Switzerland security reports

Ecocardprint is a Swiss-based company specializing in eco-responsible printing solutions, focusing on sustainable business cards made from FSC® certified wood, biodegradable PET, and recycled cardboard. The company targets environmentally conscious businesses across sectors such as hospitality, retail, watchmaking, tourism, and health insurance. As a member of the Schellenberg Group, Ecocardprint benefits from a network of related companies enhancing its market position. The website is built on WordPress with the Divi theme and includes modern plugins for SEO and user experience. While the site is well-designed and mobile-optimized, it lacks explicit privacy and cookie policies, which may impact compliance with GDPR and other regulations. Security posture is moderate with HTTPS enforced but missing some security headers and incomplete reCAPTCHA configuration. Contact information is clearly presented, including phone, email, physical address, and a contact form. Overall, the site reflects a professional and trustworthy business with room for improvement in privacy compliance and security hardening.

Dresch Sàrl is a Swiss company with a commercial website primarily in French, offering products and contact options via phone and email. The website is built on WordPress using the Divi theme and integrates Matomo analytics for user tracking. However, the site currently displays a 404 error page, indicating missing or inaccessible content, which negatively impacts user experience and trust. Contact information is clearly provided, but critical compliance documents such as privacy and cookie policies are absent. The technical infrastructure is modern but lacks some security best practices such as security headers and properly configured reCAPTCHA. Overall, the website demonstrates moderate technical maturity but requires significant improvements in content availability, security posture, and privacy compliance to enhance credibility and user trust.

S

Schellenberg Druck AG

schellenbergdruck.ch

50

Schellenberg Druck AG is a well-established Swiss family-owned printing company with over 60 years of experience, specializing in traditional and digital print media solutions. As part of the Schellenberg Gruppe, it holds a strong market position in the Zurich Oberland region, offering comprehensive services from consulting and publishing to production, finishing, and logistics. The company targets businesses and organizations seeking high-quality print and marketing instruments, emphasizing in-house production for quality assurance and efficiency. Technically, the website leverages modern web technologies including Vue.js, UIkit, and Matomo analytics, supported by a Cockpit CMS backend. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and privacy compliance could be made. The infrastructure supports secure HTTPS connections with appropriate security headers, reflecting a mature security posture. Security-wise, the site demonstrates good practices such as HTTPS enforcement and security headers, but lacks visible cookie consent mechanisms and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and the domain registration details align well with the business claims, supporting legitimacy. Overall, the website presents a professional and trustworthy digital presence with room for enhanced privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and enhancing accessibility to further strengthen trust and compliance.

S

Sailer Druck Medien GmbH

sailerdruck.ch

50

Sailer Druck Medien GmbH is a well-established Swiss print media company specializing in business printing solutions, including consulting, design, production, publishing, and logistics. As part of the Schellenberg Gruppe, it benefits from a strong corporate network and over 100 years of experience, positioning itself as a trusted provider in the print media sector. The company offers a broad range of services from conception to delivery, emphasizing quality, sustainability, and social responsibility. Technically, the website uses modern frameworks such as Vue.js and UKit, with privacy-conscious analytics via Matomo. Security posture is good with HTTPS and some security headers, but lacks explicit security and privacy policies. Contact information is clearly provided, including email, phone, and physical addresses, along with social media presence on LinkedIn, Facebook, and Instagram.

B

Brüggli Admedia

brueggli-medien.ch

53

Brüggli Admedia is a small regional media and printing agency based in Eastern Switzerland, offering integrated services including web development, printing, digital products, and communication solutions. The company emphasizes sustainability and social responsibility, serving a diverse clientele including reputable Swiss companies. Their website reflects a professional and consistent brand image with clear contact information and client references. Technically, the site uses modern frontend technologies such as Alpine.js and Tailwind CSS, with cookie consent managed by CookieYes and analytics via Matomo and Google Analytics. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website is well-structured, accessible, and compliant with GDPR requirements, providing a trustworthy digital presence for the business.

P

PMC Print Media Corporation AG

pmcoetwil.ch

51

PMC Print Media Corporation AG is a well-established Swiss print media company specializing in a wide range of printing and publishing services. As part of the Schellenberg Gruppe, it benefits from a strong group affiliation and offers services including consultation, design, roller and sheet-fed offset printing, digital printing, finishing, packaging, logistics, and publishing. The company targets business clients seeking high-quality print media solutions. Technically, the website employs modern frameworks such as Vue.js and UKit, uses Matomo for analytics, and is powered by Cockpit CMS. The site is well-designed, mobile-optimized, and provides comprehensive content and contact information. Security posture is strong with HTTPS and security best practices in place, though privacy compliance could be improved with explicit cookie consent and a dedicated privacy policy page. Overall, the website and business present a professional and trustworthy image with clear market positioning in the Swiss media sector.

S

ST Print AG

stprint.ch

43

ST Print AG is a Swiss-based company specializing in the design and production of personalized promotional and merchandising products. As part of the Schellenberg Gruppe, a well-established family-owned group with over 60 years of sustainable business practices, ST Print AG offers a broad range of services including consulting, publishing, digital printing, personalization, logistics, and retail. The company targets both business and private customers seeking customized merchandise solutions. The website reflects a professional and consistent brand image with clear contact information and integration into a larger corporate group. Technically, the website employs modern web technologies such as Vue.js, UKit, and Matomo analytics, hosted likely within the Schellenberg Gruppe infrastructure. The site is mobile-optimized and performs moderately well, though accessibility and SEO could be improved. Security posture is good with HTTPS enforced and some security headers implied, but lacks explicit privacy and cookie policies, as well as incident response contacts. Overall, the security posture is solid but could benefit from enhanced transparency and compliance documentation. The absence of privacy and cookie policies is a notable gap in GDPR compliance. The domain registration is consistent with the business claims, showing legitimacy and transparency. No WAF or blocking mechanisms were detected, allowing full content access. Strategic recommendations include publishing comprehensive privacy and cookie policies, implementing a security.txt file, enhancing accessibility, and improving security headers to strengthen trust and compliance.

S

Schwegler Druck und Medien AG

schwegler.com

48

Schwegler Druck und Medien AG is a Swiss-based medium-sized printing and media company specializing in personalized large-format advertising materials. With over 40 years of experience and as part of the Schellenberg Gruppe, it offers a comprehensive range of services from consultation, design, digital and specialty printing, to finishing and logistics. The company targets businesses and organizations seeking customized advertising solutions with a focus on quality and sustainability. Technically, the website employs modern frontend technologies such as Vue.js and UKit, backed by a Cockpit CMS. It uses Matomo analytics for privacy-conscious user tracking and is hosted under a reputable registrar. The site is mobile-optimized and well-structured, providing a good user experience. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and some security headers. There is no cookie consent mechanism or published security policy, which are areas for improvement. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a professional and trustworthy digital presence with minor gaps in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen its security posture and regulatory adherence.

O

Oscards AG

oscards.ch

50

Oscards AG is a Swiss-based company specializing in innovative card solutions including physical and virtual cards for cashless payments, loyalty programs, gift vouchers, and security IDs. As part of the Schellenberg Gruppe, it benefits from a strong group presence and offers comprehensive services from design to logistics. The website demonstrates a mature digital infrastructure using modern technologies such as Vue.js and Matomo analytics, with good mobile optimization and user experience. Security posture is solid with HTTPS and some security headers, though there is room for improvement in privacy compliance and published security policies. Overall, the company presents a trustworthy and professional image with clear contact information and certifications. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing GDPR compliance.

S

Schellenberg Gruppe AG

pro-sales.ch

53

Schellenberg Gruppe AG is a well-established Swiss family-owned company specializing in traditional and digital communication solutions, including printing, crossmedia, security printing, and merchandising. The company holds a strong market position as a leading provider in the Swiss graphic industry, supported by multiple subsidiaries and a broad service portfolio. Their website reflects a professional and comprehensive presentation of their services, targeting business clients seeking high-quality printing and media solutions. Technically, the website employs modern web technologies such as Vue.js, UKit, and Matomo analytics, and is powered by Cockpit CMS. The site is mobile-optimized and provides a good user experience, although some improvements in accessibility and SEO could be made. Security-wise, the website uses HTTPS with good SSL configuration and some security best practices, but lacks explicit security headers and a vulnerability disclosure policy. Privacy compliance is limited due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy and professional, with clear contact information and certifications displayed.

S

Schellenberg Gruppe AG

schellenberggruppe.ch

53

Schellenberg Gruppe AG is a Swiss-based printing and media company offering a wide range of services including offset printing, finishing, security printing, crossmedia solutions, and merchandise. The company targets business clients requiring flexible and efficient print media solutions, positioning itself as a well-established regional player with diversified competencies. The website reflects a professional and comprehensive presentation of services and team members, supporting a strong market presence. Technically, the website employs modern web technologies such as Vue.js, UKit, and integrates Matomo analytics and YouTube video content. The site is mobile-optimized with good performance and accessibility features, though some SEO and accessibility aspects could be improved. The use of Cockpit CMS indicates a custom content management approach. From a security perspective, the site uses HTTPS with good SSL configuration and some security headers, but lacks explicit security policies, incident response information, and a vulnerability disclosure mechanism. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency to reduce risk and improve user trust.

L

LEN - European Aquatics

europeanaquatics.org

51

European Aquatics (LEN) is the official governing body for aquatic sports in Europe, managing disciplines such as swimming, diving, water polo, artistic swimming, open water swimming, and masters. The organization provides comprehensive event calendars, news updates, rules, and development programs to support aquatic sports across Europe. The website serves as a central hub for athletes, federations, and fans, offering structured information and media content. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and optimized for mobile devices. It integrates Google Analytics for user tracking and complies with GDPR through clear privacy and cookie policies. Security posture is solid with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and additional security headers could be added. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's authoritative position in European aquatic sports.

E

ewz - Elektrizitätswerk der Stadt Zürich

ewz.ch

66

ewz - Elektrizitätswerk der Stadt Zürich is a leading energy and telecommunications service provider based in Switzerland, focusing on renewable energy production and intelligent supply systems. The company offers a broad range of services including electricity supply, solar panels, electromobility solutions, district heating, and fibre optic network connectivity, targeting both private and business customers. The website reflects a strong market position with comprehensive service offerings and sustainability commitments. Technically, the website is built on Adobe Experience Manager with modern web components and integrates Adobe Launch for analytics and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, multiple security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for user experience and mobile devices.

V

Volg Konsumwaren AG

volg.ch

51

Volg Konsumwaren AG operates a well-established Swiss retail grocery chain focused on local convenience stores, offering a broad range of products, online shopping, and community engagement through recipes and magazines. The website reflects a mature digital presence with multilingual support and integration of modern web technologies such as TYPO3 CMS, Google Maps API, and Google Tag Manager. The security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting Volg's strong market position in Switzerland.

T

Triulzi AG

triulzi.ch

59

Triulzi AG is a well-established electrical engineering company operating primarily in the Oberengadin and Albula regions of Switzerland. As a member of the Burkhalter Gruppe, it benefits from access to advanced technologies and a broad service portfolio including installations, automation, telematics, and maintenance. The company positions itself as a leading regional provider with a strong focus on building technology and electrical services. The website reflects a professional and consistent brand image, targeting regional customers and potential apprentices interested in electrical trades. Technically, the site is built on TYPO3 CMS, integrates Google services for analytics and maps, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and controlled script loading, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, well-structured, and provides comprehensive contact information across multiple locations.

F

Florinett AG

florinett-holz.ch

43

Florinett AG is a small Swiss company specializing in forestry services and mountain wood products in the Graubünden region. Their website presents a professional image with clear descriptions of their forestry work, timber trade, specialized woodworking, and instrument wood offerings. The company positions itself as a regional expert with a focus on quality and efficiency through skilled staff and mechanization. Technically, the website uses a moderate technology stack including jQuery, Google Analytics, and Fancybox, with basic mobile optimization and SEO practices. Security posture is moderate; HTTPS is assumed but no security headers or explicit security policies are published. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is not explicitly provided on the homepage, which may impact user trust and compliance. Overall, the website is safe, professional, and trustworthy but could improve in security and privacy transparency.

Biobergün is a small organic farm business located in Bergün, Switzerland, offering bio farm products, holiday apartment rentals, event and catering services, and a small cheese dairy. The website reflects a local, family-run business with a strong emphasis on organic and sustainable farming practices. The business holds a notable local certification, the BioGrischunpreis 2024, enhancing its credibility in the organic sector. Technically, the website uses a mix of legacy and modern web technologies, including jQuery 1.12.4 and CreateJS, and is built on the Contao CMS platform. While the site is functional and moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and incident response information. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though it could benefit from modernizing some technical components and enhancing security practices.

A

ARO Treuhand GmbH

aro-treuhand.ch

50

ARO Treuhand GmbH is a Swiss fiduciary services company providing comprehensive accounting, tax, payroll, and business consulting services primarily to small and medium-sized enterprises across Switzerland. The company emphasizes a constructive and transparent partnership with clients, leveraging modern technologies and automated processes to deliver efficient and reliable solutions. Their market position is that of a trusted regional player with a focus on personalized service and professional expertise. Technically, the website is built on WordPress using the Themify Ultra theme and several professional plugins including Builder Slider Pro, Contact Form 7, and Complianz GDPR for cookie management. The site is well-optimized for mobile devices and includes modern security features such as HTTPS and Google reCAPTCHA v3 on forms. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks some advanced security headers and a dedicated security policy or vulnerability disclosure page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence with good compliance and security posture. Strategic improvements could include adding security headers, publishing a security policy, and implementing a security.txt file to further enhance transparency and security readiness.

A

Allegra Passugger Mineralquellen AG

passugger.ch

63

Allegra Passugger Mineralquellen AG is a well-established Swiss mineral water producer, operating since 1896. The company positions itself as an independent and traditional mineral water brand from Graubünden, emphasizing natural purity, sustainability, and strong partner relationships. Their product portfolio includes private label offerings and special editions such as the Crystal Edition. The website reflects a mature digital presence built on WordPress with modern technologies like Bootstrap and jQuery, enhanced by SEO tools such as Yoast. It features a cookie consent mechanism compliant with GDPR, and clear contact information, supporting transparency and user trust. Security posture is solid with HTTPS and cookie consent, though lacking explicit security policies or incident response contacts. Overall, the site is professional, user-friendly, and trustworthy, with moderate tracking via Google Analytics and no suspicious content or blocking mechanisms detected.

V

Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB)

alb-berguen.ch

52

The website represents the Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB), a small non-profit association founded in 2015 in Switzerland. It advocates for the interests of second-home owners and long-term tenants in the Bergün-Filisur region, fostering collaboration between local residents and external property owners. The site provides organizational information, event announcements, and contact details, targeting property owners and local stakeholders. Technically, the site is built on Drupal 10 with modern web technologies and includes Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, offering a good user experience. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is legitimate, trustworthy, and safe for general audiences.

G

Graubündner Kantonalbank

gkb.ch

69

Graubündner Kantonalbank is a well-established regional cantonal bank in Switzerland, offering a broad range of financial services including retail banking, private banking, mortgages, and digital banking solutions. The bank holds a strong market position in the Graubünden region, supported by a state guarantee and a history dating back to 1870. The website reflects a mature digital presence with comprehensive service information and customer engagement channels.

A

Anny Casty-Sprecher Stiftung

acs-stiftung.ch

54

The Anny Casty-Sprecher Stiftung is a Swiss non-profit cultural foundation established in 1992, dedicated to promoting cultural and artistic activities in the Prättigau region. The website reflects a focused mission on cultural support and awards, targeting local artists and cultural enthusiasts. The site is professionally designed with responsive features and clear navigation, though it lacks some modern compliance elements such as cookie consent and detailed security policies. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with some third-party libraries like Flickity for UI components. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the website is legitimate, consistent with its WHOIS registration, and presents a trustworthy image for a small regional foundation.

C

Canton of Graubünden

gr.ch

58

The website www.gr.ch is the official online portal for the Canton of Graubünden, Switzerland, serving as a multilingual government platform providing information on politics, public services, and administration. It targets residents and visitors of the canton, offering diverse content in German, Romansh, and Italian. The site reflects a medium-sized government entity with a consistent and professional brand presence. Technically, the site employs modern web technologies including Font Awesome 6 Pro icons and JavaScript analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

W

Walservereinigung Graubünden

walserverein-gr.ch

58

Walservereinigung Graubünden is a well-established non-profit cultural association founded in 1960, dedicated to preserving and promoting the Walser language and alpine culture in the Graubünden region of Switzerland. The organization serves a membership base of approximately 2000 individuals and several municipalities, offering cultural events, publications, and a dedicated online shop. The website reflects a consistent brand identity and provides clear contact information and social media presence, supporting community engagement and cultural education. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries for interactive features and responsive design, ensuring a good user experience across devices. Security posture is adequate with HTTPS enforced and secure login forms, but lacks explicit cookie consent and security headers, which are recommended for compliance and enhanced protection. Overall, the domain registration and WHOIS data align well with the organization's claims, indicating legitimacy and trustworthiness.

L

Lia Rumantscha

liarumantscha.ch

52

Lia Rumantscha is a well-established Swiss public institution dedicated to the promotion and preservation of the Rumantsch language and culture. Founded in 1919, it offers a variety of services including language courses, cultural projects, financial support for initiatives, and translation services. The website reflects a strong cultural mission with clear communication and engagement with its target audience, including families, youth, and the Rumantsch-speaking community. Technically, the site is built on Drupal CMS with modern libraries such as Bootstrap and Swiper.js, and it employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

I

Institut für Kulturforschung Graubünden

kulturforschung.ch

62

The Institut für Kulturforschung Graubünden (ikg) is an independent research institution based in Chur, Switzerland, focusing on humanities, social sciences, and cultural studies related to the Alpine region, especially Graubünden. The website serves as a platform for disseminating research projects, publications, events, and membership information, targeting academics, researchers, and culturally interested audiences. The business model revolves around research, publication, and community engagement through events and memberships. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Google Tag Manager, Typekit fonts, and Swiper.js for interactive content sliders. The site is mobile-optimized, accessible, and SEO-friendly, though it lacks some advanced security headers. Performance is moderate, with a professional and consistent design. From a security perspective, the site uses HTTPS with good SSL configuration and respects user privacy with cookie consent mechanisms. However, it lacks explicit security headers and does not provide a public incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR principles. It effectively supports the institute's mission and audience engagement. Strategic improvements in security headers and transparency around incident response could further enhance its security posture and user trust.

The Bibliotheksverbund Graubünden website serves as a centralized catalog portal for 37 school and community libraries within the canton of Graubünden, Switzerland. It provides users with the ability to search media collections, make reservations, and renew loans. The site supports multiple regional languages (German, Italian, Romansh) reflecting its target audience. The business model is a public service facilitating shared library resources, positioning it as a key regional educational infrastructure.

BergBuchBrig is a Swiss-based multimedia festival focused on nature, culture, leisure, and mountain adventures. Established in 2006, it has grown into a recognized cultural event with a diverse program including book presentations, exhibitions, film screenings, concerts, and excursions. The website serves as an information portal for the festival, providing event dates, program details, and organizational information. The target audience includes culture and nature enthusiasts primarily in Switzerland and neighboring regions. Technically, the website is built on WordPress using a professional theme and plugins such as Essential Grid and All in One SEO Pro, indicating a moderate level of digital maturity. The site is mobile-optimized and includes structured data for SEO benefits. However, there is room for improvement in performance optimization and accessibility. From a security perspective, the site uses HTTPS and employs some email cloaking to protect contact information. However, it lacks visible security headers and formal security policies such as a security.txt or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies, which could pose regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

A

Alpines Museum der Schweiz

alpinesmuseum.ch

54

ALPS Alpines Museum der Schweiz is a recently established (2023) cultural institution focused on alpine themes, including human interaction with mountains, environment, and culture. It operates as a non-profit museum located in Bern, Switzerland, and offers exhibitions, events, educational programs, and a restaurant. The museum is part of the Museumsquartier Bern, enhancing its cultural significance and partnerships. The website is professionally designed with good content quality, clear navigation, and multilingual support, targeting a broad audience interested in alpine culture and environment. Technically, the website uses modern web technologies including Google Tag Manager, reCAPTCHA v3 for form security, and is likely built on Craft CMS. Hosting is provided by Hostpoint AG, a reputable Swiss hosting provider. The site is mobile optimized and performs moderately well. SEO and accessibility are adequately addressed, though some improvements could be made. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, DNSSEC is not enabled and no explicit security headers were detected, which are areas for improvement. Privacy and cookie policies are present and GDPR compliance is indicated, but no detailed security or incident response policies are published. WHOIS data is consistent with the museum's identity, with privacy protection justified for this type of entity. Overall, the website presents a trustworthy and professional digital presence for the ALPS museum, with moderate technical maturity and a good security baseline. Strategic enhancements in security headers, DNSSEC, and published policies would further strengthen its posture.

V

Verein Parc Ela

parc-ela.ch

68

Verein Parc Ela operates the Parc Ela nature park located in the heart of Graubünden, Switzerland, uniting the three linguistic cultures of Romansh, German, and Italian. The organization focuses on preserving valuable landscapes, promoting cultural heritage, and fostering innovative projects and products through a network of engaged individuals. The website reflects a well-structured, professionally designed platform built on Drupal 10, with good mobile optimization and accessibility features. It employs Google Tag Manager for analytics and tracking, alongside a cookie consent mechanism, indicating a moderate level of privacy compliance. Security posture is strong with HTTPS and inferred security headers, though explicit security policies and incident response information are absent. Overall, the site presents a trustworthy and credible non-profit entity with a clear mission and community focus.

K

Kurhaus Bergün

kurhausberguen.ch

51

Kurhaus Bergün is a small hospitality business located in Switzerland, offering a range of services including hotel rooms, holiday apartments, dining, wellness treatments, and event hosting. The website reflects a well-established regional business with a focus on cultural heritage and sustainable tourism. The digital infrastructure is built on WordPress with WooCommerce, enhanced by SEO and multilingual plugins, indicating a mature and modern online presence. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, and the website maintains a professional and trustworthy appearance.

W

Weisses Kreuz Bergün

weisseskreuz-berguen.ch

64

Weisses Kreuz Bergün is a small hospitality business located in Bergün, Switzerland, offering hotel accommodation and restaurant services primarily targeting tourists and travelers in the region. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript and CSS. The site demonstrates moderate technical maturity with good mobile optimization and basic SEO features. Security posture is solid with HTTPS enforced and standard security headers present, although there is a lack of explicit privacy and cookie policies, as well as incident response information. Overall, the website is professional and trustworthy but could improve in privacy compliance and transparency aspects.

H

Hotel/Restaurant Piz Ela

pizela.ch

46

Hotel/Restaurant Piz Ela is a small hospitality business located in Bergün/Bravuogn, Switzerland, offering hotel accommodations and restaurant/pizzeria services. The website presents a professional and consistent brand image with clear contact information and environmental commitment messaging. The business targets tourists and visitors to the region seeking historic charm and local hospitality. Technically, the site is built on WordPress using the Bridge theme and WPBakery Page Builder, with modern libraries such as jQuery and Google reCAPTCHA integrated for form security. Performance and mobile optimization are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and functional with room for security and compliance enhancements.

G

Gemeinde Surses

surses.ch

54

The website for Gemeinde Surses serves as the official municipal portal providing residents and visitors with comprehensive information about local government services, news, tourism, and public administration. It is well-positioned as a local government authority site in Switzerland, targeting the local community and tourists. The site offers key services such as administrative contacts, news updates, local maps, and tourism information. Technically, the site uses a mix of Google Analytics, Google Maps API, and jQuery 1.12.0, with a custom or proprietary CMS. The site is mobile-optimized and has good SEO practices but could improve accessibility and update some libraries. Security-wise, the site enforces HTTPS and anonymizes IPs in analytics but lacks explicit security headers and incident response information. Overall, the site is trustworthy, professional, and compliant with basic privacy and cookie regulations, suitable for its government function.

G

Gemeinde Lantsch/Lenz Graubünden

lantsch-lenz.ch

50

The website www.lantsch-lenz.ch serves as the official online presence of the Gemeinde Lantsch/Lenz, a political municipality in the Albula region of the canton of Graubünden, Switzerland. It provides comprehensive information and services relevant to local residents and visitors, including municipal news, political governance, administrative services, tourism, and community events. The site is well-branded and structured to serve its target audience effectively. Technically, the website is built on the Joomla CMS platform with the Yootheme theme and utilizes modern web technologies such as jQuery, UIkit, and Font Awesome. It is mobile-optimized and includes accessibility features, providing a good user experience. Google Analytics is used for visitor tracking, indicating moderate user tracking practices. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, it lacks several important security headers and explicit privacy or cookie policies, which are compliance gaps. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. The main areas for improvement include adding privacy and cookie policies to enhance GDPR compliance and implementing additional security headers to strengthen the security posture.

G

Gemeinde Albula/Alvra

albula-alvra.ch

58

The website www.albula-alvra.ch serves as the official online presence of the municipality of Albula/Alvra in Switzerland. It provides residents and visitors with comprehensive information about the community, including local news, events, administrative services, and online service portals. The site targets local citizens and stakeholders interested in municipal affairs and public services. The business model is that of a government entity focused on public administration and community engagement. Technically, the website is built on a CMS platform likely provided by i-web.ch, utilizing modern web technologies such as HTML5, CSS, JavaScript, and responsive design frameworks like Bootstrap. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. It employs HTTPS for secure communication and includes a user consent mechanism for anonymized web analytics. From a security perspective, the site benefits from HTTPS encryption and anonymized data collection with user consent, indicating a privacy-conscious approach. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is a trustworthy and professional municipal portal with a strong focus on user information and service delivery. Strategic recommendations include enhancing security headers, publishing incident response contacts, and formalizing vulnerability disclosure to strengthen security posture and trustworthiness.

B

Bahnmuseum Albula AG

bahnmuseum-albula.ch

69

Bahnmuseum Albula AG operates a specialized railway museum in Bergün/Bravuogn, Switzerland, focusing on the heritage of the Rhätische Bahn. The museum offers exhibitions, special events, a shop, and a buffet, targeting tourists, railway enthusiasts, and local visitors. The website is built on Drupal 10 and integrates modern web technologies such as Vue.js and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and accessible, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and privacy policies are lacking. Contact information is clearly presented, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website reflects a professional and trustworthy institution with room for improvement in privacy and security disclosures.

L

Lesestoff

lesestoff.ch

64

Lesestoff.ch is a Swiss online bookstore offering a wide range of books, eBooks, audiobooks, and related products. It operates both online and through physical stores in multiple Swiss cities, targeting book buyers primarily in Switzerland and German/English speaking customers. The website is professionally designed with good content quality, clear navigation, and multilingual support. The technical infrastructure uses modern JavaScript libraries and APIs, ensuring a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure login forms, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but could improve in privacy and security transparency.

B

Bergün Filisur Tourismus AG

berguen-filisur.ch

69

Bergün Filisur Tourismus AG operates a professional tourism website promoting the Bergün Filisur region in Switzerland. The site offers comprehensive information on local events, accommodation booking, weather, and cultural highlights, targeting tourists, families, and railway enthusiasts. The business is positioned as a regional tourism authority with strong partnerships with local and national organizations. Technically, the website is built on Drupal 10, employs modern web technologies, and integrates analytics tools such as Google Tag Manager and Siteimprove Analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a cookie consent banner and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-maintained, supporting the business's tourism promotion goals effectively.

R

Rhätische Bahn AG

rhb.ch

49

Rhätische Bahn AG is a well-established Swiss railway company specializing in scenic and regional rail travel in the Graubünden region. The company offers a variety of services including ticket sales, panoramic train experiences such as the Bernina and Glacier Express, and leisure travel options. Their website reflects a strong market position with comprehensive content targeting tourists and railway enthusiasts. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and leverages CDN services for performance. The site is mobile-optimized, accessible, and SEO-friendly. Security-wise, the website enforces HTTPS, includes important security headers, and uses consent management tools for privacy compliance. However, explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

G

Graubünden Ferien

graubuenden.ch

69

Graubünden Ferien operates a professional and comprehensive tourism website promoting the Graubünden region in Switzerland. The site targets tourists and travelers interested in nature, outdoor activities, accommodation, and cultural experiences. The business is positioned as a regional tourism authority with a medium-sized presence. Technically, the website is built on Drupal 10, uses modern analytics and tag management tools, and is well optimized for mobile and accessibility. Security posture is strong with HTTPS and security headers in place, though explicit privacy and terms policies are missing. Overall, the site is trustworthy and professional but could improve transparency on privacy and contact information.

C

Cornèr Banca SA

corner.ch

73

Cornèr Banca SA is a well-established Swiss private banking group with a history dating back to 1952. The company offers a comprehensive suite of financial services including private banking, loans, structured products, and digital banking solutions. Their market position is strong, supported by industry recognition such as ranking second in Switzerland for capital strength by The Banker TOP 1000 World Banks 2025. The website targets private clients, financial intermediaries, and institutional clients, emphasizing personalized portfolio management and investment advisory services. Technically, the website is built on OpenCms with modern JavaScript libraries like jQuery and Swiper, integrated with Adobe DTM for analytics and Google reCAPTCHA for security. The site is mobile optimized and SEO friendly, with a professional design and clear navigation.

S

Swiss Ski School

swiss-ski-school.ch

49

Swiss Ski School is a Swiss-based service provider specializing in ski and snow sports instruction across multiple disciplines and age groups. The website presents a comprehensive offering of winter and summer activities, targeting a broad audience from beginners to experts, including people with disabilities. The business appears to be well-positioned nationally within Switzerland, leveraging a multi-language platform to serve diverse customers. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager and Leaflet.js for maps. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is professional and trustworthy, with room for improvement in privacy and security transparency.

Bergfahrt Festival is a small non-profit cultural festival focused on alpine culture in Switzerland, held in the village of Bergün/Bravuogn. The website provides comprehensive information about the festival's history, team, partners, and practical visitor information. The festival emphasizes intimate cultural experiences and community engagement. Technically, the website uses modern JavaScript libraries and fonts, with Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enabled and secure form submission, but lacks visible security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy PDF but no cookie banner or terms of service. Contact information is clearly provided including email, phone, and social media links. Overall, the site is professional, trustworthy, and well-branded, serving its niche audience effectively.

W

WSL Institute for Snow and Avalanche Research SLF

slf.ch

62

The WSL Institute for Snow and Avalanche Research SLF is a Swiss federal research institute specializing in snow, avalanches, alpine natural hazards, permafrost, and mountain ecosystems. It operates under the Swiss Federal Research Institute WSL and the ETH Domain, providing scientific research and public services such as the avalanche bulletin. The website reflects a well-established government entity with a clear focus on research and public safety. Technically, the site uses TYPO3 CMS and integrates Matomo analytics, indicating a moderate level of digital maturity with good mobile optimization and accessibility. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and serves a general audience interested in alpine environmental research and safety.

L

La Maison des Alpes – La Nature du Val d'Hérens

lamaisondesalpes.ch

49

La Maison des Alpes website serves as an informational and promotional platform focused on the natural and cultural heritage of the Val d'Hérens region in Switzerland. The site targets visitors and locals interested in regional nature and culture, providing content primarily in French. The business model appears to be centered on regional tourism promotion without direct e-commerce or transactional services. Technically, the site is built on WordPress using the Divi theme, leveraging standard web technologies such as JavaScript and Google Fonts. The site is mobile optimized and performs moderately well, though accessibility and SEO features are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is minimal with no visible privacy or cookie policies, which is a compliance risk. Overall, the site is functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

C

Cornèr Bank Ltd.

cornercard.ch

73

Cornèrcard is a Swiss financial services provider specializing in Visa and Mastercard credit cards, prepaid cards, and related financial products. The company targets private and business clients in Switzerland, offering a variety of card options including cashback, travel, and social cause cards. Cornèrcard is part of the Cornèr Group, a reputable financial group in Switzerland, and enjoys strong market positioning supported by customer satisfaction awards and recognitions. The website provides comprehensive information about products, services, and customer support, including a dedicated mobile app for card management.

S

SAC-Shop

sac-cas-shop.ch

65

SAC-Shop is an e-commerce platform primarily serving members of the Swiss Alpine Club and outdoor enthusiasts in Switzerland. The website offers retail and wholesale outdoor products, leveraging Shopify's platform and apps to provide a tailored shopping experience. The business targets a niche market with specialized pricing for SAC members, positioning itself as a trusted supplier within this community. Technically, the site is built on Shopify with a modern theme and integrates multiple third-party apps for wholesale pricing and access control. The infrastructure is robust, hosted on Shopify's CDN with HTTPS and security headers properly configured, ensuring a secure shopping environment. However, the site lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is strong with no evident vulnerabilities, but incident response and security policy disclosures are absent. Overall, the site is professional and functional but could improve in privacy compliance and transparency to enhance trust and regulatory adherence.

L

LEN - European Aquatics

len.eu

51

European Aquatics (LEN) is the official governing body for aquatic sports in Europe, overseeing disciplines such as swimming, diving, water polo, artistic swimming, open water swimming, and masters competitions. The organization provides governance, event management, development programs, and promotes integrity and ethics within the sport. Their website serves as a central hub for news, event calendars, rules, and organizational information targeting athletes, federations, and aquatic sports enthusiasts across Europe. Technically, the website is built on a modern WordPress CMS platform using Elementor page builder and several performance and SEO optimization plugins. It is hosted likely on SiteGround infrastructure, employs HTTPS with a strong SSL configuration, and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. From a security perspective, the site enforces HTTPS, uses domain transfer and update prohibitions, and implements a cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, representing a minor security gap. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and accessible. Overall, the website demonstrates a solid security posture, good privacy compliance, and professional business credibility. Recommendations include enabling DNSSEC, adding additional security headers, and continuous monitoring of plugins for vulnerabilities to maintain and improve security and trust.