Switzerland security reports

C

Centre hospitalier universitaire vaudois (CHUV)

invivomagazine.com

53

The website invivomagazine.ch serves as the official magazine platform for the Centre hospitalier universitaire vaudois (CHUV) in Lausanne, Switzerland. It provides accessible health-related content to a broad audience, leveraging expert knowledge from the hospital. The site is well-positioned as a trusted source of medical news and advice, supported by a professional design and consistent branding. The business model focuses on informational publishing with subscription options for past issues, targeting the general public interested in health and wellness topics. Technically, the site is built on TYPO3 CMS, a robust and mature content management system, supplemented by modern JavaScript libraries such as jQuery, Slick Carousel, and LightGallery. The site demonstrates good mobile optimization and SEO practices, although accessibility features could be enhanced. Performance is moderate, with room for improvement in loading speed and technical modernization. From a security perspective, the site enforces HTTPS and uses Matomo analytics with cookies disabled to respect user privacy. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms. Security headers are not visibly implemented, which could be improved to enhance protection. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include implementing security headers, publishing security and incident response policies, and enhancing accessibility and performance to further strengthen the site's security posture and user experience.

S

SWISS SUPPLY

swiss-supply.ch

51

SWISS SUPPLY is a Swiss-based association uniting national organizations and institutions involved in supply, procurement, logistics, freight forwarding, packaging, disposal, and recycling. The website serves as a professional platform providing news updates, event information, market studies, and career resources targeted at professionals and organizations within the Swiss logistics and supply chain sectors. The association positions itself as a key collaborative entity fostering industry development and knowledge sharing. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and GDPR compliance plugins. The site demonstrates good mobile optimization, structured data usage, and SEO best practices, reflecting a mature digital presence. Performance is moderate with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. While no critical vulnerabilities or exposed sensitive data were detected, the absence of explicit security headers and a formal security policy suggests areas for improvement. No incident response or vulnerability disclosure information is provided. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture. Strategic enhancements in security policy transparency and technical security headers would further strengthen its security posture and user trust.

K

KS/CS Kommunikation Schweiz

ks-cs.ch

49

The website ks-cs.ch appears to be a small Swiss business site with minimal visible content and no explicit business description or contact information in the provided HTML. The technical infrastructure is based on WordPress using the Uncode theme, indicating a standard CMS platform but with limited optimization and no advanced SEO or accessibility features detected. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present, which raises compliance concerns. WHOIS data is consistent and transparent, supporting the legitimacy of the domain registration. Overall, the site requires significant improvements in security, privacy compliance, and content richness to enhance trust and user experience.

S

Schweizer Werbe-Auftraggeberverband

swa-asa.ch

60

The Schweizer Werbe-Auftraggeberverband (SWA) is a Swiss association representing the interests of advertising clients vis-à-vis government bodies, the advertising industry, and media. The website reflects a professional and focused organization targeting members within the Swiss advertising and media sectors. The digital infrastructure is based on the Weblication® CMS platform, indicating a moderate level of digital maturity with a clean, responsive design. However, the site lacks critical privacy and cookie policies, which are essential for GDPR compliance and user trust. Security posture is moderate with no visible security headers or incident response information, suggesting room for improvement in security best practices. Overall, the website is functional and professional but would benefit from enhanced compliance and security measures.

Médias Suisses is a well-established non-profit association founded in 1921 that represents print media publishers in French-speaking Switzerland. It focuses on advocacy, social partnership, and professional training to support its approximately 40 member organizations, including major regional newspapers and media outlets. The website serves as an informational and resource platform for members and stakeholders in the Swiss media sector. Technically, the site is built on WordPress using standard libraries such as jQuery and Swiper.js, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and cookie consent implemented, though it lacks advanced security headers and published security policies. Privacy compliance is partial, with no visible privacy policy or terms of service pages. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional, trustworthy, and serves its niche audience effectively.

I

IGEM

igem.ch

50

IGEM is a Swiss-based institute specializing in holistic and integrative medicine, targeting patients and healthcare professionals interested in complementary healthcare services. The website is built on WordPress and uses standard web technologies such as Google Fonts and Flickity for UI components. The digital maturity is moderate with basic mobile optimization and SEO practices. Security posture is weak due to lack of security headers, privacy policies, and incident response information. No WAF or blocking mechanisms were detected, allowing full access to content. Overall, the website presents a basic but functional online presence for a small healthcare institute.

I

Incore Bank AG

incorebank.ch

56

Incore Bank AG is a Swiss-based, FINMA-regulated B2B bank specializing in traditional and digital asset banking services. The company offers a modular and innovative banking platform tailored for banks, financial intermediaries, and companies, emphasizing technology integration and secure financial services. Their key offerings include Bank as a Service, multi-currency accounts, brokerage and custody, digital asset banking, embedded finance, and business process outsourcing. The website reflects a professional and modern digital presence built on TYPO3 CMS, with clear navigation, comprehensive content, and strong trust signals such as client testimonials and industry memberships. Technically, the site employs modern web technologies, including Google Tag Manager and Cookiebot for analytics and consent management, and enforces HTTPS with appropriate security headers, indicating a strong security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the website is well-structured, secure, and compliant with privacy regulations, serving its target audience effectively.

H

Honegger&Bregenzer

honeggerbregenzer.ch

54

Honegger&Bregenzer is a boutique full-service advertising and marketing agency based in Zürich, Switzerland, specializing in integrated marketing solutions, external marketing departments, and startup-focused services. The company emphasizes a holistic approach combining business consulting and marketing to deliver tailored strategies and creative solutions. Their market position is that of a specialized boutique agency with a strong focus on personalized client collaboration and innovative marketing models. Technically, the website is built on WordPress using modern plugins such as Elementor, Slider Revolution, and integrates marketing and analytics tools like HubSpot, Google Analytics, Hotjar, and Tawk.to for live chat. The site is mobile-optimized, SEO-friendly, and employs standard security best practices including HTTPS and security headers. From a security perspective, the website demonstrates good maturity with enforced HTTPS, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not present, which could be improved to enhance trust and compliance. Overall, the website presents a professional and trustworthy digital presence with strong compliance to privacy regulations and a clear business focus. The risk level is low, with recommendations to enhance security transparency and accessibility features to further strengthen the security posture and user experience.

F

financialmedia

10x10.ch

46

10x10.ch is a specialized online media platform operated by financialmedia, focusing on ETFs, index funds, Bitcoin, and cryptocurrency investment education primarily for German-speaking investors. The website offers regularly updated news articles, columns, and partner content, supported by a subscription-based PDF magazine and event offerings. The platform leverages WordPress CMS with modern SEO and advertising integrations, including Google Analytics and DoubleClick. Security posture is solid with HTTPS and security headers, though improvements are recommended in privacy compliance and vulnerability disclosure. Overall, the site is professionally maintained, trustworthy, and serves a niche finance audience effectively.

I

Incore Holding AG

incore.ch

58

Incore Holding AG is a Swiss-based owner-managed group specializing in innovative financial and ICT solutions, serving banks, asset managers, financial intermediaries, and corporates. With over 40 years of experience, the group operates through subsidiaries including Incore Bank AG, Incore Technology AG, and Incore Asset Management Solution AG, offering a comprehensive suite of services from traditional banking to digital asset management and modular banking platforms. The company holds a strong market position in Switzerland with international branches and a focus on B2B services. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, well-structured, and performs moderately well. Security practices include HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent. However, explicit security policies and incident response contacts are not published. The domain WHOIS data aligns well with the business claims, supporting legitimacy. Overall, Incore demonstrates a mature digital presence with strong business credibility and compliance, suitable for its financial and technology sector audience.

C

Crypto Valley Journal

cvj.ch

60

Crypto Valley Journal is a specialized media platform focused on delivering news, analysis, and educational content related to cryptocurrencies, blockchain technology, and financial products. It targets individuals and professionals interested in the Crypto Valley ecosystem and the broader crypto market. The website maintains a strong market position as a niche media outlet with partnerships and a consistent brand presence. Technically, the site is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site is compliant with GDPR and provides transparent privacy and cookie policies. The business credibility is supported by clear branding, partner affiliations, and active social media engagement.

W

WEMF AG für Werbemedienforschung

remp.ch

52

REMP (WEMF AG für Werbemedienforschung) is a reputable Swiss media research organization specializing in audits, media studies, data solutions, and consulting services for the advertising media sector. The website demonstrates a strong market position with professional content targeting media professionals, advertisers, and agencies. The company offers a comprehensive suite of services including certification audits, audience measurement studies, and data-driven marketing tools. The site is well-branded and consistent with industry standards, supported by partnerships with recognized Swiss media associations. Technically, the website employs modern JavaScript libraries such as Alpine.js and Chart.js, integrates Google Tag Manager and LinkedIn Insight for analytics, and uses cookie consent mechanisms aligned with GDPR requirements. Hosting appears to be stable and performance moderate, with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with canonical tags and hreflang attributes. From a security perspective, the site enforces HTTPS and uses standard tracking and marketing scripts responsibly. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and could be improved. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and cookie consent banner. Contact information is transparent and professional. Overall, the website presents a low risk profile with a high degree of trustworthiness and professionalism. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and considering a security.txt file to improve vulnerability disclosure transparency.

G

GS1 Switzerland

gs1.events

59

GS1 Switzerland is a professional standards organization focused on providing barcode and identification standards, training, and networking events primarily for retail, logistics, and healthcare sectors in Switzerland. The website is well-structured, content-rich, and targets industry professionals seeking knowledge transfer and collaboration opportunities. Technically, the site is built on Drupal 10 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and consent management in place, though explicit incident response and vulnerability disclosure information are not found. Overall, the site demonstrates high professionalism and trustworthiness with strong alignment between WHOIS data and business identity.

M

MOVEMENT'32

movement32.org

65

MOVEMENT'32 is a Swiss national initiative focused on strengthening the goods supply cycle through workforce development, outreach, and knowledge exchange in logistics and supply chain sectors. The website presents a professional and consistent brand image, supported by industry testimonials and partnerships, notably with Swiss Supply. Technically, the site is built on the Jimdo CMS platform, incorporating modern web technologies and providing a responsive user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. The lack of WHOIS data limits domain trust verification, but the website content and contact details support legitimacy. Overall, the site is well-positioned to serve its target audience of supply chain professionals in Switzerland.

M

Medigo

medigo.ch

51

Medigo is a Swiss healthcare service platform providing real-time information on emergency medical centers, primarily serving the Canton of Vaud. The website targets patients seeking urgent care and medical centers wanting visibility. It offers key services such as real-time wait times, center recommendations based on location and transport, and coverage of six medical specialties. The company positions itself as a regional leader in emergency medical information within Swiss Romandy. Technically, the website uses modern JavaScript libraries including Alpine.js and FontAwesome, integrates Google Tag Manager for analytics, and implements a comprehensive cookie consent mechanism. The site is mobile optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details are evident. From a security perspective, the site enforces HTTPS, includes CSRF tokens, and uses cookie consent for analytics tracking. Security headers are not explicitly detected, and no formal security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with a clear privacy policy and cookie management. Overall, the website is professional, trustworthy, and secure with minor areas for improvement such as adding security policies and terms of service. The domain WHOIS data aligns well with the business claims, supporting legitimacy. No blocking or WAF mechanisms interfere with content access.

L

Lausanne University Hospital

lausanneuniversityhospital.com

54

Lausanne University Hospital (CHUV) is a prominent Swiss academic hospital providing advanced medical care, research, and education. It is internationally recognized and ranked among the top hospitals worldwide. The website showcases innovative medical projects and collaborations with the University of Lausanne, targeting patients, researchers, and healthcare professionals. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes analytics via Matomo. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS and cookie consent, but lacks explicit security headers and published security policies. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the legitimacy of the hospital itself. Overall, the website is professional, trustworthy, and informative.

B

Banque Cantonale Vaudoise

pointsforts.ch

65

Banque Cantonale Vaudoise (BCV) operates a professional online magazine focused on the economy of the Vaud canton in Switzerland. The website provides financial market commentary, investment strategies, regional economic news, and entrepreneurship insights targeted at residents and businesses in the region. BCV leverages this platform to engage its audience with relevant financial content and maintain its position as a leading regional bank. The site is well-branded, consistent, and offers subscription options including RSS feeds and email notifications. Technically, the website is built on Adobe Experience Manager (AEM) CMS, utilizing modern JavaScript libraries and Adobe Launch for tag management. Performance is moderate with good mobile optimization and basic accessibility features. The site uses HTTPS and includes monitoring scripts from Dynatrace, but lacks visible security headers and explicit cookie consent mechanisms. From a security perspective, the site shows good practices such as secure forms and no exposed sensitive data. However, it lacks published security policies, incident response contacts, and vulnerability disclosure information. The WHOIS data confirms the domain's legitimacy and consistency with the bank's identity, supporting a high trust level. Overall, the website is professional, trustworthy, and content-rich, but could improve its privacy compliance and security posture by adding cookie consent, security headers, and incident response information.

The website wemfbox.ch is a parked domain landing page primarily designed to advertise the domain for sale. It lacks substantive business content, contact information, or service offerings. The site relies heavily on third-party advertising and tracking scripts, with minimal original content and basic design. Technically, it uses standard HTML, CSS, and JavaScript with Amazon Cloudfront CDN for asset delivery. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and no privacy or cookie consent mechanisms. The WHOIS data shows privacy protection typical for parked domains, with no direct registrant-business linkage. Overall, the site presents low business credibility and poor privacy compliance, with extensive user tracking and minimal transparency.

A

Amun Holdings Limited and affiliated entities

21.co

70

21.co is a Switzerland-based financial technology company specializing in wrapped tokens that provide onchain access to cross-chain liquidity. Their wrapped tokens are fully collateralized by underlying assets held in institutional-grade cold storage, managed via their proprietary Onyx operating system. The company targets institutional investors and DeFi participants seeking secure and flexible token exposure across multiple blockchain networks. The website reflects a mature market position with strong trust signals including third-party security audits and transparent operational processes. Technically, the site is built on modern web technologies including Webflow CMS, Google Tag Manager, and Hotjar, ensuring good performance, mobile optimization, and user experience. Security posture is strong with HTTPS, security headers, and secure mint/burn processes, though explicit security policies and incident response details are not published. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Overall, 21.co presents a professional, trustworthy, and technically sound digital presence aligned with its institutional finance focus.

K

Kentucky Fried Chicken

kfc-suisse.ch

59

Kentucky Fried Chicken Switzerland operates a localized website presenting its fast food restaurant services with a focus on chicken products. The site reflects a well-established international brand with a strong presence in Switzerland, listing multiple restaurant locations and offering promotions and product information. The technical infrastructure is based on TYPO3 CMS, with modern JavaScript libraries and responsive design ensuring good user experience across devices. The website employs comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements, demonstrating a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

E

EHL Ecole hôtelière de Lausanne

ehl.edu

64

EHL Ecole hôtelière de Lausanne is a globally recognized hospitality business school founded in 1983, offering a wide range of educational programs including bachelor's, master's, MBA, pre-university courses, and professional diplomas. With campuses in Switzerland and Singapore, it holds a prestigious market position as the top-ranked hospitality management school worldwide, supported by strong accreditation and a Michelin-starred educational restaurant. The website reflects a mature digital presence with modern technologies such as HubSpot CMS, Google Analytics 4, and OneSignal for push notifications, ensuring a good user experience and mobile optimization. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. However, the absence of WHOIS registration data slightly reduces transparency, though the overall trustworthiness remains high due to consistent branding, accreditation, and professional content.

E

EPFL Innovation Park

epfl-innovationpark.ch

67

EPFL Innovation Park is a prominent technology and innovation hub located at the heart of the EPFL Campus in Switzerland. It serves startups and corporates by providing incubation, acceleration, coaching, partnering, funding, and hosting services. The website reflects a professional and consistent brand aligned with its mission to support high-tech enterprises. Technically, the site uses modern frameworks such as Next.js and Chakra UI, hosted on Webflow's platform, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, matching the business claims.

E

Ecorobotix

ecorobotix.com

67

Ecorobotix is a Swiss-based company specializing in AI-powered precision agriculture technology, focusing on sustainable farming solutions that reduce environmental impact and operational costs. Their innovative AI-driven field sprayers and precision farming solutions position them as a leader in the agritech sector. The website reflects a mature digital presence with professional design, strong SEO, and active social media engagement. Technically, the site is built on WordPress, leveraging modern technologies and performance optimizations, hosted likely on AWS infrastructure. Security posture is solid with HTTPS and domain transfer protections, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy and terms of service pages. Overall, the site is trustworthy, professional, and well-optimized, serving its target audience effectively.

A

Astrocast

astrocast.com

58

Astrocast is a Swiss-based company specializing in providing global satellite IoT connectivity services through an advanced nanosatellite network. Their offerings include satellite IoT modules such as Astronode S, S+, Patch Antenna, and DevKit, targeting industries like maritime, agriculture, environment, land transport, and mining. The company positions itself as a cost-effective and reliable satellite IoT service provider with a strong partner ecosystem including Airbus, ESA, and Thuraya. Technically, the website is built on WordPress with modern analytics and marketing tools, showing good digital maturity and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are not published. The absence of WHOIS data for the domain reduces trust slightly, but the overall business presence and content quality are high, indicating a legitimate and professional operation.

G

GS1 Switzerland

gs1.ch

59

GS1 Switzerland is a national member organization of the global GS1 network, providing standardized barcode and data management solutions to over 8600 companies in Switzerland. Their website offers comprehensive information about GS1 standards, barcode issuance, digital product passes, and related services, targeting businesses across retail, healthcare, logistics, and manufacturing sectors. The site is professionally designed, multilingual, and well-structured to serve a business audience seeking efficient supply chain and product identification solutions. Technically, the website is built on Drupal 10 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and consent management, though explicit security policies and incident response contacts are not published. Overall, the domain registration and WHOIS data align well with the organization's identity, indicating a legitimate and trustworthy online presence.

G

Greater Geneva Bern area (GGBa)

ggba.swiss

55

Greater Geneva Bern area (GGBa) is a regional investment promotion agency representing Western Switzerland's cantons including Bern, Fribourg, Vaud, Neuchâtel, and Geneva. The agency supports foreign companies in establishing and expanding their business activities in the region, positioning itself as a key partner for international investors. The website reflects a professional and comprehensive digital presence with clear business focus and strong regional branding. Technically, the site is built on WordPress with modern SEO and security practices, including HTTPS, security headers, and Google reCAPTCHA for form protection. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is good with a clear data protection page and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the website demonstrates high professionalism, trustworthiness, and effective communication of its business mission.

D

Département de l'économie, de l'innovation, de l'emploi et du patrimoine (DEIEP)

vaud-economie.ch

53

The website www.vaud-economie.ch serves as the official economic promotion and innovation portal for the Canton of Vaud, Switzerland. It is managed by the Département de l'économie, de l'innovation, de l'emploi et du patrimoine (DEIEP), providing comprehensive information and services to entrepreneurs, investors, and businesses within the region. The site highlights key sectors, innovation domains, success stories, and offers various support services including financing, company creation, and networking. The content is professionally curated, targeting a broad audience interested in economic development and innovation in Vaud. Technically, the website is built on the DotNetNuke (DNN) CMS platform using ASP.NET Web Forms, enhanced with jQuery, Bootstrap 4, and other modern JavaScript libraries. It features responsive design, a structured navigation system, and integrated search capabilities. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. However, some security headers could be improved to enhance protection. From a security perspective, the site demonstrates a solid posture with encrypted communications, secure forms, and no visible vulnerabilities or exposed sensitive data. The presence of Google Analytics and Google Tag Manager indicates moderate user tracking, balanced with privacy compliance measures. No incident response or vulnerability disclosure policies are published, which could be areas for enhancement. Overall, the website reflects a trustworthy, professional government entity with a strong focus on economic development and innovation. It maintains good technical standards and privacy practices, making it a reliable resource for its target audience.

V

Venturelab Ltd.

startup.ch

56

Startup.ch is a Swiss-based online platform operated by Venturelab Ltd. that serves as a comprehensive radar for the Swiss startup ecosystem. It offers detailed profiles of startups and investors, tracks funding rounds, provides curated lists, job postings, and startup support resources. The platform targets entrepreneurs, investors, and ecosystem stakeholders interested in Swiss innovation and investment opportunities. Technically, the website leverages modern web technologies including jQuery, Bootstrap, and Select2, and is likely built on ColdFusion given the URL patterns. It is mobile-optimized and integrates Google Analytics and Google Ad Manager for tracking and advertising. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR, but lacks explicit security headers and incident response contact information. Overall, the website is professional, trustworthy, and well-positioned in the Swiss startup ecosystem.

S

Scaling Up Sales

scalingupsales.ch

59

Scaling Up Sales is a specialized consultancy and training provider focused on empowering startups, scale-ups, and SMEs to grow through strategic B2B sales management. Their offerings include webinars, workshops, a Sales Management Academy, and personalized coaching via Sales Angels. The company positions itself as a niche expert in sales scaling for technology-driven businesses, primarily targeting entrepreneurs and sales leaders. The website is built on the Squarespace platform, featuring professional design and moderate performance with good mobile optimization. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit privacy and cookie policies, which impacts compliance. Contact is available via a contact form, but no direct emails or phone numbers are provided. Overall, the site is trustworthy and professional but could improve privacy compliance and contact transparency.

I

InnoPME

innopme.ch

61

InnoPME is a specialized support program dedicated to SMEs in the Vaud region of Switzerland, focusing on accelerating growth and ensuring business sustainability through validated opportunity identification and risk-managed strategies. The website presents a professional and well-structured digital presence built on modern technologies such as Next.js and Typedream CMS, offering multiple engagement formats including workshops, sprints, and member events. Security posture is adequate with HTTPS enforced and secure form handling, though the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the site reflects a credible and trustworthy business with strong regional partnerships and a clear value proposition for its target SME audience.

I

Innovaud

scale-up-vaud.ch

48

Scale Up Vaud is a regional initiative powered by Innovaud, the innovation and investment agency of Canton de Vaud, Switzerland. The website serves as a community and support platform for scale-up companies, focusing on fostering growth, recruitment, and internationalization. The initiative aims to strengthen the local innovation ecosystem by connecting stakeholders and catalyzing economic development. The site presents clear business information, including contact details and social media channels, enhancing its credibility. Technically, the website is built on the DotNetNuke CMS platform and utilizes common web technologies such as jQuery, Bootstrap 4, and Font Awesome. It implements HTTPS with a good SSL configuration and includes a cookie consent mechanism via tarteaucitron.js, indicating attention to privacy compliance. The site is moderately performant and mobile-optimized, with good SEO practices and basic accessibility features. From a security perspective, the website enforces HTTPS but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data aligns well with the business entity and location, supporting legitimacy. Overall, the security posture is solid but could be improved by adding security headers and formal policies. The overall risk assessment is low, with no blocking or WAF detected, no suspicious domains linked, and no adult or questionable content. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party libraries to ensure ongoing security and compliance.

C

Cantonal Office for the Integration of Foreigners and the Prevention of Racism (BCI)

vaud-welcome.ch

54

The Canton of Vaud Welcome Portal is an official government platform designed to assist foreigners and newcomers in integrating into the canton by providing comprehensive information on residence permits, French courses, work, and practical living information. It is managed by the Cantonal Office for the Integration of Foreigners and the Prevention of Racism (BCI), reflecting a strong public service orientation. The website is well-structured, multilingual, and regularly updated, targeting new residents to facilitate their administrative and social integration.

Lausanne Olympic Capital is a key hub for international sports organisations, including the International Olympic Committee and nearly 50 other international sports federations and related entities. The organization provides support services such as office space, event planning, seminars, and networking opportunities to help these organisations grow and increase their visibility. The website reflects a professional and consistent brand image aligned with its mission and target audience. Technically, the website uses modern web technologies including jQuery, Google Maps API, and Google Tag Manager, hosted by Infomaniak. The site is mobile optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and does not provide public security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and no explicit GDPR compliance indicators. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security transparency to strengthen its security posture and regulatory adherence.

D

Département de l'économie, de l'innovation, de l'emploi et du patrimoine (DEIEP)

invest-vaud.ch

59

The website www.invest-vaud.ch serves as the official economic promotion and innovation portal for the canton of Vaud, Switzerland. It is managed by the governmental department DEIEP and aims to attract investors, startups, and businesses by showcasing the region's assets, key sectors, and support services. The site highlights the canton’s strengths in technology, healthcare, manufacturing, and finance, positioning Vaud as a leading hub for innovation and economic prosperity in Europe. The content is professionally curated, targeting entrepreneurs and economic stakeholders with comprehensive information and success stories. Technically, the website is built on the DotNetNuke CMS platform, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and Select2 for enhanced user experience. It employs HTTPS with strong SSL configuration and integrates cookie consent management via tarteaucitron.js, reflecting a mature digital infrastructure. The site is mobile-optimized and accessible, though some accessibility improvements could be made. From a security perspective, the site enforces HTTPS and uses secure forms with validation and anti-forgery tokens. While no critical vulnerabilities were detected, the absence of certain security headers and a public security policy or vulnerability disclosure page suggests room for enhancement. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for its role as a government economic promotion platform. Strategic recommendations include implementing additional security headers, publishing a security policy, and enhancing accessibility features to further strengthen its security posture and compliance.

W

Walder Wyss AG

walderwyss.com

70

Walder Wyss AG is a leading Swiss law firm specializing in economic law with approximately 300 legal professionals including lawyers, tax experts, and notaries. The firm maintains a strong market position in Switzerland, offering specialized legal services tailored to selected industries and product groups. Their website reflects a professional and comprehensive digital presence, targeting business professionals and corporate clients seeking expert legal advice. The site is well-structured, mobile-optimized, and includes relevant content such as news, career opportunities, and legal competencies. Technically, the website employs modern web technologies including JavaScript and Google Analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enabled and domain registration consistent with the firm's identity, though DNSSEC is not enabled and some security headers are missing. No incident response or security policy information is publicly available, representing an area for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting the firm's reputation as a top-tier Swiss law firm.

V

VISCHER

vischer.com

73

VISCHER is a prominent Swiss law firm specializing in legal solutions for business, tax, and regulatory matters. The firm offers a broad range of legal services including banking and finance law, labor law, intellectual property, and life sciences, positioning itself as a top-tier legal service provider in Switzerland. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and integrates modern analytics and tracking tools such as Google Analytics, Hotjar, and HubSpot Analytics, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in cookie consent and explicit security policies. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional nature of the site and external trust signals. Strategic recommendations include enhancing privacy compliance with explicit cookie consent, publishing security and incident response policies, and providing direct security contact information.

V

VAUD

vaud.swiss

56

Vaud.ch is the official website representing the Canton of Vaud, Switzerland, focusing on promoting the region's tourism, economy, culture, and local products. It serves a broad audience including residents, tourists, local producers, and ambassadors, providing comprehensive information and services to enhance regional engagement and economic development. The website is well-positioned as a trusted government portal with strong branding and clear communication channels. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, Matomo analytics, Facebook Pixel, and Cookiebot for consent management. The infrastructure supports good mobile optimization and SEO practices, although some security headers could be improved. The site uses HTTPS with excellent SSL configuration, ensuring secure communications. From a security perspective, the website demonstrates good practices including encrypted connections and privacy compliance with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, Vaud.ch is a professional, secure, and privacy-conscious government website with excellent content quality and user experience. Strategic improvements in security policy publication and header implementation would further strengthen its posture.

T

TREUFiN Reuter AG

treufin-reuter.ch

60

TREUFiN Reuter AG is a Swiss fiduciary and consulting firm providing comprehensive services including tax consulting, legal advisory, accounting, and digital bookkeeping primarily targeting companies, private individuals, and international clients establishing business in Switzerland. The company positions itself as a reliable partner with a focus on professional and personalized service, supported by client testimonials and partnerships with recognized software providers. The website is built on Joomla CMS with modern responsive design elements and integrates Google Analytics for user tracking. Security posture is solid with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a trustworthy and professional business presence with clear contact information and relevant content.

I

Innovaud

innovaud.ch

59

Innovaud is a government-backed innovation and economic promotion agency based in the canton of Vaud, Switzerland. It supports a wide range of businesses including startups, scale-ups, SMEs, and large companies, and acts as a gateway for foreign companies to establish themselves in the region. The agency offers free services backed by the Vaud Department of the Economy, Innovation, Employment and Patrimony. The website reflects a professional and comprehensive digital presence with clear navigation and relevant content targeting investors and innovators in various technology and industrial sectors. Technically, the website is built on the DotNetNuke CMS platform using modern web technologies such as jQuery, Bootstrap 4, and Font Awesome. It includes cookie consent management via tarteaucitron.js and integrates analytics and marketing tools like Google Analytics, Google Tag Manager, Facebook Pixel, and LinkedIn Insight. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence. Contact information is clearly provided, enhancing trust and credibility. Overall, Innovaud's website demonstrates a mature digital infrastructure suitable for its role as a regional innovation agency. The security posture is solid but could be improved with additional security headers and explicit incident response disclosures. The business credibility is high, supported by consistent WHOIS data and official government backing.

F

Fondation pour l'innovation et la technologie (FIT)

fondation-fit.ch

53

Fondation pour l'innovation et la technologie (FIT) is a well-established Swiss non-profit foundation founded in 1994, dedicated to supporting innovative startups and projects in Western Switzerland, particularly in the Vaud and Romandie regions. The foundation provides financial support through loans and grants across several specialized programs including FIT Tech, FIT Digital, FIT Impact, and Food & Hospitality Vertical. The website reflects a mature organization with a clear mission, strong regional partnerships, and a focus on fostering entrepreneurship and job creation.

C

Crypto Finance AG

cryptofinance.ch

68

Crypto Finance AG, part of the Deutsche Börse Group, operates a regulated and integrated platform enabling financial institutions to securely manage, trade, and store digital assets. The company holds regulatory licenses from FINMA and BaFin and is compliant with the upcoming MiCAR regulation, positioning itself as a market leader in Switzerland, Germany, and Europe. The website reflects a professional and trustworthy brand with detailed executive profiles and clear service offerings including custody, trading, and staking of digital assets. Technically, the site is built on WordPress with modern plugins and SEO optimizations, hosted on Azure CDN, and employs Google Tag Manager for analytics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of a public vulnerability disclosure or incident response contact is noted. The WHOIS data is missing, which raises some transparency concerns, but the overall trust signals from regulation and parent company affiliation mitigate this risk. The site is fully accessible with no WAF or blocking mechanisms detected.

M

Maerki Baumann & Co. AG

maerki-baumann.ch

57

Maerki Baumann & Co. AG is an independent private bank based in Zurich, Switzerland, specializing in private banking, asset management, and advisory services for private clients and independent asset managers. The website reflects a professional banking institution with a clear focus on wealth management and personalized financial services. The company positions itself as a family-owned bank with generational expertise, targeting a discerning clientele seeking bespoke financial solutions. Technically, the website is built on Drupal 10, integrating modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and employs standard SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the website enforces HTTPS and implements several security headers, demonstrating a solid security posture. Cookie consent is comprehensive, with detailed cookie categories and provider information, indicating good privacy compliance and GDPR adherence. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with moderate technical sophistication and a strong business credibility profile.

The website shop.post.ch is the official online shop of Swiss Post, operated by Post CH Network Ltd. It offers a wide range of products including stamps, philatelic items, electronics, gift cards, and household goods. The platform targets general consumers primarily in Switzerland, providing a trusted e-commerce channel for postal and related products. The site demonstrates a solid market position as the official postal service's retail outlet. Technically, the website is built using modern web technologies such as Angular, integrates Google Tag Manager for analytics, and employs Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate, with CDN usage and asynchronous script loading enhancing user experience. From a security perspective, the site enforces HTTPS, uses captcha for form protection, and integrates secure payment libraries. While explicit security headers are not fully confirmed, the overall SSL configuration is excellent. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. However, the absence of a public security policy or vulnerability disclosure program suggests room for improvement in transparency and incident response readiness. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing a dedicated security policy, enhancing security header implementation, and establishing a vulnerability disclosure channel to further strengthen security posture and user trust.

E

ePost

epost.ch

66

ePost is a Swiss-based digital communication platform specializing in secure, hybrid mail and business communication services. The company offers an all-in-one solution for sending, receiving, interacting, and archiving business correspondence via multiple channels including physical mail, ePost, eBill, SMS, and email. Their platform targets business customers such as SMEs, large senders, and software manufacturers, positioning itself as a market leader in Switzerland for secure B2C communication. The website reflects a mature digital infrastructure leveraging HubSpot CMS and multiple analytics and marketing tools, indicating a high level of digital maturity and marketing sophistication. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies are absent. Privacy compliance is basic, lacking visible privacy and cookie policies on the analyzed page. Overall, the platform is professional, trustworthy, and well-branded, serving a large user base in Switzerland.

S

Swiss Post Cargo CH AG

swisspost-cargo.com

73

Swiss Post Cargo CH AG is a prominent logistics and transport service provider based in Switzerland, offering tailored solutions including transport, warehousing, customs clearance, and value-added services. The company operates as a one-stop shop with a global network, serving industry and trade sectors with a focus on customer satisfaction. The website reflects a mature digital presence built on modern technologies such as React and Next.js, hosted likely on Vercel, with a professional design optimized for performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and consent management in place, though explicit security policies and incident response details are not publicly available. The absence of WHOIS data reduces transparency but is likely due to privacy protection, common for large enterprises. Overall, the site demonstrates high professionalism and trustworthiness, supporting Swiss Post Cargo's market position as a reliable logistics partner.

A

American Express

americanexpress.ch

71

American Express Switzerland operates a comprehensive website offering credit card products and related financial services tailored for private and business customers in Switzerland. The site reflects a strong market position as part of the global American Express brand, with localized services issued by Swisscard AECS GmbH. The website provides detailed product information, travel benefits, rewards programs, and customer support resources, demonstrating a mature digital presence. Technically, the site employs modern web technologies including React, Adobe DTM, and advanced analytics tools, ensuring fast performance, mobile optimization, and accessibility compliance. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating.

S

Schweizer Fleisch

schweizerfleisch.ch

71

Schweizer Fleisch is a Swiss-focused informational and promotional website dedicated to educating consumers about Swiss meat, its quality, safety, and sustainability. The site offers recipes, cooking tips, and detailed content aimed at encouraging the consumption of Swiss meat products. The platform appears to be professionally managed, likely by industry stakeholders, and targets consumers interested in high-quality, locally sourced meat. Technically, the website is built on Drupal 10 and incorporates modern web technologies including Google Tag Manager and Mailchimp for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit privacy and terms of service policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's Swiss identity and business focus, indicating legitimacy and trustworthiness.

The website www.coop.ch is a digital presence of Coop, a leading Swiss retail company. The business operates in the retail sector, providing a broad range of products and services to the general public in Switzerland. The site appears to be part of an OAuth2 authorization flow, indicating integration with user authentication services. However, direct content access is blocked by a CAPTCHA challenge, limiting the ability to analyze the full website content and policies. Technically, the site employs bot mitigation technologies, including scripts from captcha-delivery.com, suggesting a focus on security and abuse prevention. Due to the blocked content, detailed technical infrastructure and performance assessments are not possible. The domain registration data aligns well with the business claims, supporting the legitimacy of the site. From a security perspective, the presence of a CAPTCHA challenge is a positive indicator of proactive security measures. However, the inability to access the full content prevents evaluation of security headers, privacy policies, and compliance measures. No vulnerabilities or exposed sensitive data were detected, but this is due to limited content visibility. Overall, the site is legitimate and likely secure, but the current WAF challenge restricts comprehensive analysis. Strategic recommendations include providing accessible policy pages, enhancing transparency, and ensuring that security measures do not overly hinder legitimate user access.

V

V-ZUG AG

vzug.com

70

V-ZUG AG is a Swiss-based manufacturer specializing in premium household appliances, including kitchen and laundry products. The company positions itself as a provider of high-quality, comfortable appliances targeting discerning consumers and businesses. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages modern frameworks such as Angular and SAP Commerce Cloud, integrating analytics and consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS enforcement and security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The missing WHOIS data raises some concerns about domain registration transparency, but the overall brand presence and content quality support legitimacy. Strategic recommendations include enhancing security transparency and verifying domain registration details to bolster trust.