Switzerland security reports

V

Volg Konsumwaren AG

volg.ch

51

Volg Konsumwaren AG operates a well-established Swiss retail grocery chain focused on local convenience stores, offering a broad range of products, online shopping, and community engagement through recipes and magazines. The website reflects a mature digital presence with multilingual support and integration of modern web technologies such as TYPO3 CMS, Google Maps API, and Google Tag Manager. The security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting Volg's strong market position in Switzerland.

T

Triulzi AG

triulzi.ch

59

Triulzi AG is a well-established electrical engineering company operating primarily in the Oberengadin and Albula regions of Switzerland. As a member of the Burkhalter Gruppe, it benefits from access to advanced technologies and a broad service portfolio including installations, automation, telematics, and maintenance. The company positions itself as a leading regional provider with a strong focus on building technology and electrical services. The website reflects a professional and consistent brand image, targeting regional customers and potential apprentices interested in electrical trades. Technically, the site is built on TYPO3 CMS, integrates Google services for analytics and maps, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS, reCAPTCHA, and controlled script loading, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is trustworthy, well-structured, and provides comprehensive contact information across multiple locations.

F

Florinett AG

florinett-holz.ch

43

Florinett AG is a small Swiss company specializing in forestry services and mountain wood products in the Graubünden region. Their website presents a professional image with clear descriptions of their forestry work, timber trade, specialized woodworking, and instrument wood offerings. The company positions itself as a regional expert with a focus on quality and efficiency through skilled staff and mechanization. Technically, the website uses a moderate technology stack including jQuery, Google Analytics, and Fancybox, with basic mobile optimization and SEO practices. Security posture is moderate; HTTPS is assumed but no security headers or explicit security policies are published. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Contact information is not explicitly provided on the homepage, which may impact user trust and compliance. Overall, the website is safe, professional, and trustworthy but could improve in security and privacy transparency.

Biobergün is a small organic farm business located in Bergün, Switzerland, offering bio farm products, holiday apartment rentals, event and catering services, and a small cheese dairy. The website reflects a local, family-run business with a strong emphasis on organic and sustainable farming practices. The business holds a notable local certification, the BioGrischunpreis 2024, enhancing its credibility in the organic sector. Technically, the website uses a mix of legacy and modern web technologies, including jQuery 1.12.4 and CreateJS, and is built on the Contao CMS platform. While the site is functional and moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and incident response information. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though it could benefit from modernizing some technical components and enhancing security practices.

A

ARO Treuhand GmbH

aro-treuhand.ch

50

ARO Treuhand GmbH is a Swiss fiduciary services company providing comprehensive accounting, tax, payroll, and business consulting services primarily to small and medium-sized enterprises across Switzerland. The company emphasizes a constructive and transparent partnership with clients, leveraging modern technologies and automated processes to deliver efficient and reliable solutions. Their market position is that of a trusted regional player with a focus on personalized service and professional expertise. Technically, the website is built on WordPress using the Themify Ultra theme and several professional plugins including Builder Slider Pro, Contact Form 7, and Complianz GDPR for cookie management. The site is well-optimized for mobile devices and includes modern security features such as HTTPS and Google reCAPTCHA v3 on forms. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks some advanced security headers and a dedicated security policy or vulnerability disclosure page. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence with good compliance and security posture. Strategic improvements could include adding security headers, publishing a security policy, and implementing a security.txt file to further enhance transparency and security readiness.

A

Allegra Passugger Mineralquellen AG

passugger.ch

63

Allegra Passugger Mineralquellen AG is a well-established Swiss mineral water producer, operating since 1896. The company positions itself as an independent and traditional mineral water brand from Graubünden, emphasizing natural purity, sustainability, and strong partner relationships. Their product portfolio includes private label offerings and special editions such as the Crystal Edition. The website reflects a mature digital presence built on WordPress with modern technologies like Bootstrap and jQuery, enhanced by SEO tools such as Yoast. It features a cookie consent mechanism compliant with GDPR, and clear contact information, supporting transparency and user trust. Security posture is solid with HTTPS and cookie consent, though lacking explicit security policies or incident response contacts. Overall, the site is professional, user-friendly, and trustworthy, with moderate tracking via Google Analytics and no suspicious content or blocking mechanisms detected.

V

Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB)

alb-berguen.ch

52

The website represents the Verein Auswärtige Liegenschaftsbesitzer Bergün Filisur (ALB), a small non-profit association founded in 2015 in Switzerland. It advocates for the interests of second-home owners and long-term tenants in the Bergün-Filisur region, fostering collaboration between local residents and external property owners. The site provides organizational information, event announcements, and contact details, targeting property owners and local stakeholders. Technically, the site is built on Drupal 10 with modern web technologies and includes Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, offering a good user experience. Security posture is adequate with HTTPS enforced but lacks security headers and formal privacy or cookie policies, indicating room for compliance improvement. Overall, the site is legitimate, trustworthy, and safe for general audiences.

G

Graubündner Kantonalbank

gkb.ch

69

Graubündner Kantonalbank is a well-established regional cantonal bank in Switzerland, offering a broad range of financial services including retail banking, private banking, mortgages, and digital banking solutions. The bank holds a strong market position in the Graubünden region, supported by a state guarantee and a history dating back to 1870. The website reflects a mature digital presence with comprehensive service information and customer engagement channels.

A

Anny Casty-Sprecher Stiftung

acs-stiftung.ch

54

The Anny Casty-Sprecher Stiftung is a Swiss non-profit cultural foundation established in 1992, dedicated to promoting cultural and artistic activities in the Prättigau region. The website reflects a focused mission on cultural support and awards, targeting local artists and cultural enthusiasts. The site is professionally designed with responsive features and clear navigation, though it lacks some modern compliance elements such as cookie consent and detailed security policies. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with some third-party libraries like Flickity for UI components. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and incident response information. Overall, the website is legitimate, consistent with its WHOIS registration, and presents a trustworthy image for a small regional foundation.

C

Canton of Graubünden

gr.ch

58

The website www.gr.ch is the official online portal for the Canton of Graubünden, Switzerland, serving as a multilingual government platform providing information on politics, public services, and administration. It targets residents and visitors of the canton, offering diverse content in German, Romansh, and Italian. The site reflects a medium-sized government entity with a consistent and professional brand presence. Technically, the site employs modern web technologies including Font Awesome 6 Pro icons and JavaScript analytics, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the site is trustworthy and safe, with no adult or questionable content detected.

W

Walservereinigung Graubünden

walserverein-gr.ch

58

Walservereinigung Graubünden is a well-established non-profit cultural association founded in 1960, dedicated to preserving and promoting the Walser language and alpine culture in the Graubünden region of Switzerland. The organization serves a membership base of approximately 2000 individuals and several municipalities, offering cultural events, publications, and a dedicated online shop. The website reflects a consistent brand identity and provides clear contact information and social media presence, supporting community engagement and cultural education. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries for interactive features and responsive design, ensuring a good user experience across devices. Security posture is adequate with HTTPS enforced and secure login forms, but lacks explicit cookie consent and security headers, which are recommended for compliance and enhanced protection. Overall, the domain registration and WHOIS data align well with the organization's claims, indicating legitimacy and trustworthiness.

L

Lia Rumantscha

liarumantscha.ch

52

Lia Rumantscha is a well-established Swiss public institution dedicated to the promotion and preservation of the Rumantsch language and culture. Founded in 1919, it offers a variety of services including language courses, cultural projects, financial support for initiatives, and translation services. The website reflects a strong cultural mission with clear communication and engagement with its target audience, including families, youth, and the Rumantsch-speaking community. Technically, the site is built on Drupal CMS with modern libraries such as Bootstrap and Swiper.js, and it employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

I

Institut für Kulturforschung Graubünden

kulturforschung.ch

62

The Institut für Kulturforschung Graubünden (ikg) is an independent research institution based in Chur, Switzerland, focusing on humanities, social sciences, and cultural studies related to the Alpine region, especially Graubünden. The website serves as a platform for disseminating research projects, publications, events, and membership information, targeting academics, researchers, and culturally interested audiences. The business model revolves around research, publication, and community engagement through events and memberships. Technically, the website employs modern web technologies including Google Analytics with IP anonymization, Google Tag Manager, Typekit fonts, and Swiper.js for interactive content sliders. The site is mobile-optimized, accessible, and SEO-friendly, though it lacks some advanced security headers. Performance is moderate, with a professional and consistent design. From a security perspective, the site uses HTTPS with good SSL configuration and respects user privacy with cookie consent mechanisms. However, it lacks explicit security headers and does not provide a public incident response or vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR principles. It effectively supports the institute's mission and audience engagement. Strategic improvements in security headers and transparency around incident response could further enhance its security posture and user trust.

The Bibliotheksverbund Graubünden website serves as a centralized catalog portal for 37 school and community libraries within the canton of Graubünden, Switzerland. It provides users with the ability to search media collections, make reservations, and renew loans. The site supports multiple regional languages (German, Italian, Romansh) reflecting its target audience. The business model is a public service facilitating shared library resources, positioning it as a key regional educational infrastructure.

BergBuchBrig is a Swiss-based multimedia festival focused on nature, culture, leisure, and mountain adventures. Established in 2006, it has grown into a recognized cultural event with a diverse program including book presentations, exhibitions, film screenings, concerts, and excursions. The website serves as an information portal for the festival, providing event dates, program details, and organizational information. The target audience includes culture and nature enthusiasts primarily in Switzerland and neighboring regions. Technically, the website is built on WordPress using a professional theme and plugins such as Essential Grid and All in One SEO Pro, indicating a moderate level of digital maturity. The site is mobile-optimized and includes structured data for SEO benefits. However, there is room for improvement in performance optimization and accessibility. From a security perspective, the site uses HTTPS and employs some email cloaking to protect contact information. However, it lacks visible security headers and formal security policies such as a security.txt or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies, which could pose regulatory risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user trust.

A

Alpines Museum der Schweiz

alpinesmuseum.ch

54

ALPS Alpines Museum der Schweiz is a recently established (2023) cultural institution focused on alpine themes, including human interaction with mountains, environment, and culture. It operates as a non-profit museum located in Bern, Switzerland, and offers exhibitions, events, educational programs, and a restaurant. The museum is part of the Museumsquartier Bern, enhancing its cultural significance and partnerships. The website is professionally designed with good content quality, clear navigation, and multilingual support, targeting a broad audience interested in alpine culture and environment. Technically, the website uses modern web technologies including Google Tag Manager, reCAPTCHA v3 for form security, and is likely built on Craft CMS. Hosting is provided by Hostpoint AG, a reputable Swiss hosting provider. The site is mobile optimized and performs moderately well. SEO and accessibility are adequately addressed, though some improvements could be made. From a security perspective, the site enforces HTTPS and uses reCAPTCHA to protect forms. However, DNSSEC is not enabled and no explicit security headers were detected, which are areas for improvement. Privacy and cookie policies are present and GDPR compliance is indicated, but no detailed security or incident response policies are published. WHOIS data is consistent with the museum's identity, with privacy protection justified for this type of entity. Overall, the website presents a trustworthy and professional digital presence for the ALPS museum, with moderate technical maturity and a good security baseline. Strategic enhancements in security headers, DNSSEC, and published policies would further strengthen its posture.

V

Verein Parc Ela

parc-ela.ch

68

Verein Parc Ela operates the Parc Ela nature park located in the heart of Graubünden, Switzerland, uniting the three linguistic cultures of Romansh, German, and Italian. The organization focuses on preserving valuable landscapes, promoting cultural heritage, and fostering innovative projects and products through a network of engaged individuals. The website reflects a well-structured, professionally designed platform built on Drupal 10, with good mobile optimization and accessibility features. It employs Google Tag Manager for analytics and tracking, alongside a cookie consent mechanism, indicating a moderate level of privacy compliance. Security posture is strong with HTTPS and inferred security headers, though explicit security policies and incident response information are absent. Overall, the site presents a trustworthy and credible non-profit entity with a clear mission and community focus.

K

Kurhaus Bergün

kurhausberguen.ch

51

Kurhaus Bergün is a small hospitality business located in Switzerland, offering a range of services including hotel rooms, holiday apartments, dining, wellness treatments, and event hosting. The website reflects a well-established regional business with a focus on cultural heritage and sustainable tourism. The digital infrastructure is built on WordPress with WooCommerce, enhanced by SEO and multilingual plugins, indicating a mature and modern online presence. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms in place. No critical vulnerabilities or blocking mechanisms were detected, and the website maintains a professional and trustworthy appearance.

W

Weisses Kreuz Bergün

weisseskreuz-berguen.ch

64

Weisses Kreuz Bergün is a small hospitality business located in Bergün, Switzerland, offering hotel accommodation and restaurant services primarily targeting tourists and travelers in the region. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript and CSS. The site demonstrates moderate technical maturity with good mobile optimization and basic SEO features. Security posture is solid with HTTPS enforced and standard security headers present, although there is a lack of explicit privacy and cookie policies, as well as incident response information. Overall, the website is professional and trustworthy but could improve in privacy compliance and transparency aspects.

H

Hotel/Restaurant Piz Ela

pizela.ch

46

Hotel/Restaurant Piz Ela is a small hospitality business located in Bergün/Bravuogn, Switzerland, offering hotel accommodations and restaurant/pizzeria services. The website presents a professional and consistent brand image with clear contact information and environmental commitment messaging. The business targets tourists and visitors to the region seeking historic charm and local hospitality. Technically, the site is built on WordPress using the Bridge theme and WPBakery Page Builder, with modern libraries such as jQuery and Google reCAPTCHA integrated for form security. Performance and mobile optimization are good, though accessibility and SEO could be improved. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and functional with room for security and compliance enhancements.

G

Gemeinde Surses

surses.ch

54

The website for Gemeinde Surses serves as the official municipal portal providing residents and visitors with comprehensive information about local government services, news, tourism, and public administration. It is well-positioned as a local government authority site in Switzerland, targeting the local community and tourists. The site offers key services such as administrative contacts, news updates, local maps, and tourism information. Technically, the site uses a mix of Google Analytics, Google Maps API, and jQuery 1.12.0, with a custom or proprietary CMS. The site is mobile-optimized and has good SEO practices but could improve accessibility and update some libraries. Security-wise, the site enforces HTTPS and anonymizes IPs in analytics but lacks explicit security headers and incident response information. Overall, the site is trustworthy, professional, and compliant with basic privacy and cookie regulations, suitable for its government function.

G

Gemeinde Lantsch/Lenz Graubünden

lantsch-lenz.ch

50

The website www.lantsch-lenz.ch serves as the official online presence of the Gemeinde Lantsch/Lenz, a political municipality in the Albula region of the canton of Graubünden, Switzerland. It provides comprehensive information and services relevant to local residents and visitors, including municipal news, political governance, administrative services, tourism, and community events. The site is well-branded and structured to serve its target audience effectively. Technically, the website is built on the Joomla CMS platform with the Yootheme theme and utilizes modern web technologies such as jQuery, UIkit, and Font Awesome. It is mobile-optimized and includes accessibility features, providing a good user experience. Google Analytics is used for visitor tracking, indicating moderate user tracking practices. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, which are positive indicators. However, it lacks several important security headers and explicit privacy or cookie policies, which are compliance gaps. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is a trustworthy and professional municipal portal with good content quality and technical implementation. The main areas for improvement include adding privacy and cookie policies to enhance GDPR compliance and implementing additional security headers to strengthen the security posture.

G

Gemeinde Albula/Alvra

albula-alvra.ch

58

The website www.albula-alvra.ch serves as the official online presence of the municipality of Albula/Alvra in Switzerland. It provides residents and visitors with comprehensive information about the community, including local news, events, administrative services, and online service portals. The site targets local citizens and stakeholders interested in municipal affairs and public services. The business model is that of a government entity focused on public administration and community engagement. Technically, the website is built on a CMS platform likely provided by i-web.ch, utilizing modern web technologies such as HTML5, CSS, JavaScript, and responsive design frameworks like Bootstrap. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. It employs HTTPS for secure communication and includes a user consent mechanism for anonymized web analytics. From a security perspective, the site benefits from HTTPS encryption and anonymized data collection with user consent, indicating a privacy-conscious approach. However, it lacks explicit security headers and does not publish incident response or vulnerability disclosure policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is a trustworthy and professional municipal portal with a strong focus on user information and service delivery. Strategic recommendations include enhancing security headers, publishing incident response contacts, and formalizing vulnerability disclosure to strengthen security posture and trustworthiness.

B

Bahnmuseum Albula AG

bahnmuseum-albula.ch

69

Bahnmuseum Albula AG operates a specialized railway museum in Bergün/Bravuogn, Switzerland, focusing on the heritage of the Rhätische Bahn. The museum offers exhibitions, special events, a shop, and a buffet, targeting tourists, railway enthusiasts, and local visitors. The website is built on Drupal 10 and integrates modern web technologies such as Vue.js and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and accessible, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and privacy policies are lacking. Contact information is clearly presented, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website reflects a professional and trustworthy institution with room for improvement in privacy and security disclosures.

L

Lesestoff

lesestoff.ch

64

Lesestoff.ch is a Swiss online bookstore offering a wide range of books, eBooks, audiobooks, and related products. It operates both online and through physical stores in multiple Swiss cities, targeting book buyers primarily in Switzerland and German/English speaking customers. The website is professionally designed with good content quality, clear navigation, and multilingual support. The technical infrastructure uses modern JavaScript libraries and APIs, ensuring a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and secure login forms, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and credible but could improve in privacy and security transparency.

B

Bergün Filisur Tourismus AG

berguen-filisur.ch

69

Bergün Filisur Tourismus AG operates a professional tourism website promoting the Bergün Filisur region in Switzerland. The site offers comprehensive information on local events, accommodation booking, weather, and cultural highlights, targeting tourists, families, and railway enthusiasts. The business is positioned as a regional tourism authority with strong partnerships with local and national organizations. Technically, the website is built on Drupal 10, employs modern web technologies, and integrates analytics tools such as Google Tag Manager and Siteimprove Analytics. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with a cookie consent banner and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-maintained, supporting the business's tourism promotion goals effectively.

R

Rhätische Bahn AG

rhb.ch

49

Rhätische Bahn AG is a well-established Swiss railway company specializing in scenic and regional rail travel in the Graubünden region. The company offers a variety of services including ticket sales, panoramic train experiences such as the Bernina and Glacier Express, and leisure travel options. Their website reflects a strong market position with comprehensive content targeting tourists and railway enthusiasts. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and leverages CDN services for performance. The site is mobile-optimized, accessible, and SEO-friendly. Security-wise, the website enforces HTTPS, includes important security headers, and uses consent management tools for privacy compliance. However, explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

G

Graubünden Ferien

graubuenden.ch

69

Graubünden Ferien operates a professional and comprehensive tourism website promoting the Graubünden region in Switzerland. The site targets tourists and travelers interested in nature, outdoor activities, accommodation, and cultural experiences. The business is positioned as a regional tourism authority with a medium-sized presence. Technically, the website is built on Drupal 10, uses modern analytics and tag management tools, and is well optimized for mobile and accessibility. Security posture is strong with HTTPS and security headers in place, though explicit privacy and terms policies are missing. Overall, the site is trustworthy and professional but could improve transparency on privacy and contact information.

C

Cornèr Banca SA

corner.ch

73

Cornèr Banca SA is a well-established Swiss private banking group with a history dating back to 1952. The company offers a comprehensive suite of financial services including private banking, loans, structured products, and digital banking solutions. Their market position is strong, supported by industry recognition such as ranking second in Switzerland for capital strength by The Banker TOP 1000 World Banks 2025. The website targets private clients, financial intermediaries, and institutional clients, emphasizing personalized portfolio management and investment advisory services. Technically, the website is built on OpenCms with modern JavaScript libraries like jQuery and Swiper, integrated with Adobe DTM for analytics and Google reCAPTCHA for security. The site is mobile optimized and SEO friendly, with a professional design and clear navigation.

S

Swiss Ski School

swiss-ski-school.ch

49

Swiss Ski School is a Swiss-based service provider specializing in ski and snow sports instruction across multiple disciplines and age groups. The website presents a comprehensive offering of winter and summer activities, targeting a broad audience from beginners to experts, including people with disabilities. The business appears to be well-positioned nationally within Switzerland, leveraging a multi-language platform to serve diverse customers. Technically, the website is built on WordPress with Elementor and integrates modern tools such as Google Tag Manager and Leaflet.js for maps. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is basic with a cookie consent mechanism but no visible privacy or terms of service pages. Overall, the site is professional and trustworthy, with room for improvement in privacy and security transparency.

Bergfahrt Festival is a small non-profit cultural festival focused on alpine culture in Switzerland, held in the village of Bergün/Bravuogn. The website provides comprehensive information about the festival's history, team, partners, and practical visitor information. The festival emphasizes intimate cultural experiences and community engagement. Technically, the website uses modern JavaScript libraries and fonts, with Google Analytics and Tag Manager for tracking. Security posture is good with HTTPS enabled and secure form submission, but lacks visible security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy PDF but no cookie banner or terms of service. Contact information is clearly provided including email, phone, and social media links. Overall, the site is professional, trustworthy, and well-branded, serving its niche audience effectively.

W

WSL Institute for Snow and Avalanche Research SLF

slf.ch

62

The WSL Institute for Snow and Avalanche Research SLF is a Swiss federal research institute specializing in snow, avalanches, alpine natural hazards, permafrost, and mountain ecosystems. It operates under the Swiss Federal Research Institute WSL and the ETH Domain, providing scientific research and public services such as the avalanche bulletin. The website reflects a well-established government entity with a clear focus on research and public safety. Technically, the site uses TYPO3 CMS and integrates Matomo analytics, indicating a moderate level of digital maturity with good mobile optimization and accessibility. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and serves a general audience interested in alpine environmental research and safety.

L

La Maison des Alpes – La Nature du Val d'Hérens

lamaisondesalpes.ch

49

La Maison des Alpes website serves as an informational and promotional platform focused on the natural and cultural heritage of the Val d'Hérens region in Switzerland. The site targets visitors and locals interested in regional nature and culture, providing content primarily in French. The business model appears to be centered on regional tourism promotion without direct e-commerce or transactional services. Technically, the site is built on WordPress using the Divi theme, leveraging standard web technologies such as JavaScript and Google Fonts. The site is mobile optimized and performs moderately well, though accessibility and SEO features are basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is minimal with no visible privacy or cookie policies, which is a compliance risk. Overall, the site is functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

C

Cornèr Bank Ltd.

cornercard.ch

73

Cornèrcard is a Swiss financial services provider specializing in Visa and Mastercard credit cards, prepaid cards, and related financial products. The company targets private and business clients in Switzerland, offering a variety of card options including cashback, travel, and social cause cards. Cornèrcard is part of the Cornèr Group, a reputable financial group in Switzerland, and enjoys strong market positioning supported by customer satisfaction awards and recognitions. The website provides comprehensive information about products, services, and customer support, including a dedicated mobile app for card management.

S

SAC-Shop

sac-cas-shop.ch

65

SAC-Shop is an e-commerce platform primarily serving members of the Swiss Alpine Club and outdoor enthusiasts in Switzerland. The website offers retail and wholesale outdoor products, leveraging Shopify's platform and apps to provide a tailored shopping experience. The business targets a niche market with specialized pricing for SAC members, positioning itself as a trusted supplier within this community. Technically, the site is built on Shopify with a modern theme and integrates multiple third-party apps for wholesale pricing and access control. The infrastructure is robust, hosted on Shopify's CDN with HTTPS and security headers properly configured, ensuring a secure shopping environment. However, the site lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is strong with no evident vulnerabilities, but incident response and security policy disclosures are absent. Overall, the site is professional and functional but could improve in privacy compliance and transparency to enhance trust and regulatory adherence.

L

LEN - European Aquatics

len.eu

51

European Aquatics (LEN) is the official governing body for aquatic sports in Europe, overseeing disciplines such as swimming, diving, water polo, artistic swimming, open water swimming, and masters competitions. The organization provides governance, event management, development programs, and promotes integrity and ethics within the sport. Their website serves as a central hub for news, event calendars, rules, and organizational information targeting athletes, federations, and aquatic sports enthusiasts across Europe. Technically, the website is built on a modern WordPress CMS platform using Elementor page builder and several performance and SEO optimization plugins. It is hosted likely on SiteGround infrastructure, employs HTTPS with a strong SSL configuration, and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. From a security perspective, the site enforces HTTPS, uses domain transfer and update prohibitions, and implements a cookie consent mechanism compliant with GDPR. However, DNSSEC is not enabled, representing a minor security gap. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are comprehensive and accessible. Overall, the website demonstrates a solid security posture, good privacy compliance, and professional business credibility. Recommendations include enabling DNSSEC, adding additional security headers, and continuous monitoring of plugins for vulnerabilities to maintain and improve security and trust.

L

Lindenhofgruppe AG

lindenhofgruppe.ch

62

Lindenhofgruppe AG is a large healthcare provider based in Bern, Switzerland, offering comprehensive and interdisciplinary basic care with approximately 2500 employees across three locations. The website presents detailed information about their medical specialties, patient services, family support, and career opportunities, positioning them as a well-established regional healthcare institution. Technically, the site is built on Weblication® CMS and integrates multiple analytics and tracking tools such as Google Analytics, Hotjar, TikTok Pixel, and LinkedIn Insight Tag, reflecting a moderate level of digital maturity. The website uses HTTPS with good security headers and secure forms, but lacks explicit privacy and cookie policies, which impacts privacy compliance. Overall, the security posture is solid with no critical vulnerabilities detected, but improvements in transparency and compliance documentation are recommended. The domain WHOIS data is consistent with the business claims, supporting the legitimacy of the website.

E

Effingermedien AG

effingermedien.ch

52

Effingermedien AG is a well-established Swiss regional media company with over 150 years of experience, specializing in publishing three weekly newspapers and operating an online news portal serving the Brugg-Baden region. The company offers a comprehensive range of services including editorial, advertising, print production, crossmedia solutions, and mailing services. It is part of the larger Schellenberg Gruppe, which includes several printing and media subsidiaries, enhancing its market position and service capabilities. The website reflects a professional and consistent brand image targeting regional businesses and readers, emphasizing local news and advertising opportunities. Technically, the site uses modern frameworks such as Vue.js and UKit, integrates Matomo for privacy-conscious analytics, and is powered by a Cockpit CMS backend. The site is mobile optimized and performs moderately well, though some accessibility and privacy compliance improvements are recommended. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but lacks visible cookie consent and security policy disclosures. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and mature entity.

C

Cité Gestion

cite-gestion.com

58

Cité Gestion is a Swiss private bank specializing in personalized wealth management solutions for both Swiss and international clients. The bank emphasizes a unique business model that combines the security and regulatory compliance of a FINMA-regulated institution with the flexibility and independence of an agile private bank. With 15 years of experience and CHF 9.5 billion in assets under management, Cité Gestion positions itself as a trusted partner offering bespoke investment solutions and a high-quality operational infrastructure. The website reflects a professional and well-branded digital presence, supporting multiple languages and featuring multimedia content to engage its audience. Technically, the website employs a modern JavaScript technology stack including jQuery, Google Analytics, Google Tag Manager, and reCAPTCHA v3 for security. The site is mobile-optimized with good SEO practices and a cookie consent mechanism that aligns with GDPR requirements. However, some security headers are not visibly implemented, and no explicit terms of service or incident response policies are published, which could be improved. From a security perspective, the site uses HTTPS with strong SSL configuration and integrates Google reCAPTCHA to protect forms. The absence of WHOIS registration data raises some concerns about domain registration transparency, although the website content and business information suggest legitimacy. Overall, the security posture is good but could benefit from enhanced header policies and published security frameworks. The overall risk assessment indicates a professional and trustworthy financial institution with minor gaps in transparency and security documentation. Strategic recommendations include verifying domain registration details, publishing comprehensive security and incident response policies, and implementing additional security headers to strengthen protection and trust.

I

International Federation of Mountain Guides Associations

ifmga.info

52

The International Federation of Mountain Guides Associations (IFMGA) is a globally recognized non-profit federation that represents professional mountain guides and coordinates national member associations. The organization focuses on maintaining high standards in training, certification, and safety for mountain guides worldwide. Their website reflects a professional and consistent brand presence, targeting professional guides and related stakeholders. Technically, the site is built on Joomla CMS with modern frontend technologies and is hosted via GoDaddy. The site is responsive and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and domain locking, but lacks DNSSEC and formal privacy and cookie policies, which are compliance gaps. No signs of blocking or WAF interference were detected, and the domain registration is consistent and legitimate. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and DNS security.

O

Orthopädie Sonnenhof KLG

orthopaediesonnenhof.ch

58

Orthopädie Sonnenhof KLG is a specialized healthcare provider based in Switzerland, focusing on orthopedics and sports medicine. The website presents a comprehensive range of orthopedic services including spine surgery, hand surgery, pediatric orthopedics, and more. It maintains a strong regional presence with partnerships such as the Lindenhofgruppe and Spitalzentrum Biel. The site is built on TYPO3 CMS and integrates modern tracking and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. Overall, the website is professional, trustworthy, and well-structured, serving patients and healthcare professionals effectively.

P

POMOCA

pomoca.com

48

POMOCA is a Swiss-based manufacturer specializing in ski touring skins, founded in 1933 and positioned as a world leader in its niche. The company offers a range of products including ski skins, accessories, and attachment systems, targeting ski touring enthusiasts and retailers globally. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and privacy policies in place, though explicit security policies and incident response details are absent. The domain WHOIS data is missing, which raises some concerns about registration transparency but does not detract significantly from the overall legitimacy given the business history and content quality. Overall, the website is well-structured, secure, and compliant, serving its business purpose effectively.

N

NORQAIN

norqain.com

69

NORQAIN is an independent Swiss watch brand established in 2018, specializing in luxury Swiss made watches and related merchandise. The company operates a professional e-commerce platform powered by Shopify, targeting watch enthusiasts and outdoor explorers. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and comprehensive marketing and analytics integrations. Security posture is strong with HTTPS, clientTransferProhibited domain status, and form protection via hCaptcha, although DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-positioned in its niche market.

A

ANDERMATTERS

andermatters.ch

58

ANDERMATTERS is a Swiss-based small business specializing in guided outdoor activities and experiences in the Andermatt region, focusing on winter sports such as skiing, freeride, ski touring, and avalanche training, as well as summer climbing and glacier trekking. The company maintains partnerships with reputable brands like Mammut and Norqain, enhancing its market credibility. The website is professionally designed using Drupal 9, featuring good mobile optimization, accessibility, and clear navigation. Privacy and cookie compliance are well implemented with a comprehensive privacy policy and a granular cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

Z

Zermatters Events

zermattersevents.ch

62

Zermatters Events is a specialized event management company based in Zermatt, Switzerland, focusing on MICE (Meetings, Incentives, Conventions & Events) services. The company leverages a strong local network and personal engagement to deliver memorable events in the Walliser mountain region. Their website, built on the Wix platform, presents a professional and consistent brand image targeting event organizers and clients seeking local expertise. The business operates in the hospitality sector with a small company size profile. Technically, the website uses Wix's proprietary frameworks and scripts, ensuring moderate performance and good mobile optimization. However, SEO and accessibility features are basic and could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. Privacy compliance is partial, with no visible privacy policy or terms of service, which should be addressed to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Z

ZERMATTERS

zermatters.ch

49

ZERMATTERS is a Swiss-based mountain guide office and ski school located in Zermatt, offering professional guided skiing, hiking, biking, climbing, and mountain tours year-round. The company holds recognized certifications such as IFMGA mountain guides and is an official Swiss Ski School, positioning itself as a trusted local expert in alpine outdoor activities. Their website is well-designed, mobile-optimized, and provides clear information about services, events, and booking options, targeting outdoor enthusiasts and tourists seeking expert guidance in the Swiss Alps. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Google Tag Manager with privacy-conscious configurations. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. Social media integration and partner links enhance their digital presence. However, some security headers are missing, and no explicit security policy or incident response contacts are published. From a security perspective, the site demonstrates good practices such as anonymized analytics and consent management but could improve by adding security headers and a vulnerability disclosure policy. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, ZERMATTERS presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Strategic improvements in security policy transparency and header configurations would further enhance their security posture and trustworthiness.

M

Mammut Mountain School

mammutmountainschool.ch

56

Mammut Mountain School is a specialized alpine education provider based in Switzerland, uniquely positioned through a partnership between an equipment supplier and a mountain guide office. The company offers a comprehensive range of alpine training services including mountaineering, glacier trekking, climbing, ski touring, freeriding, and avalanche training, operating primarily from Andermatt and Zermatt. Their business model focuses on safety, individualized group conditions, and practical alpine education for outdoor enthusiasts. Technically, the website is built on Drupal 9, integrates Google Tag Manager for analytics, and uses OneTrust for cookie consent, reflecting a modern and compliant digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The website is accessible, well-structured, and GDPR compliant, with clear contact information and partner affiliations enhancing business credibility. Overall, the site demonstrates a good balance of content quality, technical implementation, security, privacy compliance, and business credibility, scoring an overall AI rating of 85.

M

Mammut

mammut.com

64

Mammut is a well-established Swiss premium outdoor brand founded in 1862, specializing in high-quality outdoor clothing, footwear, and equipment for mountain sports enthusiasts worldwide. The website serves as a multilingual, multi-regional e-commerce platform with localized country sites, reflecting a mature digital presence. The technical infrastructure leverages modern web technologies including React and Next.js, with integrated consent management and analytics tools, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced and consent mechanisms in place, though some security headers and privacy policies are not directly evident in the analyzed content. The absence of WHOIS data for the domain introduces some uncertainty in domain legitimacy, but the brand's global recognition and consistent website branding mitigate this concern. Overall, the website is professional, secure, and user-friendly, serving a large international customer base effectively.

W

Webland AG

webland.ch

67

Webland AG is a Swiss-based hosting provider established in 1998, offering a comprehensive range of web hosting, email hosting, domain registration, and cloud office services primarily targeting private individuals and businesses in Switzerland. The company emphasizes Swiss quality, security, and data sovereignty by operating all servers within Switzerland and being a BAKOM registered Internet Service Provider. Their market position is that of a trusted, established mid-sized hosting provider with a strong local presence and a broad service portfolio including Windows and Linux hosting platforms. Technically, the website leverages modern web technologies such as Bootstrap, jQuery, FontAwesome, and DotNetNuke CMS. It integrates advanced analytics and marketing tools including Google Analytics, Google Tag Manager, Google Ads, and Intercom for customer engagement. The site is mobile-optimized with good SEO and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the website uses HTTPS with excellent SSL configuration and offers security features like Web Application Firewall and SSL certificates including free Let's Encrypt options. However, there is room for improvement in implementing HTTP security headers and publishing explicit security policies or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, Webland AG presents a low-risk profile with strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security posture further.

I

International Foundation for Motorcycling

fim-foundation.com

42

The FIM Foundation is a Swiss charitable organization established in 2020, dedicated to supporting the motorcycling community through advocacy, education, sustainability, and charitable projects. The website presents a professional and well-structured digital presence built on WordPress with modern plugins and SEO optimizations. It targets motorcycling enthusiasts and stakeholders, emphasizing safety, environmental responsibility, and inclusivity. Technically, the site uses a mature tech stack including Matomo analytics for privacy-conscious tracking and a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced, though some security headers could be improved. The absence of WHOIS registration data is a notable concern, reducing trustworthiness despite the site's professional appearance and affiliation with the FIM organization. Overall, the site is functional, informative, and compliant with privacy regulations but would benefit from enhanced transparency regarding domain registration and contact information.