Switzerland security reports

G

Goba AG

goba-welt.ch

52

Goba AG is a small, independent Swiss mineral water producer with a strong local market presence. The company operates a professional e-commerce platform offering a variety of beverages and specialty products, including mineral water, limonade, and syrups. Their website reflects a well-established brand with clear contact information, multiple physical locations, and active social media engagement. Technically, the website employs modern web technologies such as Google Tag Manager, Facebook Pixel, and lazy loading for images, ensuring a good user experience and performance. Security posture is strong with HTTPS enforced and appropriate security headers, although there is room for improvement in publishing dedicated security policies and incident response information. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-aligned with the business's offline presence.

E

ETAVIS

etavis.ch

75

ETAVIS is a leading Swiss and Liechtenstein-based company specializing in high-quality electrical engineering and automation solutions. The company serves both business and private customers with tailored services including electrical installations, communication, building automation, energy efficiency, and renewable energy solutions such as solar systems and e-mobility infrastructure. ETAVIS is part of the VINCI Energies group, reinforcing its market position and operational scale. The website reflects a professional and regionally focused business model with strong branding and comprehensive service offerings.

S

Schweizerische Bodensee-Schifffahrt AG

bodensee-schiffe.ch

55

Schweizerische Bodensee-Schifffahrt AG operates a regional transportation and tourism service on Lake Constance, offering ferry and cruise ship services, experience trips, event hosting, and gastronomy. The company maintains a professional website built on WordPress with Elementor, integrating multiple plugins for booking and event management. The site is well-structured with good SEO practices and modern technology usage, including Google Analytics and Tag Manager for tracking. However, the absence of explicit privacy and cookie policies, as well as lack of visible security headers, indicates gaps in compliance and security posture. No contact emails or phone numbers were found in the provided content, which may affect user trust and support accessibility. Overall, the website is legitimate, consistent with the business claims, and provides a good user experience for its target audience.

B

Blumer Lehmann

blumer-lehmann.com

68

Blumer Lehmann is a leading Swiss company specializing in wood construction and wood industry products, offering a wide range of services including planning, development, construction, and sales of wood products and silo/plant construction. The company targets professionals and businesses in the construction and sustainable building sectors, positioning itself as an international leader in its industry. The website is professionally designed with multilingual support and detailed navigation, reflecting a mature digital presence. Technically, the site uses modern analytics and tracking tools such as Google Tag Manager, Hotjar, TikTok Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and some best practices observed, though explicit security headers and privacy policies are missing. The absence of WHOIS data raises some concerns about domain registration transparency, but the website content and branding suggest a legitimate business. Overall, the site is trustworthy but would benefit from enhanced privacy compliance and clearer security disclosures.

Appenzellerland Tourismus AR operates a regional tourism website focused on promoting activities, accommodation, and restaurants in the Appenzellerland region of Switzerland. The website targets tourists and visitors seeking information and inspiration for their stay. The business model centers on tourism promotion and providing comprehensive regional information, positioning itself as a key regional tourism authority. Technically, the site is built on the Contao Open Source CMS, leveraging modern web technologies including jQuery, Google Tag Manager, Cookiebot for consent management, and Plausible Analytics for privacy-friendly analytics. The site is well-optimized for mobile devices and includes good SEO practices. Security-wise, the website enforces HTTPS, implements cookie consent with granular controls, and uses reputable third-party services, reflecting a mature security posture. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Overall, the site is professional, trustworthy, and compliant with GDPR through Cookiebot integration, but could improve transparency by adding terms of service and contact information.

B

BIWAC Digital Solutions

biwac.ch

59

BIWAC Digital Solutions is a Swiss-based digital agency specializing in custom websites, web applications, and e-commerce solutions, serving over 500 SMEs and institutions for more than 25 years. Their market position is that of a trusted local provider with a strong portfolio and a focus on modern technologies such as Silverstripe CMS, Magento, and JavaScript frameworks like React and Vue. The company targets primarily Swiss SMEs and institutions, offering tailored digital solutions including photography, SEO, and newsletters. Technically, the website is built on Silverstripe CMS 5.2 and integrates multiple modern technologies and frameworks. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with a solid SSL configuration and employs consent-based analytics tools including Google Analytics, Microsoft Clarity, and Leadinfo. Accessibility is enhanced by the UserWay widget. From a security perspective, the site enforces HTTPS and cookie consent mechanisms but lacks explicit security policy pages and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's stated history and no privacy protection that would obscure legitimacy. Overall, the website presents a professional, trustworthy, and secure digital presence with minor areas for improvement in security transparency and policy disclosures. The risk level is low, and the company demonstrates a mature digital and security posture.

A

A.Vogel AG

avogel.ch

72

A.Vogel AG is a well-established Swiss company specializing in natural and herbal remedies with a history dating back to 1923. The website serves as an official platform to showcase their product range, company philosophy, and educational content related to natural health. The company targets a general audience interested in natural health products and operates internationally with presence in 30 countries. Technically, the website uses modern JavaScript libraries and frameworks such as jQuery, Slick Carousel, and Fancybox, combined with Google Tag Manager and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and consent-based loading of third-party scripts, although there is room for improvement in publishing explicit security policies and headers. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and aligns well with the company's business claims.

F

Forschungsinstitut für biologischen Landbau FiBL, Bio Suisse

bioaktuell.ch

62

Bioaktuell.ch is a well-established Swiss platform dedicated to supporting organic farmers by providing comprehensive information, advisory services, and educational content. Affiliated with the Forschungsinstitut für biologischen Landbau FiBL and Bio Suisse, it holds a leading position in the Swiss organic agriculture sector. The website targets Swiss organic farmers and stakeholders, offering multilingual content in German, French, and Italian to serve the diverse Swiss population. The business model focuses on information dissemination and community support rather than direct commercial transactions. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript and CSS, with integrations for push notifications via Signalize and analytics through eTracker. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Performance is moderate, with a clean and professional design that supports user experience and navigation clarity. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security headers and a published security or incident response policy suggests room for improvement in security posture. The WHOIS data is consistent with the website's claims, showing transparent registration without privacy protection, which is appropriate for this type of organization. Overall, Bioaktuell.ch presents a trustworthy, professional, and compliant platform with a strong focus on organic farming in Switzerland. Strategic enhancements in security policies, accessibility, and transparency around incident response would further strengthen its position and trustworthiness.

V

VITAMIN 2

vitamin2.ch

57

Vitamin 2 is a full-service advertising agency based in Eastern Switzerland, specializing in branding, design, web development, marketing, and communication services. The website showcases a professional portfolio with multimedia content and a strong client base, positioning the company as a reputable regional player in the media sector. The technical infrastructure is modern, leveraging frameworks like Livewire and Alpine.js, and integrates Google Tag Manager and Cloudflare Turnstile for performance and security. Security posture is solid with HTTPS and bot protection, but lacks visible privacy and cookie policies, as well as incident response contacts, which are important for compliance and trust. Overall, the site is well-designed, mobile-optimized, and user-friendly, reflecting a high level of digital maturity.

D

Digitalution GmbH

digitalution.ch

62

Digitalution GmbH is a Swiss-based digital agency specializing in web design, web development, landing pages, UX/UI design, mobile app development, and marketing automation. The company positions itself as a provider of high-quality, award-winning digital solutions tailored to Swiss perfection and local market needs. Their business model focuses on delivering customized digital projects with a strong emphasis on personal consultation and fair pricing. The company has a solid reputation supported by client testimonials, a high customer satisfaction rating, and industry awards such as the Splashwards. Technically, the website is built on modern platforms like Webflow, leveraging cloud hosting and security services such as Cloudflare and Google reCAPTCHA to ensure performance and protection. The site is well-optimized for mobile devices and provides a seamless user experience with clear navigation and professional design. Security posture is good with HTTPS enforced and CAPTCHA protections, though formal security policies and vulnerability disclosures are not published. Privacy compliance is strong with a comprehensive privacy policy aligned with Swiss and EU regulations, but lacks a cookie consent mechanism. Overall, the website and business demonstrate high credibility and professionalism with minimal security risks identified.

A

aiconomy AG

aico.swiss

70

aiconomy AG operates a modern, workflow-driven ERP platform integrated with e-commerce capabilities, primarily leveraging the Shopify platform. The company targets businesses seeking to unify their digital operations under a single application, offering modules for finance, logistics, CRM, project management, and product management. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses a robust tech stack including Shopify, GSAP, jQuery, and multiple marketing and analytics integrations, hosted by Hostpoint in Switzerland. Security posture is generally good with HTTPS enforced and no WAF blocking, but there are concerns such as exposed API tokens in client-side scripts and lack of DNSSEC. Privacy compliance is weak due to missing explicit privacy and cookie policies. Overall, the site is trustworthy and functional but requires improvements in security and privacy transparency.

Wellenberg Wind AG operates a regional wind energy project in the canton of Thurgau, Switzerland, focusing on the development and operation of wind turbines to generate renewable energy for local households. The website provides detailed project timelines, community engagement updates, and contact information for key personnel, reflecting a transparent and community-oriented business approach. Technically, the site uses modern web technologies with responsive design and includes a cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response details are absent. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, presenting a low-risk profile with room for improvement in security policy transparency and terms of service availability.

E

EKT AG

datacenterthurgau.ch

55

EKT AG operates the EKT Datacenter, a regional datacenter service provider located in Eastern Switzerland, offering colocation, rack space, and bundled IT infrastructure solutions primarily targeting SMEs and organizations in the Thurgau and surrounding regions. The company emphasizes security, reliability, and sustainability, supported by certifications such as ISO 27001 and ISO 9001. Their datacenter is carrier-neutral with direct connections to major hyperscalers, positioning them competitively in the regional market. Technically, the website is built on WordPress with a modern but somewhat dated technology stack including Bootstrap and jQuery 1.12.4. The site is mobile-optimized, SEO-friendly, and integrates common marketing and analytics tools such as Google Analytics and social sharing plugins. Performance is moderate with good navigation and content quality. From a security perspective, the site enforces HTTPS and displays trust signals through certifications and biometric access mentions. However, the use of an outdated jQuery version and lack of visible security headers present minor risks. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy, though no incident response or vulnerability disclosure policies are published. Overall, the website and business present a trustworthy and professional image with a solid security posture appropriate for their sector. Strategic improvements in updating libraries, enhancing security headers, and publishing incident response policies would further strengthen their security and compliance stance.

E

Energie Pool Schweiz AG

energie-pool.ch

55

Energie Pool Schweiz AG is an independent energy solutions provider based in Switzerland, specializing in photovoltaic contracting, energy optimization, and digital electricity market services. The company targets business clients seeking sustainable and optimized energy solutions. The website is built on WordPress using the Divi theme, enhanced with SEO and GDPR compliance plugins, indicating a moderate level of digital maturity and technical infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in publishing comprehensive privacy and security policies. Overall, the website presents a professional and trustworthy image aligned with its business sector.

N

NEGXT AG

negxt.ch

55

NEGXT AG is a Swiss-based independent planning and service company specializing in network and building technology. The company offers sustainable and efficient electrical planning solutions for power supply networks and building installations, targeting network operators, residential, commercial, industrial, and public clients. As a 100% subsidiary of EKT Holding AG, NEGXT AG maintains operational independence and holds a leading market position in the canton of Thurgau. The website is professionally designed using TYPO3 CMS, featuring modern technologies such as Google Tag Manager and embedded Vimeo videos. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the site reflects a trustworthy and credible business presence with clear contact information and GDPR compliance.

T

Thurgauer Naturstrom

thurgauer-naturstrom.ch

49

Thurgauer Naturstrom is a small regional energy provider based in Switzerland, specializing in 100% sustainable and CO2-neutral electricity sourced and produced within the Thurgau region. The company offers multiple electricity product mixes tailored to different customer needs, emphasizing environmental responsibility and supporting local conservation efforts such as donations to Pro Natura Thurgau. The website reflects a clear market position focused on environmentally conscious consumers in the region. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, integrating modern tracking and marketing tools such as Google Analytics, Google Tag Manager, Facebook Pixel, and reCAPTCHA v3 for form security. The site is mobile-optimized with good SEO practices and moderate performance. Privacy and cookie policies are implemented with GDPR compliance in mind. From a security perspective, the site uses HTTPS with an excellent SSL configuration and employs reCAPTCHA to protect forms. However, it lacks some advanced security headers and does not publish a formal security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and aligned with its business goals. It demonstrates a good balance of content quality, technical implementation, security posture, and privacy compliance, making it a reliable digital presence for the company.

E

EKT Energie AG

ekt-energie.ch

59

EKT Energie AG is a Swiss energy services company specializing in intelligent electricity procurement, portfolio management, and ecological energy solutions. The company positions itself as a leading provider of electricity services across Switzerland, targeting businesses seeking optimized and sustainable energy sourcing. Their website is professionally designed using TYPO3 CMS, featuring clear navigation and content relevant to their core services. The technical infrastructure includes modern web technologies and Google Tag Manager for analytics and marketing purposes. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Overall, the website demonstrates a mature digital presence with good privacy compliance and trust indicators such as ISO certifications. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

The Naked Watchmaker

thenakedwatchmaker.com

59

The Naked Watchmaker is a specialized online platform dedicated to providing in-depth educational content and insights into the art and craft of watchmaking. It offers a variety of services including detailed watch deconstructions, interviews with horological experts, book reviews, and an e-commerce shop selling watch-related products. The website targets watch enthusiasts, collectors, and professionals interested in horology. Technically, the site is built on the Squarespace platform, leveraging modern web technologies and integrating Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the website enforces HTTPS but lacks some advanced security headers such as HSTS and CSP, which are recommended for enhanced protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. Overall, the site is trustworthy and professional but would benefit from improved domain registration transparency and enhanced security headers.

M

MetroComm AG

leaderdigital.ch

49

LEADER Digital is a well-established regional business media portal serving the Eastern Switzerland economic community. It offers a comprehensive range of services including news, event listings, magazines, awards, and advertising opportunities. The website is professionally designed with consistent branding and targets primarily businesses, entrepreneurs, and organizations in the Ostschweiz region. The parent company is MetroComm AG, located in St.Gallen, Switzerland. Technically, the website employs modern web technologies such as jQuery, Owl Carousel, Google Analytics, Google Tag Manager, and Facebook Pixel. It uses the admiralCX content management system and demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate with asynchronous loading of scripts enhancing user experience. From a security perspective, the site uses HTTPS with anonymized IP tracking in analytics, but lacks explicit security headers and a dedicated security or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a gap. Social media integration and contact information are clear and professional. Overall, the website is trustworthy, professional, and well-positioned in its market niche. Security and privacy practices can be improved to enhance compliance and user trust.

N

Neue Zürcher Zeitung AG

nzz.ch

69

Neue Zürcher Zeitung AG operates the website www.nzz.ch, a leading Swiss news media outlet providing comprehensive news, background reports, opinions, and coverage across various sectors including sports, digital, and economy. The website targets a general audience primarily in Switzerland and delivers high-quality journalistic content in German. The business model is centered on digital news publishing with a strong market position in Swiss media. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates consent management platforms, and uses trusted third-party analytics and advertising services. The site is well-optimized for mobile and SEO, with good performance and accessibility features. Security posture is strong with HTTPS enforcement, content security policies, and no visible vulnerabilities or exposed sensitive data. However, explicit privacy policies, terms of service, and security incident response information are not clearly found, which slightly impacts privacy compliance and security transparency. Overall, the website is professional, trustworthy, and technically mature, with recommendations to enhance privacy disclosures and security communication.

K

KünzlerBachmann Directmarketing AG

xclight.ch

66

KünzlerBachmann Directmarketing AG operates the XCAMPAIGN platform, a professional web-based campaign management and email marketing solution established since 2002. The platform targets marketing professionals and agencies requiring multi-channel digital marketing tools for customer acquisition and retention. The website presents a professional login portal with clear branding and contact information, reflecting a mature business presence in Switzerland. Technically, the site uses a modern JavaServer Faces framework with PrimeFaces components and Bootstrap styling, ensuring a responsive and user-friendly interface. However, the technical implementation lacks visible security headers and advanced bot mitigation, indicating room for improvement in security hardening. Performance and mobile optimization are moderate to good, supporting a positive user experience. Security posture is adequate but not robust; HTTPS is used, and form inputs are secured with autocomplete attributes, but missing security headers and absence of anti-CSRF tokens reduce the overall security score. Privacy compliance is weak due to the absence of privacy and cookie policies on the login page. Business credibility is strong with consistent WHOIS data and clear company information. Overall, the website is functional and professional but would benefit from enhanced security measures and privacy compliance to improve trust and regulatory adherence.

B

Biomondo

biomondo.ch

68

Biomondo is an online marketplace focused on organic products in Switzerland, connecting consumers directly with regional bio farms. The website presents a professional and modern design using Vue.js and Vuetify frameworks, indicating a moderate level of digital maturity. The platform emphasizes regional and organic product offerings, targeting environmentally conscious consumers within Switzerland. Technically, the site uses HTTPS and includes a cookie consent mechanism via Cookiebot, but lacks visible privacy policies, terms of service, and security headers, which are important for compliance and security posture. No contact information or incident response details are readily available, which may impact user trust and regulatory compliance. Overall, the website is functional and secure at a basic level but would benefit from enhanced transparency and security practices.

S

stoz werbeagentur ag

stoz.ch

59

Stoz Werbeagentur AG is a Swiss-based fullservice advertising agency specializing in creative print and digital marketing solutions. Established in 1987 and operated as a family business, it serves a diverse clientele ranging from SMEs to international companies. The website reflects a strong brand identity emphasizing creativity, quality, and emotional engagement. Technically, the site uses modern web technologies including Alpine.js and Google Tag Manager, with good mobile optimization and fast performance. Security posture is solid with HTTPS and cookie consent implemented, though lacking explicit security headers and public security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Standortförderung Zürioberland

zuerioberland-regionalprodukte.ch

53

Standortförderung Zürioberland is a regional economic and cultural promotion organization focused on the Zürcher Oberland area in Switzerland. The website serves as a platform to showcase local businesses, cultural events, tourism opportunities, and community initiatives. It targets residents, businesses, tourists, and partners interested in the region's development and lifestyle. The business model revolves around regional promotion and community engagement, positioning itself as a key player in fostering economic growth and cultural vibrancy in the area. Technically, the website is built on WordPress 6.8.2, utilizing modern JavaScript libraries such as jQuery, OpenLayers for mapping, Swiper for sliders, and YouTube iframe API for embedded videos. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some performance optimizations could be enhanced. The infrastructure appears stable and professionally maintained. From a security perspective, the site enforces HTTPS and uses sanitization libraries like DOMPurify to mitigate XSS risks. However, it lacks visible security headers such as Content-Security-Policy and does not provide explicit privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is present, indicating room for improvement in security transparency and user trust. Overall, the website is professional, content-rich, and trustworthy, with a strong regional focus. To enhance its security posture and compliance, it should implement comprehensive privacy and cookie policies, add security headers, and provide clear contact channels for security incidents. These steps will improve user trust and regulatory adherence.

S

Stiftung zur Palme

palme.ch

51

Stiftung zur Palme is a well-established Swiss non-profit foundation providing residential, work, and training opportunities for people with cognitive impairments. With over 50 years of experience, it offers a broad range of services including sheltered workplaces and diverse product lines such as bakery, gardening, and creative workshops. The organization targets individuals with disabilities, their families, customers of their products, and potential donors. Technically, the website uses modern frameworks like Bootstrap and integrates analytics tools with privacy considerations, though it lacks a cookie consent mechanism. Security posture is solid with HTTPS and secure forms, but could be improved by adding security headers and incident response policies. Overall, the website is professional, trustworthy, and accessible, reflecting the organization's credibility and commitment to inclusion.

Feller AG is a well-established Swiss company specializing in electrical installation products and smart building technologies, operating since 1909. The company holds a leading market position in Switzerland, offering a broad range of products including switches, sockets, home automation solutions, and connected building services. Their website reflects a professional and consistent brand image, targeting both professional installers and private customers. Technically, the site uses modern JavaScript frameworks, integrates Azure Application Insights and Google Tag Manager for analytics and monitoring, and implements cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and monitoring tools in place, though explicit security headers and policies are not fully visible. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy and terms of service. Overall, the site is safe, professional, and trustworthy with no signs of malicious content or blocking mechanisms.

K

Kaegi.com

kaegi.com

62

Kaegi.com represents a Swiss chocolate wafer brand with a professional online presence focused on retail and brand marketing. The website is built on WordPress with modern SEO and analytics tools, indicating a moderate level of digital maturity. The site includes a comprehensive cookie consent mechanism, reflecting awareness of privacy compliance requirements. However, the absence of WHOIS data and domain registration information raises concerns about domain legitimacy. The security posture is generally good with HTTPS and cookie consent, but lacks some security headers and explicit privacy and terms policies. Overall, the website is safe and professional but would benefit from enhanced transparency and contact information.

T

Thurbo AG

thurbo.ch

65

Thurbo AG is a regional railway company operating in Eastern Switzerland and parts of Southern Germany, providing passenger rail services primarily targeting commuters and regional travelers. The company is a subsidiary of the Swiss Federal Railways (SBB), positioning it as a key player in the regional transportation sector. The website is professionally designed using TYPO3 CMS, with good mobile optimization and clear navigation, supporting a positive user experience. The technical infrastructure includes modern tracking and marketing tools such as Google Tag Manager, Adobe DTM, Facebook Pixel, and Hotjar, alongside a robust cookie consent mechanism via OneTrust, reflecting a mature digital presence. Security posture is strong with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence. However, the site lacks a public security policy and incident response contact details, which are recommended for enhanced transparency and trust. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the website.

O

OceanCare

oceancare.org

54

OceanCare is a Swiss-based international non-profit organization dedicated to ocean conservation and marine life protection since 1989. Recognized as a United Nations special advisor for marine protection, OceanCare operates with a strong focus on advocacy, public awareness, and scientific research to combat ocean pollution, destructive fishing practices, and underwater noise. The organization sustains its operations primarily through donations, memberships, and campaigns, targeting environmentally conscious individuals, NGOs, and policymakers. Technically, the website is built on WordPress using Elementor, enhanced with modern JavaScript libraries and analytics tools like Matomo and Google Tag Manager. It features GDPR-compliant cookie consent mechanisms and secure donation forms, reflecting a mature digital infrastructure. The site is well-optimized for SEO, mobile-friendly, and accessible, providing a professional user experience. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit advanced security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for non-profit entities. Overall, the website demonstrates a strong security posture and trustworthy business credibility. Strategically, OceanCare should enhance security headers and maintain regular audits of third-party scripts to mitigate risks. Continued transparency and compliance with privacy regulations will further strengthen user trust and organizational reputation.

B

Blaues Kreuz Schweiz

blaueskreuz.ch

55

Blaues Kreuz Schweiz is a Swiss non-profit organization dedicated to supporting individuals affected by alcohol addiction, their families, and promoting addiction prevention and youth protection. It serves as the umbrella organization for addiction support services in Switzerland, offering counseling, online support, group activities, and prevention campaigns. The organization maintains a strong regional presence and is recognized by certifications such as ZEWO, enhancing its trustworthiness. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including Google Analytics, Matomo, and Google Tag Manager for analytics and marketing. The site is mobile-optimized with a professional design and clear navigation, although accessibility could be improved. Security best practices are observed with HTTPS enforcement and security headers, but explicit cookie consent and security policies are lacking. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a vulnerability disclosure policy and incident response contacts indicates room for improvement in transparency and readiness. Privacy compliance is moderate, with a privacy policy present but no cookie consent mechanism. Overall, Blaues Kreuz Schweiz presents a trustworthy and professional online presence aligned with its mission. Strategic enhancements in privacy compliance, security transparency, and accessibility would further strengthen its digital maturity and stakeholder trust.

T

Thomann Nutzfahrzeuge AG

thomannag.com

67

Thomann Nutzfahrzeuge AG is a Swiss-based company specializing in commercial vehicles including trucks, buses, and transporters from major brands such as Renault Trucks, Volvo Trucks, Mercedes-Benz, and others. With 30 years of experience and multiple locations across Switzerland, the company offers a comprehensive range of services including sales, rental, maintenance, driver training, and proprietary software solutions (Thomann Plus) to optimize fleet management. The website reflects a mature business with a clear market position targeting commercial vehicle operators and fleet managers. Technically, the website is built on Concrete CMS and employs modern web technologies including JavaScript and SVG graphics. It is mobile-optimized and includes SEO best practices. The site uses HTTPS with a good SSL configuration, though DNSSEC is not enabled. Cookie consent mechanisms and privacy policies are implemented, indicating good privacy compliance. However, explicit security policies and incident response contacts are not found, which could be improved. Security posture is solid with HTTPS and cookie consent, but lacks advanced security headers and vulnerability disclosure mechanisms. The WHOIS data is consistent with the business identity, though the domain is newly registered in 2024, which may indicate a recent domain acquisition or rebranding. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional, trustworthy, and well-structured, supporting the company's business goals effectively. Strategic improvements in security transparency and DNS security could enhance trust and resilience.

T

thurgautravel.ch

thurgautravel.ch

64

Thurgautravel.ch is a Swiss-based travel agency specializing in worldwide river cruises, boasting over 20 years of experience. The website targets travelers interested in thematic and scenic river journeys across Europe, Asia, and South America. The business positions itself as a pioneer in the river cruise market, offering diverse travel experiences including active, gourmet, and city cruises. Technically, the site is built on WordPress and integrates modern marketing and analytics tools such as HubSpot, Google Tag Manager, and Cookiebot for cookie consent management. The site is mobile-optimized with good SEO practices and structured data implementation. Security posture is solid with HTTPS enforced and cookie consent mechanisms, though lacks explicit security headers and published privacy or security policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance documentation and security best practices.

M

Maestrani Schweizer Schokoladen AG

maestrani.ch

63

Maestrani Schweizer Schokoladen AG is a well-established Swiss family-owned chocolate manufacturer with a history dating back to 1852. The company produces and markets Swiss chocolate under its own brands Minor and Munz, operates a B2B webshop for promotional chocolates, and offers a visitor experience called Chocolarium. The website is professionally designed, multilingual, and provides comprehensive information about the company, its products, and career opportunities. Technically, the site is built on Drupal 10 with modern web technologies, is mobile-optimized, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS and consent management, though some security headers and explicit policies could be improved. Overall, the site reflects a mature digital presence aligned with the company's market position and business model.

R

Reisebüro Mittelthurgau Fluss und Kreuzfahrten AG

mittelthurgau.ch

60

Reisebüro Mittelthurgau Fluss und Kreuzfahrten AG is a Swiss travel agency specializing in sustainable and premium river cruises across Europe. The company offers a variety of travel packages including themed cruises, gourmet festivals, solo travel, and worldwide cruises, targeting discerning travelers interested in luxury and eco-friendly travel experiences. The website reflects a mature digital presence with a focus on user experience and clear business communication. Technically, the site leverages modern web technologies such as Vue.js and Concrete5 CMS, supported by robust analytics and marketing tools including Google Tag Manager, Hubspot, and Mouseflow. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. Overall, the site demonstrates good compliance with privacy regulations and provides comprehensive contact and business information, reinforcing trustworthiness.

M

Max Zeller Söhne AG

zellerag.ch

60

Max Zeller Söhne AG is a Swiss-based company specializing in the development and manufacturing of clinically proven herbal medicines. The company positions itself as a leading player in the Swiss herbal medicine market, targeting consumers interested in natural health and well-being solutions. Their website provides detailed product information, educational content on phytotherapy, and multiple language support, reflecting a mature digital presence. The business model focuses on product development, manufacturing, and retail distribution through online channels and physical outlets. The company maintains a consistent brand image and offers clear contact information and social media engagement.

V

Vesto AG

vesto.ch

67

Vesto AG is a specialized bicycle retail and service company based in St. Gallen, Switzerland, offering a wide range of bicycles including mountain bikes, e-bikes, racing bikes, gravel bikes, as well as clothing and accessories. The company targets cycling enthusiasts and the general public in the Ostschweiz region, providing personalized services such as bike fitting, repairs, and test bikes. Their market position is that of a trusted local specialist with strong community ties and partnerships. Technically, the website is built on modern frameworks like Nuxt.js and Strapi CMS, hosted likely behind Cloudflare, and employs best practices in performance, SEO, and accessibility. Security posture is strong with HTTPS, security headers, and a comprehensive cookie consent mechanism, though no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and social media presence. Recommendations include publishing a security policy and incident response contacts to enhance transparency and trust.

T

tanneschaffhausen gmbh

tanneschaffhausen.ch

48

tanneschaffhausen gmbh operates a traditional hospitality business located in the old town of Schaffhausen, Switzerland. The company emphasizes social inclusion by employing people with disabilities and offers services including a wine tavern, a shop, serviced studios, and event hosting. The business holds the Naturparkwirt certification, reflecting its commitment to regional and natural values. The website is well-structured, mobile-optimized, and provides clear information about the business, its offerings, and community engagement. Technically, the site uses modern JavaScript frameworks like Alpine.js and includes a cookie consent mechanism, but lacks explicit security headers and incident response policies. The security posture is good with HTTPS enforced and no visible vulnerabilities. Overall, the website presents a trustworthy and professional image suitable for its local hospitality market.

S

SIGVARIS GROUP

sigvaris.com

66

SIGVARIS GROUP is a well-established Swiss family-owned company specializing in medical compression products with a history spanning over 160 years. The company offers a broad portfolio including compression stockings, bandages, and postoperative compression clothing, serving both healthcare professionals and consumers primarily in Switzerland. The website reflects a mature digital presence with multilingual support and comprehensive product and service information. Technically, the site leverages modern monitoring and analytics tools such as Google Tag Manager, Raygun, Azure Application Insights, and Elastic APM, hosted likely on Microsoft Azure, and built on the EPiServer CMS platform. Security posture is strong with HTTPS enforced and use of error monitoring, though explicit security headers could be verified further. Privacy and cookie policies are present and GDPR compliant, supporting good privacy practices. The WHOIS data is unavailable, which is common for corporate privacy but reduces transparency. Overall, the website is professional, secure, and trustworthy, supporting SIGVARIS GROUP's market position as a leader in medical compression therapy products.

R

RC Tritec AG

rctritec.com

60

RC Tritec AG is a Swiss manufacturing company specializing in tritium labeling and luminescent materials, primarily serving the luxury watch and medical industries. The company is positioned as a leader in Swiss Super-LumiNova® technology and isotope handling, with a strong focus on quality and safety. Their website reflects a professional and modern digital presence, utilizing Nuxt.js and TailwindCSS, with a headless CMS (Strapi) backend. The site is well-optimized for mobile and SEO, featuring comprehensive privacy and cookie policies with user consent mechanisms. From a security perspective, the website enforces HTTPS and implements cookie consent controls, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data for the domain is a notable concern, suggesting the domain may be unregistered or privacy-protected, which warrants further verification to confirm legitimacy. Overall, the website demonstrates a mature technical infrastructure and good privacy compliance, supporting the company's credibility. However, improvements in security transparency and domain registration verification are recommended to enhance trust and reduce risk.

O

Ostschweizer Verein für das Kind

ovk.ch

54

The Ostschweizer Verein für das Kind (OVK) is a well-established non-profit organization based in Switzerland, dedicated to supporting the healthy psychological and physical development of children in the preschool age group. With over 100 years of history, OVK offers a range of advisory services including mother and father counseling, parenting coaching, and family accompaniment programs. The organization targets families, parents, and early childhood professionals, providing multilingual consultation and community events. The website reflects a professional and trustworthy presence with clear contact information and a strong emphasis on privacy compliance. Technically, the website employs modern web technologies including JavaScript, CSS, and Bootstrap framework, with a cookie consent mechanism powered by CookieYes. The site is mobile-optimized, accessible, and SEO-friendly, ensuring a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some recommended security headers are not explicitly confirmed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent banner with granular controls. Overall, the website demonstrates a mature digital infrastructure suitable for a non-profit organization, with strong business credibility and user trust. There are no indications of malicious content or security risks. However, the absence of a publicly stated security policy or incident response contact is a minor gap. Strategic recommendations include enhancing security headers and publishing incident response information to further strengthen trust and compliance.

G

Gemeindeverwaltung Mörschwil

mein-moerschwil.ch

63

Mein Mörschwil is a community-focused platform providing comprehensive information about local associations, schools, institutions, and church communities in Mörschwil, Switzerland. It serves as a hub for residents and interested individuals to explore leisure activities and upcoming events, positioning itself as a key local resource. The website is professionally designed with clear navigation and is optimized for mobile devices, reflecting a moderate to high level of digital maturity. Technically, it leverages modern frameworks such as Nuxt.js and Strapi CMS, ensuring a robust and maintainable infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by implementing security headers and formal vulnerability disclosure policies. Privacy compliance is basic, with a privacy policy present but lacking cookie consent mechanisms and GDPR explicit indicators. Overall, the site demonstrates high business credibility with clear contact information and consistent branding, making it a trustworthy source for local community engagement.

E

EKT AG

ekt.ch

57

EKT AG is a well-established Swiss company founded in 1912, specializing in providing energy and data services primarily within the canton of Thurgau. The company operates with a strong regional focus, serving business customers, municipalities, schools, and property management entities. Their offerings include energy supply, network construction and operation, telecommunications, data center services, and e-mobility solutions. The website reflects a mature digital presence built on TYPO3 CMS, integrating modern analytics and marketing tools while maintaining GDPR compliance through a comprehensive privacy and cookie policy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not publicly detailed. The domain registration data aligns well with the company's history and legitimacy, supporting a high trust level. Overall, the website demonstrates professionalism, clear business positioning, and a commitment to sustainability and innovation.

B

blindekuh

blindekuh.ch

51

blindekuh is a well-established Swiss hospitality and cultural foundation operating unique dark restaurants in Zürich and Basel. The business offers immersive dining experiences, events, courses, and gift vouchers, positioning itself as a pioneer in the niche dark restaurant market. The website reflects a mature digital presence built on Drupal 10, with modern UI/UX and compliance with privacy regulations. Security posture is strong with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users.

F

FC St.Gallen 1879

fcsg.ch

75

FC St.Gallen 1879 is a historic Swiss football club with a well-established digital presence, including live match tracking, news, video content, and an e-commerce platform for merchandise. The website is built on Shopify, leveraging modern web technologies and third-party analytics tools to engage fans and customers effectively. The technical infrastructure is solid, with good mobile optimization and performance, although some SEO and accessibility aspects could be improved. Security posture is generally strong with HTTPS and no exposed sensitive data, but explicit security policies and headers could be enhanced. Privacy compliance is limited due to the absence of visible privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the site reflects a professional sports organization with a medium-sized digital footprint and good business credibility.

A

A.Vogel AG

avogel-company.ch

60

A.Vogel AG is a well-established Swiss manufacturer specializing in natural health products such as herbal medicines, nutritional supplements, medical devices, and body care products. The company has a strong emphasis on quality, sustainability, and natural health, serving both consumers and healthcare professionals. Their market presence extends internationally with partnerships and subsidiaries in 30 countries. The website reflects a mature digital infrastructure with modern JavaScript libraries, consent management, and professional login portals for healthcare providers. Security posture is strong with HTTPS enforcement and consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website is professional, trustworthy, and aligned with the company's brand and business model.

A

Audika

audika.ch

76

Audika is a leading Swiss healthcare company specializing in hearing tests, hearing aids, and hearing protection services. It operates over 70 hearing centers in Switzerland and is part of the Demant group, a global leader in hearing healthcare. The website is professionally designed, localized for the Swiss German market, and offers comprehensive information about their services including free hearing tests and personalized consultations. The company targets individuals with hearing needs, providing retail and service solutions in the healthcare sector. Technically, the website employs modern tracking and marketing tools such as Google Tag Manager and Visual Website Optimizer, indicating a mature digital marketing strategy. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms in place, though there is room for improvement in publishing dedicated security policies and incident response information. Overall, the website is trustworthy, compliant with GDPR, and reflects a reputable business entity with consistent WHOIS data and transparent registrant information.

S

Schellenberg Druck AG

klebebinder.ch

50

Schellenberg Druck AG is a well-established Swiss family-owned printing company with over 60 years of experience, specializing in traditional and digital print media and marketing instruments. As part of the Schellenberg Gruppe, it holds a strong market position in the manufacturing and media sectors, offering comprehensive services from consulting and publishing to production, finishing, and logistics. The company emphasizes sustainability and social responsibility, supported by ISO certifications and a broad network of subsidiaries. Technically, the website employs modern web technologies including Vue.js, UKit, and Matomo analytics, with a CMS based on Cockpit. The site is mobile-optimized and provides a good user experience, although some accessibility features could be improved. Security posture is strong with HTTPS and secure forms, but lacks visible cookie consent and dedicated security policies. Overall, the security posture is solid with no detected vulnerabilities or exposed sensitive data. The domain registration is consistent with the business claims, enhancing trustworthiness. However, privacy compliance could be enhanced by implementing cookie consent mechanisms and publishing security policies. Strategic recommendations include improving privacy compliance, publishing security and incident response policies, enhancing security headers, and further improving accessibility and transparency to strengthen trust and compliance.

O

OSR Label

osr-label.ch

46

OSR Label is a Swiss non-profit organization focused on promoting social responsibility and ethical business practices through its certification label. The website serves as an informational and promotional platform for the OSR Label, targeting businesses and organizations interested in demonstrating their commitment to social responsibility. The site uses modern frontend technologies such as UIkit and jQuery and integrates Google Analytics for visitor tracking. While the website is professionally designed with good navigation and mobile optimization, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security-wise, the site uses HTTPS and a cookie consent mechanism but does not display advanced security headers or incident response information. Overall, the site is legitimate, well-branded, and serves its niche effectively but could improve in privacy and security transparency.

D

Druckerei Horisberger AG

druckerei-horisberger.ch

54

Druckerei Horisberger AG is a well-established Swiss printing company specializing in traditional and digital print media, marketing instruments, and packaging solutions. As part of the Schellenberg Gruppe, it benefits from a strong corporate network and offers comprehensive services including consulting, publishing, lettershop, offset and digital printing, finishing, logistics, and sustainability initiatives. The company targets business clients seeking high-quality print and marketing solutions and holds a strong market position as the largest family-owned printing company in its region with over 60 years of experience. Technically, the website is built on modern frameworks such as Vue.js and UKit, with a Cockpit CMS backend. It demonstrates good mobile optimization, moderate performance, and basic accessibility features. The site uses HTTPS with strong SSL configuration and includes security headers, reflecting a solid security posture. However, it lacks visible cookie consent mechanisms and explicit privacy or security policies, which are areas for improvement. Security-wise, the site shows good practices with no visible vulnerabilities or exposed sensitive data. Certifications like ISO 9001 and ISO 14001 reinforce trust and commitment to quality and environmental management. The absence of incident response contacts and vulnerability disclosure policies suggests room to enhance security transparency and readiness. Overall, Druckerei Horisberger AG presents a professional, trustworthy, and content-rich online presence aligned with its business stature. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing GDPR compliance to further strengthen privacy and security posture.

H

Hess Druck AG

hessdruck.ch

47

Hess Druck AG is a well-established Swiss printing company founded in 1956, specializing in a broad range of printing and document management services. As part of the Schellenberg Gruppe, it benefits from a strong corporate network and offers comprehensive solutions including consulting, prepress, printing, finishing, mailing, and logistics. The company emphasizes sustainability and quality, holding multiple certifications such as ISO 14001 and FSC. Technically, the website employs modern frameworks like Vue.js and UKit, with Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS and secure forms, though explicit security headers and privacy policies are lacking. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional, user-friendly, and trustworthy, though improvements in privacy compliance and security transparency are recommended.