Switzerland security reports

S

SIMALFA®

simalfa.ch

68

SIMALFA® is a Swiss-based manufacturing company specializing in aluminum profiles and systems, targeting industrial clients and construction professionals. The website reflects a medium-sized enterprise with a professional online presence, multilingual support, and a clear focus on B2B services. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, Google Analytics, and a comprehensive cookie consent solution, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy and professionally maintained, with room for improvement in security transparency and accessibility.

The website myvaillantweb.ch is associated with the Vaillant Group, a large company operating in the energy sector, likely focusing on heating and ventilation solutions. The site appears to serve as a customer or partner portal for the Swiss market. However, the visible content is minimal, primarily showing a loading screen with no accessible user content or navigation elements. The technical infrastructure uses modern JavaScript modules and Material-UI components, indicating a contemporary frontend framework. Analytics and consent management are implemented via Google Tag Manager and ConsentManager respectively. Security posture is limited due to lack of visible security headers and absence of privacy or terms of service pages. No contact information or forms are present in the HTML content, limiting user engagement and transparency. Overall, the site is accessible without WAF or security challenges but lacks comprehensive content and compliance documentation.

V

Vaillant GmbH

myvaillantpro.ch

66

Vaillant GmbH operates a professional B2B platform, myVaillant Pro, targeting installers, planners, and partners in Switzerland. The website provides access to a webshop, technical documentation, planning and installation tools, and customer service resources. The platform is well-branded, consistent with the Vaillant Group identity, and serves as a critical digital touchpoint for professional partners. Technically, the site leverages modern frameworks such as Next.js and React, integrates consent management and analytics tools, and enforces strong security headers and HTTPS, reflecting a mature digital infrastructure. Security posture is strong with no evident vulnerabilities, though explicit security policy and incident response pages are absent. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained, supporting Vaillant's market position in the energy sector.

LEDVANCE is a large, well-established company specializing in the development and supply of advanced lighting products for both professional and consumer markets. The company positions itself as a global leader in general lighting solutions, offering a broad portfolio of efficient and modern lighting products. The website reflects a professional and consistent brand image with multi-language support, targeting a diverse international audience. Technically, the website employs modern web technologies including Google Tag Manager and Usercentrics for consent management, and is built on the Pimcore CMS platform. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. Security posture is solid with HTTPS enforced and privacy consent mechanisms in place, but lacks visible security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and secure online presence. Overall, the website is professional and trustworthy, though it would benefit from publishing explicit privacy and security policies and providing clearer contact information.

L

La Chaîne Météo

lachainemeteo.ch

68

La Chaîne Météo is a professional weather media company providing free 15-day weather forecasts primarily for Switzerland and French-speaking regions. The website offers weather news, videos, and a community platform, supported by advertising and optional subscription services. The brand is well established with multiple country-specific domains, indicating a broad regional presence. Technically, the site employs modern JavaScript frameworks, ad technologies, and a consent management platform to ensure GDPR compliance. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, well-branded, and serves a general audience with safe content.

V

Valencia Kommunikation AG

valencia.ch

62

Valencia Kommunikation AG is a leading full-service communication and digital agency based in Basel, Switzerland. With over 80 employees, the company offers a broad range of services including branding, web development, campaigning, and digital product creation. Their market position is strong within the Swiss communications sector, serving notable clients such as Coop, Mobility, and Bank Baumann & Cie. The website reflects a mature digital presence with modern technologies like Nuxt.js, Storyblok CMS, and Vimeo integration, ensuring a fast, mobile-optimized, and user-friendly experience. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms. Security posture is solid with HTTPS and standard security headers, though explicit security policies and vulnerability disclosures are absent. Overall, the website and business demonstrate high professionalism and trustworthiness.

H

Help Ukraine in Switzerland

helpua.ch

55

Help Ukraine in Switzerland is a small non-profit organization dedicated to supporting the Ukrainian community in Switzerland and providing humanitarian aid to Ukraine. The organization focuses on procuring medical supplies, civil protection equipment, and food aid, operating a warehouse in Vevey, Switzerland. Their digital presence is built on WordPress with integrated donation capabilities via Stripe, and they maintain active social media channels to engage donors and volunteers. The website is professionally designed with good content relevance and clear navigation, targeting donors and the Ukrainian diaspora. Technically, the site uses modern web technologies and plugins, but lacks explicit privacy and cookie policies, which are important for compliance. Security posture is good with HTTPS and secure payment integration, though some security headers could be improved. WHOIS data aligns well with the organization's claims, supporting legitimacy. Overall, the site is trustworthy and functional but could enhance privacy compliance and security headers.

V

Vaillant GmbH

vaillant.ch

49

Vaillant GmbH is a well-established German family-owned company with over 150 years of experience in innovative heating technology. The website targets private customers in Switzerland, offering a wide range of heating solutions including heat pumps, gas heating systems, solar thermal systems, and hot water storage. The company emphasizes sustainability, energy efficiency, and comprehensive customer service with a strong presence in the Swiss market. Technically, the website is built on a modern stack with FirstSpirit CMS, uses HTTPS, integrates Google reCAPTCHA for form security, and employs consent management tools to comply with privacy regulations. Security posture is solid with no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, well-branded, and trustworthy, reflecting the company's market leadership and commitment to quality.

P

PEUGEOT

peugeot.ch

63

PEUGEOT Switzerland operates a professional and comprehensive website showcasing its range of vehicles including electric, hybrid, and plug-in hybrid models. The site targets general consumers in Switzerland interested in automotive products and services. It offers vehicle configuration, financing options, after-sales services, and dealer locators, reflecting a mature business model under the Stellantis group. Technically, the website leverages Adobe Experience Manager CMS, integrates advanced analytics and marketing tools such as Google Tag Manager and Dynamic Yield, and employs modern JavaScript libraries and responsive design techniques. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, although explicit privacy and security policies are not prominently linked. Overall, the site is well-structured, performant, and trustworthy, with no signs of blocking or WAF interference.

V

Valencia

valenciaxmas.ch

49

The website valenciaxmas.ch is a small-scale, non-profit initiative centered around a musical Christmas greeting titled 'Vo Härze' aimed at showing solidarity with people in Ukraine. It promotes humanitarian aid by encouraging donations to HelpUA.ch, a reputable charity organization. The site targets a general audience interested in Christmas and charitable causes. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Swiper.js for interactive elements. It is mobile-optimized with good SEO and accessibility basics, though some security headers are missing. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and a formal security policy. Privacy compliance is addressed with a cookie banner and a linked privacy policy in German, indicating GDPR awareness. No contact emails, phone numbers, or terms of service pages are present, which limits direct business credibility signals. Overall, the site is trustworthy, safe, and professionally presented, with a focus on charitable messaging rather than commercial business operations.

U

UCB Farchim S.A.

ucbsuisse.ch

65

UCB Suisse is a major pharmaceutical production site of the Belgian biopharmaceutical group UCB, specializing in medicines for allergies, epilepsy, and autoimmune diseases. The website targets patients, healthcare professionals, and the general public in Switzerland, providing corporate information, news, and patient testimonials. The technical infrastructure is based on Drupal CMS with modern analytics and cookie consent tools, ensuring GDPR compliance and a good user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though no dedicated security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

Biogen Switzerland AG operates as a leading biotechnology company focused on pioneering scientific research and innovation in complex and severe diseases, particularly in neurology, neuropsychiatry, immunology, and rare diseases. The website reflects a strong market position with a comprehensive product portfolio and a clear commitment to improving health outcomes. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies including Cookiebot for privacy compliance and Google Analytics for user insights. The site is well-optimized for mobile and accessibility, with consistent branding and professional content presentation. Security posture is solid with HTTPS enforcement and secure cookie practices, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates a mature digital presence aligned with corporate standards and regulatory compliance.

A

Audemars Piguet

aplb.ch

80

Audemars Piguet is a prestigious Swiss luxury watchmaker with a rich heritage dating back to 1875. The company operates a sophisticated and visually rich website that showcases its products, brand story, and latest novelties. The site targets affluent consumers and watch enthusiasts globally, emphasizing craftsmanship and exclusivity. Technically, the website leverages modern JavaScript frameworks such as Vue.js, integrates Google Tag Manager for analytics, and uses OneTrust for privacy compliance, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The WHOIS data for the domain is unavailable, likely due to privacy protection, which is common for luxury brands. Overall, the website is professional, secure, and compliant with privacy regulations, supporting the brand's high trustworthiness and market position.

V

Valencia Kommunikation AG (bisher: cab services ag)

cabag.ch

59

cab.digital is a Swiss digital agency based in Basel, operating under the legal entity Valencia Kommunikation AG (formerly cab services ag). The company specializes in web development, user experience design, digital strategy consulting, and agile coaching. Their market position is that of a trusted regional digital partner with a strong emphasis on customer relationships and pragmatic digital solutions. The website showcases detailed case studies and a professional design that reflects their expertise and client focus. Technically, the site uses modern JavaScript frameworks including Vue.js and CMS platforms like TYPO3 and Craft CMS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though the site lacks a dedicated security policy or incident response information. WHOIS data is privacy protected, which is justified for this business type, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and well-structured, supporting the company's credibility in the digital services market.

E

Eme Énergie

emeenergies.ch

53

E-ME Énergies is a Swiss-based company specializing in renewable energy solutions including photovoltaic panels, heat pumps, electric vehicle charging stations, energy storage batteries, and solar carports. The company positions itself as an expert in the Swiss renewable energy market, targeting residential and commercial customers seeking sustainable energy installations. Their website reflects a professional and modern digital presence built on WordPress with Elementor, integrating security features such as hCaptcha and CleanTalk anti-spam protection. The site is well-structured with comprehensive privacy and cookie policies, demonstrating GDPR compliance and user consent mechanisms. Security posture is strong with HTTPS enforced and security headers present, though no explicit security or incident response policies are published. Overall, the business shows a credible and trustworthy profile with active customer testimonials and partnerships with recognized brands. The website is accessible without WAF or blocking mechanisms, and no critical vulnerabilities were detected.

W

Wonderweb

wonderweb.ch

49

Wonderweb is a small, specialized web agency based in Geneva, Switzerland, offering custom website creation, design, content management, hosting, and maintenance services. The company emphasizes ergonomic, responsive, and user-friendly websites and has over 10 years of experience. Their target audience includes businesses and associations seeking tailored web solutions. Technically, the website uses modern JavaScript libraries such as Barba.js for page transitions and Rellax.js for parallax effects, hosted likely with Infomaniak, a privacy-conscious hosting provider. The site is mobile-optimized and well-structured but lacks advanced SEO and accessibility features. Security posture is basic with no detected security headers or published security policies, and no privacy or cookie policies are present, indicating compliance gaps. No contact information or incident response details are provided on the analyzed page, limiting direct communication channels. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

The website oficio.ch serves as a personal graphic design portfolio for Pablo Lavalley, showcasing a wide range of graphic design projects. It targets clients and enthusiasts interested in visual design and artistic works. The business model appears to be a freelance or individual service offering, with a focus on creative portfolio presentation rather than e-commerce or large-scale business operations. The site is small in scale and based in Switzerland. Technically, the website uses a modern frontend stack including Foundation framework, jQuery, and Modernizr, with Google Analytics and Google Tag Manager integrated for visitor tracking. The site is mobile optimized and presents a good user experience with clear navigation and professional design. However, there is no detected CMS or backend technology disclosed. From a security perspective, the site uses HTTPS as indicated by the base URL, but lacks explicit security headers and does not provide privacy, cookie, or terms of service policies. No contact information or incident response details are available, which limits trust and compliance with GDPR. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. Overall, the site is safe and suitable for general audiences, with no adult or questionable content. The lack of privacy and security policies, as well as contact information, reduces the business credibility and privacy compliance scores. Strategic improvements in these areas would enhance trust and compliance.

T

Tamedia Publikationen Deutschschweiz AG

hommages.ch

60

Hommages.ch is a professionally managed Swiss media platform specializing in obituary notices and bereavement services, operated by Tamedia Publikationen Deutschschweiz AG. It aggregates death announcements from leading regional newspapers and offers users the ability to publish notices and condolences online. The platform targets families and individuals in French-speaking Switzerland seeking reliable obituary information and related services. Technically, the website employs modern JavaScript frameworks such as Livewire and Alpine.js, integrates with Google Tag Manager and OneTrust for analytics and cookie consent, and uses ad networks for monetization. The site is mobile-optimized with good SEO and accessibility features. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though it lacks a dedicated security policy or incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and provides a safe user experience.

S

Swiss Refugee Council

refugeecouncil.ch

61

The Swiss Refugee Council is a well-established non-profit organization dedicated to supporting refugees in Switzerland through advocacy, information dissemination, and direct assistance. The website reflects a professional and consistent brand presence, targeting refugees, policymakers, and the general public interested in refugee issues. The organization operates primarily in the non-profit sector within Switzerland, with a medium-sized operational scale. Technically, the website is built on the TYPO3 CMS platform, leveraging modern tools such as Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good mobile optimization and moderate performance, with a clear cookie consent mechanism that aligns with GDPR requirements. SEO and accessibility are basic but functional. From a security perspective, the site enforces HTTPS and includes standard security headers, contributing to a good security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit incident response contacts and a vulnerability disclosure policy suggests areas for improvement in security transparency. Overall, the website is trustworthy and professional, with extensive user tracking via major ad networks and analytics services. Strategic recommendations include enhancing accessibility, publishing terms of service and incident response information, and improving SEO metadata completeness to further strengthen the site's compliance and user trust.

S

Schweizerische Flüchtlingshilfe (SFH)

fluechtlingshilfe.ch

61

The Schweizerische Flüchtlingshilfe (SFH) is a well-established Swiss non-profit organization dedicated to advocating for the rights and protection of refugees in Switzerland since 1936. The website serves as a comprehensive platform offering information on asylum procedures, migration policies, educational programs, and fundraising opportunities. It targets refugees, protection seekers, supporters, and professionals involved in refugee aid. The organization maintains a strong market position as a trusted voice in refugee advocacy within Switzerland. Technically, the website is built on TYPO3 CMS, integrates Google Analytics and Tag Manager for analytics, and uses Cookiebot for cookie consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs standard security headers, and manages cookies responsibly. However, it lacks explicit privacy and terms of service pages, and no direct company contact emails or phone numbers are visible, which are areas for improvement. Overall, the website is professional, trustworthy, and safe for general audiences, with a high legitimacy score based on WHOIS data alignment and content consistency.

silnativa.ch is a French-language educational website focused on explaining the concept and importance of reactive energy within electrical systems, targeting industrial and business audiences interested in energy efficiency and electrical network stability. The site is built on WordPress with Yoast SEO plugin, demonstrating good technical implementation and SEO optimization. However, it lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts its privacy compliance and business credibility scores. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Overall, the website is professional and informative but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

C

Cuk.ch

cuk.ch

40

Cuk.ch is a French-language media website focused on technology, culture, and leisure topics, operating since 2001. It serves a niche audience of French-speaking technology enthusiasts and general readers interested in cultural content. The site uses WordPress CMS and features a blog-style content publishing model with product reviews and cultural commentary. The technical infrastructure is moderate with basic mobile optimization and SEO. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal privacy or cookie policies. Contact is limited to a web form with no direct emails or phone numbers. Overall, the site is trustworthy but would benefit from improved security and privacy compliance measures.

A

Audemars Piguet

audemarspiguet.com

80

Audemars Piguet is a prestigious Swiss luxury watchmaker with a rich heritage dating back to 1875. The company specializes in crafting high-end mechanical watches and maintains a strong global brand presence. Their website reflects a mature digital infrastructure with modern technologies such as Adobe Experience Manager, Google Tag Manager, and OneTrust for privacy compliance. The site is well-designed, mobile-optimized, and provides rich multimedia content to engage affluent consumers and watch enthusiasts. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data is unusual but does not detract significantly from the overall trustworthiness given the brand's reputation and website quality. Strategic recommendations include publishing a formal security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

S

SALT.

salt.ch

68

Salt is a major Swiss telecommunications company offering mobile subscriptions, internet, TV, and device sales primarily targeting consumers and business customers in Switzerland. The website is professionally designed using Drupal 10 CMS and incorporates modern technologies such as Google Tag Manager and cookie consent mechanisms. It provides detailed product offerings with clear pricing and promotional information. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are not published. Privacy compliance is basic with cookie consent but no detected privacy policy page in the provided content. Overall, the website is trustworthy, well-branded, and optimized for mobile users.

R

RatioCom Sàrl

ratiocom.ch

55

RatioCom Sàrl is a Swiss-based communication agency specializing in project management, marketing, graphic design, leadership, and management services. The company targets businesses and professionals seeking streamlined communication solutions. The website presents a professional image with consistent branding and clear service offerings, positioning itself as a niche local agency in the media sector. Technically, the site is built on WordPress using a modern stack including WooCommerce, jQuery, and popular plugins for events and bookings. The site is moderately performant and mobile-optimized with good SEO practices. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit privacy and cookie policies are missing, representing compliance gaps. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

T

Transports publics lausannois

t-l.ch

65

Transports publics lausannois (TL) operates as the primary public transportation provider in the Lausanne region of Switzerland, offering bus, metro (m1, m2), and train (LEB) services. The website serves residents and visitors by providing schedules, ticketing options, real-time traffic updates, and customer support. The company maintains a strong market position as a key regional mobility provider with a comprehensive digital presence including social media and news portals. Technically, the website is built on WordPress 6.6.1 with modern JavaScript libraries such as Alpine.js and jQuery. It integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, and TikTok Pixel. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, some security headers are not explicitly detected, and there is no published security policy or incident response contact. Privacy compliance is partially addressed with a privacy policy and terms of service, but lacks a clear cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's public transportation mission. Strategic improvements in security headers, privacy consent, and incident response transparency would enhance the security posture and regulatory compliance.

T

Tamedia Espace AG

bazonline.ch

71

Basler Zeitung, operated by Tamedia Espace AG, is a well-established Swiss regional news media outlet founded in 1979. It provides comprehensive news coverage focused on Basel, Switzerland, and international topics, targeting a general audience with a subscription and advertising-based business model. The website offers digital subscriptions, e-paper access, newsletters, and podcasts, positioning itself as a key player in the Swiss media landscape. Technically, the site is built on modern web technologies including Next.js and UnityCMS, with extensive use of JavaScript libraries and third-party services for advertising and analytics. The site is optimized for mobile and desktop with good performance and accessibility standards. Security posture is strong with HTTPS, security headers, and consent management implemented, although explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations, with no signs of blocking or WAF interference.

C

Comédie de Genève

comedie.ch

55

Comédie de Genève is a cultural institution based in Geneva, Switzerland, specializing in theatre, dance, and performance arts. It serves a broad public audience with a focus on artistic creation and cultural engagement. The website reflects a well-structured platform offering information on programming, subscriptions, ticketing, and cultural activities. The business model centers on live performances and audience engagement through subscriptions and events. The organization holds a reputable position within the regional cultural sector.

A

Association Castrum & Cie

le-castrum.ch

55

Le Castrum Festival is a small, non-profit cultural festival based in Yverdon-les-Bains, Switzerland, focusing on multidisciplinary artistic performances including theater, dance, music, and workshops. The festival emphasizes accessibility, community engagement, and mostly free public events. The website reflects a well-structured and professionally designed platform with good content quality and navigation, targeting a general audience interested in cultural events. Technically, the site uses standard web technologies such as jQuery and CSS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is high with clear contact information and partner endorsements.

O

Organisation suisse d’aide aux réfugiés (OSAR)

osar.ch

59

The Organisation suisse d’aide aux réfugiés (OSAR) is a Swiss non-profit organization dedicated to supporting refugees and asylum seekers. It advocates for human rights, provides legal information, and offers educational resources. The website serves as a comprehensive platform for information dissemination, advocacy, and fundraising, positioning OSAR as a key player in the Swiss refugee aid sector. Technically, the site is built on TYPO3 CMS, integrates modern analytics and consent management tools, and demonstrates good mobile optimization and security practices. Security posture is strong with HTTPS and security headers in place, though explicit privacy and security policies are not found in the provided content. Overall, the website is professional, trustworthy, and well-aligned with its mission, though it could improve transparency by publishing privacy and terms of service documents and providing direct contact details for security and data protection inquiries.

P

Pavillon ADC

pavillon-adc.ch

50

Pavillon ADC is a non-profit cultural association based in Geneva, Switzerland, dedicated to contemporary dance. The organization offers a range of services including dance performances, workshops, participatory projects, and cultural events. The website serves as a comprehensive platform for event information, ticketing, and community engagement, targeting a general audience interested in contemporary dance and cultural activities. The business model focuses on cultural promotion and community involvement rather than commercial profit. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO for optimization, jQuery, and media plugins for enhanced user experience. The site is mobile-optimized and uses HTTPS, ensuring secure communication. However, some areas such as security headers and privacy compliance mechanisms like cookie consent are lacking, which could be improved to enhance security and regulatory adherence. From a security perspective, the site demonstrates good practices with HTTPS and no visible vulnerabilities or exposed sensitive data. The absence of security headers and incident response information represents an opportunity for strengthening the security posture. No signs of WAF or content blocking were detected, allowing full content accessibility. Overall, Pavillon ADC presents a trustworthy and professional online presence with strong business credibility and good technical implementation. To further improve, the organization should implement privacy and cookie policies, enhance security headers, and provide clear incident response contacts to align with best practices and compliance requirements.

T

Tamedia

tamedia.ch

74

Tamedia is a well-established Swiss media company with a rich history dating back to 1893. It operates a broad portfolio of newspapers, magazines, and digital media platforms serving the German and French-speaking regions of Switzerland. The company is part of the TX Group and maintains a strong market position as a leading media provider. The website reflects a mature digital infrastructure using modern web technologies such as Next.js and React, ensuring fast performance and mobile optimization. Privacy and cookie compliance are well implemented with clear policies and consent mechanisms. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. However, the site lacks a dedicated security policy or incident response page, which could enhance trust further. Overall, the website is professional, trustworthy, and aligns well with the company's business profile.

T

Tamedia AG

tagesanzeiger.ch

73

Tages-Anzeiger is a leading Swiss daily newspaper operated by Tamedia AG, founded in 1893. It offers comprehensive news coverage in politics, economy, sports, culture, and more, targeting a broad general audience in Switzerland and internationally. The business model combines subscription services with advertising revenue, supported by digital offerings such as e-papers, newsletters, and podcasts. The website demonstrates a mature digital infrastructure using modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Privacy and cookie policies are well implemented with consent management, reflecting compliance with GDPR standards. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security policy and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and well-positioned in the Swiss media market.

C

Centre Sportif Régional Vaudois

csrv.site

52

The Centre Sportif Régional Vaudois (CSRV) is a small cooperative established in 2024 that manages sports facilities in Lausanne, Switzerland. Its primary business involves managing and renting football fields, operating a buvette during matches, and providing private event rentals. The website serves as an informational portal for local sports clubs and community members, presenting details about the facilities and cooperative activities. The business model is community-focused and regionally oriented, with a clear physical presence and cooperative governance structure. Technically, the website is built using an older version of the Incomedia WebSite X5 CMS, with basic HTML, CSS, and JavaScript. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are minimal but functional. Hosting is provided by Infomaniak Network SA, a reputable Swiss hosting provider. There is no evidence of advanced frameworks or modern web technologies. From a security perspective, the site lacks visible HTTPS enforcement and security headers, and DNSSEC is not enabled. The domain is protected by privacy services, which is reasonable for a small cooperative. No privacy, cookie, or terms of service policies are published, indicating compliance gaps. No incident response or vulnerability disclosure information is available. The site does not collect user data or employ tracking technologies, reducing privacy risks but also limiting user engagement features. Overall, the website is safe and suitable for its intended audience but would benefit from improved security practices, privacy compliance, and enhanced technical modernization to increase trust and professionalism.

C

CSRV | Centre Sportif Régional Vaudois

csrv.ch

48

CSRV | Centre Sportif Régional Vaudois is a small regional sports cooperative based in Switzerland, providing sports facility rental and event hosting services primarily focused on football and community events. The website presents a professional and consistent brand image, targeting local sports clubs, families, and event organizers. The business has a long history dating back to 1966, which aligns with the domain age and registration data, supporting its legitimacy. Technically, the website is built on WordPress using the Divi theme and several plugins for booking and mapping functionalities. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and some security plugins in use, but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvement. The security evaluation shows no critical vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies and security headers reduces the overall security and privacy compliance score. No incident response or vulnerability disclosure information is provided. The website content is safe for general audiences and contains no adult or questionable material. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

C

CIAC Sàrl

batiguide.ch

43

Batiguide is a Swiss platform dedicated to connecting property owners with trusted local construction and renovation professionals. Established since 1982 and operated by CIAC Sàrl, it serves the French-speaking Swiss market by providing a curated directory of artisans and companies, facilitating informed decision-making for property-related projects. The platform offers services such as emergency repairs, professional listings, and educational guides related to construction trades. Technically, the website is built on a modern WordPress CMS with standard libraries like jQuery and Bootstrap, ensuring a responsive and user-friendly experience. The presence of cookie consent mechanisms and HTTPS indicates a baseline commitment to privacy and security. However, the absence of explicit security policies and incident response contacts suggests room for improvement in security transparency. Overall, the site is professionally maintained, trustworthy, and well-positioned within its niche market.

Swisscommunes.ch is a specialized digital solutions provider targeting Swiss communes and local governments. Their offerings include document publication and archiving, parking permits, and room rental management, emphasizing simplicity, autonomy, and cost-effectiveness. The business operates in a niche market with a clear focus on municipal digital services, supported by a small-sized company, Gilston Digital SA. The website is professionally designed with consistent branding and includes trust signals such as customer testimonials and Swiss Made Software certification. Technically, the site is built on WordPress with modern libraries and frameworks, including Bootstrap and Matomo analytics, ensuring a good user experience and privacy-conscious tracking. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though it lacks some advanced security headers and explicit security policies. Overall, the site is trustworthy and well-positioned for its target audience, with room for improvement in privacy documentation and security transparency.

S

SwissCenter

swisscenter.com

59

SwissCenter is a Swiss-based web hosting and datacenter service provider with a long-standing presence since 1995. The company offers a range of hosting solutions including shared web hosting, dedicated servers, server housing, datacenter services, and hosted Exchange email solutions, targeting businesses and professionals seeking reliable Swiss-quality internet services. The website is professionally designed, primarily in French, and showcases key services and customer references from reputable companies, reinforcing its market position as a trusted hosting provider. Technically, the website employs a modern JavaScript stack including jQuery, LayerSlider, and FancyBox, delivering a functional and visually appealing user experience. While mobile optimization and accessibility are basic, the site maintains good SEO practices and performance. Hosting appears to be managed internally with a Swiss datacenter focus, emphasizing data locality and performance with SSD storage and SSL certificates via Let's Encrypt. From a security perspective, the site enforces HTTPS and supports email security standards like DKIM. However, no explicit security headers were detected in the HTML source, and no published security or incident response policies were found. The cookie consent mechanism is present and functional, but privacy policy documentation is lacking or not easily discoverable. WHOIS data for the domain is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional site and business references. Overall, SwissCenter presents a credible and professional hosting business with solid technical infrastructure but would benefit from enhanced transparency in privacy, security policies, and domain registration information to improve trust and compliance posture.

S

Swiss Creative

swisscreative.ch

57

Swiss Creative is a small communication agency based in Echallens, Switzerland, specializing in creative and communication services for local businesses and organizations. The website presents a professional image with clear branding and a focus on digital marketing and communication solutions. The technical infrastructure is built on WordPress using the Enfold theme, with modern fonts and SEO plugins enhancing the site's digital maturity. Analytics and tracking tools such as Hotjar and Google Tag Manager are employed, although privacy compliance is limited due to the absence of explicit privacy and cookie policies. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and a vulnerability disclosure policy. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

E

Edital SA

edital.ch

50

Edital SA operates as the publisher of L’Echo du Gros-de-Vaud, an independent official journal serving the Gros-de-Vaud district in Switzerland. The publication has a strong local presence with a subscriber base of 3500 and free distribution to 19600 households eleven times a year. The company is family-owned and has been active for over three decades, positioning itself as a trusted local media outlet. The business model relies on subscriptions and advertising services targeted at local businesses and residents. The website reflects this focus with clear information about subscriptions, advertising opportunities, and contact details.

L

Le Courrier

lecourrier.ch

54

Le Courrier is a French-language Swiss news media outlet offering a wide range of news and cultural content focused on regional, national, and international topics. The website supports a subscription and donation business model, leveraging WooCommerce for e-commerce functionalities. The site is well-branded, professionally designed, and optimized for SEO and accessibility, targeting French-speaking readers interested in news and culture. Technically, the site is built on WordPress with modern JavaScript frameworks and integrates marketing and push notification tools such as Brevo and WonderPush. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with clear cookie consent mechanisms and a comprehensive privacy policy. Overall, the site is trustworthy and safe for general audiences.

Confedere.ch is a French-language Swiss media website providing news and journal content, including print editions. The site is built on WordPress using a professional Newspaper theme and includes GDPR-compliant cookie consent mechanisms. The technical infrastructure is modern with standard plugins and Google Analytics integration. Security posture is adequate with HTTPS enforced but could be improved by adding explicit security headers and hardening login forms. The website is trustworthy with consistent domain registration data and no suspicious content detected. Privacy compliance is good with clear cookie policies and consent mechanisms, though terms of service and security policies are not explicitly found.

C

Cafés Cuendet Torréfaction SA

cafes-cuendet.ch

48

Cafés Cuendet Torréfaction SA is a well-established Swiss coffee roasting company founded in 1907, specializing in supplying high-quality coffee products primarily to hospitality professionals in the Swiss Romande region. The company emphasizes artisanal roasting methods and freshness, supporting a strong market position as a trusted supplier with a professional e-commerce presence. Technically, the website is built on WordPress with WooCommerce, leveraging modern libraries and privacy-conscious analytics tools such as Matomo Cloud alongside Google Analytics. The site is well-optimized for SEO and mobile devices, providing a positive user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and formal policies are absent. Overall, the domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness.

D

Domaine Croix-Duplex

croix-duplex.ch

49

Domaine Croix-Duplex is a small family-owned vineyard and wine producer located in Lavaux, Switzerland, offering a diverse range of wines and hosting various events including tastings and private functions. The website is professionally designed, multilingual, and supports e-commerce through WooCommerce, targeting wine enthusiasts and local visitors. The technical infrastructure leverages WordPress with modern plugins for performance and multilingual support, alongside Google Analytics and Mailchimp for marketing and analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the site presents a trustworthy and professional online presence for a regional wine business.

G

Garage Dind

garagedind.ch

54

Garage Dind is a Swiss family-owned automotive business with over 40 years of experience, specializing in vehicle sales, after-sales services, and vintage vehicle restoration, particularly focusing on the Citroën brand. The website reflects a well-established local business with clear contact information and a professional online presence. Technically, the site is built on WordPress with modern libraries such as Bootstrap and jQuery, offering a good user experience and mobile optimization. Security-wise, the site uses HTTPS and a reputable cookie consent management tool but lacks explicit security headers and detailed security policies. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the website is trustworthy and professional but could improve compliance and security transparency.

L

Ligue Romande de Football

lrf.ch

43

The Ligue Romande de Football (LRF) is a well-established non-profit sports association founded in 1899 and based in Lausanne, Switzerland. It focuses on promoting and organizing amateur football activities within the canton of Vaud. The website serves as an information hub for match schedules, results, official communications, and club support services. The target audience primarily consists of amateur football clubs and players in the region. The organization maintains a consistent brand presence and is supported by local sponsors, reinforcing its regional importance. Technically, the website employs modern frontend technologies such as Bootstrap and jQuery, with Google Fonts for typography. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and SEO optimization. No CMS or hosting provider details were identified. Performance is moderate, with no evident critical technical issues. From a security perspective, the site uses HTTPS (assumed from the URL), but no security headers were detected in the provided data. There is no visible privacy policy, cookie consent mechanism, or terms of service, which are important for GDPR compliance given the European location. No incident response or vulnerability disclosure information is present. No analytics or tracking scripts were found, indicating minimal user tracking. Overall, the security posture is average with recommendations to enhance headers, policies, and incident response readiness. The overall risk assessment is moderate with a legitimacy score of 90 based on consistent WHOIS data and alignment with the organization's claims. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, establishing vulnerability disclosure and incident response processes, and improving accessibility and SEO. These steps will enhance trust, compliance, and security maturity for the LRF website.

M

Monsieur Maurice

monsieurmaurice.ch

51

Monsieur Maurice is a small Swiss retail business specializing in bespoke tailoring services, offering custom suits and shirts delivered directly to clients at home or work. The company targets customers in the French-speaking region of Switzerland who seek personalized tailoring without the inconvenience of visiting stores. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of security headers and formal privacy policies indicates room for improvement. Cookie consent is implemented via tarteaucitron.io, supporting GDPR compliance to some extent. Overall, the website is professional and trustworthy, with consistent branding and positive customer testimonials. WHOIS data aligns well with the business claims, reinforcing legitimacy.

Swisscommunes.ch is a specialized digital solutions provider targeting Swiss communes and local government entities. Their offerings include document management, parking permits, and room rental management, emphasizing simplicity, autonomy, and affordability. The company behind the site is Gilston Digital SA, a small-sized entity with a clear niche in government-related technology services. The website is built on WordPress with modern front-end frameworks like Bootstrap and integrates privacy-conscious analytics via Matomo. The site includes a cookie consent mechanism and a contact form but lacks explicit privacy and terms of service pages. Security posture is generally good with HTTPS and some best practices but could be enhanced with additional security headers and published policies. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

G

Gilston Digital SA

gilston.consulting

47

Gilston Consulting, a department of Gilston Digital SA, specializes in delivering pilot projects that combine software and hardware development. Their market position is that of a niche Swiss consulting firm focusing on innovative proofs of concept and embedded systems. The company leverages a modern WordPress-based website with responsive design and standard web technologies, providing a professional digital presence. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial due to the absence of a privacy policy page. Overall, the website reflects a credible small business with clear contact channels and partner affiliations.