Switzerland security reports

I

Infodrog / RADIX

safezone.ch

57

SafeZone.ch is a Swiss government-supported online platform providing free and anonymous addiction counseling and information services. It targets individuals affected by addiction, their relatives, professionals, and interested parties. The platform offers online counseling, self-tests, public Q&A, and a digital self-help app, positioning itself as a trusted resource in the Swiss healthcare and social support ecosystem. Technically, the site is built on the Contao CMS, uses privacy-conscious Matomo analytics, and is well-optimized for mobile and accessibility. Security posture is strong with HTTPS and privacy protections, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

A

Artd Webdesign GmbH

artd.ch

67

Artd Webdesign GmbH is a Swiss-based web design and digital marketing agency located in Bern, specializing in creating responsive websites, online shops, SEO optimization, and marketing automation solutions. The company targets a diverse clientele including agencies, SMEs, public sector entities, IT providers, and graphic designers, positioning itself as a trusted local partner with recognized certifications from Salesforce, Mailchimp, Brevo, and ActiveCampaign. Their website reflects a professional and modern digital presence with clear navigation, quality content, and strong branding consistency. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, integrating marketing automation tools like Mautic and Google Analytics for data-driven insights. The site is mobile-optimized, accessible, and employs modern security measures such as HTTPS and Cloudflare Turnstile CAPTCHA for form protection. Cookie consent mechanisms comply with GDPR requirements, enhancing privacy compliance. From a security perspective, the site demonstrates good practices including encrypted connections and secure form handling, though it lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. WHOIS data aligns well with the business identity, supporting legitimacy and trustworthiness. Overall, Artd Webdesign GmbH presents a low-risk profile with a strong digital maturity level, professional business credibility, and good privacy and security posture. Strategic improvements could focus on publishing security policies and enhancing HTTP security headers to further strengthen their security stance.

S

Schweizerische Bodensee-Schifffahrt AG

yachthafen-romanshorn.ch

56

Schweizerische Bodensee-Schifffahrt AG operates two harbor facilities in Romanshorn, Switzerland, providing mooring and maintenance services for private sailing and motor boats. The company holds a regional position in transportation and harbor management on Lake Constance, offering additional services such as boat lifting and radar training. The website is professionally designed using WordPress and Elementor, with good content quality and clear navigation tailored to boat owners and visitors. Technically, the site employs modern web technologies and integrates marketing and analytics tools like Google Analytics and Facebook Pixel. Security posture is adequate with HTTPS enabled, though some security headers are not explicitly detected in the HTML source. Privacy compliance is basic but includes a privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and well-maintained, supporting the company's business objectives effectively.

K

Kornhaus Romanshorn

kornhaus-events.ch

55

Kornhaus Romanshorn operates as a specialized event venue located on the shores of Lake Constance in Switzerland. The business offers rental spaces for private and corporate events including weddings, seminars, and Christmas parties, complemented by gastronomy and apartment services. The website reflects a niche hospitality business with a strong regional presence and partnerships with local service providers. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and analytics tools such as Matomo and Google Tag Manager. The site is well-structured, mobile-optimized, and uses HTTPS with appropriate security headers, indicating a solid technical foundation. However, the absence of a cookie consent mechanism and explicit incident response contacts suggests areas for compliance and security improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

Ristorante Porto - Das Beste aus Italien

ristorante-porto.ch

52

Ristorante Porto is a small hospitality business offering Italian cuisine at the Bodensee region in Switzerland. The website presents a professional and consistent brand image with a focus on local restaurant services. The technical infrastructure is based on WordPress with Elementor, integrating modern analytics and marketing tools such as Google Tag Manager and Matomo. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. Security posture is good with HTTPS enabled and no obvious vulnerabilities, but lacks security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears legitimate and well-positioned locally, but should enhance compliance and security documentation to improve trust and regulatory adherence.

R

Restaurant Hafen

restaurant-hafen.ch

58

Restaurant Hafen is a small hospitality business located in Romanshorn, Switzerland, offering restaurant dining, terrace seating, catering, and event hosting services. The website positions itself as an award-winning local restaurant with a focus on regional and fresh market dishes, appealing to a general audience interested in quality gastronomy. The business model centers on hospitality services with additional catering and event offerings, supported by partnerships with related local businesses.

S

Schweizerische Bodensee-Schifffahrt AG

sbsag.ch

55

Schweizerische Bodensee-Schifffahrt AG operates as a regional transportation and tourism company specializing in ferry and cruise services on Lake Constance (Bodensee). The company offers a variety of services including scheduled ferry routes, themed experience trips, event hosting such as weddings and corporate charters, and hospitality through partner restaurants. Their market position is that of a key regional player in transportation and tourism, targeting general audiences including tourists and local residents. The website reflects a professional and consistent brand image with good content quality and clear navigation.

F

Friendly LLC

friendly.is

63

Friendly LLC is a Swiss software company specializing in privacy-focused web analytics and marketing automation solutions. Their flagship products, Friendly Analytics and Friendly Automate, provide businesses with tools to optimize websites and automate marketing workflows while ensuring compliance with Swiss data protection laws (nFADP) and the EU GDPR. The company positions itself as a Swiss alternative to Google Analytics and HubSpot, emphasizing data residency in Switzerland and high data protection standards. Their market position is strengthened by certifications such as ISO 27001 and ISO 9001, and labels like 'swiss made software' and 'swiss hosting'. Technically, the website is built on WordPress with modern SEO and analytics tools including Yoast SEO Premium and Matomo Analytics configured for privacy (cookies disabled). The site is well-optimized for performance, mobile responsiveness, and accessibility. The company uses Mautic for marketing automation and integrates with common CRM systems. Hosting is implied to be Swiss-based, supporting their data protection claims. From a security perspective, Friendly LLC demonstrates strong practices including HTTPS enforcement, ISO certifications, and data hosting in Switzerland. However, the site lacks visible cookie consent mechanisms and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The use of privacy-friendly analytics and transparent business practices further enhance their security posture. Overall, Friendly LLC presents a trustworthy, professional, and privacy-conscious business with a strong Swiss identity. Strategic recommendations include implementing cookie consent banners, publishing incident response policies, and enhancing security headers to further improve compliance and trust.

Stiftung Refdata is a Swiss foundation providing essential standardized reference data services for the healthcare sector, focusing on unique identification of medicines, medical products, healthcare professionals, and organizations using GS1 standards such as GTIN and GLN. The website demonstrates a solid market position with exclusive licensing rights and partnerships with Swissmedic and GS1 Schweiz. Technically, the site is built on Joomla CMS with modern frontend technologies including Bootstrap and jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible with good SEO practices. Security posture is good with HTTPS enforced and CSRF protections, though lacking explicit security policies and some security headers. Privacy compliance is well addressed with cookie consent mechanisms and a privacy policy in German. Overall, the site is professional, trustworthy, and well-aligned with its healthcare audience.

P

Pro Natura

pronatura.ch

73

Pro Natura is a well-established Swiss non-profit organization dedicated to nature conservation, managing over 800 nature reserves and engaging the public through education and advocacy. The website reflects a mature digital presence built on Drupal 10, with modern technologies and compliance tools such as Usercentrics for cookie consent and Google Tag Manager for analytics. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and aligned with its mission, serving a broad audience interested in environmental protection.

D

Dry January

dryjanuary.ch

52

Dry January is a Swiss-based non-profit campaign focused on encouraging individuals to abstain from alcohol during January. The website serves as an informational and engagement platform offering event details, partner programs, and merchandise sales to support the campaign. It targets a general audience with an emphasis on health and alcohol awareness. The site is built on Drupal 10 with Commerce 2, integrating modern web technologies and analytics tools such as Matomo and Google Tag Manager. The technical infrastructure is solid, with good mobile optimization and secure HTTPS implementation. However, the site lacks critical privacy and cookie policies, which impacts GDPR compliance and user trust. Security posture is generally good but could be improved by adding security headers and incident response information. Overall, the website is professional and trustworthy but should address compliance gaps to enhance user confidence and legal adherence.

B

Blaues Kreuz Schweiz

blaueskreuz.info

49

Blaues Kreuz Schweiz is a Swiss non-profit organization dedicated to providing comprehensive information and support related to alcohol consumption and addiction. Their website offers a variety of resources including online tests, help offers, educational content, and testimonials aimed at affected individuals, their families, and interested parties. The organization maintains a professional online presence with clear contact information and social media engagement, reinforcing its credibility in the addiction support sector. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and uses both Google Analytics and Matomo for analytics, balancing functionality with privacy considerations. The site is well-optimized for mobile devices, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and privacy-conscious analytics, but lacks explicit security headers and incident response contact details. The WHOIS data for the domain is malformed and unavailable, which limits domain registration trust analysis. Despite this, the website content and professional presentation suggest legitimacy. No WAF or blocking mechanisms were detected, and the site is fully accessible. The content is mature audience appropriate, focusing on alcohol and addiction education without any explicit adult content. Overall, Blaues Kreuz Schweiz presents a trustworthy and professional resource in its domain, with room for improvement in security policy transparency and WHOIS data clarity.

B

Blaukreuz-Brockis

blaukreuz-brocki.ch

58

Blaukreuz-Brockis operates as a Swiss non-profit organization focused on retailing second-hand goods through multiple physical Brocki shops across Switzerland. Their business model supports social causes, including addiction support and integration services. The website reflects a mature digital presence built on Drupal 10, integrating Google Maps for location services and Matomo for privacy-conscious analytics. The site is professionally designed, mobile-optimized, and provides clear contact information for various locations. Security posture is solid with HTTPS and security headers in place, though explicit privacy and cookie policies are missing, which impacts compliance. No incident response or vulnerability disclosure information is provided, representing an area for improvement. Overall, the website is trustworthy and serves its target audience effectively.

B

Blaues Kreuz Schweiz

blaukreuzverlag.ch

53

Blaues Kreuz Schweiz is a well-established Swiss non-profit organization dedicated to addiction prevention, support, and education. The organization offers a range of services including counseling, prevention programs, and publishes educational materials related to addiction. The website analyzed focuses on their book offerings, which have recently transitioned to a partner publisher, Mosaicstones. The organization maintains a strong market position in Switzerland with a history spanning over 140 years, supported by trusted certifications such as ZEWO and active social media engagement. Technically, the website is built on TYPO3 CMS and integrates modern analytics and marketing tools including Google Analytics, Matomo, and Google Tag Manager. The site is mobile-optimized with good navigation and SEO practices, although some accessibility features could be improved. Security posture is strong with HTTPS enforced and security headers present, but the absence of a cookie consent mechanism and published security policies indicates room for compliance enhancement. Overall, the website presents a professional and trustworthy image with clear contact information and transparent business details. The content is mature-themed focusing on addiction and health education, suitable for a broad audience including affected individuals and professionals. No blocking or WAF challenges were detected, allowing full content accessibility and analysis.

I

International Blue Cross

internationalbluecross.org

47

International Blue Cross is a Switzerland-based non-profit organization dedicated to protecting people from harm caused by alcohol and drugs, uniting 37 countries under its umbrella. The website reflects a professional and consistent brand presence with a focus on health and social protection services. The technical infrastructure is built on WordPress with the Divi theme, leveraging modern web fonts and a privacy-conscious analytics tool (Matomo). While the website is well-designed and mobile-optimized, it lacks explicit privacy, cookie, and security policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the site demonstrates good business credibility but needs enhancements in privacy compliance and security transparency.

C

Croix-Bleue romande

croix-bleue.ch

52

Croix-Bleue romande is a regional non-profit organization based in Switzerland focused on providing counseling, support, and prevention services in the healthcare sector. The website is built on TYPO3 CMS and targets the French-speaking Romande region. The technical infrastructure includes integration with Google Adsense for advertising and Matomo for analytics, indicating moderate digital maturity. However, the website lacks visible privacy and cookie policies, which impacts compliance and user trust. Security posture is basic with no detected security headers or incident response information, suggesting room for improvement in protecting user data and enhancing resilience. Overall, the website presents a moderate risk profile with recommendations to improve privacy compliance and security best practices to better align with regulatory requirements and industry standards.

B

Blaues Kreuz Thurgau Schaffhausen

blaueskreuz-tgsh.ch

56

Blaues Kreuz Thurgau Schaffhausen is a well-established Swiss non-profit organization dedicated to alcohol addiction prevention, counseling, and support services. Founded in 1877, it operates under the umbrella of the national Blaues Kreuz Dachverband and offers a broad range of community-focused programs including youth camps, food assistance, and volunteer opportunities. The website reflects a mature digital presence with a clear focus on regional outreach and community engagement. Technically, the site employs a mix of modern and legacy web technologies, ensuring moderate performance and good mobile responsiveness. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response policies could enhance trust. Overall, the domain registration and WHOIS data align well with the organization's claims, supporting a high legitimacy score. The site uses Facebook Pixel and Google Analytics for user tracking, balanced with privacy compliance efforts. Strategic recommendations include strengthening security headers, publishing incident response information, and continuous monitoring of third-party scripts to maintain security and compliance.

B

Blaues Kreuz St. Gallen - Appenzell

blaueskreuz-sg-app.ch

59

Blaues Kreuz St. Gallen - Appenzell is a reputable non-profit organization dedicated to providing comprehensive support and prevention services related to alcohol addiction in the St. Gallen and Appenzell regions of Switzerland. The website offers detailed information on counseling, ambulant withdrawal, prevention programs, aftercare, and integration services, targeting individuals affected by alcohol dependency, their families, and related institutions. The organization is affiliated with national and international Blue Cross bodies, enhancing its credibility and reach. Technically, the website employs modern web technologies including jQuery, Swiper.js, and FontAwesome, with a custom CMS backend. It features good mobile optimization, clear navigation, and a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the site reflects a professional and trustworthy digital presence for a medium-sized regional non-profit.

The Stiftung Jugendsozialwerk Blaues Kreuz BL operates as a Swiss non-profit organization providing a broad range of social services focused on youth and community support. Their offerings include employment assistance, housing, leisure activities, school support, and counseling, targeting children, adolescents, and families primarily in the Basel-Landschaft region. The organization maintains a professional online presence with clear navigation, multilingual support in German, and active social media engagement. Technically, the website is built using modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Bootstrap, supported by the webIQ 5.0 framework. It features responsive design optimized for mobile devices and integrates Google Analytics with IP anonymization, reflecting a moderate level of digital maturity. However, some security best practices such as security headers and incident response disclosures are absent. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is justified for a non-profit entity, though it limits transparency. Certifications such as ZEWO and SQS Swiss Made enhance trustworthiness. Overall, the website scores well in content quality, technical implementation, privacy compliance, and business credibility, with an overall AI score of 81. Strategic improvements include adding security headers, publishing a vulnerability disclosure policy, and enhancing accessibility features to further strengthen security posture and compliance.

B

Blaues Kreuz Kinder- und Jugendwerk

blueworld.ch

52

Blaues Kreuz Kinder- und Jugendwerk is a Swiss non-profit organization specializing in prevention and health promotion for children and youth in the Baselland and Basel-Stadt regions. The organization offers a variety of services including regional group activities, educational workshops, mentoring, and innovative initiatives such as a mobile alcohol-free cocktail bar. Their market position is that of a trusted regional specialist with a strong community presence and recognized certifications such as ZEWO. Technically, the website employs modern web technologies including jQuery, SmartMenus, and FontAwesome, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and no detected vulnerabilities, though formal security policies and incident response information are not published. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a professional and trustworthy organization with clear contact channels and active social media engagement.

S

Stiftung Blaues Kreuz / MUSUB beider Basel

mituns.ch

55

Stiftung Blaues Kreuz / MUSUB beider Basel is a Swiss non-profit organization providing multicultural addiction counselling and therapy services primarily in the Basel region. Their services target affected individuals and their relatives, especially those with migration backgrounds, offering confidential and free counselling in multiple languages. The organization emphasizes a systemic, solution-oriented approach with a professional team of psychologists and social workers. The website reflects a well-established local presence with multiple physical locations and clear contact channels. Technically, the website is built on a modern Ruby on Rails stack with Tailwind CSS and Stimulus JS, optimized for mobile and accessibility, and uses privacy-focused analytics (Fathom). Security posture is strong with HTTPS and CSRF protections, though explicit security policies and cookie consent mechanisms are lacking. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's claims. Overall, the site is professional, trustworthy, and serves its community effectively.

B

Blaues Kreuz Aargau-Luzern

blaueskreuz-aglu.ch

56

Blaues Kreuz Aargau-Luzern is a well-established Swiss non-profit organization specializing in addiction counseling, treatment, and prevention, particularly focused on alcohol and other substance abuse. With over 140 years of experience, it serves affected individuals, their families, and employers in the Aargau-Luzern region. The organization offers free, confidential, and professional support services, alongside active prevention programs such as youth engagement and test purchases. The website reflects a mature, professional presence with clear navigation and relevant content tailored to its audience. Technically, the site is built on TYPO3 CMS, integrates privacy-respecting analytics (Matomo), and uses modern web technologies, though it lacks some advanced security headers and cookie consent mechanisms. The domain registration aligns well with the organization's identity, supporting its legitimacy and trustworthiness.

The website at f24.org currently serves as a placeholder or offline page displaying the Chrome T-Rex runner game, with no visible business-related content or contact information. The domain is registered to One-Check GmbH, a Swiss company established in 2002, indicating a legitimate and longstanding registration. However, the website itself lacks any meaningful content, policies, or security features that would support a professional business presence. From a technical perspective, the site uses basic HTML, CSS, and JavaScript to deliver the offline game experience. There is no evidence of modern frameworks, CMS, or analytics tools. The hosting is provided by hostpoint.ch, a known hosting provider. Mobile optimization and accessibility are basic, and SEO is poor due to lack of metadata and content. Security posture is weak, with no HTTPS enforcement or security headers detected in the provided content. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. The WHOIS data is consistent and trustworthy, but the website content does not reflect an active or professional business presence. Overall, the website appears to be either inactive, under construction, or repurposed as a placeholder page. This results in a low AI score and poor trust indicators. Strategic recommendations include developing a proper business website with clear content, implementing security best practices, and publishing necessary compliance policies.

Z

Zindel United

zindel-united.swiss

53

Zindel United is a Swiss-based company specializing in sustainable architectural design and construction services. Their business model focuses on creating resource-conscious and generational building solutions, positioning them as a reputable player in the Swiss real estate and construction sector. The website reflects a medium-sized enterprise with a professional online presence, targeting clients interested in sustainable and innovative building projects. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, though there is room for improvement in implementing additional security headers. Overall, the website is trustworthy, well-structured, and compliant with GDPR and Swiss data protection laws.

S

St.Gallen-Bodensee Tourismus

gallen-bodensee.ch

59

St.Gallen-Bodensee Tourismus operates as a regional tourism authority promoting the St.Gallen-Lake Constance region in Eastern Switzerland. The website provides cultural, scenic, and outdoor activity information targeting tourists and visitors. It positions itself as a trusted source for regional travel guidance and event promotion. The business model focuses on tourism promotion and visitor engagement through digital content and guided tours. Technically, the website is built on the Contao Open Source CMS platform, utilizing Bootstrap for responsive design and modern web standards. It integrates Cookiebot for GDPR-compliant cookie consent management, Google Tag Manager, and Plausible Analytics for data collection and marketing optimization. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. From a security perspective, the site enforces HTTPS and employs standard security headers, ensuring a secure browsing experience. Cookie consent is actively managed, and no exposed sensitive data or vulnerabilities were detected in the provided content. However, the absence of a security.txt file and explicit incident response contacts suggests room for improvement in vulnerability disclosure and incident management. Overall, the website is professionally designed, trustworthy, and compliant with privacy regulations. The risk profile is low, with recommendations focusing on enhancing security transparency and formalizing incident response mechanisms.

K

Klangwelt Toggenburg

klangwelt.swiss

56

Klangwelt Toggenburg is a cultural and educational organization based in the Toggenburg region of Switzerland, offering unique experiences centered around sound, resonance, and traditional music culture. The website showcases a well-structured digital presence with rich content about events, courses, venues, and cultural offerings, targeting a broad audience interested in music, culture, and wellness tourism. The organization holds a strong regional market position with international recognition for its Klangweg sound trail and related activities. Technically, the website employs modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and CookieYes for consent management, integrated with Laravel backend session management. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS enforced and session management in place, though it lacks explicit security headers and a public security policy or incident response contact. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent banner, and GDPR adherence. Overall, the website is trustworthy, professional, and well-maintained, with room for improvement in security transparency and incident response readiness.

The website for gm-elektronik.swiss is currently inaccessible beyond a security challenge page powered by BitNinja.IO, which blocks direct content access. The domain is registered to g+m elektronik ag, a Swiss company established in 2015, consistent with the domain name and country. The website appears to use outdated CMS technologies (Joomla 1.5 and WordPress 2.5) which are known to have multiple security vulnerabilities. No business descriptions, contact information, or compliance policies are visible on the site. The technical infrastructure is basic, hosted on trendhosting-net.ch, with minimal SEO and accessibility features. Security posture is moderate due to the presence of a security challenge but weakened by outdated software and lack of security headers or policies. Overall, the site’s digital maturity is low, and the lack of visible content and policies limits trust and user engagement.

E

Ebnat AG

ebnat.ch

57

Ebnat AG is a Swiss specialist company focused on manufacturing high-quality brushes and cleaning solutions for household and dental hygiene sectors. The company offers customized product development, private label, and white label services, emphasizing innovation, quality, and sustainability. Their market position is strong within the manufacturing industry, targeting B2B customers and brand owners. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information. Technically, the site uses modern technologies including Google Analytics, Google Tag Manager, Cloudflare Turnstile for bot protection, and Laravel Livewire framework. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

B

BRAUN AG

braun.ch

56

BRAUN AG is a Swiss company specializing in wood-based products and terrace solutions, operating both a physical exhibition and an online shop. The company targets consumers and professionals interested in wood materials and terrace planning within Switzerland. Their website reflects a medium-sized manufacturing and retail business with a consistent brand presence and comprehensive service offerings. Technically, the website is built on a modern stack including Shopware CMS, Bootstrap, and Matomo analytics, providing a good user experience with mobile optimization and moderate performance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is professional, trustworthy, and well-aligned with the company's business claims.

B

BALIK Farm (Switzerland) AG

balik-kitchen.ch

48

BALIK Farm (Switzerland) AG operates BALIK Kitchen, a hospitality and retail food service business with multiple urban kitchen bars and shops located in major Swiss cities such as Bern, St. Gallen, Luzern, and Zürich. The website serves as a digital presence to promote their culinary offerings, events, and recipes, targeting general consumers interested in urban dining experiences. The company maintains a consistent brand image and provides clear contact information and social media engagement channels. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates marketing and analytics tools such as Facebook Pixel, Google Analytics, and Mailchimp for newsletter management. The site is hosted behind Cloudflare infrastructure, utilizing Turnstile captcha for bot protection, indicating a moderate level of digital maturity. Performance and mobile optimization are good, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses anti-bot measures but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a cookie consent banner and a privacy policy page in German, aligned with GDPR requirements. Business credibility is strong with verified contact details and consistent WHOIS data. Overall, the website presents a professional and trustworthy digital front for BALIK Kitchen, with room for improvement in security policy transparency and enhanced privacy compliance. The risk level is low, but strategic enhancements in security headers and incident response readiness are recommended.

Appenzeller Bahnen is a regional transportation company operating rail services across the Swiss cantons of Appenzell Innerrhoden, Appenzell Ausserrhoden, and St.Gallen. The company provides travel information, ticketing, and group travel services, positioning itself as a key regional mobility provider. The website reflects a professional digital presence with clear branding and relevant content tailored to travelers in the region. Technically, the site is built on the Contao CMS platform, leveraging modern web technologies including jQuery, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile-optimized and implements good SEO and accessibility practices. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service and a published security policy or incident response contacts. Overall, the website is trustworthy, secure, and professionally maintained, supporting the company's business objectives effectively.

Z

Züger Frischkäse AG

frischkaese.ch

52

Züger Frischkäse AG is a Swiss family-run business specializing in the production of fresh regional cheese products including mozzarella, mascarpone, and cream cheese. The company emphasizes quality and regional sourcing, targeting consumers interested in fresh dairy products. The website reflects a mature digital presence with a well-structured design, multilingual support, and active social media engagement. Technically, the site uses Contao CMS with modern JavaScript libraries and integrates multiple analytics and tracking tools with privacy consent mechanisms. Security posture is solid with HTTPS and privacy controls, though lacking explicit security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR standards.

Z

zubischuhe.ch AG

zubi.swiss

67

Zubi is a Swiss-based retail company specializing in footwear, outdoor clothing, and equipment for families and outdoor enthusiasts. Established in 2015, the company operates both an e-commerce platform and likely physical retail locations, positioning itself as a trusted provider of quality outdoor products. The website is professionally designed with consistent branding and clear messaging targeting the Swiss market. Technically, the site leverages modern frameworks such as Next.js and Material UI, hosted likely on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced, appropriate security headers, and domain registration consistency. However, there is room for improvement in enabling DNSSEC and publishing explicit security policies or vulnerability disclosures. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

V

Verso Versicherungstreuhand AG

verso.ch

53

Verso Versicherungstreuhand AG is a Swiss insurance brokerage firm established in 2004, providing comprehensive and independent insurance management services. The company targets individuals and businesses seeking reliable insurance consulting and brokerage, positioning itself as a trusted regional player with over 30 experts and multiple locations in Eastern Switzerland. The website reflects a professional and consistent brand image with clear service offerings and customer engagement channels. Technically, the site is built on Joomla CMS with modern frameworks like UIkit and integrates common web technologies such as jQuery and Google Tag Manager. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and CSRF protections, though some security headers are missing and no explicit security policies are published. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or content safety concerns.

Toggenburg Tourismus operates the website toggenburg.swiss, serving as a regional tourism portal for the Toggenburg area in Switzerland. The site provides comprehensive information about the region's natural attractions, seasonal activities, and accommodations, targeting tourists and visitors interested in authentic nature experiences in the Swiss Alps. The business is positioned as a small, regional tourism promoter with a clear focus on hospitality and outdoor leisure. Technically, the website is built on the Contao Open Source CMS platform and employs modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and social sharing tools like ShareThis. Hosting is provided by Hostpoint, a reputable Swiss hosting provider. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the website uses HTTPS with a valid SSL certificate and implements a detailed cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, and some recommended security headers are missing. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business identity, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence for Toggenburg Tourismus, with good content quality and compliance. Strategic improvements in security headers and DNS security could further strengthen its posture.

S

Strähl Käse AG

straehl.ch

47

Strähl Käse AG is a well-established Swiss cheese manufacturer with over 90 years of family tradition, specializing in a variety of cheese products including raclette and fondue. The company targets both retail consumers and B2B clients, offering customized cheese solutions. Their market position is strong within the Swiss cheese industry, supported by consistent branding and a professional online presence. Technically, the website employs modern web technologies including Facebook Pixel and Google Analytics for marketing and analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and detailed security policies suggests room for improvement. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, reflecting a credible business entity.

S

St.Galler Stadtwerke

sgsw.ch

66

St.Galler Stadtwerke is a regional utility provider based in St.Gallen, Switzerland, offering a comprehensive range of services including electricity, water, gas, district heating, fiber optic connectivity, and e-mobility solutions. The company positions itself as a reliable partner for the city's energy and infrastructure needs, targeting both residential and business customers. Their website reflects a professional and customer-focused approach with clear service offerings and accessible contact information. Technically, the website employs a modern technology stack including jQuery, Bootstrap, FontAwesome Pro, and the ArcGIS JavaScript API for interactive mapping. It integrates multiple analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Siteimprove Analytics. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. From a security perspective, the site uses HTTPS and includes CSRF protection scripts, but lacks visible security headers and explicit security or incident response policies. Tracking scripts are present without a clear cookie consent mechanism, which may pose privacy compliance risks. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, well-maintained, and professionally presented, with minor recommendations to enhance privacy compliance and security transparency.

S

Schweizerische Gesellschaft für Hotelkredit (SGH)

sgh.ch

51

The Schweizerische Gesellschaft für Hotelkredit (SGH) is a publicly mandated Swiss cooperative specializing in the promotion and financing of the hospitality sector. Their website clearly communicates their role as a partner for hotel financing and consulting, targeting hotel operators and investors within Switzerland. The site is professionally designed with consistent branding and offers comprehensive information about their services, including financing, consulting, and national hotel promotion. The presence of a cookie consent mechanism and privacy policy indicates a commitment to regulatory compliance. Technically, the site uses modern tools such as Google Tag Manager and CookieYes for analytics and consent management, and is built on Kirby CMS. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website reflects a mature digital presence suitable for a medium-sized public sector entity in the hospitality finance domain.

N

Natürliches Mineralwasser

natuerliches-mineralwasser.ch

43

Natürliches Mineralwasser is an informational website focused on natural mineral water, providing educational content, recipes, and health-related articles primarily targeting a general audience interested in natural mineral water in Switzerland. The site positions itself as a niche resource promoting natural mineral water benefits and origins. Technically, the website is built on WordPress using the FoundationPress theme and incorporates common marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized with good navigation and content relevance, although some backend PHP warnings indicate technical maintenance issues. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and shows backend errors that could expose information. Privacy compliance is good with GDPR-related cookie consent and privacy policy pages present. Overall, the website is functional and professional but would benefit from technical and security improvements to enhance trust and stability.

R

RAUSCH

rausch.ch

70

RAUSCH is a Swiss-based company specializing in natural scalp, hair, and body care products. The company leverages proprietary herbal extraction techniques combined with modern active ingredients to deliver effective personal care solutions. Positioned as a trusted natural care brand, RAUSCH targets consumers who value natural and efficacious products. The website operates on the Shopify platform, integrating multiple marketing and analytics tools such as Trustpilot, Klaviyo, and Microsoft Clarity, reflecting a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and SEO, providing an excellent user experience. Security posture is strong with HTTPS enforcement, security headers, and GDPR-compliant cookie consent mechanisms, although a dedicated security policy and incident response information are not publicly available. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, supporting RAUSCH's market position as a reputable natural care brand.

R

RaumUnion AG

raumunion.ch

49

RaumUnion AG is a Swiss-based company specializing in architecture and realization services, targeting institutional investors, real estate funds, private investors, public entities, foundations, and cooperatives. Their offerings include modular and flexible services for new constructions and renovations across residential, commercial, healthcare, and industrial sectors. The company positions itself as an expert with tailored project models to meet diverse client needs. Technically, the website is built on WordPress with modern JavaScript libraries like Alpine.js and jQuery, optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy, with clear contact information and partner relationships.

P

PUSCH Praktischer Umweltschutz

pusch.ch

65

PUSCH Praktischer Umweltschutz is a Swiss non-profit organization dedicated to supporting municipalities, schools, and companies in practical environmental protection. Their services include environmental education, consultancy on biodiversity, climate, sustainable procurement, and circular economy. The website is professionally designed using TYPO3 CMS, with a clear structure and multilingual support (German and French). The organization maintains a strong online presence with social media channels and provides comprehensive contact information. Technically, the site uses modern web technologies and includes Google Tag Manager for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though no explicit security or incident response policies are published. Overall, the domain registration aligns well with the organization's profile, indicating legitimacy and trustworthiness.

P

Printplus AG

printplus.ch

48

Printplus AG is a Swiss-based software company specializing in industry-specific ERP and management software solutions for printing companies and publishers. The company positions itself as a leading provider in this niche market, offering comprehensive software that supports all organizational processes including order management, calculation, material management, production planning, and CRM. Their product suite includes solutions tailored for different sizes of printing businesses and mobile workforce support. The website is professionally designed, well-structured, and targets business customers in the graphic industry sector primarily in Switzerland. Technically, the website uses modern JavaScript libraries, web fonts, and integrates Matomo analytics for privacy-conscious user tracking. It employs Cloudflare Turnstile captcha for bot protection, indicating a proactive approach to security. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Hosting appears to be behind Cloudflare, providing robust SSL/TLS encryption and performance benefits. From a security perspective, the site enforces HTTPS and uses bot mitigation techniques but lacks visible security headers and explicit security or incident response policies. There is no cookie consent mechanism detected, which may pose GDPR compliance risks. No vulnerability disclosure or security.txt files are present. Contact information is clear and comprehensive, enhancing business credibility. Overall, Printplus AG's website reflects a mature business with a solid technical foundation and good security posture, though improvements in privacy compliance and security transparency are recommended to enhance trust and regulatory adherence.

P

Pädagogische Hochschule Thurgau

phtg.ch

61

Pädagogische Hochschule Thurgau (PHTG) is a Swiss educational institution specializing in scientifically grounded teacher training and continuing education for all levels of primary and secondary education. The institution offers a broad range of study programs, professional development courses, and research projects, targeting educators and education professionals. The website reflects a strong regional presence with collaborations such as with the University of Konstanz, emphasizing cross-border educational opportunities. Technically, the website is built on modern web standards, leveraging Google Tag Manager and CookieYes for consent management, and is likely hosted on Wix, as indicated by certain cookies. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms but lacks explicit security policy and incident response information. Overall, the domain registration details align with the institution's identity, supporting legitimacy and trustworthiness.

P

Pharma Medica AG

pharmamedica.ch

48

Pharma Medica AG is a Swiss-based pharmaceutical and dermaproduct specialist offering a range of health-related products and services. The company positions itself as a provider of natural and quality pharma and dermaproducts, targeting healthcare consumers and professionals within Switzerland. Their website reflects a professional and consistent brand image with clear contact information and legal compliance pages, indicating a trustworthy business presence. Technically, the website employs modern tracking and analytics technologies including Google Analytics, TikTok Pixel, and Facebook Pixel, managed via Google Tag Manager. The site is mobile-optimized with good SEO practices and moderate performance. However, no explicit CMS or hosting provider information was detected. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies are missing. From a security perspective, the site shows no signs of vulnerabilities or malicious content. The absence of a published security policy or incident response contact is a minor gap. WHOIS data aligns well with the website's business claims, reinforcing legitimacy. Overall, the site is safe, professional, and compliant with GDPR requirements. Strategically, Pharma Medica AG should consider enhancing transparency by publishing security policies and incident response contacts, and implementing additional security headers to strengthen their security posture. Continued focus on privacy compliance and user trust will support their market position in the healthcare sector.

O

Olma Messen St.Gallen

olma-messen.ch

62

Olma Messen St.Gallen operates as a major event organizer and venue manager in Eastern Switzerland, hosting trade fairs, congresses, and cultural events that attract over 600,000 visitors annually. The website reflects a mature digital presence with a Drupal CMS backend, integration of modern consent management via Usercentrics, and analytics through Google Tag Manager. The site offers comprehensive navigation for various events and user roles, including visitor and exhibitor login portals. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain registration aligns well with the business identity, supporting legitimacy and trustworthiness.

M

Mosterei Möhl AG

moehl.ch

51

Mosterei Möhl AG is a well-established family-owned company specializing in the production and retail of apple juices and ciders, with a history spanning over 130 years. The company operates primarily in Eastern Switzerland and offers a diversified product portfolio including apple wines, ciders, and related beverages. The website reflects a professional and consistent brand image, targeting consumers interested in high-quality apple-based products and related experiences such as museum visits. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and integrating analytics and marketing tools such as Google Analytics, LinkedIn Insight, and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website enforces HTTPS, uses security headers, and manages cookie consent effectively, although it lacks explicit published security policies or incident response contacts. Overall, the site demonstrates a mature digital presence with moderate tracking and good privacy compliance, suitable for a medium-sized manufacturing and retail business.

L

Landqart AG

landqart.com

63

Landqart AG is a Swiss-based manufacturer specializing in security paper products such as banknote substrates and passport papers, serving clients in over 50 countries. The company positions itself as a leader in the security paper manufacturing industry, emphasizing Swiss quality, security, and innovation. The website is professionally designed, multilingual (German primary), and includes comprehensive business contact information and cookie consent mechanisms, reflecting a mature digital presence. Technically, the site uses modern JavaScript, cookie management tools, and Google Analytics with IP anonymization, hosted likely behind Cloudflare. Security posture is good with HTTPS and consent compliance, though explicit security headers and incident response policies are absent. WHOIS data is missing, which raises some legitimacy concerns but the website content and business information strongly indicate a legitimate enterprise. Overall, the site is trustworthy and well-maintained with room for security policy enhancements.

H

HOCH Health Ostschweiz

kssg.ch

72

HOCH Health Ostschweiz is a prominent healthcare provider network in Eastern Switzerland, encompassing several hospitals including Kantonsspital St.Gallen and others. The organization offers comprehensive hospital care, specialized clinics, and patient services, positioning itself as a regional leader in healthcare. The website reflects a professional and user-friendly digital presence, leveraging modern web technologies such as Astro framework, Google Tag Manager for analytics, and OneTrust for cookie consent management. Security posture is strong with HTTPS enforcement, appropriate security headers, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site demonstrates a mature digital infrastructure suitable for a large healthcare entity.

H

Huus Braui

huus-braui.ch

50

Huus Braui is a small local bar located in Roggwil, Switzerland, offering a cozy social venue primarily focused on hospitality services. The website presents a professional design with good content quality and clear navigation, targeting a mature audience interested in nightlife and bar services. Technically, the site uses modern web fonts, Google Analytics, and Tag Manager for tracking, with HTTPS enabled ensuring secure connections. However, the absence of privacy and cookie policies, lack of security headers, and missing contact information indicate compliance and security gaps that should be addressed to improve trust and regulatory adherence. Overall, the website is functional and moderately secure but requires enhancements in privacy compliance and security best practices.