Switzerland security reports

E

Effingermedien AG

effingermedien.ch

52

Effingermedien AG is a well-established Swiss regional media company with over 150 years of experience, specializing in publishing three weekly newspapers and operating an online news portal serving the Brugg-Baden region. The company offers a comprehensive range of services including editorial, advertising, print production, crossmedia solutions, and mailing services. It is part of the larger Schellenberg Gruppe, which includes several printing and media subsidiaries, enhancing its market position and service capabilities. The website reflects a professional and consistent brand image targeting regional businesses and readers, emphasizing local news and advertising opportunities. Technically, the site uses modern frameworks such as Vue.js and UKit, integrates Matomo for privacy-conscious analytics, and is powered by a Cockpit CMS backend. The site is mobile optimized and performs moderately well, though some accessibility and privacy compliance improvements are recommended. Security posture is good with HTTPS enforced and no obvious vulnerabilities, but lacks visible cookie consent and security policy disclosures. Overall, the domain registration data aligns well with the business claims, indicating a legitimate and mature entity.

C

Cité Gestion

cite-gestion.com

58

Cité Gestion is a Swiss private bank specializing in personalized wealth management solutions for both Swiss and international clients. The bank emphasizes a unique business model that combines the security and regulatory compliance of a FINMA-regulated institution with the flexibility and independence of an agile private bank. With 15 years of experience and CHF 9.5 billion in assets under management, Cité Gestion positions itself as a trusted partner offering bespoke investment solutions and a high-quality operational infrastructure. The website reflects a professional and well-branded digital presence, supporting multiple languages and featuring multimedia content to engage its audience. Technically, the website employs a modern JavaScript technology stack including jQuery, Google Analytics, Google Tag Manager, and reCAPTCHA v3 for security. The site is mobile-optimized with good SEO practices and a cookie consent mechanism that aligns with GDPR requirements. However, some security headers are not visibly implemented, and no explicit terms of service or incident response policies are published, which could be improved. From a security perspective, the site uses HTTPS with strong SSL configuration and integrates Google reCAPTCHA to protect forms. The absence of WHOIS registration data raises some concerns about domain registration transparency, although the website content and business information suggest legitimacy. Overall, the security posture is good but could benefit from enhanced header policies and published security frameworks. The overall risk assessment indicates a professional and trustworthy financial institution with minor gaps in transparency and security documentation. Strategic recommendations include verifying domain registration details, publishing comprehensive security and incident response policies, and implementing additional security headers to strengthen protection and trust.

I

International Federation of Mountain Guides Associations

ifmga.info

52

The International Federation of Mountain Guides Associations (IFMGA) is a globally recognized non-profit federation that represents professional mountain guides and coordinates national member associations. The organization focuses on maintaining high standards in training, certification, and safety for mountain guides worldwide. Their website reflects a professional and consistent brand presence, targeting professional guides and related stakeholders. Technically, the site is built on Joomla CMS with modern frontend technologies and is hosted via GoDaddy. The site is responsive and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and domain locking, but lacks DNSSEC and formal privacy and cookie policies, which are compliance gaps. No signs of blocking or WAF interference were detected, and the domain registration is consistent and legitimate. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and DNS security.

O

Orthopädie Sonnenhof KLG

orthopaediesonnenhof.ch

58

Orthopädie Sonnenhof KLG is a specialized healthcare provider based in Switzerland, focusing on orthopedics and sports medicine. The website presents a comprehensive range of orthopedic services including spine surgery, hand surgery, pediatric orthopedics, and more. It maintains a strong regional presence with partnerships such as the Lindenhofgruppe and Spitalzentrum Biel. The site is built on TYPO3 CMS and integrates modern tracking and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with a clear privacy policy and cookie consent banner. Overall, the website is professional, trustworthy, and well-structured, serving patients and healthcare professionals effectively.

P

POMOCA

pomoca.com

48

POMOCA is a Swiss-based manufacturer specializing in ski touring skins, founded in 1933 and positioned as a world leader in its niche. The company offers a range of products including ski skins, accessories, and attachment systems, targeting ski touring enthusiasts and retailers globally. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics and Facebook Pixel, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS and privacy policies in place, though explicit security policies and incident response details are absent. The domain WHOIS data is missing, which raises some concerns about registration transparency but does not detract significantly from the overall legitimacy given the business history and content quality. Overall, the website is well-structured, secure, and compliant, serving its business purpose effectively.

N

NORQAIN

norqain.com

69

NORQAIN is an independent Swiss watch brand established in 2018, specializing in luxury Swiss made watches and related merchandise. The company operates a professional e-commerce platform powered by Shopify, targeting watch enthusiasts and outdoor explorers. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and comprehensive marketing and analytics integrations. Security posture is strong with HTTPS, clientTransferProhibited domain status, and form protection via hCaptcha, although DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the website is trustworthy, professional, and well-positioned in its niche market.

A

ANDERMATTERS

andermatters.ch

58

ANDERMATTERS is a Swiss-based small business specializing in guided outdoor activities and experiences in the Andermatt region, focusing on winter sports such as skiing, freeride, ski touring, and avalanche training, as well as summer climbing and glacier trekking. The company maintains partnerships with reputable brands like Mammut and Norqain, enhancing its market credibility. The website is professionally designed using Drupal 9, featuring good mobile optimization, accessibility, and clear navigation. Privacy and cookie compliance are well implemented with a comprehensive privacy policy and a granular cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional digital presence aligned with its business objectives.

Z

Zermatters Events

zermattersevents.ch

62

Zermatters Events is a specialized event management company based in Zermatt, Switzerland, focusing on MICE (Meetings, Incentives, Conventions & Events) services. The company leverages a strong local network and personal engagement to deliver memorable events in the Walliser mountain region. Their website, built on the Wix platform, presents a professional and consistent brand image targeting event organizers and clients seeking local expertise. The business operates in the hospitality sector with a small company size profile. Technically, the website uses Wix's proprietary frameworks and scripts, ensuring moderate performance and good mobile optimization. However, SEO and accessibility features are basic and could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. Privacy compliance is partial, with no visible privacy policy or terms of service, which should be addressed to enhance trust and compliance. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Z

ZERMATTERS

zermatters.ch

49

ZERMATTERS is a Swiss-based mountain guide office and ski school located in Zermatt, offering professional guided skiing, hiking, biking, climbing, and mountain tours year-round. The company holds recognized certifications such as IFMGA mountain guides and is an official Swiss Ski School, positioning itself as a trusted local expert in alpine outdoor activities. Their website is well-designed, mobile-optimized, and provides clear information about services, events, and booking options, targeting outdoor enthusiasts and tourists seeking expert guidance in the Swiss Alps. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including jQuery and Google Tag Manager with privacy-conscious configurations. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. Social media integration and partner links enhance their digital presence. However, some security headers are missing, and no explicit security policy or incident response contacts are published. From a security perspective, the site demonstrates good practices such as anonymized analytics and consent management but could improve by adding security headers and a vulnerability disclosure policy. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, ZERMATTERS presents a professional, trustworthy online presence with strong business credibility and good technical implementation. Strategic improvements in security policy transparency and header configurations would further enhance their security posture and trustworthiness.

M

Mammut Mountain School

mammutmountainschool.ch

56

Mammut Mountain School is a specialized alpine education provider based in Switzerland, uniquely positioned through a partnership between an equipment supplier and a mountain guide office. The company offers a comprehensive range of alpine training services including mountaineering, glacier trekking, climbing, ski touring, freeriding, and avalanche training, operating primarily from Andermatt and Zermatt. Their business model focuses on safety, individualized group conditions, and practical alpine education for outdoor enthusiasts. Technically, the website is built on Drupal 9, integrates Google Tag Manager for analytics, and uses OneTrust for cookie consent, reflecting a modern and compliant digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. The website is accessible, well-structured, and GDPR compliant, with clear contact information and partner affiliations enhancing business credibility. Overall, the site demonstrates a good balance of content quality, technical implementation, security, privacy compliance, and business credibility, scoring an overall AI rating of 85.

M

Mammut

mammut.com

64

Mammut is a well-established Swiss premium outdoor brand founded in 1862, specializing in high-quality outdoor clothing, footwear, and equipment for mountain sports enthusiasts worldwide. The website serves as a multilingual, multi-regional e-commerce platform with localized country sites, reflecting a mature digital presence. The technical infrastructure leverages modern web technologies including React and Next.js, with integrated consent management and analytics tools, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced and consent mechanisms in place, though some security headers and privacy policies are not directly evident in the analyzed content. The absence of WHOIS data for the domain introduces some uncertainty in domain legitimacy, but the brand's global recognition and consistent website branding mitigate this concern. Overall, the website is professional, secure, and user-friendly, serving a large international customer base effectively.

W

Webland AG

webland.ch

67

Webland AG is a Swiss-based hosting provider established in 1998, offering a comprehensive range of web hosting, email hosting, domain registration, and cloud office services primarily targeting private individuals and businesses in Switzerland. The company emphasizes Swiss quality, security, and data sovereignty by operating all servers within Switzerland and being a BAKOM registered Internet Service Provider. Their market position is that of a trusted, established mid-sized hosting provider with a strong local presence and a broad service portfolio including Windows and Linux hosting platforms. Technically, the website leverages modern web technologies such as Bootstrap, jQuery, FontAwesome, and DotNetNuke CMS. It integrates advanced analytics and marketing tools including Google Analytics, Google Tag Manager, Google Ads, and Intercom for customer engagement. The site is mobile-optimized with good SEO and accessibility features, reflecting a mature digital infrastructure. From a security perspective, the website uses HTTPS with excellent SSL configuration and offers security features like Web Application Firewall and SSL certificates including free Let's Encrypt options. However, there is room for improvement in implementing HTTP security headers and publishing explicit security policies or vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, Webland AG presents a low-risk profile with strong business credibility, good privacy compliance, and a professional online presence. Strategic recommendations include enhancing security headers, publishing incident response information, and adding a security.txt file to improve transparency and security posture further.

I

International Foundation for Motorcycling

fim-foundation.com

42

The FIM Foundation is a Swiss charitable organization established in 2020, dedicated to supporting the motorcycling community through advocacy, education, sustainability, and charitable projects. The website presents a professional and well-structured digital presence built on WordPress with modern plugins and SEO optimizations. It targets motorcycling enthusiasts and stakeholders, emphasizing safety, environmental responsibility, and inclusivity. Technically, the site uses a mature tech stack including Matomo analytics for privacy-conscious tracking and a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced, though some security headers could be improved. The absence of WHOIS registration data is a notable concern, reducing trustworthiness despite the site's professional appearance and affiliation with the FIM organization. Overall, the site is functional, informative, and compliant with privacy regulations but would benefit from enhanced transparency regarding domain registration and contact information.

F

FIM (Fédération Internationale de Motocyclisme)

fim-moto.tv

66

FIM-MOTO.TV is the official video streaming platform of the Fédération Internationale de Motocyclisme (FIM), providing live broadcasts, race highlights, and exclusive motorcycle sport content globally. The platform targets motorcycle sport enthusiasts and serves as a central hub for FIM's world and national championships. Technically, the website leverages modern web technologies including Next.js, React, and integrates analytics tools such as Matomo and Facebook Pixel, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements are recommended in DNSSEC and security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies in the analyzed content. Overall, the platform presents a professional and trustworthy front with room for enhanced transparency and security practices.

B

Beyond Gravity

beyondgravity.com

71

Beyond Gravity is a well-established aerospace technology company specializing in satellite and launcher components, with over 40 years of experience supporting space missions. Their website reflects a mature business with a clear focus on advancing humanity through space exploration technologies. The company targets aerospace professionals and organizations requiring advanced satellite and launcher solutions. Technically, the website is built on Drupal CMS, employs modern analytics (Matomo), and integrates a robust cookie consent mechanism (OneTrust), indicating a good level of digital maturity. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response information are absent. The lack of WHOIS data slightly impacts trust but does not overshadow the professional presentation and compliance indicators. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

3

3D Swiss Media GmbH

3dswissmedia.com

54

3D Swiss Media GmbH is a Swiss-based digital technology company specializing in a range of professional services including 360-degree virtual tours, web design, digital QR services, and SEO consulting. Founded in 2014, the company targets businesses seeking innovative digital marketing and technology solutions to enhance their online presence. The website reflects a professional brand with consistent messaging and showcases reputable client partnerships, reinforcing its market position. Technically, the website is built on WordPress with modern plugins such as Slider Revolution and integrates analytics tools like Google Analytics and Tag Manager. Hosting and DNS services are managed via reputable providers including Squarespace Domains and Cloudflare, ensuring reliable infrastructure. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and employs domain status protections to prevent unauthorized transfers or deletions. However, DNSSEC is not enabled, and security headers are not explicitly detected, suggesting room for improvement. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website presents a low-risk profile with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing DNS security with DNSSEC, implementing security headers, and publishing a formal security policy to improve trust and compliance. These steps will strengthen the company's security posture and support its professional reputation.

A

AdBlendr - a product of Ad Insertion Platform

adblendr.com

58

AdBlendr is a newly launched technology product specializing in Server-Guided Ad Insertion (SGAI) for streaming and broadcast platforms. Positioned as the first end-to-end SGAI product globally, it aims to revolutionize ad monetization by improving ad fill rates and revenue for content providers and advertisers. The company operates primarily in the technology and media sectors, targeting streaming services, broadcasters, and advertisers. The website reflects a professional and modern digital presence built on WordPress with integrated marketing and analytics tools such as HubSpot and Google Analytics. Security posture is adequate with HTTPS and domain registration protections, though additional security headers and explicit policies could enhance trust. Privacy compliance is basic with presence of privacy and cookie policies and consent mechanisms, but lacks detailed GDPR compliance statements or data protection officer contact. Overall, the business credibility is strong for a startup with clear branding, physical address in Switzerland, and a focused product offering.

A

Ad Insertion Platform

adinsertplatform.com

57

Ad Insertion Platform is a specialized technology company providing dynamic ad insertion and monetization solutions for the streaming and broadcasting industry. Their offerings include server-side ad insertion (SSAI), broadcast TV services, streaming radio, CDN, and ad monetization services, targeting broadcasters, OTT providers, and advertisers. The company presents itself as a technology leader with a professional and modern website, supported by a domain registered since 2006, indicating established market presence. Technically, the website is built using the Hugo static site generator with a modern tech stack including Bootstrap, jQuery, and various marketing and analytics tools such as Google Analytics and HubSpot. Hosting is inferred to be on Amazon AWS infrastructure. The site is mobile optimized with good SEO practices but lacks some accessibility features. Performance is moderate with no major issues detected. From a security perspective, the site uses HTTPS and has domain-level protections like clientDeleteProhibited status. However, it lacks DNSSEC, security headers, and published security or incident response policies. No privacy or cookie policies are found despite the presence of cookie banner scripts, indicating potential GDPR compliance gaps. No vulnerability disclosure or security.txt files are present. Overall, the website is professional and credible but could improve privacy compliance and security posture. The risk level is moderate with recommendations to enhance DNS security, implement security headers, publish privacy and security policies, and improve cookie consent mechanisms.

A

Ad Insertion Platform Sàrl

daiconnect.com

56

DAIConnect is a specialized B2B platform focused on dynamic ad insertion technology, serving media companies, advertisers, and broadcasters. The platform aims to enable ad insertion everywhere, positioning itself as a niche technology provider in the media sector. The company behind the platform is Ad Insertion Platform Sàrl, founded in 2016 and based in Switzerland. The website serves primarily as a login portal for users of the platform.

K

Kudelski Group

nagra.com

80

The Kudelski Group is a global technology company specializing in digital security, cybersecurity, and Internet of Things solutions. With a strong presence in over 20 countries and serving more than 400 million users daily, the company offers advanced services primarily targeting enterprises in media, telecommunications, and technology sectors. Their key offerings include NAGRAVISION for core digital security, Kudelski Security for cybersecurity services, and Kudelski IoT for securing IoT devices and business models. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates Matomo Analytics for privacy-conscious visitor tracking. Cookie consent is managed through a robust mechanism allowing granular user control. The site is mobile-optimized and hosted likely behind Cloudflare, ensuring good performance and security. However, explicit security headers are not detected, and no direct security policy or incident response contacts are published, which could be improved. From a security perspective, the site enforces HTTPS and uses privacy-respecting analytics with Do Not Track enabled. No vulnerabilities or exposed sensitive data were found in the content. The absence of WHOIS data for the domain reduces trust slightly but is not uncommon for corporate domains using privacy protection. Overall, the site demonstrates a strong security posture with room for enhancements in transparency and security header implementation. The overall risk is low, with recommendations focusing on publishing security policies, adding security headers, and providing clear incident response contacts to enhance trust and compliance.

P

Pix4D SA

pix4d.com

73

Pix4D SA is a leading enterprise specializing in photogrammetry and drone mapping software solutions. Their website showcases a comprehensive suite of products designed for professional users in surveying, mapping, agriculture, construction, energy, and public safety sectors. The company offers both desktop and cloud-based processing tools, along with data capture applications and hardware integrations such as RTK devices. The website content is rich, well-structured, and targets professional audiences with clear product descriptions and use cases. Technically, the website is built using modern web technologies including React and Gatsby, ensuring fast performance and excellent mobile optimization. Integration with analytics and marketing platforms like Google Analytics, HubSpot, Facebook Pixel, and LinkedIn Insight Tag indicates a mature digital marketing infrastructure. The site employs HTTPS and cookie consent mechanisms, reflecting good privacy compliance practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure information, which are areas for improvement. The absence of WHOIS registrant data reduces transparency but does not significantly detract from the site's legitimacy given the professional branding and external references. Overall, Pix4D's website presents a professional, trustworthy, and technically sound digital presence with minor gaps in explicit security disclosures. Strategic recommendations include publishing security policies, incident response details, and enhancing security headers to further strengthen trust and compliance.

W

Wingtra AG

wingtra.com

72

Wingtra AG is a Swiss technology company specializing in aerial survey drones and integrated toolchains for fast and accurate survey data. Their product portfolio includes advanced drone hardware such as WingtraRAY and WingtraOne GEN II, GNSS ground kits, various sensors including RGB, LIDAR, and multispectral, as well as software solutions like WingtraCLOUD. The company targets professional users in surveying, GIS, construction, mining, agriculture, and environmental monitoring sectors. The website reflects a medium-sized enterprise with a professional online presence and consistent branding. Technically, the site is built on WordPress with Elementor and optimized for performance using NitroPack. Analytics and tracking are implemented via PostHog and Google Tag Manager, indicating moderate user tracking. Security posture is good with HTTPS enforced and domain transfer protection, but could be improved by enabling DNSSEC and publishing security policies. Privacy compliance is currently weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

K

Kernkraftwerk Gösgen-Däniken AG

kkg.ch

76

Kernkraftwerk Gösgen-Däniken AG operates a nuclear power plant in Switzerland, providing reliable and climate-friendly electricity. The company emphasizes technical expertise, environmental responsibility, and economic efficiency, serving a broad audience including professionals, schools, and job seekers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site uses modern JavaScript libraries and frameworks, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be enhanced. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business entity.

A

Axpo Schweiz

axpo.ch

77

Axpo Schweiz operates as the largest Swiss producer of renewable energy and holds a leading international position in energy trading and marketing of solar and wind power. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional design, targeting Swiss energy consumers, business clients, investors, and media. The technical infrastructure includes modern JavaScript frameworks, Google Tag Manager for analytics, and OneTrust for cookie consent, indicating a focus on privacy and compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain registration trust analysis but the overall website professionalism supports legitimacy. Strategic recommendations include enhancing security headers and publishing explicit security policies to further strengthen trust.

K

Kernkraftwerk Leibstadt AG

kkl.ch

57

Kernkraftwerk Leibstadt AG operates the largest and most powerful nuclear power plant in Switzerland, producing low-CO2 electricity since 1984. The website serves as an information portal for the public, stakeholders, and visitors, offering detailed insights into nuclear energy production, safety measures, and visitor services including guided tours and educational events. The company holds a strong market position within the Swiss energy sector and maintains affiliations with key regulatory and industry bodies such as ENSI and swissnuclear. Technically, the website is built on the TYPO3 CMS platform, employing modern web technologies and adhering to good practices in mobile optimization, accessibility, and SEO. The presence of cookie consent mechanisms and privacy policies indicates compliance with GDPR and related privacy regulations. Analytics are implemented via Google Tag Manager, with moderate user tracking. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a published security or incident response policy, which are recommended for enhanced security posture. No vulnerabilities or suspicious content were detected. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives. Strategic improvements in security policy transparency and header implementation would further strengthen its security and compliance stance.

I

International Road and Transport Union

iru.org

70

The International Road and Transport Union (IRU) operates a professional and comprehensive website serving as the global voice for road transport and logistics. The organization supports drivers and transport companies worldwide, offering advocacy, certification, and trade facilitation services. The website demonstrates a mature digital presence with modern CMS technology, integrated analytics, and compliance with privacy regulations. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are not publicly available. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall credibility given the professional presentation and consistent branding.

O

Oertli Instrumente AG

oertli-instruments.com

56

Oertli Instrumente AG is a Swiss-based manufacturer specializing in ophthalmic surgical devices, particularly for cataract surgery. The company emphasizes Swiss quality and innovation, targeting healthcare professionals involved in eye surgeries. Their product portfolio includes surgical platforms, instruments, and consumables, with FDA 510(k) clearance for key products, indicating regulatory compliance and market readiness in the USA. The website is professionally designed, mobile-optimized, and provides comprehensive information tailored to its professional audience. Technically, the website leverages modern technologies including Pimcore CMS, Google Tag Manager, and personalization scripts. It employs HTTPS with good SSL configuration and integrates consent management for cookies, reflecting a mature digital infrastructure. However, some security headers are missing, and explicit security policies or incident response information are not publicly available. From a security perspective, the site shows good practices such as encrypted connections and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the site maintains a good security posture but could improve transparency and security header implementation. The overall risk assessment is moderate with recommendations to enhance security policies, publish incident response contacts, and verify domain registration details. These steps would strengthen trust and compliance, supporting the company’s professional reputation in the healthcare sector.

O

Oertli Ophthalmedic Schweiz AG

oertli-ophthalmedic.ch

51

Oertli Ophthalmedic Schweiz AG is a Swiss-based medical technology company specializing in ophthalmology and ophthalmic surgery products and services. As a 100% subsidiary of Oertli Instrumente AG, it serves as a competence and distribution platform offering eye surgery essentials, personalized consulting, technical support, and training for eye care professionals. The company positions itself as a trusted partner in the Swiss ophthalmology market with a focus on quality and innovation. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on TYPO3 CMS using modern frameworks and includes privacy-conscious analytics and cookie consent mechanisms. Security posture is good with HTTPS and some security best practices, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is well-structured, user-friendly, and compliant with GDPR requirements, supporting the company's credibility and trustworthiness in the healthcare sector.

I

IBSA (Institut Biochimique SA)

ibsagroup.com

71

IBSA (Institut Biochimique SA) is a well-established Swiss multinational pharmaceutical company founded in 1945 and headquartered in Lugano, Switzerland. The company operates in over 90 countries with 20 subsidiaries worldwide, focusing on pharmaceutical manufacturing and research across multiple therapeutic areas. The website reflects a professional corporate presence with clear branding and extensive information about its subsidiaries and business pillars. Technically, the website uses modern tracking and analytics tools such as Google Tag Manager, Microsoft Clarity, and Hotjar, and implements a cookie consent mechanism via OneTrust, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers are not explicitly confirmed. The absence of WHOIS data and lack of visible contact information or explicit privacy and terms of service pages slightly reduce trustworthiness. Overall, the website is professional and credible but could improve transparency and security disclosures.

V

Vr Buddy

vr-buddy.com

53

Vr Buddy is a small educational technology company based in Switzerland, founded in 2022. The company specializes in connecting schools and companies through Virtual Reality to provide vocational trainees with immersive career insights. The website is built on WordPress and uses common plugins such as Yoast SEO and Contact Form 7, indicating a moderate level of digital maturity. The site is well-structured with good SEO metadata and mobile optimization, but lacks some key compliance documents such as a privacy policy and terms of service. Security posture is adequate with HTTPS enabled and domain transfer protection, but could be improved by enabling DNSSEC and adding security headers. Overall, the site is professional and relevant to its niche but would benefit from enhanced privacy and security transparency.

Meta Hospital is a Swiss-based startup specializing in Virtual Reality training solutions for healthcare professionals in the D-A-CH region. The company offers immersive, evidence-based VR educational content designed to enhance practical skills and professional competencies. Their platform supports certification and collaboration with healthcare institutions and industry partners, positioning them as an innovative player in healthcare education. Technically, the website uses modern web technologies including Laravel Livewire and integrates Google Analytics for user insights. The site is well-designed, mobile-optimized, and content-rich, reflecting a high level of digital maturity. Security posture is good with HTTPS and CSRF protections, but lacks some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the business appears legitimate and trustworthy with transparent WHOIS data and clear contact information.

P

Pixelmolkerei AG

pixrealities.com

57

Pixrealities™, developed by Pixelmolkerei AG, is a specialized virtual reality training platform targeting professional and corporate education markets globally. The company leverages immersive VR technology to provide realistic training scenarios that enhance employee skills, confidence, and knowledge. The platform supports a wide range of VR hardware and alternative solutions for users without VR devices, positioning itself as an accessible and innovative training solution. The business is well-established with academic validations and customer endorsements, primarily serving healthcare and technology sectors. Technically, the website is built on WordPress using modern plugins and themes, hosted by Hostpoint AG. It demonstrates good SEO practices, mobile optimization, and moderate performance. The site employs Google Analytics and Google Tag Manager for tracking, with a cookie consent mechanism in place. However, some security headers are not explicitly detected, and DNSSEC is not enabled, indicating room for security enhancements. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. There is no evidence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms, which are recommended for improving trust and compliance. Privacy compliance is partial, as no privacy policy or terms of service pages were found in the analyzed content. Overall, Pixrealities.com presents a professional and trustworthy online presence with a strong business model and technical foundation. Strategic improvements in privacy documentation and security practices would further enhance its credibility and compliance posture.

P

pixelmolkerei AG

pixelmolkerei.ch

60

pixelmolkerei AG is a specialized company providing advanced CGI, 3D visualization, and VR/AR/MR solutions primarily for the healthcare sector. With offices in Switzerland and Canada, they serve medical professionals and healthcare institutions by delivering immersive training and marketing content. Their market position is strong, supported by long-term partnerships with reputable healthcare companies and positive client testimonials. The website reflects a professional and modern digital presence with rich multimedia content and interactive features. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics for user tracking. Security posture is good with HTTPS and CAPTCHA on forms, but lacks some security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is trustworthy and well-designed but could improve compliance and security transparency.

T

Teoxane

teoxane.com

65

Teoxane is a healthcare company specializing in aesthetic medicine products such as dermal fillers and skincare solutions, targeting medical professionals and aesthetic practitioners. The website is built using modern web technologies including React and Next.js, indicating a contemporary digital infrastructure. However, the provided HTML content is minimal and appears to rely heavily on client-side rendering, which limits the immediate availability of content and metadata. Security posture is limited based on the available data, with no visible security headers or privacy policies detected. Tracking technologies such as Google Tag Manager and Pingdom are used, but privacy compliance is weak due to the absence of cookie and privacy policies. Overall, the website presents a moderate risk profile with room for improvement in security and compliance transparency.

S

ShadowLight Fotografie

shadowlight-shop.ch

53

ShadowLight Fotografie operates a professional photography e-commerce platform based in Switzerland, offering password-protected galleries and photo shoots primarily targeting individual clients and families. The website is built on the Pictrs.com platform, utilizing modern web technologies including HTTPS, CSRF protection, and JavaScript libraries for user experience enhancements. While the site demonstrates good design quality and user experience, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is solid with HTTPS and password protection, but could be improved with additional security headers and clearer incident response information. Overall, the business appears legitimate and consistent with its domain registration data, but privacy compliance and contact transparency need enhancement.

A

ABB Asea Brown Boveri Ltd

abb.com

73

ABB Asea Brown Boveri Ltd is a global technology leader specializing in electrification and automation solutions. The company operates across multiple business areas including Electrification, Motion, Process Automation, and Robotics & Discrete Automation, serving industrial clients worldwide. The website reflects ABB's strong market position and commitment to sustainability and innovation. Technically, the site is built on Adobe Experience Manager with React and hosted on AWS, demonstrating a modern and scalable infrastructure. The use of multiple analytics and tag management tools indicates a mature digital marketing and data collection strategy. Security posture is generally good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-optimized for performance and user experience.

A

ABB Asea Brown Boveri Ltd

global.abb

72

ABB Asea Brown Boveri Ltd is a global technology leader specializing in electrification and automation solutions. The company serves industrial sectors worldwide, helping customers improve efficiency, productivity, and sustainability. The website reflects ABB's strong market position and commitment to innovation across its four main business areas: Electrification, Motion, Process Automation, and Robotics & Discrete Automation. ABB targets industrial customers, partners, and investors with a comprehensive digital presence and multilingual support. Technically, the website is built on Adobe Experience Manager with React and hosted on AWS infrastructure, ensuring modern, performant, and mobile-optimized delivery. The site integrates multiple analytics and marketing tools while maintaining good privacy compliance with visible cookie consent mechanisms. Security posture is strong with HTTPS, domain transfer protection, and no evident vulnerabilities, though DNSSEC is not enabled. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with ABB's corporate identity.

B

BWH Hotels Central Europe GmbH

bestwestern.ch

66

Best Western Switzerland (www.bestwestern.ch) is a regional website operated by BWH Hotels Central Europe GmbH, providing hotel booking services for over 200 hotels in Germany, Luxembourg, Austria, and Switzerland. The site targets both private leisure travelers and business customers, offering loyalty programs, travel packages, and business meeting services. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It uses modern technologies including JavaScript libraries, consent management tools, and analytics platforms. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and bot protection via Google reCAPTCHA. However, explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the hospitality market in Central Europe.

O

Ott Landmaschinen AG

falc.ch

47

Ott Landmaschinen AG is a Swiss-based market leader specializing in tractor attachments and agricultural machinery. The company operates through three main business areas: Ott, Agriott, and Rauchcenter, targeting agricultural machinery buyers and dealers primarily within Switzerland. The website reflects a professional business presence with clear branding, consistent messaging, and comprehensive contact information. Technically, the site is built on the ProcessWire CMS platform and leverages modern JavaScript libraries and UI frameworks, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and published security policies indicates room for improvement. Privacy compliance is lacking due to missing privacy and cookie policies, which should be addressed to meet GDPR requirements. Overall, the website is trustworthy and professional, supporting the company's strong market position.

exali AG is a Swiss-based digital insurance provider specializing in professional liability and related insurance products tailored for freelancers, self-employed professionals, and companies primarily in IT, media, consulting, and eCommerce sectors. Founded in 2008, exali has established a strong market presence across 28 European countries with over 20,000 customers. Their business model emphasizes fast, flexible, and modular insurance solutions accessible online with personalized expert support. The website reflects a professional and trustworthy brand with comprehensive product information and strong customer testimonials, including a high eKomi rating. Technically, the website employs a modern JavaScript stack including RequireJS, jQuery, Google Tag Manager, and Usercentrics for consent management, ensuring GDPR compliance. The site is mobile-optimized with lazy loading and interactive UI components, delivering a good user experience and moderate performance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and a formal security policy page are absent. Overall, exali demonstrates a mature digital infrastructure and a strong security and privacy awareness, though improvements in explicit security documentation and headers could enhance their posture. The site is fully accessible without WAF or blocking mechanisms, supporting a high trust level for users and partners.

G

G DATA CyberDefense AG

gdata.ch

81

G DATA CyberDefense AG is a well-established German cybersecurity company providing comprehensive IT security solutions including managed detection and response, endpoint security, and security awareness training. The company targets a broad audience ranging from small businesses to large enterprises and public sector organizations, emphasizing 'Made in Germany' quality and compliance. Their market position is strong, supported by multiple certifications and industry awards. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and includes consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is robust with ISO 27001 certification and managed incident response services, though some improvements in security headers and vulnerability disclosure transparency are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, offering a positive user experience and clear business credibility.

8horses GmbH is a small, Switzerland-based arthouse film production company composed of a group of artists, filmmakers, writers, and cinematographers. Their website showcases a portfolio of artistic film projects and emphasizes their collaborative creative approach. The company targets a niche audience interested in arthouse and artistic films, positioning itself as a specialized media production entity within the Swiss market. Technically, the website is built on the Indexhibit CMS platform and uses jQuery for scripting. It employs HTTPS for secure communication but lacks advanced security headers and modern tracking or analytics tools. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design quality. From a security perspective, the site has a basic posture with HTTPS enabled but missing critical security headers and no visible privacy or cookie policies, which are compliance gaps. No incident response or vulnerability disclosure mechanisms are present. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the site is safe, professional, and trustworthy but could improve privacy compliance and security hardening. The overall risk is moderate with recommendations to implement privacy and cookie policies, add security headers, and provide vulnerability disclosure information to enhance trust and compliance.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacation bookings targeting German-speaking customers in Switzerland, Germany, and Austria. The site offers detailed information about cruise experiences, ships, destinations, and booking options, supported by a modern Adobe Experience Manager CMS infrastructure. The technical setup includes advanced tracking and consent management tools such as Adobe DTM and Usercentrics, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed via cookie consent but lacks visible privacy and terms of service pages. Overall, the website is trustworthy, well-branded, and serves a large enterprise in the transportation and hospitality sectors.

P

Plinko

plinkocasino.ch

61

Plinkocasino.ch is a niche online content and affiliate platform focused on the Plinko gambling game, targeting primarily Swiss players. The website provides comprehensive information about Plinko, including game rules, strategies, demo versions, and lists of recommended casinos with bonuses. It also offers multilingual support and mobile app download instructions. Technically, the site is built with standard web technologies, uses HTTPS, and integrates third-party game demos via iframes. The site leverages Cloudflare Insights for analytics but lacks advanced security headers and explicit privacy or incident response policies. Contact information is limited to an email address, with no phone or physical address provided. The site is compliant with basic GDPR requirements but lacks cookie consent mechanisms. Overall, the site is moderately professional and trustworthy as an affiliate content portal but could improve in security and privacy transparency.

F

Fiapf | International Federation of Film Producers Associations

fiapf.org

73

FIAPF is an established international federation representing film producers globally, advocating for diverse audiovisual production and supporting film festivals. The organization operates a professional website built on WordPress, leveraging modern plugins and technologies such as Yoast SEO, Matomo analytics, and GDPR-compliant cookie management. The site is hosted on Infomaniak servers and uses HTTPS with a clientTransferProhibited domain status, indicating a secure and stable online presence. Security posture is solid with room for improvement in DNSSEC and security headers. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website reflects a credible, professional organization with a clear focus on media industry advocacy.

S

Spreadshirt

spreadshirt.ch

67

Spreadshirt.ch is a leading European e-commerce platform specializing in custom T-shirt printing and personalized apparel. The website offers a comprehensive range of services including design-your-own products, marketplace shopping, and B2B corporate clothing solutions. Positioned as Europe's largest T-shirt printing company, Spreadshirt targets a broad audience seeking personalized merchandise. The platform is supported by a mature technical infrastructure utilizing modern JavaScript frameworks, cookie consent management via OneTrust, and analytics through Adobe Analytics, reflecting a high level of digital maturity. Security posture is strong with HTTPS enforcement, multiple security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates good privacy compliance and business credibility, supported by consistent WHOIS data and clear contact channels.

E

EPOSINT AG Technische Kunststoffbeschichtungen

eposint.ch

55

EPOSINT AG is a Swiss-based company specializing in technical plastic coatings for surface protection across various industries worldwide. Positioned as an innovation leader in Switzerland, the company offers a broad range of coating services including anti-adhesive, anti-slip, chemical protection, electrical insulation, corrosion protection, and wear protection. The business operates primarily in the manufacturing sector with a B2B model, supported by a professional website built on Contao CMS and enhanced with modern JavaScript libraries. The company is part of the larger ADELHELM group, which includes several subsidiaries across Europe and North America. Technically, the website demonstrates a solid digital infrastructure with HTTPS enforced, use of Matomo analytics for privacy-conscious tracking, and structured data for SEO. The site is mobile-optimized with good navigation and content quality. Security posture is good with secure forms and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. Overall, the website and business present a trustworthy and professional image with strong market positioning in the technical coatings industry. The domain registration data aligns well with the business claims, supporting legitimacy. There are no indications of blocking or WAF interference, allowing full content accessibility and analysis. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving visible anti-bot measures on forms to further strengthen security and trust.

S

Soprema AG

soprema.ch

55

Soprema AG is a well-established Swiss company specializing in sustainable building solutions, particularly waterproofing and insulation products for flat roofs and civil engineering. The company benefits from a strong market position supported by its parent French family-owned group, with a history dating back to 1908. The website reflects a mature digital presence with a comprehensive product catalog, customer support services, and active social media engagement. Technically, the site uses modern web technologies and enforces HTTPS with appropriate security headers, ensuring a secure browsing experience. Privacy compliance is well addressed with a forced-choice cookie consent mechanism and a detailed privacy policy. However, there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and aligned with industry standards.

The ABC Global Book Service website is a non-profit international platform hosted by the World Intellectual Property Organization (WIPO) and managed by the International Computing Centre. It provides an expanding catalogue of accessible format books contributed by partner libraries worldwide under the Marrakesh Treaty framework. The site targets not-for-profit organizations serving persons who are blind, visually impaired, or otherwise print disabled. The business model is consortium-based, focusing on accessibility and international cooperation. The website content is multilingual and professionally presented, reflecting a consistent brand aligned with its parent organization.

E

E.M.P. Merchandising HGmbH

emp-online.ch

71

EMP Schweiz operates a professional e-commerce platform specializing in fan merchandise, heavy metal, entertainment, and alternative fashion products. The company targets music, movie, TV, and gaming fans primarily in Europe, positioning itself as a leading retailer in this niche. The website offers over 25,000 products and supports multiple languages and country-specific domains, indicating a mature and broad market presence. The business model focuses on direct online retail with value-added services such as a Backstage Club offering exclusive discounts and products. Technically, the website is built on Salesforce Commerce Cloud, leveraging modern JavaScript libraries and third-party analytics and marketing tools like CQuotient and AppDynamics. The site is mobile-optimized with good SEO and accessibility basics, although some accessibility features could be enhanced. Performance is moderate, with a well-structured navigation and professional design. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent banner, and GDPR adherence. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. Overall, EMP Schweiz presents a trustworthy and professional online retail presence with strong business credibility and privacy compliance. Strategic enhancements in security transparency and accessibility would further strengthen its posture.