Switzerland security reports

I

Infodrog - Schweizerische Koordinations- und Fachstelle Sucht

quatheda.ch

59

QuaTheDA is a Swiss quality norm initiative focused on addiction therapy, drug and alcohol prevention, and health promotion, operated by Infodrog and endorsed by the Swiss Federal Office of Public Health (BAG). The website serves as an authoritative resource for quality standards, certification, training programs, and satisfaction surveys within the addiction support sector in Switzerland. It targets professionals and institutions involved in addiction help and prevention. Technically, the site is built on the Contao CMS, uses Matomo analytics configured for privacy, and is well-structured with multilingual support. Security posture is good with HTTPS and privacy-conscious analytics, though it lacks some security headers and explicit cookie consent mechanisms. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the site is professional, trustworthy, and well-aligned with its governmental and non-profit mission.

K

Kirchenbote Online

kirchenbote-online.ch

64

Kirchenbote Online is a regional Swiss media platform focused on church-related news and cultural topics across several cantons including Baselland, Basel-Stadt, Luzern, Schaffhausen, Schwyz, Solothurn, Uri, and Zug. The website offers news articles, event agendas, book recommendations, and digital e-paper services targeting residents and church community members interested in religious and societal issues. The platform maintains partnerships with other cantonal church news providers, enhancing its regional presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Google reCAPTCHA for bot protection. It features a cookie consent mechanism compliant with GDPR standards, ensuring user privacy choices are respected. The site is mobile-optimized with good navigation and professional design, though some accessibility and SEO aspects could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent with opt-in. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's business focus, indicating legitimacy and trustworthiness. Overall, Kirchenbote Online presents a professional, trustworthy, and GDPR-compliant media platform with moderate technical sophistication and a solid security posture. Opportunities exist to enhance security headers, publish terms of service, and improve accessibility and SEO for better user experience and compliance.

The website jungschar-gelterkinden.ch represents a small, community-focused non-profit youth organization named Cevi Gelterkinden, affiliated with the local church and regional Cevi Basel association. It offers regular youth activities for children from kindergarten through 7th grade, including games, crafts, and camps. The site content is well-structured and relevant to its target audience of children and their parents, with consistent branding and clear program information. Technically, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS, resulting in moderate performance and basic mobile optimization. Security posture is average, with no HTTPS or security headers explicitly detected in the provided data, and no forms or sensitive data collection present. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the domain registration aligns well with the website's community focus, indicating legitimacy and trustworthiness.

E

Evangelisch-reformierte Kirche des Kantons Basel-Landschaft

refbl.ch

69

The Evangelisch-reformierte Kirche des Kantons Basel-Landschaft operates as a regional religious institution serving the Basel-Landschaft canton in Switzerland. The organization provides a broad range of community and spiritual services including church communities, pastoral care, social services, and educational programs. Their website is professionally designed, content-rich, and targets members and interested individuals within the local community. The institution maintains an active social media presence and complies with GDPR and cookie consent regulations, reflecting a mature digital presence. Technically, the website leverages modern web technologies including HTML5, CSS3, JavaScript, jQuery, and the Uikit framework, hosted on a CloudTec CMS platform. It employs Matomo for analytics and Cookiebot for cookie consent management, indicating a focus on privacy compliance. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. From a security perspective, the website enforces HTTPS and implements a Content-Security-Policy header, but lacks additional security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, supporting legitimacy and trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance its security posture and trustworthiness.

Q

Quickpage

quickpage.ch

44

Quickpage is a Swiss-based software provider offering subscription-based website solutions tailored for church communities and parishes. The platform enables event management, contact person administration, and content publishing with a focus on responsive design and ease of use for church staff. It holds a solid market position with over 100 church clients and partnerships with established church communication organizations. Technically, the website is built on WordPress with modern plugins and frameworks, ensuring a good user experience and mobile optimization. Security measures include HTTPS and Google reCAPTCHA integration, though the absence of published privacy and cookie policies and security headers indicates room for improvement in compliance and security posture. Overall, the website is professional, trustworthy, and well-aligned with its target audience, but should enhance privacy compliance and security best practices to strengthen its risk profile.

A

ALDI SUISSE TOURS

aldi-suisse-tours.ch

72

ALDI SUISSE TOURS is a travel service provider operating under the ALDI SUISSE brand, offering affordable travel packages including hotels, beach holidays, round trips, and cruises primarily targeting the Swiss market. The website is professionally designed with consistent branding and provides a comprehensive cookie consent mechanism ensuring GDPR compliance. Technically, the site uses modern web technologies including Cookiebot for consent management, Google Tag Manager for analytics, and Kameleoon for marketing optimization, hosted on AWS Cloudfront CDN. Security posture is strong with HTTPS enforced and appropriate security headers, though no explicit security policy or incident response information is publicly available. Overall, the site is trustworthy and well-positioned in the retail travel sector with good privacy compliance and user experience.

A

ALDI SUISSE AG

aldi-suisse-photos.ch

71

ALDI Suisse Fotos is an online photo printing service operated by ALDI SUISSE AG, a well-established retail company in Switzerland. The website offers customers the ability to upload, edit, and order various photo products such as prints, photo books, and gifts. The service targets ALDI customers and the broader Swiss market, leveraging the strong ALDI brand presence. The business model is e-commerce focused, integrated within the retail sector, providing value-added services to customers. The website content is professionally presented, consistent with ALDI's branding, and offers clear navigation and contact options.

A

ALDI SUISSE AG

aldi-mobile.ch

70

ALDI Mobile, operated by ALDI SUISSE AG, is a telecommunications service provider in Switzerland offering affordable mobile subscriptions and prepaid plans. The website presents a professional and user-friendly interface with clear information about their services, pricing, and contact options. The business targets general consumers seeking cost-effective mobile solutions with no minimum contract duration and lifetime discounts. Technically, the website leverages modern frameworks such as Next.js and React, ensuring good performance, mobile optimization, and accessibility. Security-wise, the site enforces HTTPS, implements standard security headers, and uses cookie consent management, although it lacks a dedicated security policy or incident response page. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, making it a reliable platform for customers.

A

ALDI SÜD

aldi-now.ch

74

ALDI-now is an online grocery delivery platform operating in Switzerland, affiliated with the well-known retail company ALDI SÜD. The website offers a wide range of grocery products with same-day delivery service, targeting Swiss consumers seeking convenience and quality at competitive prices. The platform integrates modern web technologies including Google Tag Manager and reCAPTCHA to enhance user experience and security. Cookie consent mechanisms are implemented to comply with GDPR requirements. The website is professionally designed with consistent branding and clear navigation, providing a trustworthy shopping environment. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and user trust. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy of the site.

P

PLAYGROUNDS

playgrounds.ch

60

PLAYGROUNDS is a Swiss-based platform dedicated to providing information about playgrounds, targeting families and children. The website is professionally designed with consistent branding and good content quality, serving a niche local market. Technically, it employs modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for consent management, running on the Umbraco CMS. The site is well-optimized for mobile and SEO, with moderate performance. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive privacy and cookie policy with GDPR adherence. However, the site lacks explicit terms of service, incident response, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. Overall, the website is trustworthy, secure, and suitable for its target audience.

O

OPTEN AG

pgfwirkt.ch

69

PGF wirkt! is a Swiss-based website realized by OPTEN AG, likely serving a community or social impact purpose targeted at German-speaking Swiss users. The website employs modern web technologies including Umbraco CMS, Google reCAPTCHA, Google Tag Manager, and Cookiebot for cookie consent management, reflecting a moderate level of digital maturity. The site is well-structured with good design and navigation, optimized for mobile devices, and uses multiple third-party analytics and marketing tools to track user interactions extensively. Security posture is solid with HTTPS enforced and bot protection in place, but lacks published security policies or incident response information. Privacy compliance is partial, with a cookie consent mechanism but no explicit privacy or terms of service pages found. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

L

liebesexundsoweiter

liebesexundsoweiter.ch

69

liebesexundsoweiter.ch is a Swiss non-profit organization website dedicated to sexual education and related social topics. The site provides educational content, workshops, and resources aimed at a general audience in Switzerland. The organization positions itself as a niche educational provider with a focus on youth and adult education in sexual health and social awareness. The website is built on the Umbraco CMS platform and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Hosting and development appear to be managed by Swiss-based OPTEN AG, ensuring regional compliance and performance. Security posture is strong with HTTPS enforced, appropriate security headers, and a comprehensive cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with detailed policies and user consent management. However, the site lacks explicit terms of service and a dedicated security or incident response policy. Overall, the website is professional, trustworthy, and suitable for its educational mission, with moderate technical maturity and good security hygiene.

P

PLAYGROUNDS

lasalleouverte.ch

62

PLAYGROUNDS is a Swiss-based platform dedicated to providing information and community engagement around playgrounds, targeting families and children. The website is professionally designed with a consistent brand presence and offers detailed content relevant to its niche audience. Technically, the site leverages modern web technologies including Umbraco CMS, Google Maps API, and various JavaScript libraries to deliver an interactive user experience. Security-wise, the site enforces HTTPS, employs security headers, and integrates cookie consent mechanisms compliant with GDPR, although it lacks explicit security policy and incident response disclosures. Overall, the website demonstrates a solid security posture and good privacy compliance, with moderate technical performance and user experience.

P

PLAYGROUNDS

chindaktiv.ch

52

PLAYGROUNDS is a Swiss-based platform dedicated to providing information and community engagement around playgrounds, targeting families and children. The website is professionally designed with a consistent brand presence and offers key services such as playground information and event listings. The platform uses Umbraco CMS and integrates modern web technologies including Google Tag Manager, reCAPTCHA, and Google Maps API to enhance user experience and security. Cookie consent is implemented comprehensively, reflecting good privacy compliance practices. Security posture is strong with HTTPS and security headers in place, although no explicit security policy or incident response information is published. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

A

Active City

activecity.ch

66

Active City is a Swiss-based community initiative offering free sports and movement courses for all age groups, promoting outdoor and collective physical activities without registration requirements. The website is professionally designed using Umbraco CMS and integrates modern technologies such as Google Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance and user experience enhancement. The technical infrastructure supports good performance and mobile optimization, with a moderate level of accessibility and SEO optimization. Security posture is solid with HTTPS enforcement and cookie consent management, though some security headers could be improved and explicit security policies are absent. Overall, the website is trustworthy, transparent, and well-aligned with its community service mission.

R

RADIX Schweizerische Gesundheitsstiftung

primokiz.ch

69

RADIX Schweizerische Gesundheitsstiftung is a Swiss non-profit health foundation focused on promoting health in communities, exemplified by their Primokiz program targeting healthy municipalities. The website reflects a professional and consistent brand presence with clear health-related content aimed at municipalities, health professionals, and families. The technical infrastructure is modern, leveraging Umbraco CMS, Google Tag Manager, Cookiebot for consent management, and Google Maps API, indicating a mature digital presence. Security posture is strong with HTTPS, security headers, CSRF protections, and bot mitigation via reCAPTCHA. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit security policies and incident response information are not found, representing an area for improvement. Overall, the website is trustworthy, secure, and compliant with GDPR, serving its target audience effectively.

R

Reichle & De-Massari AG

rdm.com

55

Reichle & De-Massari AG (R&M) is a well-established global provider specializing in cabling and connectivity solutions for high-end communication networks since 1964. Their website reflects a professional B2B business model targeting industries such as Local Area Networks, Data Centers, and Public Networks. The company positions itself as a leader in telecommunications infrastructure solutions with a broad international reach. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates marketing and analytics tools such as HubSpot and Hotjar, indicating a mature digital presence. The site includes GDPR-compliant cookie consent mechanisms via Cookiebot, demonstrating attention to privacy regulations. Security-wise, while HTTPS is implied and cookie consent is managed, the absence of visible security headers and incomplete WHOIS data suggest areas for improvement in security posture and domain transparency. Overall, the website is professional and trustworthy but would benefit from enhanced security configurations and clearer domain registration information.

R

RADIX Schweizerische Gesundheitsstiftung

radix.ch

69

RADIX Schweizerische Gesundheitsstiftung is a Swiss non-profit health foundation dedicated to health promotion and prevention. The organization targets Swiss residents interested in improving their health and well-being through educational programs and services. The website reflects a professional and consistent brand image, with a clear focus on healthcare and public health sectors. The foundation operates with a medium-sized organizational footprint and leverages modern web technologies to engage its audience effectively. Technically, the website is built on the Umbraco CMS platform and integrates a variety of modern JavaScript libraries and APIs, including Google Tag Manager, reCAPTCHA, Cookiebot for consent management, and Google Maps API. The site demonstrates good mobile optimization and moderate performance, with a solid SEO foundation and basic accessibility features. From a security perspective, the site enforces HTTPS, employs strong security headers, and uses cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a publicly available security policy and incident response information represents an area for improvement. Overall, RADIX.ch presents a trustworthy and professionally maintained online presence with strong privacy compliance and a clear focus on user data protection. Strategic recommendations include publishing explicit security and incident response policies, enhancing accessibility, and maintaining vigilance on third-party script security to sustain and improve its security posture.

S

SwitzerlandMobility

schweizmobil.ch

68

SwitzerlandMobility operates a national platform focused on summer mobility and outdoor activities in Switzerland, providing route planning, sightseeing, and travel report services primarily targeting tourists and outdoor enthusiasts. The website demonstrates moderate digital maturity with modern JavaScript frameworks and bundling tools, and integrates Google Analytics and Tag Manager for user tracking. However, the site lacks visible privacy and cookie policies, contact information, and explicit security headers, which impacts its compliance and security posture. The domain registration data aligns well with the business focus and country, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security measures.

Alnatura is a retail company operating under the Migros Group in Switzerland, likely specializing in organic or natural products. The website is currently inaccessible, displaying a temporary service unavailable message in multiple languages, indicating a downtime or maintenance state. The site links to other Migros Group companies, showing integration within a larger retail ecosystem. The technical infrastructure and digital maturity cannot be fully assessed due to the lack of accessible content. Security posture evaluation is limited; no security policies, headers, or incident response information are present in the accessible content. Overall, the site shows low content and technical quality at this time, with no privacy or cookie compliance information visible.

M

Manor AG

manor.ch

75

Manor AG operates a leading retail and e-commerce platform in Switzerland, offering a broad assortment of products including fashion, beauty, household goods, multimedia, and more. The website manor.ch serves as a comprehensive online shop complemented by physical stores, loyalty programs, and customer services such as store locators and wishlists. The company has a strong market position as a well-established Swiss department store chain founded in 1902. Technically, the website leverages modern web technologies including React and Next.js frameworks, integrated with marketing and personalization tools like Dynamic Yield and Google Tag Manager. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Privacy compliance is robust with clear cookie consent mechanisms and comprehensive privacy policies. From a security perspective, the site enforces HTTPS with strong SSL configurations and implements standard security headers. However, explicit security policies and incident response contacts are not publicly detailed, which could be improved. No vulnerabilities or suspicious activities were detected in the analysis. Overall, manor.ch presents a professional, trustworthy, and secure online presence aligned with its business stature. Strategic improvements in transparency around security policies and incident response would further enhance trust and compliance.

A

ALDI SUISSE

aldi-suisse.ch

75

ALDI SUISSE is a well-established retail supermarket chain operating in Switzerland since 2005, owned by ALDI SÜD GmbH & Co. The company operates over 220 physical stores and offers an online shopping platform, targeting general consumers seeking quality products at competitive prices. The website reflects a mature digital presence with comprehensive content, multi-language support, and a strong focus on sustainability and customer engagement. Technically, the site is built on Adobe Experience Manager, leveraging Adobe Launch for tag management and real user monitoring, ensuring a modern and scalable infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, and GDPR considerations are evident. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

C

Coop Pronto AG

coop-pronto.ch

56

Coop Pronto AG operates a large network of over 300 convenience retail shops with or without fuel stations across Switzerland. The company focuses on providing quick and fresh products from early morning to late night, targeting general consumers seeking convenience and fuel services. The website reflects a mature digital presence with good content quality, clear navigation, and consistent branding aligned with the Coop group. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, Facebook Pixel, and other marketing tools, indicating a well-integrated marketing and analytics infrastructure. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie banners and privacy policies, although formal security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and safe for general audiences.

N

nuun - webs & apps GmbH

nuun.ch

58

nuun - webs & apps GmbH is a Swiss-based digital agency specializing in custom web design, app development, and online shops, primarily serving clients in the Thurgau region, specifically Weinfelden. The company positions itself as a local expert offering tailored digital solutions including corporate branding and web hosting. The website content is professionally presented in German, targeting small and medium-sized businesses seeking bespoke digital services. The agency maintains an active presence on social media platforms such as Facebook, Instagram, and LinkedIn, and offers newsletter subscriptions to engage its audience. Technically, the website is built on the Contao Open Source CMS and leverages modern web technologies including jQuery and Slick Carousel for interactive content. It integrates Google Tag Manager and Matomo for analytics, indicating a moderate level of digital maturity and user tracking. The site is mobile-optimized with good SEO practices, although accessibility features could be enhanced. Performance is moderate, with no critical technical debt observed. From a security perspective, the website enforces HTTPS and includes several important security headers such as Content-Security-Policy and Strict-Transport-Security. Forms are protected with CSRF tokens, and no exposed sensitive data or vulnerable libraries were detected. However, the absence of a cookie consent mechanism and explicit security or incident response policies represents areas for improvement. Privacy compliance is generally good, with a clear privacy policy in place and GDPR compliance indicators, but cookie consent and terms of service pages are missing. Overall, nuun.ch presents a trustworthy and professional digital presence with a solid security posture and business credibility. Strategic recommendations include implementing a cookie consent banner, publishing terms of service and security policies, and enhancing accessibility. These steps will improve compliance, user trust, and security culture, supporting the agency's growth and reputation in the competitive Swiss digital market.

M

maerz architekten ag

maerz.ag

45

maerz architekten ag is a Swiss architecture firm specializing in architecture, development, spatial planning, and project realization. Operating as a subsidiary of RaumUnion AG, the company serves clients primarily within Switzerland, offering professional architectural services with a focus on quality and regional projects. The website presents a professional portfolio and clear contact information, reinforcing its market presence. Technically, the website is built on WordPress with modern technologies such as Alpine.js and jQuery, optimized for performance and mobile responsiveness. Hosting is provided by Hostpoint AG, inferred from DNS records. Google Analytics is integrated via Google Tag Manager, enabling moderate user tracking. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating potential compliance gaps with GDPR requirements. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is professional and trustworthy but would benefit from improved privacy compliance and enhanced security measures to strengthen its posture and user trust.

R

raumwerk ag

raumwerkag.ch

28

raumwerk ag is a Swiss-based company specializing in comprehensive and reliable construction processes, including project development, building permit procedures, realization phases, and project handover. As a total contractor and part of the RaumUnion AG group, raumwerk ag emphasizes responsible specialists, customer security, transparency, and quality execution. The company targets clients seeking trustworthy construction project management and related services in the real estate sector. The website reflects a professional and consistent brand image with clear contact information and a focus on service offerings. Technically, the website is built on WordPress with modern JavaScript libraries such as Alpine.js and jQuery. It uses WP Rocket for performance optimization and loads resources efficiently. The site is mobile-optimized and provides a good user experience with clear navigation. However, it lacks advanced SEO and accessibility features and does not implement security headers, which could be improved. From a security perspective, the site uses HTTPS with excellent SSL configuration, but no security headers were detected. There is no visible privacy policy, cookie consent mechanism, or incident response information, which are important for GDPR compliance and user trust. No analytics or tracking scripts were found, indicating minimal user tracking. The WHOIS data is consistent with the business claims, showing legitimacy and domain age appropriate for the company's stated history. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, security best practices, and transparency regarding data protection and incident response to improve its security posture and regulatory adherence.

B

baumanager ag

baumanager.ag

48

baumanager ag is a Swiss-based architectural and construction project management company, operating as a small but specialized service provider. The company emphasizes holistic and innovative architectural solutions, coordinating project quality, costs, and timelines effectively. As a subsidiary of RaumUnion AG, it benefits from a reputable parent company association. The website is professionally designed using WordPress with modern frontend technologies, providing a good user experience and clear business information. However, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and vulnerability disclosure mechanisms. Overall, the website is trustworthy and serves its target audience well, but compliance and security enhancements are recommended.

I

Infodrog - Schweizerische Koordinations- und Fachstelle Sucht

suchtindex.ch

59

Infodrog is a Swiss non-profit organization serving as the national coordination and specialist office for addiction. The website provides comprehensive resources including a directory of addiction help facilities, information on addiction types and policies, publications, and links to online counseling. It targets individuals seeking addiction support and professionals in the addiction field, positioning itself as an authoritative source within Switzerland. Technically, the site is built on the Contao CMS platform, uses Matomo analytics configured for privacy, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and privacy-conscious analytics, though it lacks explicit security headers and a formal security policy. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security transparency and cookie consent mechanisms are recommended.

I

Infodrog

infodrog.ch

55

Infodrog is the official Swiss Office for the Coordination of Addiction Facilities, operating under the Federal Office of Public Health (FOPH). It plays a critical role in supporting addiction policy implementation, promoting harm reduction, and coordinating addiction-related services across Switzerland. The website reflects its government affiliation with professional content focused on addiction prevention, treatment, and harm reduction. The target audience includes government bodies, healthcare providers, and the public interested in addiction services. Technically, the website is built on the Contao Open Source CMS platform and uses Matomo analytics configured to respect user privacy by disabling cookies. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility features could be improved. Performance is moderate, and the site uses HTTPS with a secure SSL configuration. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics but lacks explicit security headers and published privacy or cookie policies. No incident response or vulnerability disclosure information is provided. Contact information is clearly available, enhancing trust. There are no signs of WAF or content blocking, and no adult or questionable content is present. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance documentation and improved security headers to strengthen its security posture and user trust.

V

VINCI Energies

vinci-energies.ch

76

VINCI Energies Switzerland is a prominent corporate entity specializing in accelerating the energy transition and digital transformation. As part of the global VINCI S.A. group, it offers a broad range of services including consulting, engineering, project management, and operation of electrical and telecommunication infrastructures. The company targets business and industrial clients seeking sustainable and innovative energy and digital solutions. The website reflects a mature digital presence with comprehensive content, consistent branding, and clear navigation tailored to professional audiences. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and GDPR cookie consent tools, leveraging Matomo for privacy-conscious analytics. The infrastructure supports good performance, mobile optimization, and accessibility. Security best practices are observed with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. The domain registration aligns with the corporate identity, reinforcing legitimacy. The site maintains high professionalism and trustworthiness, suitable for its enterprise audience. Strategic recommendations include publishing explicit security and incident response policies, adding vulnerability disclosure information, and enhancing direct contact details for security and support to further strengthen trust and compliance.

Take off is a Swiss non-profit organization operating a day structure and work integration program for youth who have dropped out of the education system. It is part of the Jugendsozialwerk Blaues Kreuz BL umbrella and has been active for approximately 25 years, serving the Pratteln region. The website presents a professional and consistent brand image, with clear contact details and certifications from recognized Swiss bodies, indicating a trustworthy and established social service provider. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript libraries like jQuery and Bootstrap, and is built on the webIQ 5.0 framework. It employs HTTPS with a good SSL configuration and integrates Google Analytics via Google Tag Manager with IP anonymization, reflecting a moderate level of digital maturity. The site is mobile optimized and has a clear navigation structure, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses a cookie consent banner compliant with GDPR. However, it lacks explicit security headers and does not provide a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit, but limits direct verification of domain ownership. Overall, the website is safe, professional, and credible with a moderate security posture. Strategic improvements in security headers, privacy disclosures, and accessibility would enhance trust and compliance.

AIP plus is a Swiss non-profit organization operating since 1996, focused on providing employment opportunities and integration support for job seekers, particularly those assigned by social insurance and employment agencies. The organization collaborates with local businesses to offer training and internships, aiming to facilitate entry into the first labor market. The website is professionally designed, content-rich, and provides clear contact information and partner links, reflecting a mature digital presence. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, with a cookie consent mechanism ensuring privacy compliance. Security posture is adequate with HTTPS enforced, though security headers are missing and could be improved. WHOIS data is privacy protected, typical for Swiss domains, but the website's content and certifications strongly support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional platform.

Wohn- und Arbeitsintegration Bernhardsberg is a Swiss non-profit organization focused on providing housing and work integration services for adults with psychological impairments. It operates under the parent organization Jugendsozialwerk Blaues Kreuz BL and offers a range of social services including residential care, supported employment, and a bio-product manufactory. The website is professionally designed, content-rich, and targets a regional audience in Switzerland. It demonstrates strong trust signals such as certifications (ZEWO, SQS, dot.swiss), clear contact information, and a cookie consent mechanism. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager with IP anonymization, ensuring a good user experience and moderate performance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though additional security headers and incident response policies could enhance protection. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, compliant with privacy regulations, and well-positioned in its social service niche.

Wohngemeinschaft Falkennest is a Swiss non-profit organization providing protected living spaces and social rehabilitation services for young adults aged 18 to 30 facing social difficulties. It operates under the oversight of the Basel-Landschaft canton government and is part of the Stiftung Jugendsozialwerk Blaues Kreuz BL. The website is professionally designed, content-rich, and targets clients, volunteers, and stakeholders in social services. Technically, the site uses a modern JavaScript stack with frameworks such as webIQ and Bootstrap, ensuring good mobile optimization and user experience. Security posture is moderate with room for improvement in HTTP security headers and explicit security policies. Privacy compliance is well addressed with cookie consent and a privacy policy. Overall, the domain and website present a trustworthy and legitimate entity with strong Swiss social service credentials.

Jugendwohngruppen Im Park is a Swiss non-profit organization focused on providing supported living and social integration services for youth in Basel. It operates under the umbrella of Jugendsozialwerk Blaues Kreuz BL and offers residential groups, assisted living, and placement services for young people, including those with psychological stability. The organization maintains a professional online presence with clear contact information, certifications, and social media engagement. Technically, the website uses modern web technologies and frameworks, including webIQ, Bootstrap, and jQuery, and is mobile optimized with a cookie consent mechanism in place. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers are missing and could be improved. WHOIS data is privacy protected, which is justified for this type of non-profit entity. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

R

Restaurant Falken

restaurant-falken.ch

55

Restaurant Falken is a small hospitality business based in Liestal, Switzerland, specializing in fresh lunch menus, including burgers, salads, and desserts. The restaurant emphasizes an alcohol-free environment and offers catering and take-away services. The website is built on WordPress using Elementor and Astra theme, reflecting a modern and responsive design with good SEO practices. The presence of a cookie consent banner and detailed cookie preference modal indicates compliance awareness with GDPR regulations, although no explicit privacy policy or terms of service pages were found. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response contact information. Overall, the website is professional and trustworthy, serving its local audience effectively.

P

Pro Natura Zentrum Champ-Pittet

pronatura-champ-pittet.ch

64

Pro Natura Zentrum Champ-Pittet is a Swiss non-profit environmental organization focused on nature conservation, environmental education, and visitor engagement through exhibitions, protected natural areas, and a restaurant. The website reflects a well-established regional center with clear business objectives centered on public education and nature preservation. Technically, the site is built on Drupal 10, uses modern web technologies, and integrates privacy compliance tools such as Usercentrics for cookie consent. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies are absent. Overall, the website is trustworthy, professional, and compliant with GDPR requirements.

P

Pro Natura Zentrum Aletsch

pronatura-aletsch.ch

63

Pro Natura Zentrum Aletsch is a Swiss non-profit nature conservation and education center located in the Alps near the Aletsch Glacier. The organization offers visitor experiences including nature center visits, accommodation, dining, guided excursions, and educational programs targeting families, schools, and nature enthusiasts. The website is professionally designed with clear navigation, multilingual support, and strong branding consistency. Technically, it is built on Drupal 10, uses modern web technologies, and integrates consent management and analytics tools responsibly. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website reflects a trustworthy and credible organization with a strong focus on environmental education and conservation.

O

OLMA Messen St. Gallen

tierundtechnik.ch

67

Tier&Technik is a well-established international trade fair focused on livestock farming, agricultural production, specialty crops, and agricultural technology, held in St. Gallen, Switzerland. The event targets agricultural professionals, exhibitors, and industry stakeholders primarily from Switzerland and neighboring countries. The website reflects a professional and consistent brand presence, providing comprehensive information about the event, exhibitors, and related news. It leverages modern web technologies including Bootstrap, Usercentrics for privacy compliance, and Google Analytics for visitor insights. Multimedia content such as videos and images enhance user engagement. Security posture is solid with HTTPS enforced and privacy mechanisms in place, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site demonstrates a mature digital presence aligned with its business objectives.

G

Gastia

gastia.ch

66

Gastia is a specialized trade fair and experiential event organizer focused on the hospitality industry in Switzerland, particularly targeting hoteliers, restaurateurs, and catering professionals. The website promotes the upcoming event scheduled for March 2026, highlighting its role as a regional leader in hospitality trade fairs with a strong emphasis on quality, regionality, and knowledge transfer. The business operates under the parent company OLMA Messen St. Gallen, which lends credibility and stability to its operations. The site provides rich multimedia content, including videos, photo galleries, and news articles, to engage its professional audience. Technically, the website employs modern web technologies such as ES modules, Bootstrap for UI components, Splide.js for carousels, and Usercentrics for GDPR-compliant cookie consent management. Google Analytics is used for visitor tracking, and the site is served over HTTPS with good SSL configuration. The site is mobile-optimized with a clear navigation structure and good SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses a reputable cookie consent platform, but lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected in the HTML content, suggesting room for improvement. No vulnerabilities or exposed sensitive data were found. WHOIS data confirms the domain's legitimacy with consistent registrant information matching the business profile. Overall, Gastia's website is professional, trustworthy, and well-suited for its target audience. It demonstrates a solid digital presence with moderate tracking and compliance measures. Strategic improvements in security transparency and accessibility could further enhance its posture and user trust.

A

APG|SGA

infosnow.ch

45

infosnow.ch is a specialized portal offering interactive maps and detailed information about ski resorts and mountain tourism destinations primarily in Switzerland. The site targets tourists and outdoor enthusiasts seeking seasonal activity information and resort details. The business operates in the transportation sector with a focus on mountain tourism. Technically, the site uses OpenStreetMap tiles and custom JavaScript for map rendering, providing a good user experience with moderate performance and basic mobile optimization. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which impacts its security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, indicating legitimacy. Overall, the site is functional and relevant but would benefit from improved security and compliance measures.

S

SIBA Swiss Insurance Brokers Association

siba.ch

45

SIBA Swiss Insurance Brokers Association is a professional membership organization serving insurance brokers in Switzerland. The website provides information about the association, membership options, education, regulatory guidance, and contact details. The target audience is insurance brokers and related professionals within the Swiss finance sector. The business model is centered on membership services and professional development. The website is well-branded and consistent, with a professional design and clear navigation primarily in German with French language options. Technically, the site uses a modern JavaScript framework (Vue.js) and includes Typekit fonts for typography. The performance is moderate with good mobile optimization. However, SEO and accessibility features are basic, and no structured data or advanced metadata are present. The site is served over HTTPS but lacks visible security headers and cookie consent mechanisms. From a security perspective, the site has a basic security posture with HTTPS enabled but no advanced security headers or published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is partial, with a privacy policy present but no cookie consent or GDPR compliance indicators. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy with room for improvement in security practices, privacy compliance, and technical SEO. Strategic recommendations include implementing security headers, adding cookie consent, publishing security and incident response policies, and enhancing accessibility and SEO.

B

BAYO Solutions AG

bayo.ch

57

BAYO Solutions AG operates a specialized cloud-based CRM platform tailored for insurance brokers, fiduciary companies, and law firms primarily in Switzerland. Their solution focuses on enhancing customer relationship management and secure data exchange, positioning them as a niche player in the Swiss financial and legal technology sectors. The website reflects a professional and consistent brand image with clear contact channels and partner affiliations. Technically, the site uses modern web standards, including HTML5, CSS3, and JavaScript, with Google Tag Manager for analytics. The CMS identified is MoveCMS, indicating a custom or specialized content management approach. Security-wise, the site enforces HTTPS and displays a CyberSeal certification, signaling adherence to cybersecurity best practices. However, there is room for improvement in publishing explicit security policies and headers. Overall, the website is well-structured, mobile-optimized, and compliant with GDPR through visible privacy and cookie policies.

R

RULEMATCH AG

rulematch.com

66

RULEMATCH AG operates a specialized spot cryptocurrency trading venue based in Switzerland, leveraging Nasdaq technology to serve banks, securities firms, and institutional clients. The company positions itself as a market operator focused on interbank trading and settlement of digital assets, emphasizing market integrity, AML/CFT compliance, and ultra-low latency trading. The website reflects a professional and modern digital presence with comprehensive trading documentation and news insights, targeting a niche institutional audience. Technically, the site is built on WordPress with modern SEO and privacy compliance tools, including Iubenda for cookie and privacy management, and Google Tag Manager for analytics. Security posture is solid with HTTPS and obfuscated contact details, though explicit security policies and incident response contacts are not publicly disclosed. WHOIS data is unavailable, which slightly impacts trust but is mitigated by the presence of regulatory identifiers and professional content. Overall, RULEMATCH demonstrates a mature digital infrastructure suitable for its specialized financial services market.

B

Blaues Kreuz Schaffhausen-Thurgau

blaueskreuz-sh-tg.ch

56

Blaues Kreuz Schaffhausen-Thurgau is a well-established Swiss non-profit organization with over 125 years of experience supporting individuals and families affected by alcohol and addiction issues in the Thurgau and Schaffhausen regions. The organization offers a range of services including counseling, outpatient alcohol withdrawal, group programs, and community engagement through initiatives like the Brocki Pfyn thrift shop and KafiTreff meetings. Their market position is strong within the regional non-profit sector, supported by recognized certifications such as ZEWO and QuaTheDA. Technically, the website is built on TYPO3 CMS and integrates modern web technologies including Google Custom Search, Matomo analytics for privacy-conscious tracking, and Google Tag Manager. The site is mobile-optimized with good SEO practices and a moderate performance profile. However, some improvements could be made in accessibility and security headers. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. It uses Matomo analytics, which is privacy-friendly, but lacks explicit cookie consent mechanisms and security.txt files for vulnerability disclosure. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, Blaues Kreuz Schaffhausen-Thurgau presents a trustworthy and professional online presence suitable for its mature target audience. Strategic improvements in privacy compliance and security best practices would further enhance their digital maturity and user trust.

C

cyon AG

cyon.link

59

cyon AG is a Swiss-based web hosting company providing a range of internet services including webhosting, managed servers, domain registration, SSL certificates, and sitebuilder tools. The company targets individuals and businesses seeking reliable hosting solutions and domain management, positioning itself as an established player in the Swiss hosting market with over 20 years of experience. The website, while currently displaying a 404 error page, maintains full navigation and footer content, reflecting a professional and consistent brand presence. Technically, the site employs modern JavaScript frameworks such as Alpine.js and HTMX, integrates Matomo analytics for user tracking, and uses HelpScout Beacon for customer support. The infrastructure appears self-hosted with good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers are missing and no cookie consent mechanism is detected. The WHOIS data aligns well with the website's claims, confirming legitimacy and consistent registration information. Overall, cyon AG demonstrates a mature digital presence with room for improvement in privacy compliance and security header implementation.

R

Reformierte Kirchgemeinde Gelterkinden-Rickenbach-Tecknau

ref-gelterkinden.ch

46

The Reformierte Kirchgemeinde Gelterkinden-Rickenbach-Tecknau is a small non-profit religious community organization serving the local Swiss communities of Gelterkinden, Rickenbach, and Tecknau. The website provides comprehensive information about religious services, community events, youth and family programs, and educational offerings. It targets local community members and church attendees, emphasizing spiritual engagement and social support. The organization maintains a clear and consistent brand presence with regular content updates and accessible contact information. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Event Organiser, with a custom theme likely based on the Genesis Framework. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. SEO practices are adequate with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses anti-spam measures on contact forms but lacks visible security headers such as CSP or HSTS. There is no cookie consent mechanism, which may pose compliance risks under GDPR. No analytics or tracking scripts are detected, indicating minimal user tracking. WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is professional and trustworthy but could improve its privacy compliance and security posture. Strategic enhancements in security headers and cookie consent would strengthen user trust and regulatory adherence.

Kind Jugend Familie KJF is a Swiss regional service provider focused on supporting children, youth, families, institutions, and municipalities through various social services including leisure activities, school support, social work, and counseling. The organization operates under the parent domain jsw.swiss, indicating a government or non-profit affiliation. The website is professionally designed, mobile-optimized, and provides comprehensive information about its services and initiatives. Technically, the site uses modern web technologies such as the webIQ CMS framework, Google Maps API for location services, and Google Fonts for typography. Security posture is solid with HTTPS enabled and cookie consent implemented, though some security headers are missing. No vulnerabilities or suspicious patterns were detected. The WHOIS data is unavailable due to privacy protection, which is typical for Swiss domains and justified for this type of organization. Overall, the website is trustworthy, compliant with privacy regulations, and serves its target audience effectively.

B

Blue Cocktail Bar

bluecocktailbar.ch

53

Blue Cocktail Bar is a small hospitality business operating a cocktail bar in Switzerland, targeting a mature audience interested in nightlife and alcoholic beverages. The website is built on TYPO3 CMS and incorporates standard web technologies including JavaScript and CSS, with analytics provided by Google Analytics and Matomo. The technical infrastructure is moderately optimized for performance and mobile responsiveness but lacks advanced SEO and accessibility features. Security posture is adequate with HTTPS enabled, but the absence of security headers and explicit security policies indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Overall, the website is functional but requires enhancements in privacy, security, and user trust elements to improve compliance and user confidence.

F

FAKTOR VIER

faktorvier.ch

58

FAKTOR VIER is a small, professional web agency based in Luzern, Switzerland, specializing in WordPress and WooCommerce development for custom websites and online shops. The company positions itself as a local expert with a focus on delivering tailored digital solutions to businesses and individuals seeking e-commerce and website services. The website reflects a good level of digital maturity, leveraging modern technologies such as WordPress, WooCommerce, Yoast SEO, and Font Awesome Pro icons, alongside cookie consent mechanisms to comply with privacy regulations. The technical infrastructure is sound, with moderate performance and good mobile optimization, although hosting details are not explicitly disclosed. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, the absence of security headers and explicit security policies indicates room for improvement. Privacy compliance is partial due to the lack of a published privacy policy and terms of service, which are critical for GDPR adherence. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation to strengthen compliance and user trust.