Switzerland security reports

G

GWF AG

gwf-unimon.ch

56

Unimon GmbH, a subsidiary or brand under GWF AG, specializes in advanced water quality monitoring and management solutions. Their offerings include modular online monitoring systems, consulting, data analysis, and training services targeted at water utilities, industrial clients, and environmental authorities. The company has a strong market position supported by over 20 years of experience and partnerships with leading sensor manufacturers. The website reflects a mature digital presence built on WordPress with modern SEO and privacy compliance implementations. Security posture is strong with HTTPS, security headers, and CAPTCHA protections, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

N

NeoVac

neovac.ch

72

NeoVac is a Swiss-based company specializing in energy and water measurement, billing, monitoring, and secure plant construction. With a history spanning approximately 50 years, NeoVac serves business clients with a comprehensive suite of services including energy optimization, tank protection, and water technology solutions. The website is professionally designed, multilingual, and integrates modern technologies such as Alpine.js and Matomo analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent management implemented, though explicit security headers and detailed privacy policies are not evident in the provided content. Overall, the site demonstrates a high level of business credibility and technical competence, suitable for its B2B target audience.

S

Sontex SA

sontex.it

72

Sontex SA is a Swiss-based company specializing in innovative metering systems for energy and water resource management. The company offers a broad portfolio of products including thermal energy meters, heat cost allocators, electronic water meters, and radio communication modules. Their business model focuses on manufacturing, software solutions, and providing professional support to partners and customers. Sontex maintains a strong market position with international subsidiaries and a wide partner network. The website demonstrates a mature digital presence with multilingual support and professional branding. Technically, the site is built on WordPress with modern frameworks and includes SEO and accessibility considerations. Security posture is good with HTTPS and cookie consent mechanisms, though some improvements in security headers and library updates are recommended. Overall, Sontex SA presents a trustworthy and professional online presence aligned with its business operations.

S

Sontex SA

sontex.eu

73

Sontex SA is a Swiss-based company specializing in innovative measurement systems for energy and water resource optimization. The company offers a broad range of metering products including thermal energy meters, heat cost allocators, electronic water meters, and radio modules, supported by digital platforms such as My Sontex. Sontex maintains a strong international presence with subsidiaries and partners across Europe and beyond. The website reflects a professional and consistent brand image with comprehensive business and legal information, targeting energy suppliers, realtors, and building automation professionals. Technically, the site is built on WordPress with modern plugins and libraries, though some components like jQuery are outdated. Security posture is good with HTTPS and cookie consent mechanisms, but could be improved with updated libraries and enhanced security headers. Overall, the domain registration and WHOIS data align well with the business claims, indicating a legitimate and trustworthy entity.

G

GWF MessSysteme AG

infin.io

46

Infin.io is a digital ecosystem platform operated by GWF MessSysteme AG, a Swiss company founded in 2012. The platform focuses on linking physical measurement assets to data-driven tools, targeting industrial and infrastructure sectors. Their key services include portals, service integration, data connectivity, insights, and APIs, positioning them as a niche technology provider in smart infrastructure and industry. The website is professionally designed with good content quality and clear navigation, supporting a medium-sized business profile. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, GSAP animations, and Swiper.js for UI components. It is hosted on Microsoft Azure DNS infrastructure and built on Craft CMS. Performance and mobile optimization are good, though accessibility and SEO are basic. Security posture is solid with HTTPS enforced and secure forms, but lacks DNSSEC and security headers. No explicit security or incident response policies are published. Overall, the website and domain registration data indicate a trustworthy and legitimate business presence with moderate technical maturity. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. No suspicious or malicious indicators were found. Recommendations include enabling DNSSEC, adding security headers, and publishing security policies to enhance trust and compliance.

G

GWF AG

unimon.ch

56

Unimon GmbH, a subsidiary of GWF AG, specializes in advanced water quality monitoring and management solutions, targeting water utilities, industrial clients, and environmental authorities. The company offers modular online monitoring systems, consulting, implementation, and training services, leveraging IoT and real-time data analytics to enhance water safety and sustainability. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its B2B audience. Technically, the site is built on WordPress with modern plugins and scripts, ensuring good performance and SEO optimization. Security measures include HTTPS, security headers, CAPTCHA protections, and cookie consent management, although a dedicated security policy and incident response information are absent. Overall, the site demonstrates a strong security posture and compliance with GDPR, supporting trustworthiness and business credibility.

G

GWF AG

gwf-hydropower.com

54

GWF AG operates a professional website focused on precision flow measurement solutions for hydropower plants and large-scale water applications. The company positions itself as an experienced and innovative provider with a global footprint and a history of product development since 2005. The website is well-structured, content-rich, and targets hydropower industry professionals and infrastructure managers. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie compliance, hosted on Azure DNS infrastructure. Security posture is good with HTTPS and CAPTCHA protections, though some security headers and explicit policies are missing. The WHOIS data shows inconsistencies with a future domain creation date, which raises concerns about domain legitimacy despite the professional appearance and external trust signals. Overall, the site is trustworthy and professional but would benefit from clarifying domain registration details and publishing formal security policies.

G

GWF AG

gwf-balance.com

54

GWF AG operates the GWF Balance platform, a technology-driven solution focused on reducing water network leakage and improving water utility efficiency. The company leverages advanced sensors, proprietary AI algorithms, and a data-rich platform to deliver measurable leakage reductions and operational savings. Positioned as a technology leader with a 125-year heritage, GWF AG targets water utilities and network operators globally, emphasizing sustainability and cost-effective interventions. Technically, the website is built on WordPress with modern JavaScript libraries such as jQuery and Swiper.js, integrated with Google Analytics and Tag Manager for tracking. The site employs robust cookie consent management via Borlabs Cookie and uses FriendlyCaptcha for form security. Hosting is supported by Azure DNS, and the site is served over HTTPS with good SSL configuration, ensuring secure communications. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CAPTCHA on forms, and cookie consent compliance. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly present and could be added to enhance security. No vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are comprehensive and GDPR compliant, supporting strong privacy posture. Overall, the website presents a professional, trustworthy, and technically sound digital presence for GWF AG. The domain is newly registered but consistent with the company's established business. Recommendations include enhancing security headers, publishing a dedicated security policy, and establishing incident response contact channels to further strengthen trust and compliance.

Z

Zendo Inneres Lind

zendo-inneres-lind.ch

44

Zendo Inneres Lind is a small Zen meditation center located in Winterthur, Switzerland, led by Kathrin Stotz Sensei. The website provides information about Zen meditation courses, workshops, and events following the Glassman-Lassalle Zen lineage. The business targets individuals interested in Zen practice without religious dogma, offering a community-oriented approach with experienced guidance. The market position is local and niche, focusing on spiritual and meditation services. Technically, the website is built on the Cloudrexx CMS platform and uses older JavaScript libraries such as jQuery 1.6.1 and Modernizr. The site includes responsive design elements but shows only basic mobile optimization and accessibility features. SEO is basic with proper meta tags but lacks advanced structured data or analytics integration. Performance is moderate with no evident critical errors. From a security perspective, the website lacks visible security headers and does not confirm HTTPS usage in the provided data. The use of an outdated jQuery version may expose the site to vulnerabilities. No privacy, cookie, or terms of service policies are present, indicating low privacy compliance. Contact information is limited to an email and physical address, with no phone or social media presence. No incident response or security policy information is available. Overall, the website is functional and provides relevant content for its audience but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and protect users. Strategic recommendations include implementing HTTPS, updating JavaScript libraries, adding privacy and cookie policies, and improving security headers and accessibility.

S

Sontex SA

sontex.ch

74

Sontex SA is a Swiss-based company specializing in innovative measurement systems for energy and water resource optimization. The company offers a range of products including thermal energy meters, heat cost allocators, electronic water meters, and data communication solutions. With a strong international presence supported by subsidiaries and partners, Sontex positions itself as a reliable provider of high-quality metering technology. The website reflects a mature digital infrastructure built on WordPress, incorporating modern web technologies and SEO best practices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms implemented, although explicit security policies and incident response details are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

G

GWF MessSysteme AG

gwf.ch

58

GWF MessSysteme AG is a well-established Swiss company specializing in innovative measurement systems for energy, water, and building technology sectors. With a history spanning over 125 years, the company has evolved from a manufacturer of gas and water meters to a system integrator offering digital and IoT solutions for smart cities, buildings, industries, and infrastructure. Their market position is strong in Switzerland with growing international presence supported by partnerships and service offices. The website reflects a mature digital infrastructure built on WordPress with modern SEO and accessibility practices. Security posture is robust with HTTPS, security headers, CAPTCHA protections, and cookie consent mechanisms in place. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

Z

Die Website informiert über die Zen-Aktivitäten im zürcherischen Studentenheim Maximilianeum

zenimmax.ch

43

The website www.zenimmax.ch is a WordPress-based informational site dedicated to Zen activities at the Zurich student residence Maximilianeum. It offers details about daily meditation sessions, monthly courses, and related Zen community events. The site targets individuals interested in Zen practice within the Zurich area and operates as a small, community-focused entity without commercial intent. Technically, the site uses a modern WordPress CMS with the Astra theme and Google Fonts, providing a good user experience with mobile optimization and accessibility. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. The site links to partner Zen organizations, enhancing its community integration. Overall, the site is safe, professional, and relevant to its niche audience but would benefit from improved privacy compliance and security practices.

Z

Zen Integral

zen-integral.com

39

Zen Integral is a small Swiss-based coaching and seminar company specializing in Zen meditation, mindful self-development, and lucid dreaming. The company offers a range of services including individual coaching, open seminars, and tailored in-house corporate trainings. The website is professionally designed using WordPress and Elementor, integrating modern event management and e-commerce plugins to facilitate course bookings. The technical infrastructure is solid with HTTPS enabled and use of reputable plugins, though some security headers and DNSSEC are missing. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism despite using Google Analytics and Tag Manager. The business is credible with detailed background information, published works, and client logos. Overall, the website is trustworthy, content-rich, and well-positioned in its niche market.

W

Webnode AG

webnode.co.uk

70

Webnode AG operates a mature and professional website builder platform that enables users worldwide to create websites, blogs, and e-commerce stores with ease. The platform leverages modern technologies including AI to streamline website creation and offers localized support in multiple languages. The company has a strong market presence with over 50 million websites built, positioning itself as a reliable and user-friendly SaaS provider in the website building industry. Technically, the website is well-constructed using Angular framework, served via Amazon Cloudfront CDN, and integrates Google services for analytics and advertising. Security measures such as HTTPS, reCAPTCHA, and cookie consent mechanisms are implemented effectively, although explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates a high level of professionalism, accessibility, and compliance with privacy regulations, making it a trustworthy platform for its users.

G

Glassman-Lassalle Zen-Linie

zen-glassman-lassalle.ch

48

The website zen-glassman-lassalle.ch represents a small-scale spiritual and educational business focused on Zen meditation, retreats, and training in the Glassman-Lassalle tradition, primarily targeting a general European audience with a focus on Switzerland. The site offers information about courses, meditation sessions, and Zen teachings without commercial e-commerce features or extensive contact details beyond a contact form. Technically, the site is built on the Cloudrexx CMS platform and uses older JavaScript libraries such as jQuery 1.6.1, which may pose security risks. The site is moderately optimized for mobile and SEO, with a clear navigation structure and good content relevance. However, it lacks modern security headers and visible privacy or cookie policies, which impacts its privacy compliance and security posture. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences.

N

Nidecker SA

equip.sport

55

Equip Sport is a Switzerland-based company operating a premium sports equipment app that connects users to over 20,000 stations across Europe, enabling convenient access to sports equipment anytime and anywhere. The business targets sports enthusiasts and active individuals, leveraging a platform and mobile app business model. The company is relatively new, founded in 2022, and operates under the parent company Nidecker SA. The website is professionally designed with consistent branding and good content quality, supporting app downloads for iOS and Android platforms. Technically, the website is built on WordPress, utilizing modern technologies such as Google Tag Manager, Mapbox for location services, and Uberall's store finder widget. Hosting is provided by Infomaniak, a reputable Swiss hosting provider. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Performance is moderate, with room for improvement. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms compliant with GDPR. It uses reCAPTCHA to mitigate bot activity and integrates Google Analytics and Ads for tracking. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and no dedicated security or incident response policies are published. No vulnerability disclosure or security.txt files are found, indicating an area for enhancement. Overall, Equip Sport presents a trustworthy and professional online presence with a solid technical foundation and compliance posture. Strategic improvements in security policy transparency, accessibility, and explicit contact information would further strengthen its risk profile and user trust.

A

AV WINDOWS & DOORS SOLUTIONS

fepo.ch

56

The website www.fepo.ch represents AV WINDOWS & DOORS SOLUTIONS, a small Swiss company specializing in manufacturing and servicing windows, doors, partition walls, and aluminium facades. The business targets residential and commercial property owners or builders seeking quality and durable building components. The site is professionally designed using Webflow CMS, with a clear navigation structure and good mobile optimization. However, it lacks privacy and cookie policies, which are critical for compliance with GDPR and other regulations. Technically, the website uses modern web technologies including Webflow, Google Fonts, and jQuery. Hosting is via Webflow's CDN, providing moderate performance. The site lacks advanced security headers and explicit incident response or security policies, indicating room for improvement in security posture. No analytics or tracking scripts beyond basic libraries were detected, suggesting minimal user tracking. Security-wise, the site enforces HTTPS and does not expose sensitive data in the HTML. However, the absence of security headers and formal policies reduces its security maturity. No vulnerabilities or suspicious content were found. The domain appears legitimate and consistent with a small regional business, though WHOIS data details were not provided for deeper analysis. Overall, the website is functional and professional but requires enhancements in privacy compliance, security headers, and incident response readiness to improve trust and regulatory adherence.

V

VISIONAPARTMENTS

visionapartments.com

72

VISIONAPARTMENTS is a professional serviced apartment provider offering fully furnished and equipped apartments primarily in European cities. The company targets both individual and business clients, providing flexible short-term and long-term rental options with modern amenities such as Wi-Fi, fitness centers, and 24/7 support. The website is built on modern technologies including Next.js and React, hosted with Cloudflare DNS services, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy and cookie policies are not found, indicating a gap in compliance. Overall, the website is trustworthy and professional but could improve transparency and compliance documentation.

L

LunaJets

lunajets.com

71

LunaJets is a leading European private jet charter broker headquartered in Geneva, offering worldwide on-demand private jet services. The company operates as an intermediary, arranging flights through third-party operators, and serves a diverse clientele including individuals, corporations, governments, and sports teams. Their market position is strong, supported by recognized certifications and a comprehensive service portfolio including empty leg flights and group charters. Technically, the website is built on modern frameworks like Next.js and React, with integrated analytics and security features such as HTTPS and reCAPTCHA. Security posture is solid with appropriate headers and no evident vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of WHOIS data is a notable gap but does not significantly detract from the overall trustworthiness given the professional presentation and business transparency. Strategic recommendations include publishing detailed security and incident response policies and verifying domain registration details for enhanced trust.

V

Velosolutions

velosolutions.com

58

Velosolutions is a Swiss-based company specializing in software solutions for mountain bike parks and trail management. Established in 2001, it offers digital tools that assist park operators and trail builders in managing and maintaining mountain biking trails effectively. The company targets a niche market within the outdoor recreation and transportation sector, positioning itself as a leader in trail management software. The website is professionally designed, multilingual, and provides clear contact information, reflecting a mature digital presence. Technically, the site is built on WordPress with modern technologies and good SEO practices, hosted by Hostpoint AG. Security posture is solid with HTTPS, security headers, and no evident vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Privacy and cookie policies are present and GDPR compliant, with moderate user tracking via Google Analytics and Facebook Pixel. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, Velosolutions demonstrates a strong business and technical foundation with good security hygiene and compliance, suitable for its market niche.

H

Hans im Glück - Burgergrill Bar

hansimglueck-burgergrill.ch

60

Hans im Glück - Burgergrill Bar operates a professional and well-branded restaurant and food delivery website targeting the Swiss market with multilingual support. The company offers dine-in, online ordering, and table reservation services, positioning itself as a medium-sized hospitality business with a strong franchise presence. The website is built on TYPO3 CMS with modern web technologies and includes GDPR-compliant consent management. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. The site demonstrates good privacy compliance and business credibility with clear contact phone and social media presence. Overall, the website is professional, user-friendly, and trustworthy.

Hilti Schweiz operates as a leading enterprise in the manufacturing and retail of professional construction tools and services, targeting professionals in the building industry. The website reflects a mature digital presence with a comprehensive product and service offering including drilling, chiseling, anchors, battery tools, screws, fire protection, and installation services. The company maintains a strong market position with consistent branding and a professional online presence. Technically, the website leverages modern frameworks such as Angular and Adobe Experience Manager, supported by advanced monitoring and analytics tools like Datadog RUM and Google Tag Manager, indicating a high level of digital maturity and performance optimization. Security posture is robust with HTTPS enforcement, consent management integration, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Overall, the website is safe, GDPR compliant, and trustworthy, with a high AI-assessed quality score.

N

Notino, s.r.o.

notino.ch

73

Notino, s.r.o. operates a large-scale e-commerce platform specializing in perfumes and cosmetics targeted at the Swiss market. The website offers a broad range of beauty products, including fragrances, make-up, hair care, and skin care, positioning itself as a key player in the Swiss online retail beauty sector. The business model focuses on direct online sales with customer-centric services such as a 90-day return policy and accessible customer support. The company maintains a consistent brand presence and leverages social media channels for engagement.

I

IFSDA

ifsda.org

46

IFSDA (International Federation of Stamp Dealers Associations) is a non-profit organization established in 2000, headquartered in Switzerland, dedicated to promoting safe and honest trade of philatelic materials worldwide. The website serves as an informational platform for stamp dealers and collectors, providing event listings, membership information, and a contact portal. The organization positions itself as a reputable international federation with a focus on community and trust within the philatelic trade. Technically, the website is built on WordPress 5.7.12, utilizing common plugins such as ProfileGrid and The Events Calendar. It is hosted on Tophost.ch with HTTPS enabled, ensuring secure communications. The site demonstrates moderate performance and good mobile optimization, though accessibility and SEO optimizations are basic. The technical stack is modern but could benefit from enhanced security headers and DNSSEC implementation. From a security perspective, the site uses HTTPS and has domain transfer protections in place. However, it lacks DNSSEC and security headers that could mitigate common web vulnerabilities. There is no evidence of a formal security policy, incident response contacts, or vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent or terms of service pages, which are recommended for GDPR compliance. Overall, the website is trustworthy and professional, with a clear business purpose and consistent WHOIS data supporting legitimacy. The site is safe for general audiences, with no adult or questionable content. Strategic improvements in privacy compliance, security hardening, and user engagement features would enhance its digital maturity and trustworthiness.

P

Provet AG

covetrus.ch

67

Covetrus.ch is a professional B2B e-commerce platform operated by Provet AG, specializing in veterinary supplies, pharmaceuticals, pet food, and accessories targeted at veterinary professionals in Switzerland. The website is well-branded, consistent, and provides comprehensive product offerings along with educational seminars. Technically, the site uses a custom framework with modern JavaScript libraries and analytics tools, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the site reflects a mature digital presence aligned with its parent company Covetrus Inc., supporting its market position effectively.

The website fabiensauser.ch is a personal blog primarily in French, focusing on literature, technology, and personal reflections. It is built using the Hugo static site generator and contains a series of well-written blog posts with clear navigation and moderate mobile optimization. The site targets general internet users interested in thoughtful content rather than commercial services. There is no evidence of monetization or business operations beyond content publishing. Technically, the site uses a simple tech stack with Hugo and CSS, lacks advanced frameworks or analytics, and shows basic SEO and accessibility features. No forms or tracking scripts are present, indicating minimal data collection. However, there is no visible HTTPS/SSL confirmation or security headers, which reduces the security posture. Privacy and cookie policies are absent, limiting compliance with GDPR and related regulations. Security-wise, the site does not expose sensitive data or show signs of vulnerabilities but lacks formal security policies or incident response contacts. The domain uses privacy protection in WHOIS, typical for personal blogs, with no suspicious patterns detected. Overall, the site is safe and trustworthy for general audiences but could improve in security and privacy compliance. The overall risk is low given the non-commercial nature and limited data collection, but strategic improvements in HTTPS implementation, security headers, and privacy disclosures are recommended to enhance trust and compliance.

L

Limula SA

limula.ch

58

Limula SA is a Swiss-based company specializing in automated cell and gene therapy manufacturing solutions. Their innovative platform combines a bioreactor and centrifuge into a single closed device, aiming to simplify and scale the production of life-saving therapies. Positioned as an emerging leader in the healthcare technology sector, Limula targets biotech firms, pharmaceutical companies, and investors interested in advanced cell therapy manufacturing. The website reflects a professional and consistent brand image, emphasizing Swiss engineering excellence and strong industry partnerships. Technically, the website is built on WordPress with a modern tech stack including jQuery, MediaElement.js, and various UI plugins. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, Limula's digital presence supports its business credibility and market positioning well. The site is safe, professional, and trustworthy, with clear contact channels and partnership opportunities. However, improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

L

Lgrn Arts

lgrn-arts.ch

64

Lgrn Arts is an independent artist and character project founder presenting a portfolio of artworks and community links. The website serves as a personal creative hub with a niche audience interested in art and digital creativity. The business model is primarily portfolio and community engagement without commercial transactions or formal business operations. Technically, the site uses standard HTML, CSS, and JavaScript with Cloudflare for CDN and analytics, offering moderate performance and basic mobile optimization. Security posture is moderate with HTTPS implied but lacks explicit security headers and formal policies. Privacy compliance is minimal with no privacy or cookie policies and no contact information provided. Overall, the site is legitimate and safe but would benefit from improved compliance and security practices.

M

Michael Moor

michaelmoor.me

41

Michael Moor's personal website serves as an academic and professional platform highlighting his expertise in medical AI and machine learning. The site effectively communicates his research focus, academic appointments, and recent achievements, targeting an audience of researchers, healthcare professionals, and AI enthusiasts. The website is built on a modern static site generator (Hugo) with a clean, responsive design and integrates several well-known libraries and frameworks to enhance user experience and content presentation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement in compliance and security best practices. Overall, the site is trustworthy, professional, and well-maintained, with minimal privacy risks due to lack of data collection mechanisms.

C

crimew.gay

crimew.gay

57

crimew.gay is a small, community-driven Fediverse instance operated by an individual named Maia. It provides a social networking platform based on the Pleroma software, targeting users interested in a curated and moderated federated social experience. The instance emphasizes active moderation and federation policies to maintain community standards. Technically, the site uses modern web technologies and is mobile optimized, though it lacks some advanced security headers and privacy compliance features. The domain is relatively new, registered in 2022 with privacy protection, which is appropriate for this type of community service. Security posture is moderate with HTTPS enabled but could be improved with DNSSEC and additional headers. Overall, the site is functional and trustworthy but would benefit from enhanced privacy policies and contact transparency.

A

whoami | AtomicMaya's Blog

atomicmaya.me

68

AtomicMaya.me is a personal blog operated by Maya Boeckh, focusing on information security, development, OSINT, and personal interests. The site serves as a platform for sharing knowledge, community engagement, and professional insights, including Maya's roles as a community manager and university lecturer. The blog is well-positioned within the niche of infosec enthusiasts and developers, offering relevant and recent content that reflects active participation in the cybersecurity community. Technically, the website is built using Angular 14, employs modern web standards, and is hosted on GitHub Pages, ensuring reliable performance and good SEO practices. Security-wise, the site uses HTTPS and avoids exposing sensitive data, though it lacks advanced security headers and formal security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy, professionally maintained, and suitable for its target audience.

P

prx

si3t.ch

42

The website si3t.ch is a personal digital space hosted by an individual known as 'prx'. It serves as a repository for documentation, code, tools, and miscellaneous content aimed at digital travelers and enthusiasts interested in self-hosting and privacy. The site also offers community interaction via an XMPP chat and is accessible through a TOR hidden service, emphasizing privacy and anonymity. The business model is non-commercial and hobbyist in nature, with a small-scale operation based in Switzerland. Technically, the site uses basic HTML, CSS, and JavaScript with Atom feeds and XMPP integration. It is self-hosted at home, with moderate performance and basic mobile optimization. No CMS or advanced frameworks are detected. The site lacks formal privacy, cookie, or terms of service policies and does not appear to use analytics or advertising, reflecting a privacy-conscious approach. From a security perspective, the site shows limited security measures in the HTML content, with no detected security headers or HTTPS/SSL information. The use of a TOR hidden service is a positive privacy feature. However, the absence of security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement. No critical vulnerabilities or adult content were detected. Overall, the site is a safe, small personal project with moderate trustworthiness but limited formal security and privacy compliance. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and cookie policies, and establishing a vulnerability disclosure process to enhance security posture and user trust.

S

SENSAP Swiss AG

sensap.ch

49

SENSAP Swiss AG is a specialized technology company focused on delivering industrial automation and IoT solutions, including machine vision, AutoID technologies, and business activity monitoring. Established in 2002 and headquartered in Zurich, Switzerland, the company targets manufacturing and warehouse operations with a suite of hardware and software products designed to optimize production and quality inspection processes. Their market position is that of a niche provider with a solid client base and over 20 years of experience. The website is built on Joomla CMS using modern frameworks such as Bootstrap and Helix Ultimate, ensuring a responsive and professional digital presence. While the technical infrastructure is adequate with good mobile optimization and SEO practices, there is room for improvement in accessibility and performance tuning. The site employs HTTPS and a cookie consent mechanism, reflecting a basic level of digital maturity. From a security perspective, the site benefits from HTTPS encryption but lacks important security headers and formal policies such as privacy, terms of service, and vulnerability disclosure. No incident response contacts or data protection officer information is provided, which could be a compliance gap. The absence of these policies and headers slightly lowers the security posture score but overall the site appears secure with no visible vulnerabilities. Overall, the website is professional and trustworthy, with clear business information and contact details. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and establishing a vulnerability disclosure process to enhance compliance and security posture.

S

STIEBEL ELTRON GmbH & Co. KG

stiebel-eltron.ch

60

STIEBEL ELTRON GmbH & Co. KG is a well-established company specializing in renewable energy heating solutions, particularly heat pumps, ventilation systems, and smart home energy management. The website serves the Swiss market with localized content and is part of a broader international presence. The company emphasizes sustainability and customer service, offering comprehensive product information, planning tools, and support services. The digital infrastructure uses modern JavaScript libraries and analytics tools, ensuring a responsive and user-friendly experience. Privacy compliance is robust, with clear cookie consent mechanisms and a detailed privacy policy. Security posture is solid with HTTPS enforcement and secure cookie practices, though some security headers could be improved. Overall, the website reflects a mature, professional business with strong market positioning in the energy sector.

P

Patientensicherheit

cirrnet.ch

50

Patientensicherheit operates CIRRNET, a critical incident reporting and reacting network serving as a central institution for local incident reporting systems across Switzerland's healthcare sector. The organization focuses on enhancing patient safety by enabling healthcare facilities to anonymously contribute incident reports to a centralized database, thereby supporting nationwide risk assessment and prevention efforts. CIRRNET's market position is that of a key non-profit healthcare network institution with a medium-sized operational scale and a clear focus on Swiss healthcare providers and medical societies. Technically, the website is built on a modern WordPress platform using Elementor for content management and design, supported by LiteSpeed caching and Matomo analytics for performance and user tracking. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. The infrastructure supports multilingual content in German, French, and Italian, reflecting the Swiss market. From a security perspective, the site employs HTTPS with good SSL configuration and standard security headers, indicating a solid baseline security posture. However, there is no explicit security policy or incident response contact information published, and the cookie policy lacks an active consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. Strategic recommendations include implementing a cookie consent mechanism, publishing a formal security policy and incident response contacts, and enhancing accessibility compliance to further strengthen trust and regulatory adherence.

Experian Switzerland AG operates as a leading provider of data-driven decisioning solutions focused on risk, fraud, and identity management. The company leverages advanced analytics and platform-based services to enable faster, data-based decisions primarily targeting financial institutions and enterprises. As part of the global Experian group, it maintains a strong market position in Switzerland and Europe with a comprehensive portfolio of services. The website reflects a mature digital presence with professional design and clear business messaging. Technically, the site is built on Adobe Experience Manager, integrates advanced analytics tools like Piwik PRO and Google Tag Manager, and employs robust cookie consent mechanisms ensuring GDPR compliance. Security posture is strong with HTTPS enforcement, security headers, and no detected vulnerabilities or exposed sensitive data. However, the absence of a dedicated security policy and vulnerability disclosure page suggests room for improvement in transparency and incident readiness. Overall, the site demonstrates high business credibility and technical maturity, suitable for its enterprise audience.

S

Sponsoo GmbH

sponsoo.ch

60

Sponsoo GmbH operates Europe's largest online marketplace for sports sponsorship, connecting thousands of athletes, teams, clubs, associations, and events with sponsors and companies. The platform facilitates sponsorship profile creation, portfolio browsing, and deal support, positioning itself as a leading player in the European sports marketing sector. The website is professionally designed, multilingual, and integrates modern web technologies including AngularJS, Google Analytics, and Facebook Pixel for marketing and tracking purposes. Security posture is solid with HTTPS and CSRF protections, though improvements are needed in security headers and cookie consent mechanisms. The business demonstrates legitimacy with consistent WHOIS data and transparent registration details. Overall, the platform offers a trustworthy and functional service for its target audience.

S

Swiss Medtech Expo

medtech-expo.ch

68

Swiss Medtech Expo is a professional event and content platform focused on the medical technology industry in Switzerland. It offers a trade fair, symposium, and year-round digital engagement for medtech providers, suppliers, and professionals. The platform provides news, networking opportunities, and educational content, positioning itself as a leading Swiss medtech event. Technically, the website employs modern web technologies including Bootstrap, FontAwesome, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure channels. Overall, the site is well-designed, professional, and trustworthy, with strong GDPR compliance and a clear business focus.

T

trainersuchportal

trainersuchportal.ch

64

trainersuchportal.ch is a specialized online job portal focused on the sports sector, primarily serving Switzerland and German-speaking markets. It connects sports organizations, clubs, and fitness studios with qualified trainers and coaches by offering job listings and trainer profiles. The platform has established partnerships with recognized sports associations and provides a professional, user-friendly experience with strong branding and content quality. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and Sentry for monitoring, with responsive design and good SEO practices. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

Z

Zondax

beryx.io

66

Beryx is a blockchain explorer and analytics platform focused on the Filecoin ecosystem, developed by the Swiss company Zondax. It provides users with access to historical and real-time blockchain data, developer tools, and a public API to facilitate interaction with the Filecoin network. The platform targets developers, analysts, and participants in the Filecoin ecosystem, positioning itself as a niche but essential service provider within the blockchain technology sector. Technically, the website is built using modern web technologies including Next.js and Material-UI, hosted with Cloudflare DNS and CDN services, ensuring good performance and mobile optimization. Security measures such as HTTPS, security headers, and cookie consent mechanisms are properly implemented, although DNSSEC is not enabled and no explicit security or incident response policies are published. The domain is privacy protected but consistent with the business profile and age. Overall, Beryx demonstrates a solid technical and security posture with room for improvement in transparency and contactability.

E

Einhell Germany AG

einhell.ch

65

Einhell Germany AG operates the website einhell.ch, a professional e-commerce platform specializing in high-quality power tools and garden equipment targeted at DIY enthusiasts, gardeners, and professional users primarily in Switzerland and other European markets. The website offers a comprehensive product catalog, customer login, product comparison, and after-sales services, positioning itself as a trusted brand with a strong market presence. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and integrates privacy-friendly analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, CAPTCHA protections, and secure authentication mechanisms. Privacy compliance is robust, with clear GDPR-aligned policies and cookie consent. Overall, the site demonstrates high professionalism, trustworthiness, and user experience quality.

B

Backed Finance AG

backed.fi

73

Backed Finance AG is a Swiss-based financial technology company specializing in tokenizing real-world financial assets such as stocks, ETFs, and bonds onto blockchain platforms. Their innovative business model integrates traditional financial assets with decentralized finance (DeFi) protocols, enabling efficient, transparent, and compliant on-chain investment products. The company has established partnerships with major crypto exchanges like Kraken, Bybit, Gate, and Bitget, positioning itself as a key player in the emerging tokenized securities market. Their platform supports multichain operations and offers tools such as a DeFi dashboard, proof of reserves, and bridging services, catering primarily to qualified investors and financial institutions.

K

Krüger Dirndl

krueger-dirndl.ch

67

Krüger Dirndl operates a professional e-commerce platform specializing in traditional Trachtenmode and Dirndl clothing for women, men, and children primarily targeting German-speaking markets such as Switzerland, Germany, and Austria. The company emphasizes quality and tradition with over 50 years of experience and a large customer base. The website is built on Magento 2 with modern JavaScript frameworks and integrates marketing and consent management tools to enhance user experience and compliance. Security posture is strong with HTTPS and secure form handling, though explicit security policies and incident response information are not publicly visible. Overall, the site presents a trustworthy and professional retail presence with room for improvement in privacy policy transparency and security header implementation.

O

Odlo

odlo.com

74

Odlo is a well-established sportswear brand specializing in functional underwear and sports apparel, targeting active individuals and athletes primarily in Europe. The company operates a professional e-commerce platform offering direct sales of its products. The website demonstrates a good level of digital maturity with modern design, mobile optimization, and implemented privacy and cookie consent mechanisms. The technical infrastructure includes modern CSS frameworks and third-party marketing tools, supporting a moderate performance and user experience. Security posture is adequate with HTTPS enforced and cookie consent, though additional security headers could enhance protection. The absence of public WHOIS data suggests privacy protection or limited public registration information, which slightly impacts trust but is common for commercial brands. Overall, the website is professional, secure, and compliant with GDPR, supporting a trustworthy online presence for Odlo.

P

Personalshop AG

personalshop.ch

71

Personalshop AG operates a membership-based e-commerce platform focused on providing exclusive access to top-brand products at discounted prices primarily for Swiss customers. The website is professionally designed, mobile-optimized, and integrates modern tracking and marketing technologies such as Google Tag Manager, Facebook Pixel, and Bazaarvoice. Security posture is strong with HTTPS enforced, PCI-certified servers, and SSL encryption, although some security headers could be improved. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy policies. The business demonstrates high credibility with transparent contact information, certifications, and a consistent brand presence. Overall, the site presents a low-risk profile with no signs of malicious activity or content safety concerns.

E

EyeFitU

eyefitu.com

65

EyeFitU is a Swiss-based technology company specializing in AI-powered size and fit solutions for the fashion and footwear industry. Their platform leverages patented AI technology to help apparel retailers reduce returns, increase online conversions, and enhance customer experience. The company positions itself as a SaaS provider with integrations into major e-commerce platforms such as Shopify, Oracle, and WooCommerce, serving hundreds of global brands. Their key services include personalized size recommendations, virtual fitting, and advanced analytics to optimize manufacturing and sustainability efforts. Technically, EyeFitU employs a modern web stack including React and Next.js, with analytics and user behavior tracking via Google Analytics and Hotjar. The website is well-optimized for mobile and desktop, with fast loading times and good SEO practices. However, there is no explicit CMS or hosting provider identified. The site uses HTTPS and asynchronous script loading to enhance security and performance. From a security perspective, the website enforces HTTPS and avoids exposing sensitive data. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS registration data for the domain is a notable anomaly that slightly reduces trustworthiness. Overall, the security posture is good but could be improved with more transparency and security headers. The overall risk assessment is moderate with a recommendation to address WHOIS data transparency, publish security policies, and enhance incident response readiness. The website is professional, trustworthy, and business-focused, with no adult or questionable content detected.

T

Trust Square

trustsquare.com

65

Trust Square is a Zurich-based innovation hub focused on fostering entrepreneurship and disruptive technologies such as blockchain and web3. The company provides co-working spaces, hosts innovation events, and offers business and digital services to startups, investors, and academics. The website is professionally designed, mobile-optimized, and integrates modern marketing and analytics tools, primarily leveraging HubSpot's CMS and marketing platform. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and cookie consent mechanisms are missing. WHOIS data is unavailable, which raises some legitimacy concerns, but the overall professional presentation and active social media presence mitigate risk. Strategic recommendations include enhancing privacy compliance with cookie consent, adding security headers, and publishing vulnerability disclosure information.

D

DePIN Association

depinassociation.com

57

DePIN Association is a small, technology-focused non-profit organization dedicated to expanding and accelerating the adoption of Decentralized Physical Infrastructure Networks (DePIN) through education, advocacy, and industry transformation. The website presents a professional and consistent brand image, highlighting partnerships with various decentralized infrastructure projects and platforms. The technical infrastructure is based on Squarespace, providing a modern and mobile-optimized experience with good SEO and accessibility features. Security posture is solid with HTTPS and HSTS enabled, though additional security headers and privacy policies are recommended. The absence of WHOIS registration data raises concerns about domain legitimacy, but the active website and partner ecosystem suggest a legitimate operation. Overall, the site is safe, professional, and targeted at industry stakeholders interested in decentralized infrastructure.

P

PORR Schweiz

porr.ch

55

PORR Schweiz is a well-established, international construction company with over 150 years of experience and a strong presence in Switzerland and other European countries. The company offers a broad range of construction services including building construction, civil engineering, infrastructure, tunnel construction, and environmental technology. The website reflects a professional corporate identity aligned with its parent company PORR AG, showcasing a comprehensive service portfolio and multiple country-specific sites. Technically, the website is built on TYPO3 CMS with modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers could be added. Privacy compliance is well addressed with a detailed privacy and cookie policy. Overall, the website projects high business credibility and trustworthiness.