regulated financial sectors. Overall, Sygnum Bank demonstrates a solid business and technical foundation with room for enhanced transparency in security and contact information.

G

Gelato | Smart Wallets, Gasless UX & Rollups on One Platform

gelato.network

54

Gelato.cloud is a technology platform specializing in blockchain infrastructure, offering smart wallets, gasless user experiences, and rollup solutions supporting ERC-4337 and ERC-7702 standards across over 100 chains. The website is professionally designed using Framer and hosted via Cloudflare, indicating a modern and reliable technical infrastructure. However, the site lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts its privacy compliance and business credibility scores. Security posture is generally good with HTTPS and registrar protections, but DNSSEC is not enabled, and security headers are not evident. Overall, the site is accessible without WAF challenges and presents safe, technology-focused content suitable for a general audience.

B

Binary Builders AG

join.builders

55

The Interchain Builders Program, operated by Binary Builders AG, is a specialized support initiative aimed at assisting Cosmos blockchain builders, including enterprises, Web3 startups, and digital innovators. The program offers technical guidance, ecosystem partnership introductions, and business strategy consulting to help projects reach mainnet launch and beyond. The website is professionally designed with consistent branding and clear navigation, targeting a technology-savvy audience within the blockchain ecosystem. The business operates from Switzerland and is supported by the Interchain Foundation, enhancing its credibility within the blockchain community. Technically, the website leverages modern web technologies including Astro framework and HubSpot for marketing and analytics. Google Analytics is used for user tracking, indicating moderate data collection practices. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and no visible sensitive data exposure, but lacks some recommended security headers and explicit privacy or cookie policies. From a security perspective, the site shows a mature approach with no detected vulnerabilities or malicious content. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for transparency and trust in the blockchain space. The WHOIS data is privacy-protected, which is common and justified for this business type, though it limits direct registrant verification. Overall, the website presents a trustworthy and professional front for a niche blockchain support program. Strategic improvements in privacy compliance, security transparency, and incident response readiness would enhance trust and security posture further.

The Ethereum Foundation, registered as Stiftung Ethereum in Switzerland since 2014, operates the domain ethereum.foundation. The website appears to be built using modern web technologies such as Next.js and React, hosted on infrastructure involving AWS and OVH DNS services. However, the site content is minimal with no visible privacy, cookie, or terms of service policies, and lacks contact information or forms. This limits the user experience and compliance posture. Security-wise, the domain is registered transparently without privacy protection, but DNSSEC is not enabled and no security headers are detected, indicating room for improvement in security hardening. Overall, the site is accessible without WAF or blocking mechanisms but requires significant enhancements in content, privacy compliance, and security practices to meet professional and regulatory standards.

G

Givaudan

givaudan.com

62

Givaudan is a leading Swiss multinational company specializing in the manufacture of flavours, fragrances, and active cosmetic ingredients. It holds a dominant market position with approximately 25% market share in a CHF 17 billion industry. The company targets global, regional, and local food, beverage, consumer goods, and fragrance companies, operating primarily in a B2B model. The website reflects a mature digital presence with comprehensive business information, investor relations, sustainability initiatives, and career opportunities. Technically, the website is built on Drupal 10, leveraging modern web technologies including Coveo for search, Google Tag Manager for analytics, and UserWay for accessibility. The site is mobile optimized, accessible, and SEO friendly, with good performance and user experience. The presence of multiple localized domains indicates a global footprint. From a security perspective, the site enforces HTTPS and uses standard privacy and cookie compliance mechanisms. However, explicit security headers and published security policies are not evident, suggesting room for improvement in security posture transparency. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-maintained, supporting Givaudan's reputation as a global leader. The absence of WHOIS registration details limits domain trust analysis but does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

T

Tenity Group AG

tenity.com

71

Tenity Group AG operates a global innovation ecosystem and early-stage investment platform focused on fintech, insurtech, regtech, and adjacent technologies. The company provides incubation and acceleration programs, facilitating collaboration between startups, corporates, and investors. With hubs across Europe and Asia, and partnerships with major financial institutions and technology firms, Tenity positions itself as a key player in shaping the future of finance. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, it leverages modern web technologies including Webflow CMS, HubSpot marketing tools, and Cloudflare security features. Security posture is strong with HTTPS and bot protection, though explicit security policies and incident response information are not publicly available. Privacy compliance is well addressed with cookie consent and a comprehensive privacy policy. However, the absence of WHOIS data raises questions about domain registration transparency. Overall, Tenity presents a credible and professional business with a solid digital footprint but could improve transparency in domain registration and security disclosures.

C

cloudlift

cloudlift.app

69

Cloudlift GmbH operates a Shopify-based e-commerce website offering specialized Shopify apps aimed at improving storefronts through personalized product upload and preview features, as well as B2B wholesale tools. The company targets Shopify merchants and e-commerce store owners, positioning itself as a niche technology provider within the Shopify ecosystem. The website demonstrates a good level of professionalism and branding consistency, leveraging modern web technologies and Shopify's platform capabilities to deliver a performant and user-friendly experience. Technically, the site is built on the Shopify platform using the Dawn theme and integrates several JavaScript libraries such as FilePond for file uploads, Doka for image editing, and Fabric.js for canvas manipulation. Hosting and content delivery are managed via Shopify's CDN, ensuring fast load times and good mobile optimization. SEO is supported through structured data (JSON-LD) and proper meta tags, while accessibility features are adequately implemented. From a security perspective, the site benefits from Shopify's robust HTTPS enforcement and platform security features. However, explicit security headers and published security policies are not evident in the content. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is limited due to the absence of visible privacy and cookie policies, which is a notable gap. Contact information for security incidents or general inquiries is also missing, reducing transparency. Overall, the website presents a moderate to high trust level with strong technical and security foundations but requires improvements in privacy compliance and contact transparency to enhance user trust and regulatory adherence.

The Interchain Foundation is a Switzerland-based non-profit organization founded in 2016 that stewards and funds the development of an interoperable decentralized blockchain ecosystem, primarily focused on the Cosmos network and related technologies. Their website clearly communicates their mission to support interoperable sovereignty, public goods development, and a future-proof decentralized tech stack. The foundation operates Cosmos Labs as a subsidiary to consolidate product, growth, and development efforts. Technically, the website is built on a modern React and Next.js stack, hosted and registered via Cloudflare, with excellent mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforcement, security headers, and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the organization's claims, indicating high legitimacy and trustworthiness.

P

pCloud International AG

pcloud.com

58

pCloud International AG operates a secure cloud storage platform primarily targeting European users, emphasizing privacy and data protection under Swiss law. The company offers encrypted cloud storage solutions with flexible plans including lifetime storage options and client-side encryption for enhanced security. Their market position is strong, with over 22 million users and a clear focus on GDPR compliance and European data sovereignty. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and security features. Technically, the site uses modern JavaScript frameworks, integrates payment gateways securely, and employs TLS/SSL encryption with additional client-side encryption options. Security posture is robust with HTTPS enforcement and use of reCAPTCHA, though explicit security policies and vulnerability disclosure mechanisms are absent. WHOIS data is unavailable, which is unusual but does not detract significantly from the company's legitimacy given the strong online presence and trust signals. Overall, pCloud presents as a credible, secure, and privacy-conscious cloud storage provider with a mature digital infrastructure.

S

Solidity Team

soliditylang.org

62

Soliditylang.org is the official website for the Solidity programming language, a statically-typed language designed for developing smart contracts on the Ethereum blockchain. The site serves a global developer audience, providing comprehensive documentation, blog updates, community forums, and event information. It is maintained by the Solidity Team and positioned as a leading technology resource in the blockchain and smart contract development space. The business model is open-source and community-driven, with no direct commercial transactions on the site. Technically, the website is built using modern web technologies including Next.js and Chakra UI, hosted on Amazon AWS infrastructure. The site is fast, mobile-optimized, accessible, and SEO-friendly. It uses HTTPS exclusively, ensuring secure communications. However, some security best practices such as DNSSEC and explicit security headers are not enabled, and there is no cookie consent mechanism or dedicated privacy policy page on the site itself. From a security perspective, the site demonstrates good maturity with a published security policy and clear vulnerability reporting instructions. The domain registration is consistent and trustworthy, with no suspicious patterns. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with the privacy policy hosted on GitHub rather than the main site, and no cookie consent mechanism present. Overall, soliditylang.org is a professional, trustworthy, and technically sound website serving a specialized developer community. Strategic improvements in privacy compliance and security headers would enhance its posture further. The site poses low risk and is a reliable resource for Ethereum smart contract developers.

D

Divio Technologies AB

divio.com

74

Divio Technologies AB operates as a Platform as a Service (PaaS) provider specializing in cloud infrastructure management and web application hosting for business-critical applications. The company positions itself as a reliable and secure partner offering affordable pricing, best-in-class cloud services, and comprehensive support. Their market presence is reinforced by ISO certifications and partnerships with industry leaders such as Cloudflare. The website targets businesses seeking scalable and secure cloud hosting solutions with a focus on ease of use and collaboration. Technically, Divio employs a modern technology stack including React, Node.js, and various backend frameworks such as Laravel and Symfony. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security is a core focus, with HTTPS enforced, multiple security headers, and adherence to ISO 27001/17/18 standards. The company also offers end-to-end encryption, backups, penetration testing, and disaster recovery as standard features. While the website demonstrates strong security posture and business credibility, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. No signs of WAF or content blocking were detected, allowing full content analysis. Privacy compliance is good but could be improved by adding a visible cookie consent mechanism and explicit vulnerability disclosure channels. Overall, Divio presents as a professional and trustworthy cloud service provider with robust security and compliance measures. Strategic recommendations include enhancing privacy transparency, publishing vulnerability disclosure policies, and improving WHOIS data visibility to strengthen trust further.

É

École Polytechnique Fédérale de Lausanne (EPFL)

scala-lang.org

59

The Scala Programming Language website represents a mature, well-established open-source technology project supported by the École Polytechnique Fédérale de Lausanne (EPFL) and major industry partners such as JetBrains, Gradle, and VirtusLab. The site provides comprehensive resources including documentation, tutorials, community engagement, and tooling for developers interested in Scala. The business model is community and sponsorship-driven, focusing on education and ecosystem growth. Technically, the site employs modern web technologies, is performant, mobile-optimized, and uses Cloudflare for DNS and CDN services. Security posture is strong with HTTPS enforced and domain transfer protections, though some improvements like DNSSEC and explicit security headers could be made. Privacy compliance is good with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and serves a global developer audience effectively.

mömax.ch is a professional e-commerce website specializing in furniture, home decoration, and kitchen products targeted primarily at the Swiss market. The site offers a broad product catalog with detailed listings, pricing, and images, supporting a strong retail presence both online and through physical stores. The website is well-branded and consistent with the mömax brand, which operates in multiple European countries. Technically, the site uses modern web technologies including React and Webpack, with integrated marketing and analytics tools such as Jentis and Neocom. The site is mobile-optimized and provides a good user experience with clear navigation and search capabilities. Security posture is solid with HTTPS enforced and secure login forms, though some security headers are not visibly implemented. Privacy compliance is limited as no explicit privacy or cookie policies were found in the provided content. Overall, the site is trustworthy and legitimate, with WHOIS data consistent with the business claims.

E

Eventbrite

eventbrite.ch

71

Eventbrite is a leading global technology company specializing in event management and online ticketing services. The Swiss localized site (eventbrite.ch) offers event discovery, creation, and ticket sales primarily targeting German-speaking users in Switzerland. The platform supports event organizers with marketing tools and payment processing, positioning itself as a comprehensive solution in the event technology market. The website demonstrates a mature digital infrastructure with modern technologies such as React, Google Analytics, and advanced consent management via Transcend. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site reflects a professional, trustworthy, and user-friendly platform with extensive marketing and analytics integrations.

Möbel Hubacher is a Swiss furniture retailer operating under the Arco Regio AG umbrella and affiliated with the XXXLutz group. The company offers a broad selection of furniture and home decoration products, supported by services such as interior design consultation, a loyalty program, and additional customer conveniences. The website serves as a digital storefront and information hub, linking to the larger XXXLutz online shop and providing brochures, brand information, and service details. The target audience is general consumers seeking furniture solutions in Switzerland.

W

Worldline

saferpay.com

77

Worldline is a leading European payment services provider offering secure and modern electronic payment solutions, including Saferpay for online and mobile payments. The company targets merchants and e-commerce businesses, providing comprehensive payment processing services with a strong market position in Switzerland and globally. The website reflects a mature digital infrastructure leveraging Adobe Experience Manager and Adobe Analytics, with a focus on user experience and multilingual support. Security posture is strong with HTTPS enforcement, security headers, and consent management, though some improvements such as DNSSEC and vulnerability disclosure could enhance trust. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

W

Weidmüller

weidmueller.ch

71

Weidmüller is a well-established Swiss company specializing in industrial connectivity and automation solutions. With a history spanning over 175 years, it holds a strong market position in manufacturing and supplying electrical connection technology, electronics, and automation software primarily for industrial clients. The website reflects a mature digital presence with comprehensive product catalogs, solution offerings, and digital tools such as configurators and e-commerce integration. Technically, the site employs modern web technologies including Google Tag Manager and OneTrust for privacy compliance, and it is optimized for mobile and accessibility standards. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although a dedicated security policy or vulnerability disclosure page is absent. Overall, the domain registration and WHOIS data align well with the company's identity, supporting high legitimacy and trust. Strategic recommendations include publishing explicit security policies and incident response contacts to enhance transparency and trust further.

Weidmüller Schweiz AG is a well-established industrial connectivity company operating primarily in Switzerland with a global presence. The company specializes in connection technology, electronics, automation software, and related services, targeting industrial customers in sectors such as energy, transportation, and manufacturing. Their business model focuses on B2B manufacturing and distribution, supported by digital tools like the Weidmüller Configurator and a comprehensive e-commerce platform. The website reflects a mature digital infrastructure with modern technologies, responsive design, and good SEO practices. Security posture is strong, with HTTPS enforced, a PSIRT program in place, and cookie consent mechanisms implemented. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and other privacy standards.

C

CORE Association

corenic.org

63

CORE Association is a well-established not-for-profit registry service provider based in Switzerland, operating more than 25 top-level domains (TLDs) since 2001. The organization offers comprehensive services including registry management, registry software, consultancy, and brand development tailored to various types of TLDs such as open, community, geographic, brand, IDNs, and ccTLDs. Their clientele includes Fortune 500 companies, intergovernmental organizations, governments, and grassroots non-profits, positioning CORE as a trusted and experienced player in the domain registry industry. Technically, the website is built on WordPress CMS, utilizing standard web technologies such as jQuery and Google Tag Manager for analytics. The site demonstrates good mobile optimization, clear navigation, and professional design quality. Performance is moderate, with opportunities for improvement in accessibility and SEO. The technical infrastructure appears stable and appropriate for the organization's needs. From a security perspective, the site enforces HTTPS and domain registration statuses that prevent unauthorized changes. However, it lacks DNSSEC and important security headers, which are recommended to enhance DNS and web security. No critical vulnerabilities or exposed sensitive data were detected. Incident response contact is provided via a dedicated abuse/legal email address, but no formal security policy or vulnerability disclosure program is present. Overall, the website and domain registration data indicate a high level of legitimacy and professionalism. The absence of privacy and cookie policies is a notable compliance gap, especially under GDPR. Strategic improvements in security headers, DNSSEC, and privacy compliance would strengthen the organization's security posture and trustworthiness.

F

FehrAdvice & Partners AG

fehradvice.com

45

FehrAdvice & Partners AG is a Swiss-based consulting firm specializing in behavioral economics, helping organizations improve decision-making through evidence-based strategies. Established in 2009, the company offers services including customer strategy, corporate strategy, employee strategy, and citizen participation. Their market position is strong, supported by extensive project experience and a professional online presence. Technically, the website is built on WordPress with modern plugins and technologies, optimized for performance and mobile use. Security posture is solid with HTTPS, consent management, and no visible vulnerabilities, though DNSSEC and additional security headers could enhance protection. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the website reflects a credible, professional business with high trustworthiness and good digital maturity.

A

APU AG

apu.ch

51

APU AG is a Swiss-based manufacturer specializing in the development, production, and distribution of high-quality plastic plaster connection profiles for interior plaster, exterior plaster, and thermal insulation composite systems. The company targets primarily B2B customers in the construction and building materials sector, offering innovative and reliable system solutions with a longstanding market presence. The website reflects a professional and consistent brand image with clear business information and accessible legal documentation. Technically, the site is built on TYPO3 CMS with custom JavaScript and CSS, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are absent. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

Fermeria

fermeria.ch

56

Fermeria is a well-established online platform specializing in connecting individuals seeking or offering care-related services such as senior care, child care, household help, tutoring, specialist professions, and pet care. Operating primarily in Switzerland with sister sites across multiple European countries, Fermeria serves a broad audience with over 40,000 users. The platform offers free profile creation and job matching, positioning itself as a regional leader in care service marketplaces. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, Facebook Pixel, and reCAPTCHA, alongside a PHP-based backend framework (Nette). The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and provides cookie consent management, though it lacks explicit security headers and published security policies. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. Overall, Fermeria presents a professional, trustworthy, and user-friendly platform with moderate technical sophistication and a solid security posture.

RELUX Informatik AG is a well-established Swiss company specializing in lighting planning and product presentation software, with a strong focus on BIM solutions and manufacturer services. The company offers a range of software products, including the free-to-use ReluxDesktop, and supports its users with training, courses, and a comprehensive knowledge hub. Their market position is strong, supported by decades of experience and active participation in industry committees. Technically, the website is built on the Odoo CMS platform and integrates modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and implements client transfer protection on the domain, but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is partial, with a cookie policy and consent mechanism present but no explicit privacy policy page found. Overall, the website is trustworthy, professional, and safe for general audiences.