Switzerland security reports

K

Kanton Appenzell Innerrhoden

ai.ch

58

The website ai.ch serves as the official digital presence for the canton of Appenzell Innerrhoden, Switzerland. It provides comprehensive information about the cantonal government, including politics, administration, courts, public services, events, and news. The site targets residents, government officials, visitors, and local businesses, positioning itself as a trusted source of official information and services. The business model is that of a government public service portal, focusing on transparency and accessibility. Technically, the website is built on the Plone CMS platform, utilizing modern JavaScript libraries such as jQuery, Handlebars, and OpenLayers for interactive maps. The site is mobile-optimized and demonstrates good performance and SEO practices. Analytics are handled via Matomo, indicating a preference for privacy-conscious tracking. However, some accessibility features could be improved. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. While no critical vulnerabilities were detected, the absence of explicit security headers and a published privacy or cookie policy are areas for improvement. The WHOIS data confirms the domain's legitimacy as a government entity with consistent registration details. Overall, the website is professional, trustworthy, and well-maintained, though it would benefit from enhanced privacy compliance and security policy disclosures to align with best practices and regulatory requirements.

K

Kantonale Verwaltung Appenzell Ausserrhoden

ar.ch

41

The website ar.ch is the official online portal for the canton of Appenzell Ausserrhoden in Switzerland, providing comprehensive information and services related to the cantonal government. It serves citizens, businesses, and other stakeholders with access to government departments, news, legal resources, and public services. The site is well-structured, professionally designed, and consistent with government branding, reflecting a medium-sized government entity's digital presence. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including Matomo for analytics and Google reCAPTCHA for form security. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security is robust with HTTPS enforced and appropriate security headers, but lacks some advanced security disclosures and cookie consent mechanisms. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. However, it could improve privacy compliance by implementing explicit cookie consent and publishing detailed security policies and incident response contacts. The WHOIS data aligns well with the official government identity, supporting the site's legitimacy. Overall, the site is a trustworthy, professional government portal with solid technical and security foundations but would benefit from enhanced privacy and security transparency to fully comply with modern regulations and best practices.

K

Kanton Schaffhausen

sh.ch

66

The website represents the official online presence of the Canton of Schaffhausen, Switzerland, providing a broad range of governmental information and e-services to residents, businesses, and visitors. It serves as a comprehensive portal for public administration, health, business, transport, and cultural services, positioning itself as a key digital interface for cantonal governance. The technical infrastructure is based on a custom CMS (KSD Backend) with integration of Piwik (Matomo) for analytics, indicating a moderate level of digital maturity with room for enhancement in security headers and privacy compliance. Security posture is solid with HTTPS enforced, but could benefit from additional HTTP security headers and clearer privacy policies. Overall, the site is professional, trustworthy, and well-branded, though it lacks explicit privacy and cookie policies which impacts compliance scoring. Strategic improvements in security and privacy transparency would enhance user trust and regulatory adherence.

T

Tour de Suisse

tourdesuisse.ch

58

Tour de Suisse is a prominent Swiss cycling event organizer, offering a range of services including race event management, hospitality, and fan engagement through digital platforms like TdS Explorer and Fanzone. The website reflects a mature digital presence with multilingual support and rich content tailored to cycling enthusiasts and event visitors. Technically, the site is built on WordPress with modern JavaScript frameworks and plugins, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and consent management for third-party services, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, supporting a positive user experience and business credibility.

E

easyfind.ch

easyfind.ch

65

easyfind.ch operates as a Swiss-based lost and found service platform connecting individuals who have lost or found items with over 2,500 participating lost property offices across Europe. The platform supports multiple languages and integrates with services like Swisspass and easyfind.com codes, positioning itself as the largest network in this niche. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Social media presence and customer ratings indicate a trustworthy and established service. Technically, the site uses modern web technologies and maintains good security practices with HTTPS and no exposed sensitive data. However, it lacks explicit security policies, incident response information, and cookie consent mechanisms, which are areas for improvement. Overall, the site is reliable, accessible, and serves a clear public service function.

GMG GmbH is a medium-sized IT and media service provider operating primarily in Switzerland and Liechtenstein. Founded in 1991, the company offers a broad range of services including IT systems engineering, web development, media project management, and hardware sales and repair. They maintain data centers in Balzers and Zurich, supporting a regional customer base with SaaS contracts and 24/7 support. The website reflects a professional and established business with detailed team and contact information, targeting business clients in the region. Technically, the website is built on ASP.NET Web Forms, uses jQuery and fullPage.js for UI, and integrates Matomo for analytics, indicating a moderate level of digital maturity. The site is served over HTTPS with a custom CMS and hosted likely on Windows IIS servers. Mobile optimization and accessibility are basic but functional. No major performance issues were detected. From a security perspective, the site enforces HTTPS and uses secure form validation but lacks important security headers such as Content-Security-Policy and X-Frame-Options. No exposed sensitive data or vulnerable libraries were found. Privacy compliance is partial; a privacy policy is present but no cookie consent mechanism is implemented. WHOIS data is unavailable, which slightly reduces trust but the website content and contact details support legitimacy. Overall, GMG GmbH presents a trustworthy and professional online presence with room for improvement in security headers and privacy compliance. Strategic enhancements in these areas would strengthen their security posture and regulatory adherence.

S

Safe Swiss Cloud

safeswisscloud.com

68

Safe Swiss Cloud is a Swiss-based cloud computing and managed IT services provider specializing in secure, sovereign cloud infrastructure hosted in Swiss data centers. The company offers a range of services including Private AI, managed IT operations, security, and 24/7 support, targeting enterprises in finance, healthcare, software, and manufacturing sectors. Their market position is strengthened by ISO certifications and a commitment to renewable energy usage. Technically, the website is built on WordPress with modern cloud technologies such as VMware, Openstack, and Kubernetes underpinning their services. The site is well-designed, mobile-optimized, and SEO-friendly, though it lacks explicit cookie consent mechanisms and visible contact emails or phone numbers, relying primarily on contact forms. Security posture is strong with HTTPS, domain transfer protection, and certifications, but could be improved with additional security headers and a vulnerability disclosure policy. Overall, the website and business present a trustworthy and professional image with minor areas for compliance and security enhancement.

D

DOJ (Dienst für offene Jugendarbeit)

kinder-und-jugendfoerderung-wirkt.ch

47

The website 'Kinder und Jugendförderung wirkt' is a Swiss non-profit platform dedicated to promoting the development and well-being of children and youth across various cantons. It serves as an informational and support hub for actors involved in youth promotion, providing resources, consultation, and visibility to regional initiatives. The platform is backed by recognized governmental and non-profit organizations, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress with modern SEO and analytics tools, offering a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is professional, compliant with privacy regulations, and well-positioned within its niche.

L

Swiss Gaming and Esports Hub: Festivals, Collaboration, and Competitive Insights

ludicious.ch

9

The website ludicious.ch serves as a niche media platform dedicated to the Swiss gaming and esports community. It provides news, festival coverage, and insights into the growth of esports and international collaboration within Switzerland's gaming industry. The target audience includes game developers, esports enthusiasts, and industry professionals interested in Swiss gaming culture. Technically, the site is built on WordPress with common plugins such as Yoast SEO and uses jQuery and Font Awesome for UI elements. The site is mobile optimized and has good SEO practices but lacks advanced accessibility features. Security-wise, the site uses HTTPS but lacks security headers and formal security policies, which could be improved. Privacy compliance is minimal, with no visible privacy or cookie policies or consent mechanisms. Contact is available only through a contact form, with no direct emails or phone numbers published. Overall, the site is professional and relevant but would benefit from enhanced security and privacy compliance measures.

K

Kurzlink.ch - sichere Kurz-URLs und QR-Codes

kurzlink.ch

65

Kurzlink.ch is a Swiss-based URL shortening and QR code generation service emphasizing security and privacy. The platform offers free services including link shortening, multilink creation, email link generation, and QR code factory features, alongside enterprise SaaS solutions, browser extensions, and mobile apps. The service targets general internet users primarily in Switzerland and German-speaking regions, positioning itself as a secure and privacy-conscious alternative in the URL shortener market. The website content is professional, well-structured, and consistent with the brand's security focus.

K

klassenfreunde.ch GmbH

stayfriends.ch

67

StayFriends.ch is a Swiss online social networking platform focused on reconnecting former school friends, viewing class photos, and organizing reunions. It serves a niche educational social network market with over 1.3 million members. The platform offers a freemium business model targeting former students in Switzerland, providing region-specific school search and member directories. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience for its target audience. Technically, the site uses modern JavaScript libraries such as jQuery and Bootstrap, integrates Google Tag Manager for analytics, and employs privacy management scripts to comply with GDPR. Security posture is solid with HTTPS enforced and secure form handling, though some security headers and explicit incident response contacts are missing. The WHOIS data aligns well with the business claims, indicating a trustworthy domain registration. Overall, the site demonstrates a mature digital presence with moderate advertising and tracking practices balanced by privacy compliance mechanisms.

S

Safe Swiss Cloud

safeswisscloud.ch

68

Safe Swiss Cloud is a Swiss-based cloud computing and managed IT services provider specializing in sovereign, secure, and compliant cloud infrastructure. Their offerings include Private AI solutions, managed IT operations, security services, and cloud computing platforms based on VMware, Openstack, and Kubernetes. The company targets enterprises and multinational organizations in sectors such as banking, finance, healthcare, software, and manufacturing. They emphasize security certifications like ISO 27001/17/18 and renewable energy usage certified by TÜV. The website is professionally designed, well-structured, and optimized for SEO and mobile use, reflecting a mature digital presence. Security posture is strong with HTTPS, domain transfer protection, and certifications, though some security headers and cookie consent mechanisms could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

D

Dachverband Offene Kinder- und Jugendarbeit Schweiz (DOJ)

doj.ch

57

The Dachverband Offene Kinder- und Jugendarbeit Schweiz (DOJ) is a Swiss non-profit umbrella organization dedicated to supporting, representing, and networking open child and youth work institutions across Switzerland and Liechtenstein. The website clearly targets professionals and institutions involved in youth work, offering information on projects, events, and specialized groups. The organization positions itself as a key player in the national youth work sector with a focus on inclusion, health promotion, and youth culture. Technically, the site is built on the Contao CMS platform, uses modern JavaScript libraries such as Swiper for UI components, and integrates Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's Swiss non-profit identity. Overall, the site is trustworthy, professional, and well-suited for its audience.

I

infoklick.ch, Kinder- und Jugendförderung Schweiz

infoklick.ch

46

infoklick.ch is a Swiss non-profit organization dedicated to promoting youth participation and improving information dissemination in the children and youth sector. With over 25 years of history, it holds a respected position in the Swiss youth promotion landscape. The website provides resources, partner networks, and community engagement opportunities targeting children and young people in Switzerland. Technically, the site is built on TYPO3 CMS, uses standard web technologies, and integrates both Google Analytics and Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and privacy-respecting analytics, but lacks advanced security headers and cookie consent mechanisms. Overall, the site is trustworthy, professional, and content-rich, though improvements in privacy compliance and security policies are recommended.

isoplus (Schweiz) AG is a Swiss-based company specializing in district heating systems, including high-quality heating pipes, heat transfer stations, control technology, and ceiling radiant panels. The company targets businesses and organizations in the energy and construction sectors, offering tailored heating solutions. The website reflects a professional and consistent brand presence with clear navigation and relevant business content. Technically, the site is built on WordPress with Bootstrap and jQuery, providing a moderate performance and good mobile optimization. However, some technical improvements are recommended, such as implementing security headers and properly configuring analytics tools. Security posture is adequate with HTTPS enabled but lacks advanced security headers and policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

BRUGG Pipes is a specialized manufacturer and service provider of flexible and rigid pipe systems primarily serving the energy and industrial sectors. The company is positioned as a global market leader in safe transport solutions for flammable and water-hazardous substances, offering a comprehensive product portfolio including pipe systems for district heating, cooling, industrial applications, and tank stations. Their website is professionally designed, multilingual, and rich in content, targeting industry professionals and infrastructure planners. Technically, the site is built on TYPO3 CMS with modern tracking and consent management tools, ensuring GDPR compliance and good user experience across devices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data slightly reduces trust but does not detract from the overall legitimacy. The company maintains active social media presence and partners with professional platforms, enhancing its market reach and credibility.

Volvic Switzerland, operated by Danone Schweiz AG, is a well-established brand specializing in natural mineral water sourced from the volcanic Auvergne region in France. The website showcases a comprehensive product range including mineral water, flavored waters, and teas, with a strong emphasis on sustainability and environmental responsibility, supported by certifications such as B Corp and Carbon Trust climate neutrality. The target audience is general consumers in Switzerland seeking natural and sustainable beverage options. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and privacy management tools, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and privacy consent mechanisms, though some security headers could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations.

The website www.danone-activia.ch represents the ACTIVIA brand under Danone, focusing on promoting their yoghurt products with an emphasis on digestive health and nutrition. It targets German-speaking consumers in Switzerland with rich content including product details, recipes, sustainability initiatives, and educational articles. The site is professionally designed, mobile-optimized, and uses modern web technologies such as Adobe Experience Manager and Algolia for search functionality. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance with GDPR standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is trustworthy, well-maintained, and aligns with the brand's market position.

S

stopsmoking

stopsmoking.ch

68

stopsmoking.ch is a professionally designed national platform based in Switzerland dedicated to supporting individuals in quitting smoking. It offers comprehensive educational content, counseling services, and tools tailored for both smokers and healthcare professionals. The platform is well-positioned in the healthcare and non-profit sectors, targeting a mature audience seeking tobacco cessation support. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries like Swiper.js, and uses Matomo analytics hosted on a Swiss cloud provider, reflecting a good level of digital maturity and privacy awareness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

M

Mois Sans Tabac

month-without-tobacco.ch

51

Month Without Tobacco is a well-established Swiss public health campaign aimed at helping smokers quit through a structured 30-day program, practical guides, and community support. The website is multilingual, targeting French, German, Italian, and English speakers in Switzerland. It leverages WordPress with Elementor and several plugins to deliver a rich user experience including multimedia content, testimonials, and interactive forms. The campaign partners with various health organizations and provides free professional advice and online community engagement. Technically, the site is well-structured with good SEO practices, mobile optimization, and security headers in place. However, it lacks explicit privacy and terms of service pages, and no published security or incident response policies were found. Overall, the site is trustworthy and professionally maintained, with a strong focus on user engagement and health promotion.

Eurodesk Schweiz operates as a non-profit information network dedicated to facilitating mobility opportunities for young people across Europe. The organization provides free and accessible advice on various mobility options including jobs, internships, volunteering, studying, and language learning. It is part of a larger European network with offices in 34 countries, positioning itself as a trusted national resource in Switzerland. The website is professionally designed, multilingual, and offers relevant content targeted at youth and professionals in youth work. Technically, the site is built on TYPO3 CMS and integrates privacy-conscious analytics tools such as Matomo alongside Google Analytics with IP anonymization. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and explicit security policies. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy and well-positioned within its niche but could improve in security and privacy transparency.

M

Mois Sans Tabac

rauchfreiermonat.ch

51

The website 'Rauchfreier Monat' is a professionally designed, multilingual public health campaign based in Switzerland focused on helping individuals quit smoking and nicotine consumption. It offers a 30-day quit program, expert support, community engagement, and various free tools to support cessation efforts. The site is well-positioned in the healthcare non-profit sector with strong partnerships and a consistent brand presence. Technically, it is built on WordPress using Elementor and other modern plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and cookie consent, though it lacks explicit security policies and incident response information. Overall, the site is trustworthy and serves a mature audience interested in tobacco cessation.

Z

ZEISS

zeiss.ch

68

ZEISS Switzerland operates as a regional corporate website for the global ZEISS Group, a leading technology company specializing in optics and optoelectronics. The website serves as a language selection gateway directing users to localized content in German and French. The company is positioned as a major player in the technology sector with a focus on precision optics and related services. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and integrated with Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly visible on this page. Overall, the website reflects a professional and trustworthy corporate presence with good compliance to privacy regulations.

H

hansgrohe

hansgrohe.ch

10

Hansgrohe is a premium manufacturer and retailer specializing in high-quality bathroom and kitchen fixtures, including faucets, shower systems, and sinks. The website reflects a strong brand presence with a focus on modern design and quality, targeting a general audience interested in premium home fixtures. The company operates primarily in Switzerland, with a large-scale business model and consistent branding across multiple languages and regions. The digital infrastructure is built on a modern tech stack, likely leveraging SAP Hybris for e-commerce capabilities, and integrates advanced analytics and monitoring tools such as Google Tag Manager, Piwik PRO, and New Relic. The website demonstrates good mobile optimization and SEO practices, contributing to a positive user experience.

GIANTS Software GmbH operates the official website for Farming Simulator, a leading farming simulation game with a strong global community and multi-platform availability. The website serves as a hub for game sales, downloadable content, mods, tutorials, and community engagement, supporting a diverse audience of gamers and content creators. The business model includes direct sales, DLC offerings, merchandise, and community-driven content, positioning GIANTS Software as a prominent player in the simulation gaming industry. Technically, the website employs modern web technologies including jQuery and the Foundation framework, ensuring responsive design and good mobile optimization. The site is well-structured with clear navigation and SEO-friendly metadata, supporting a positive user experience. However, some technical details such as hosting provider and CMS are not explicitly identified. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, indicating attention to privacy compliance. Nonetheless, the absence of explicit security headers and lack of visible incident response or security policy pages suggest areas for improvement. The WHOIS data is unavailable or protected, which slightly reduces transparency but is not uncommon for commercial entities. Overall, the website is professional, trustworthy, and content-rich, with no signs of adult or questionable content. The main risk lies in the incomplete WHOIS data and limited direct contact information, which could be addressed to enhance trust and compliance.

G

GIANTS Software GmbH

giants-software.com

50

GIANTS Software GmbH is a well-established Swiss technology company specializing in game development and publishing, best known for the Farming Simulator series. The company maintains a professional online presence with a content-rich website targeting gamers, partners, and potential employees. Their market position is strong within the simulation gaming niche, supported by active social media channels and partnerships. Technically, the website uses a traditional tech stack with jQuery and CSS, hosted by Hetzner Online GmbH, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced DNS security and security headers. Privacy compliance is basic but includes a cookie consent mechanism and a privacy policy. Overall, the website is trustworthy and professionally maintained, though improvements in security and transparency could enhance its posture further.

P

Philosophicum

philosophicum.ch

50

Philosophicum is a small, Swiss-based cultural and educational organization focused on philosophy, culture, and societal questions. The website presents a well-structured platform offering event programs, publications, and venue rental services, targeting a general audience interested in philosophical and cultural discourse. The technical infrastructure is modern with use of standard web technologies and a cookie consent mechanism, indicating awareness of privacy requirements. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response contacts. The absence of privacy and terms of service pages, as well as contact details, represents areas for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

G

Goetheanum TV

goetheanum.tv

67

Goetheanum TV is a specialized media platform offering video content centered on anthroposophy, targeting a general audience interested in cultural and educational material. The platform operates on a subscription and video-on-demand business model, leveraging a modern technical infrastructure including Uscreen OTT platform, Tailwind CSS, and various JavaScript libraries. The website is professionally designed, mobile-optimized, and supports multiple languages, enhancing accessibility and user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies, aligning with GDPR requirements. Overall, the platform presents a trustworthy and professional digital presence with moderate tracking and advertising practices.

N

Nexthink

yeself.com

68

Nexthink is an established enterprise technology company founded in 2004, specializing in Digital Employee Experience (DEX) solutions. Their platform leverages AI-driven analytics and in-app guidance to enhance software adoption and optimize application success for enterprise IT environments. The company targets IT managers and digital workplace professionals seeking to improve employee productivity and software utilization. Technically, the website is built on modern frameworks such as Next.js and React, hosted with Cloudflare DNS, and integrates multiple analytics and marketing tools including Google Analytics and Microsoft Clarity. The site demonstrates excellent design quality, mobile optimization, and SEO practices. Security-wise, Nexthink employs HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a mature digital presence with high trustworthiness and professional branding.

O

OFFLINE GmbH

offline.ch

49

OFFLINE GmbH is a Swiss technology company based in Luzern specializing in modern web application development, legacy software modernization, and CTO-as-a-Service offerings. With approximately 14 years of experience, they serve a diverse clientele ranging from startups to established enterprises, emphasizing quality and sustainable technical solutions. The website reflects a professional and modern digital presence, built using the Hugo static site generator, optimized for performance and mobile devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the site lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. Overall, the company demonstrates strong business credibility and technical maturity with room for improvement in privacy and security transparency.

G

Goetheanum

goetheanum.org

55

Goetheanum is an educational and cultural institution focused on spiritual science and anthroposophy, serving as the seat of the General Anthroposophical Society. The website presents a professional and consistent brand image with good content quality targeted at individuals interested in spiritual and educational topics. Technically, the site uses modern web technologies including JavaScript, CSS, Google Fonts, and integrates cookie consent via iubenda, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the site is safe, trustworthy, and well-positioned within its niche educational sector.

P

Startseite / Pfingsttagung 2025

pfingsttagung.info

50

Pfingsttagung.info is a website dedicated to organizing and promoting the Pfingsttagung conference, focusing on Waldorf pedagogy and early childhood education. The site targets educators and individuals interested in Steiner/Waldorf education, offering event programs, workshops, registration, and travel information. The website is professionally designed using TYPO3 CMS and includes multimedia content such as embedded Vimeo videos. It provides clear navigation and multilingual support (German and English). The business model centers on event organization within a niche educational sector, primarily serving a small, specialized audience in Switzerland.

T

Taywa GmbH

taywa.ch

58

Taywa GmbH is a Swiss digital agency specializing in the conception and programming of websites, browser-based software, and mobile applications. With nearly 20 years of experience, the company positions itself as an effective and customer-oriented service provider targeting businesses seeking modern digital solutions. The website reflects a professional and polished digital presence with modern technologies such as Three.js and Swiper.js enhancing user experience. However, the absence of privacy and cookie policies indicates a compliance gap with GDPR and related regulations. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but lacks published security policies or incident response information. Overall, Taywa presents a credible and trustworthy business with room for improvement in privacy compliance and security transparency.

G

Goetheanum

goetheanum.ch

56

Goetheanum is a well-established non-profit educational and cultural institution based in Switzerland, serving as the School of Spiritual Science and the seat of the General Anthroposophical Society. The website reflects its mission by providing comprehensive information about its educational programs, cultural events, and anthroposophical research. The institution targets individuals interested in spiritual science and related disciplines, maintaining a strong market position within its niche. Technically, the website employs modern web technologies, including JavaScript frameworks, CSS, and reputable third-party services for cookie management and user engagement, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and no detected vulnerabilities, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, supporting a positive user experience and business credibility.

A

Allgemeine Anthroposophische Gesellschaft

sektion-landwirtschaft.org

47

The Sektion für Landwirtschaft is a non-profit organization affiliated with the Allgemeine Anthroposophische Gesellschaft and based at the Goetheanum in Switzerland. It focuses on promoting biodynamic agriculture through education, research, publications, and events. The website is professionally designed using TYPO3 CMS and integrates modern technologies such as Matomo for analytics and Tiny Slider for UI components. Contact information and social media presence are clearly provided, enhancing trust and accessibility. Privacy and cookie policies are implemented with GDPR compliance, although explicit terms of service and security policies are absent. The WHOIS data is unavailable due to query failure, but the website content and affiliations strongly indicate legitimacy and a mature organizational presence.

G

Goetheanum, Dornach

steiner100.ch

48

The website steiner100.ch is a dedicated platform commemorating the 100th anniversary of Rudolf Steiner's death in 2025. It serves as a regional cultural hub focusing on events, exhibitions, and initiatives related to Rudolf Steiner in Northwest Switzerland and the tri-border area. The site targets a general audience interested in cultural, spiritual, and educational activities linked to Steiner's legacy. The business model is non-profit and event-driven, with partnerships involving notable cultural institutions such as the Goetheanum. Technically, the site is built on WordPress using modern themes and plugins, ensuring a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though improvements in security and privacy transparency are recommended.

P

Pedagogical Section at the Goetheanum and International Council for Steiner Waldorf Education

waldorf-resources.org

50

Waldorf Resources is a specialized online platform dedicated to supporting Waldorf and Steiner educators worldwide by providing academic publications, essays, and pedagogical articles. The website is affiliated with the Pedagogical Section at the Goetheanum and the International Council for Steiner Waldorf Education, positioning it as a niche educational resource within the Waldorf community. The platform operates as a non-profit entity focused on educational content and resource sharing. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Bootstrap and jQuery, with integrated privacy compliance tools such as Iubenda for cookie consent and Matomo for analytics. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, reflecting good privacy compliance with GDPR. However, security headers are not explicitly detected, and no published security or incident response policies are available. The WHOIS data is malformed or privacy-protected, limiting transparency but not indicating suspicious activity. Overall, the security posture is solid but could benefit from additional hardening and transparency. The overall risk assessment is low, with the site presenting as a trustworthy educational resource. Strategic recommendations include implementing security headers, publishing vulnerability disclosure and incident response information, and enhancing accessibility. These improvements would strengthen trust and security culture while maintaining compliance and user confidence.

A

Allgemeine Anthroposophische Gesellschaft

paedagogik-goetheanum.ch

51

The Pädagogische Sektion am Goetheanum website represents a small, specialized educational organization focused on Waldorf and anthroposophical pedagogy. It offers resources, events, and publications targeting educators and researchers in this niche field. The site is professionally designed using TYPO3 CMS and integrates modern privacy compliance tools such as Iubenda for cookie and privacy policies. The technical infrastructure is solid, with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Contact information and business legitimacy are clearly established with consistent WHOIS data and a professional imprint. Overall, the website is trustworthy, well-maintained, and serves its educational mission effectively.

I

Internationaler Rhönradturn-Verband

wheelgymnastics.sport

57

The International Wheel Gymnastics Federation (IRV) operates the website wheelgymnastics.sport as the official global governing body for the sport of Wheel Gymnastics. The organization provides comprehensive resources including event information, competition regulations, membership details, and training materials targeted at athletes, clubs, and officials worldwide. The website demonstrates a professional and consistent brand presence with active social media integration and multimedia content such as livestreams and news updates. Technically, the site is built on WordPress with the Avada theme and integrates modern analytics and marketing tools like Google Tag Manager and HubSpot. Performance and mobile optimization are good, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain registration consistent with the organization's identity, but could be improved by enabling DNSSEC and adding security headers and vulnerability disclosure information. Privacy compliance is basic, with a privacy policy present but only in German and no explicit terms of service or incident response contacts. Overall, the site is trustworthy and well-maintained, serving its niche audience effectively.

A

AISTS

aists.org

64

The International Academy of Sport Science and Technology (AISTS) is a well-established academic institution founded in 2000, specializing in sport management and technology education. It offers a range of postgraduate and continuing education programs, along with advisory services tailored to the sport industry. The institution is endorsed by the International Olympic Committee and collaborates with several prestigious universities and organizations, positioning itself as a global leader in sport science education. The website reflects a professional and modern digital presence, optimized for performance and user experience, with clear navigation and rich content targeting students and professionals in the international sport sector. Technically, the website is built on WordPress with modern JavaScript libraries such as Swiper and GSAP, and employs caching and cookie consent tools to enhance performance and compliance. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph metadata implemented. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are missing. Privacy and cookie policies are present and GDPR compliant, but no explicit security policy or incident response information is published. Overall, the website demonstrates a mature security and privacy stance appropriate for an academic institution, with minor areas for improvement in DNS security and transparency around security policies. The domain registration data aligns well with the institution's history and legitimacy, supporting high trustworthiness. The site does not contain any adult or questionable content, making it safe for general audiences.

F

Federation Internationale de Chiropratique du Sport

fics.sport

50

The Federation Internationale de Chiropratique du Sport (FICS) operates as an international non-profit organization dedicated to promoting sports chiropractic worldwide. Their website, fics.sport, serves as a platform to provide education, certification, and advocacy for sports chiropractic professionals and athletes. The organization is headquartered in Switzerland, consistent with the domain registration data, and has established a credible presence with social media channels and a professional website design. Technically, the website is built on WordPress using the Divi theme, incorporating WooCommerce for e-commerce and LifterLMS for learning management. The site is hosted behind Cloudflare DNS, uses HTTPS, and integrates marketing and analytics tools such as Facebook Pixel and Google Tag Manager. While the site performs moderately well and is mobile-optimized, there is room for improvement in accessibility and security headers. From a security perspective, the site benefits from HTTPS and a clean domain registration but lacks DNSSEC and important security headers. There is no visible privacy policy, cookie consent mechanism, or vulnerability disclosure policy, which are critical for compliance and trust. No contact emails or phone numbers were found, which may impact user trust and support accessibility. Overall, the website is trustworthy and professionally presented but would benefit from enhanced privacy compliance, security hardening, and clearer contact information to improve user confidence and regulatory adherence.

I

ICSBF - International Catch’n Serve Ball Sports Federation

catchandserve-ball.com

46

The International Catch’n Serve Ball Sports Federation (ICSBF) operates as a niche non-profit organization dedicated to promoting the sport of Catch'n Serve Ball globally. The website provides comprehensive information about the federation's activities, including event calendars, membership details, and news updates, positioning ICSBF as a specialized sports federation with a clear focus on community engagement and international sports development. The target audience includes sports enthusiasts, athletes, and sports clubs interested in this emerging sport. Technically, the website employs modern web standards with HTML5, CSS, and JavaScript, and integrates Matomo analytics for user tracking, reflecting a moderate level of digital maturity. The site is mobile-optimized and offers good navigation and content relevance. However, some technical improvements are recommended, such as implementing security headers and enhancing accessibility features. From a security perspective, the site benefits from HTTPS encryption and does not expose sensitive data. Nonetheless, the absence of security headers and lack of published security or incident response policies indicate room for improvement. The missing WHOIS data raises concerns about domain legitimacy, although the professional presentation and valid contact information mitigate some trust issues. Overall, the website is functional, professional, and safe for general audiences, but strategic enhancements in security posture, privacy compliance, and domain registration transparency are advised to strengthen trust and compliance.

The website www.waldorf-international.org represents the Haager Kreis, an international conference and coordinating body for Steiner Waldorf pedagogy. It serves as a global platform for Waldorf educators to exchange knowledge, maintain quality standards, and represent the Waldorf educational movement worldwide. The organization collaborates with several partner institutions and maintains a recognized list of Waldorf schools and kindergartens globally. The website content is primarily in German with some English navigation, targeting educators and institutions involved in Waldorf education. The business model is non-profit and educational, focusing on quality assurance and international cooperation rather than commercial activities. Technically, the website is built on TYPO3 CMS with compressed CSS and JavaScript assets, indicating a moderate level of technical maturity. The site includes a cookie consent mechanism compliant with GDPR and basic privacy policies. However, there is no evidence of advanced security headers or incident response information publicly available. The site is accessible without WAF or security challenges, but the WHOIS data is incomplete and malformed, limiting domain trust verification. Security posture is moderate with room for improvement in implementing security headers and publishing explicit security policies. Privacy compliance is good with clear cookie consent and privacy policy presence. Overall, the site is professional, trustworthy, and serves its educational mission effectively, though technical and security enhancements are recommended to strengthen its posture. The overall risk is low given the non-commercial nature and educational focus, but the lack of WHOIS transparency and security headers slightly reduce trustworthiness. Strategic improvements in security and transparency would enhance credibility and resilience.

A

Allgemeine Anthroposophische Gesellschaft

goetheanum-paedagogik.ch

51

The Pädagogische Sektion am Goetheanum website represents a well-established non-profit educational organization focused on Waldorf and anthroposophical pedagogy. It serves educators, researchers, and the Waldorf community by providing events, publications, and pedagogical resources. The organization holds a strong market position within its niche, supported by clear affiliations and partnerships with recognized anthroposophical and Waldorf institutions. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates privacy-compliant cookie management and analytics. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers could be improved. The site is fully accessible without WAF or blocking mechanisms, and contact information is transparent and consistent with WHOIS data. Overall, the website demonstrates professionalism, trustworthiness, and compliance with GDPR.

I

International Association for Steiner/Waldorf Early Childhood Education

iaswece.org

59

IASWECE is an international non-profit association dedicated to Steiner/Waldorf early childhood education, facilitating collaboration through conferences, training, and research projects. The website reflects a well-established organization with a clear educational mission and global reach. The technical infrastructure is based on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though improvements in security headers and incident response policies are recommended. Overall, the site is professional, trustworthy, and aligned with its business purpose.

P

PIXELPETER GmbH

pixelpeter.ch

49

PIXELPETER GmbH is a Swiss-based technology service provider specializing in web development, graphic design, SEO, media production, AI consulting, and hosting services. With over 25 years of experience and a strong portfolio of projects and satisfied clients, the company targets SMEs, freelancers, artists, associations, and social organizations. The website reflects a professional and consistent brand image with clear service offerings and a focus on customer orientation. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and responsive design principles to ensure good mobile optimization and user experience. While performance is moderate, the site is well-structured with SEO-friendly meta tags and basic accessibility features. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers, privacy and cookie policies, and incident response information, indicating room for improvement in compliance and security posture. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, the website presents a low-risk profile with a solid business credibility score but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

The website at arisf.sport is currently inaccessible, presenting a 403 Forbidden error page that blocks access to any substantive content. The domain is registered to ARISF, a Swiss organization established in 2018, with transparent WHOIS data and no privacy protection. Due to the access restriction, no privacy policies, contact information, or business descriptions are available on the site. The technical infrastructure appears minimal with basic HTML and CSS, and no advanced frameworks or analytics detected. Security posture is limited by lack of DNSSEC and security headers, but the domain registration is legitimate and consistent with the organization. Overall, the site is currently non-functional for public users, limiting any meaningful analysis of business or security maturity.

G

Greenpeace Schweiz

greenpeace.ch

67

Greenpeace Schweiz is a well-established non-profit environmental organization dedicated to climate change mitigation and sustainable consumption advocacy. The website serves as a platform for activism, education, and fundraising, targeting a broad audience interested in environmental issues. It features multiple campaigns, petitions, and volunteer opportunities, reflecting a mature and professional digital presence. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates analytics and monitoring tools such as Google Tag Manager, Hotjar, and Sentry, indicating a commitment to performance and user experience. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance, particularly regarding cookie consent and explicit security policies. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting high trustworthiness and legitimacy.

F

Freie Gemeinschaftsbank Genossenschaft

gemeinschaftsbank.ch

42

Freie Gemeinschaftsbank Genossenschaft is a Swiss cooperative bank focused on sustainable and transparent banking practices. It offers services including account opening, credit lending, and sustainable investments, targeting individuals and projects aligned with ecological and social values. The bank positions itself as a niche player in the Swiss sustainable finance sector, emphasizing community involvement and transparency. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies with good SEO and accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response details are not published. Overall, the website reflects a trustworthy and professional financial institution with a clear sustainability mission.

K

Karl Kahane Foundation

karlkahanefoundation.org

45

The Karl Kahane Foundation is a Swiss-based charitable organization established in 1991, focusing on social inclusion, accessibility, and migration-related projects primarily in Europe, Turkey, the Middle East, and North Africa. The foundation operates as a non-political, non-religious entity supporting vulnerable communities through funding and partnerships with reputable NGOs. The website reflects a professional and consistent brand presence, with clear information about its founder, board members, and partners. Technically, the site is built on WordPress with standard SEO and analytics tools, offering good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable or malformed, likely due to privacy protection, which is common for non-profits but slightly reduces trust. Overall, the site is trustworthy and well-positioned within its niche, though improvements in privacy compliance and security best practices are recommended.