Switzerland security reports

M

MOVEMENT'32

movement32.org

65

MOVEMENT'32 is a Swiss national initiative focused on strengthening the goods supply cycle through workforce development, outreach, and knowledge exchange in logistics and supply chain sectors. The website presents a professional and consistent brand image, supported by industry testimonials and partnerships, notably with Swiss Supply. Technically, the site is built on the Jimdo CMS platform, incorporating modern web technologies and providing a responsive user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are absent. The lack of WHOIS data limits domain trust verification, but the website content and contact details support legitimacy. Overall, the site is well-positioned to serve its target audience of supply chain professionals in Switzerland.

M

Medigo

medigo.ch

51

Medigo is a Swiss healthcare service platform providing real-time information on emergency medical centers, primarily serving the Canton of Vaud. The website targets patients seeking urgent care and medical centers wanting visibility. It offers key services such as real-time wait times, center recommendations based on location and transport, and coverage of six medical specialties. The company positions itself as a regional leader in emergency medical information within Swiss Romandy. Technically, the website uses modern JavaScript libraries including Alpine.js and FontAwesome, integrates Google Tag Manager for analytics, and implements a comprehensive cookie consent mechanism. The site is mobile optimized with good SEO practices and moderate performance. However, no CMS or hosting provider details are evident. From a security perspective, the site enforces HTTPS, includes CSRF tokens, and uses cookie consent for analytics tracking. Security headers are not explicitly detected, and no formal security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with a clear privacy policy and cookie management. Overall, the website is professional, trustworthy, and secure with minor areas for improvement such as adding security policies and terms of service. The domain WHOIS data aligns well with the business claims, supporting legitimacy. No blocking or WAF mechanisms interfere with content access.

L

Lausanne University Hospital

lausanneuniversityhospital.com

54

Lausanne University Hospital (CHUV) is a prominent Swiss academic hospital providing advanced medical care, research, and education. It is internationally recognized and ranked among the top hospitals worldwide. The website showcases innovative medical projects and collaborations with the University of Lausanne, targeting patients, researchers, and healthcare professionals. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes analytics via Matomo. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS and cookie consent, but lacks explicit security headers and published security policies. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the legitimacy of the hospital itself. Overall, the website is professional, trustworthy, and informative.

B

Banque Cantonale Vaudoise

pointsforts.ch

65

Banque Cantonale Vaudoise (BCV) operates a professional online magazine focused on the economy of the Vaud canton in Switzerland. The website provides financial market commentary, investment strategies, regional economic news, and entrepreneurship insights targeted at residents and businesses in the region. BCV leverages this platform to engage its audience with relevant financial content and maintain its position as a leading regional bank. The site is well-branded, consistent, and offers subscription options including RSS feeds and email notifications. Technically, the website is built on Adobe Experience Manager (AEM) CMS, utilizing modern JavaScript libraries and Adobe Launch for tag management. Performance is moderate with good mobile optimization and basic accessibility features. The site uses HTTPS and includes monitoring scripts from Dynatrace, but lacks visible security headers and explicit cookie consent mechanisms. From a security perspective, the site shows good practices such as secure forms and no exposed sensitive data. However, it lacks published security policies, incident response contacts, and vulnerability disclosure information. The WHOIS data confirms the domain's legitimacy and consistency with the bank's identity, supporting a high trust level. Overall, the website is professional, trustworthy, and content-rich, but could improve its privacy compliance and security posture by adding cookie consent, security headers, and incident response information.

The website wemfbox.ch is a parked domain landing page primarily designed to advertise the domain for sale. It lacks substantive business content, contact information, or service offerings. The site relies heavily on third-party advertising and tracking scripts, with minimal original content and basic design. Technically, it uses standard HTML, CSS, and JavaScript with Amazon Cloudfront CDN for asset delivery. There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of visible HTTPS enforcement, absence of security headers, and no privacy or cookie consent mechanisms. The WHOIS data shows privacy protection typical for parked domains, with no direct registrant-business linkage. Overall, the site presents low business credibility and poor privacy compliance, with extensive user tracking and minimal transparency.

A

Amun Holdings Limited and affiliated entities

21.co

70

21.co is a Switzerland-based financial technology company specializing in wrapped tokens that provide onchain access to cross-chain liquidity. Their wrapped tokens are fully collateralized by underlying assets held in institutional-grade cold storage, managed via their proprietary Onyx operating system. The company targets institutional investors and DeFi participants seeking secure and flexible token exposure across multiple blockchain networks. The website reflects a mature market position with strong trust signals including third-party security audits and transparent operational processes. Technically, the site is built on modern web technologies including Webflow CMS, Google Tag Manager, and Hotjar, ensuring good performance, mobile optimization, and user experience. Security posture is strong with HTTPS, security headers, and secure mint/burn processes, though explicit security policies and incident response details are not published. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies and consent mechanisms. Overall, 21.co presents a professional, trustworthy, and technically sound digital presence aligned with its institutional finance focus.

K

Kentucky Fried Chicken

kfc-suisse.ch

59

Kentucky Fried Chicken Switzerland operates a localized website presenting its fast food restaurant services with a focus on chicken products. The site reflects a well-established international brand with a strong presence in Switzerland, listing multiple restaurant locations and offering promotions and product information. The technical infrastructure is based on TYPO3 CMS, with modern JavaScript libraries and responsive design ensuring good user experience across devices. The website employs comprehensive cookie consent mechanisms and privacy policies aligned with GDPR requirements, demonstrating a mature approach to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

E

EHL Ecole hôtelière de Lausanne

ehl.edu

64

EHL Ecole hôtelière de Lausanne is a globally recognized hospitality business school founded in 1983, offering a wide range of educational programs including bachelor's, master's, MBA, pre-university courses, and professional diplomas. With campuses in Switzerland and Singapore, it holds a prestigious market position as the top-ranked hospitality management school worldwide, supported by strong accreditation and a Michelin-starred educational restaurant. The website reflects a mature digital presence with modern technologies such as HubSpot CMS, Google Analytics 4, and OneSignal for push notifications, ensuring a good user experience and mobile optimization. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. However, the absence of WHOIS registration data slightly reduces transparency, though the overall trustworthiness remains high due to consistent branding, accreditation, and professional content.

E

EPFL Innovation Park

epfl-innovationpark.ch

67

EPFL Innovation Park is a prominent technology and innovation hub located at the heart of the EPFL Campus in Switzerland. It serves startups and corporates by providing incubation, acceleration, coaching, partnering, funding, and hosting services. The website reflects a professional and consistent brand aligned with its mission to support high-tech enterprises. Technically, the site uses modern frameworks such as Next.js and Chakra UI, hosted on Webflow's platform, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, matching the business claims.

E

Ecorobotix

ecorobotix.com

67

Ecorobotix is a Swiss-based company specializing in AI-powered precision agriculture technology, focusing on sustainable farming solutions that reduce environmental impact and operational costs. Their innovative AI-driven field sprayers and precision farming solutions position them as a leader in the agritech sector. The website reflects a mature digital presence with professional design, strong SEO, and active social media engagement. Technically, the site is built on WordPress, leveraging modern technologies and performance optimizations, hosted likely on AWS infrastructure. Security posture is solid with HTTPS and domain transfer protections, though improvements can be made by enabling DNSSEC and publishing explicit security policies. Privacy compliance is partially addressed with a cookie consent mechanism but lacks a dedicated privacy policy and terms of service pages. Overall, the site is trustworthy, professional, and well-optimized, serving its target audience effectively.

A

Astrocast

astrocast.com

58

Astrocast is a Swiss-based company specializing in providing global satellite IoT connectivity services through an advanced nanosatellite network. Their offerings include satellite IoT modules such as Astronode S, S+, Patch Antenna, and DevKit, targeting industries like maritime, agriculture, environment, land transport, and mining. The company positions itself as a cost-effective and reliable satellite IoT service provider with a strong partner ecosystem including Airbus, ESA, and Thuraya. Technically, the website is built on WordPress with modern analytics and marketing tools, showing good digital maturity and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are not published. The absence of WHOIS data for the domain reduces trust slightly, but the overall business presence and content quality are high, indicating a legitimate and professional operation.

G

GS1 Switzerland

gs1.ch

59

GS1 Switzerland is a national member organization of the global GS1 network, providing standardized barcode and data management solutions to over 8600 companies in Switzerland. Their website offers comprehensive information about GS1 standards, barcode issuance, digital product passes, and related services, targeting businesses across retail, healthcare, logistics, and manufacturing sectors. The site is professionally designed, multilingual, and well-structured to serve a business audience seeking efficient supply chain and product identification solutions. Technically, the website is built on Drupal 10 with modern libraries and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and consent management, though explicit security policies and incident response contacts are not published. Overall, the domain registration and WHOIS data align well with the organization's identity, indicating a legitimate and trustworthy online presence.

G

Greater Geneva Bern area (GGBa)

ggba.swiss

55

Greater Geneva Bern area (GGBa) is a regional investment promotion agency representing Western Switzerland's cantons including Bern, Fribourg, Vaud, Neuchâtel, and Geneva. The agency supports foreign companies in establishing and expanding their business activities in the region, positioning itself as a key partner for international investors. The website reflects a professional and comprehensive digital presence with clear business focus and strong regional branding. Technically, the site is built on WordPress with modern SEO and security practices, including HTTPS, security headers, and Google reCAPTCHA for form protection. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is good with a clear data protection page and cookie consent mechanisms, though explicit security policies and incident response information are absent. Overall, the website demonstrates high professionalism, trustworthiness, and effective communication of its business mission.

D

Département de l'économie, de l'innovation, de l'emploi et du patrimoine (DEIEP)

vaud-economie.ch

53

The website www.vaud-economie.ch serves as the official economic promotion and innovation portal for the Canton of Vaud, Switzerland. It is managed by the Département de l'économie, de l'innovation, de l'emploi et du patrimoine (DEIEP), providing comprehensive information and services to entrepreneurs, investors, and businesses within the region. The site highlights key sectors, innovation domains, success stories, and offers various support services including financing, company creation, and networking. The content is professionally curated, targeting a broad audience interested in economic development and innovation in Vaud. Technically, the website is built on the DotNetNuke (DNN) CMS platform using ASP.NET Web Forms, enhanced with jQuery, Bootstrap 4, and other modern JavaScript libraries. It features responsive design, a structured navigation system, and integrated search capabilities. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. However, some security headers could be improved to enhance protection. From a security perspective, the site demonstrates a solid posture with encrypted communications, secure forms, and no visible vulnerabilities or exposed sensitive data. The presence of Google Analytics and Google Tag Manager indicates moderate user tracking, balanced with privacy compliance measures. No incident response or vulnerability disclosure policies are published, which could be areas for enhancement. Overall, the website reflects a trustworthy, professional government entity with a strong focus on economic development and innovation. It maintains good technical standards and privacy practices, making it a reliable resource for its target audience.

V

Venturelab Ltd.

startup.ch

56

Startup.ch is a Swiss-based online platform operated by Venturelab Ltd. that serves as a comprehensive radar for the Swiss startup ecosystem. It offers detailed profiles of startups and investors, tracks funding rounds, provides curated lists, job postings, and startup support resources. The platform targets entrepreneurs, investors, and ecosystem stakeholders interested in Swiss innovation and investment opportunities. Technically, the website leverages modern web technologies including jQuery, Bootstrap, and Select2, and is likely built on ColdFusion given the URL patterns. It is mobile-optimized and integrates Google Analytics and Google Ad Manager for tracking and advertising. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR, but lacks explicit security headers and incident response contact information. Overall, the website is professional, trustworthy, and well-positioned in the Swiss startup ecosystem.

S

Scaling Up Sales

scalingupsales.ch

59

Scaling Up Sales is a specialized consultancy and training provider focused on empowering startups, scale-ups, and SMEs to grow through strategic B2B sales management. Their offerings include webinars, workshops, a Sales Management Academy, and personalized coaching via Sales Angels. The company positions itself as a niche expert in sales scaling for technology-driven businesses, primarily targeting entrepreneurs and sales leaders. The website is built on the Squarespace platform, featuring professional design and moderate performance with good mobile optimization. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit privacy and cookie policies, which impacts compliance. Contact is available via a contact form, but no direct emails or phone numbers are provided. Overall, the site is trustworthy and professional but could improve privacy compliance and contact transparency.

I

InnoPME

innopme.ch

61

InnoPME is a specialized support program dedicated to SMEs in the Vaud region of Switzerland, focusing on accelerating growth and ensuring business sustainability through validated opportunity identification and risk-managed strategies. The website presents a professional and well-structured digital presence built on modern technologies such as Next.js and Typedream CMS, offering multiple engagement formats including workshops, sprints, and member events. Security posture is adequate with HTTPS enforced and secure form handling, though the absence of security headers and privacy/cookie policies indicates room for improvement. Overall, the site reflects a credible and trustworthy business with strong regional partnerships and a clear value proposition for its target SME audience.

I

Innovaud

scale-up-vaud.ch

48

Scale Up Vaud is a regional initiative powered by Innovaud, the innovation and investment agency of Canton de Vaud, Switzerland. The website serves as a community and support platform for scale-up companies, focusing on fostering growth, recruitment, and internationalization. The initiative aims to strengthen the local innovation ecosystem by connecting stakeholders and catalyzing economic development. The site presents clear business information, including contact details and social media channels, enhancing its credibility. Technically, the website is built on the DotNetNuke CMS platform and utilizes common web technologies such as jQuery, Bootstrap 4, and Font Awesome. It implements HTTPS with a good SSL configuration and includes a cookie consent mechanism via tarteaucitron.js, indicating attention to privacy compliance. The site is moderately performant and mobile-optimized, with good SEO practices and basic accessibility features. From a security perspective, the website enforces HTTPS but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data aligns well with the business entity and location, supporting legitimacy. Overall, the security posture is solid but could be improved by adding security headers and formal policies. The overall risk assessment is low, with no blocking or WAF detected, no suspicious domains linked, and no adult or questionable content. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party libraries to ensure ongoing security and compliance.

C

Cantonal Office for the Integration of Foreigners and the Prevention of Racism (BCI)

vaud-welcome.ch

54

The Canton of Vaud Welcome Portal is an official government platform designed to assist foreigners and newcomers in integrating into the canton by providing comprehensive information on residence permits, French courses, work, and practical living information. It is managed by the Cantonal Office for the Integration of Foreigners and the Prevention of Racism (BCI), reflecting a strong public service orientation. The website is well-structured, multilingual, and regularly updated, targeting new residents to facilitate their administrative and social integration.

Lausanne Olympic Capital is a key hub for international sports organisations, including the International Olympic Committee and nearly 50 other international sports federations and related entities. The organization provides support services such as office space, event planning, seminars, and networking opportunities to help these organisations grow and increase their visibility. The website reflects a professional and consistent brand image aligned with its mission and target audience. Technically, the website uses modern web technologies including jQuery, Google Maps API, and Google Tag Manager, hosted by Infomaniak. The site is mobile optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and does not provide public security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies and no explicit GDPR compliance indicators. Overall, the website is trustworthy and professional but would benefit from improved privacy compliance and enhanced security transparency to strengthen its security posture and regulatory adherence.

D

Département de l'économie, de l'innovation, de l'emploi et du patrimoine (DEIEP)

invest-vaud.ch

59

The website www.invest-vaud.ch serves as the official economic promotion and innovation portal for the canton of Vaud, Switzerland. It is managed by the governmental department DEIEP and aims to attract investors, startups, and businesses by showcasing the region's assets, key sectors, and support services. The site highlights the canton’s strengths in technology, healthcare, manufacturing, and finance, positioning Vaud as a leading hub for innovation and economic prosperity in Europe. The content is professionally curated, targeting entrepreneurs and economic stakeholders with comprehensive information and success stories. Technically, the website is built on the DotNetNuke CMS platform, leveraging modern JavaScript libraries such as jQuery, Bootstrap, and Select2 for enhanced user experience. It employs HTTPS with strong SSL configuration and integrates cookie consent management via tarteaucitron.js, reflecting a mature digital infrastructure. The site is mobile-optimized and accessible, though some accessibility improvements could be made. From a security perspective, the site enforces HTTPS and uses secure forms with validation and anti-forgery tokens. While no critical vulnerabilities were detected, the absence of certain security headers and a public security policy or vulnerability disclosure page suggests room for enhancement. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for its role as a government economic promotion platform. Strategic recommendations include implementing additional security headers, publishing a security policy, and enhancing accessibility features to further strengthen its security posture and compliance.

W

Walder Wyss AG

walderwyss.com

70

Walder Wyss AG is a leading Swiss law firm specializing in economic law with approximately 300 legal professionals including lawyers, tax experts, and notaries. The firm maintains a strong market position in Switzerland, offering specialized legal services tailored to selected industries and product groups. Their website reflects a professional and comprehensive digital presence, targeting business professionals and corporate clients seeking expert legal advice. The site is well-structured, mobile-optimized, and includes relevant content such as news, career opportunities, and legal competencies. Technically, the website employs modern web technologies including JavaScript and Google Analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enabled and domain registration consistent with the firm's identity, though DNSSEC is not enabled and some security headers are missing. No incident response or security policy information is publicly available, representing an area for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, supporting the firm's reputation as a top-tier Swiss law firm.

V

VISCHER

vischer.com

73

VISCHER is a prominent Swiss law firm specializing in legal solutions for business, tax, and regulatory matters. The firm offers a broad range of legal services including banking and finance law, labor law, intellectual property, and life sciences, positioning itself as a top-tier legal service provider in Switzerland. The website is professionally designed, multilingual, and rich in content, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and integrates modern analytics and tracking tools such as Google Analytics, Hotjar, and HubSpot Analytics, indicating a well-maintained infrastructure. Security posture is strong with HTTPS enforcement and security headers, though there is room for improvement in cookie consent and explicit security policies. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the professional nature of the site and external trust signals. Strategic recommendations include enhancing privacy compliance with explicit cookie consent, publishing security and incident response policies, and providing direct security contact information.

V

VAUD

vaud.swiss

56

Vaud.ch is the official website representing the Canton of Vaud, Switzerland, focusing on promoting the region's tourism, economy, culture, and local products. It serves a broad audience including residents, tourists, local producers, and ambassadors, providing comprehensive information and services to enhance regional engagement and economic development. The website is well-positioned as a trusted government portal with strong branding and clear communication channels. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, Matomo analytics, Facebook Pixel, and Cookiebot for consent management. The infrastructure supports good mobile optimization and SEO practices, although some security headers could be improved. The site uses HTTPS with excellent SSL configuration, ensuring secure communications. From a security perspective, the website demonstrates good practices including encrypted connections and privacy compliance with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, Vaud.ch is a professional, secure, and privacy-conscious government website with excellent content quality and user experience. Strategic improvements in security policy publication and header implementation would further strengthen its posture.

T

TREUFiN Reuter AG

treufin-reuter.ch

60

TREUFiN Reuter AG is a Swiss fiduciary and consulting firm providing comprehensive services including tax consulting, legal advisory, accounting, and digital bookkeeping primarily targeting companies, private individuals, and international clients establishing business in Switzerland. The company positions itself as a reliable partner with a focus on professional and personalized service, supported by client testimonials and partnerships with recognized software providers. The website is built on Joomla CMS with modern responsive design elements and integrates Google Analytics for user tracking. Security posture is solid with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website reflects a trustworthy and professional business presence with clear contact information and relevant content.

I

Innovaud

innovaud.ch

59

Innovaud is a government-backed innovation and economic promotion agency based in the canton of Vaud, Switzerland. It supports a wide range of businesses including startups, scale-ups, SMEs, and large companies, and acts as a gateway for foreign companies to establish themselves in the region. The agency offers free services backed by the Vaud Department of the Economy, Innovation, Employment and Patrimony. The website reflects a professional and comprehensive digital presence with clear navigation and relevant content targeting investors and innovators in various technology and industrial sectors. Technically, the website is built on the DotNetNuke CMS platform using modern web technologies such as jQuery, Bootstrap 4, and Font Awesome. It includes cookie consent management via tarteaucitron.js and integrates analytics and marketing tools like Google Analytics, Google Tag Manager, Facebook Pixel, and LinkedIn Insight. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence. Contact information is clearly provided, enhancing trust and credibility. Overall, Innovaud's website demonstrates a mature digital infrastructure suitable for its role as a regional innovation agency. The security posture is solid but could be improved with additional security headers and explicit incident response disclosures. The business credibility is high, supported by consistent WHOIS data and official government backing.

F

Fondation pour l'innovation et la technologie (FIT)

fondation-fit.ch

53

Fondation pour l'innovation et la technologie (FIT) is a well-established Swiss non-profit foundation founded in 1994, dedicated to supporting innovative startups and projects in Western Switzerland, particularly in the Vaud and Romandie regions. The foundation provides financial support through loans and grants across several specialized programs including FIT Tech, FIT Digital, FIT Impact, and Food & Hospitality Vertical. The website reflects a mature organization with a clear mission, strong regional partnerships, and a focus on fostering entrepreneurship and job creation.

C

Crypto Finance AG

cryptofinance.ch

68

Crypto Finance AG, part of the Deutsche Börse Group, operates a regulated and integrated platform enabling financial institutions to securely manage, trade, and store digital assets. The company holds regulatory licenses from FINMA and BaFin and is compliant with the upcoming MiCAR regulation, positioning itself as a market leader in Switzerland, Germany, and Europe. The website reflects a professional and trustworthy brand with detailed executive profiles and clear service offerings including custody, trading, and staking of digital assets. Technically, the site is built on WordPress with modern plugins and SEO optimizations, hosted on Azure CDN, and employs Google Tag Manager for analytics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of a public vulnerability disclosure or incident response contact is noted. The WHOIS data is missing, which raises some transparency concerns, but the overall trust signals from regulation and parent company affiliation mitigate this risk. The site is fully accessible with no WAF or blocking mechanisms detected.

M

Maerki Baumann & Co. AG

maerki-baumann.ch

57

Maerki Baumann & Co. AG is an independent private bank based in Zurich, Switzerland, specializing in private banking, asset management, and advisory services for private clients and independent asset managers. The website reflects a professional banking institution with a clear focus on wealth management and personalized financial services. The company positions itself as a family-owned bank with generational expertise, targeting a discerning clientele seeking bespoke financial solutions. Technically, the website is built on Drupal 10, integrating modern tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management. The site is mobile-optimized and employs standard SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the website enforces HTTPS and implements several security headers, demonstrating a solid security posture. Cookie consent is comprehensive, with detailed cookie categories and provider information, indicating good privacy compliance and GDPR adherence. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with moderate technical sophistication and a strong business credibility profile.

The website shop.post.ch is the official online shop of Swiss Post, operated by Post CH Network Ltd. It offers a wide range of products including stamps, philatelic items, electronics, gift cards, and household goods. The platform targets general consumers primarily in Switzerland, providing a trusted e-commerce channel for postal and related products. The site demonstrates a solid market position as the official postal service's retail outlet. Technically, the website is built using modern web technologies such as Angular, integrates Google Tag Manager for analytics, and employs Usercentrics for consent management. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Performance is moderate, with CDN usage and asynchronous script loading enhancing user experience. From a security perspective, the site enforces HTTPS, uses captcha for form protection, and integrates secure payment libraries. While explicit security headers are not fully confirmed, the overall SSL configuration is excellent. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. However, the absence of a public security policy or vulnerability disclosure program suggests room for improvement in transparency and incident response readiness. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing a dedicated security policy, enhancing security header implementation, and establishing a vulnerability disclosure channel to further strengthen security posture and user trust.

E

ePost

epost.ch

66

ePost is a Swiss-based digital communication platform specializing in secure, hybrid mail and business communication services. The company offers an all-in-one solution for sending, receiving, interacting, and archiving business correspondence via multiple channels including physical mail, ePost, eBill, SMS, and email. Their platform targets business customers such as SMEs, large senders, and software manufacturers, positioning itself as a market leader in Switzerland for secure B2C communication. The website reflects a mature digital infrastructure leveraging HubSpot CMS and multiple analytics and marketing tools, indicating a high level of digital maturity and marketing sophistication. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers and explicit security policies are absent. Privacy compliance is basic, lacking visible privacy and cookie policies on the analyzed page. Overall, the platform is professional, trustworthy, and well-branded, serving a large user base in Switzerland.

S

Swiss Post Cargo CH AG

swisspost-cargo.com

73

Swiss Post Cargo CH AG is a prominent logistics and transport service provider based in Switzerland, offering tailored solutions including transport, warehousing, customs clearance, and value-added services. The company operates as a one-stop shop with a global network, serving industry and trade sectors with a focus on customer satisfaction. The website reflects a mature digital presence built on modern technologies such as React and Next.js, hosted likely on Vercel, with a professional design optimized for performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and consent management in place, though explicit security policies and incident response details are not publicly available. The absence of WHOIS data reduces transparency but is likely due to privacy protection, common for large enterprises. Overall, the site demonstrates high professionalism and trustworthiness, supporting Swiss Post Cargo's market position as a reliable logistics partner.

A

American Express

americanexpress.ch

71

American Express Switzerland operates a comprehensive website offering credit card products and related financial services tailored for private and business customers in Switzerland. The site reflects a strong market position as part of the global American Express brand, with localized services issued by Swisscard AECS GmbH. The website provides detailed product information, travel benefits, rewards programs, and customer support resources, demonstrating a mature digital presence. Technically, the site employs modern web technologies including React, Adobe DTM, and advanced analytics tools, ensuring fast performance, mobile optimization, and accessibility compliance. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and website content are consistent and legitimate, supporting a high trustworthiness rating.

S

Schweizer Fleisch

schweizerfleisch.ch

71

Schweizer Fleisch is a Swiss-focused informational and promotional website dedicated to educating consumers about Swiss meat, its quality, safety, and sustainability. The site offers recipes, cooking tips, and detailed content aimed at encouraging the consumption of Swiss meat products. The platform appears to be professionally managed, likely by industry stakeholders, and targets consumers interested in high-quality, locally sourced meat. Technically, the website is built on Drupal 10 and incorporates modern web technologies including Google Tag Manager and Mailchimp for marketing and analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit privacy and terms of service policies, which are areas for improvement. Overall, the domain registration data aligns well with the website's Swiss identity and business focus, indicating legitimacy and trustworthiness.

The website www.coop.ch is a digital presence of Coop, a leading Swiss retail company. The business operates in the retail sector, providing a broad range of products and services to the general public in Switzerland. The site appears to be part of an OAuth2 authorization flow, indicating integration with user authentication services. However, direct content access is blocked by a CAPTCHA challenge, limiting the ability to analyze the full website content and policies. Technically, the site employs bot mitigation technologies, including scripts from captcha-delivery.com, suggesting a focus on security and abuse prevention. Due to the blocked content, detailed technical infrastructure and performance assessments are not possible. The domain registration data aligns well with the business claims, supporting the legitimacy of the site. From a security perspective, the presence of a CAPTCHA challenge is a positive indicator of proactive security measures. However, the inability to access the full content prevents evaluation of security headers, privacy policies, and compliance measures. No vulnerabilities or exposed sensitive data were detected, but this is due to limited content visibility. Overall, the site is legitimate and likely secure, but the current WAF challenge restricts comprehensive analysis. Strategic recommendations include providing accessible policy pages, enhancing transparency, and ensuring that security measures do not overly hinder legitimate user access.

V

V-ZUG AG

vzug.com

70

V-ZUG AG is a Swiss-based manufacturer specializing in premium household appliances, including kitchen and laundry products. The company positions itself as a provider of high-quality, comfortable appliances targeting discerning consumers and businesses. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its audience. Technically, the site leverages modern frameworks such as Angular and SAP Commerce Cloud, integrating analytics and consent management tools to ensure compliance and user experience. Security posture is solid with HTTPS enforcement and security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The missing WHOIS data raises some concerns about domain registration transparency, but the overall brand presence and content quality support legitimacy. Strategic recommendations include enhancing security transparency and verifying domain registration details to bolster trust.

T

Tele

tele.ch

66

Tele.ch is a Swiss media platform specializing in entertainment content such as streaming guides, cinema information, TV schedules, newsletters, and e-paper subscriptions. It serves a general audience interested in media and entertainment within Switzerland, positioning itself as a reputable and established brand in the Swiss media landscape. The website integrates advertising and subscription services to support its business model. Technically, the site uses modern JavaScript frameworks like Alpine.js and htmx, along with advertising and tracking technologies such as Google Tag Manager, OneTrust for cookie consent, and Ringier Advertising scripts. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms but lacks explicit published security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected, and the domain registration aligns well with the business claims, indicating a trustworthy operation. Overall, the site is professional and secure but could improve privacy transparency and contact availability.

R

Ringier AG

tvstar.ch

61

The website shop.tvstar.ch/abo-print is a professional e-commerce platform offering subscription services for a Swiss TV program magazine called TV-Star. The business is operated by Ringier AG, a well-known Swiss media company. The site targets Swiss TV viewers interested in printed TV program magazines and related content. The business model is subscription-based, focusing on print magazine sales with additional services like a TV newsletter. The website demonstrates a good level of digital maturity, utilizing modern web technologies such as React and Next.js, and employs monitoring and analytics tools like New Relic and Tealium. Cookie consent is managed via OneTrust, indicating attention to privacy compliance. Security posture is strong with HTTPS enforced and appropriate security headers present. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact or incident response information is found, which are areas for improvement. Overall, the site is trustworthy and professionally maintained, suitable for its target audience.

R

Ringier AG

style-magazin.ch

66

Schweizer Illustrierte is a well-established Swiss media brand owned by Ringier AG, focusing on lifestyle, fashion, beauty, and health content targeted at the German-speaking Swiss audience. The website demonstrates a high level of professionalism with comprehensive content, modern design, and clear navigation. The business model revolves around media publishing with advertising and subscription services, supported by a strong digital presence and partnerships within the Ringier group. Technically, the site uses modern JavaScript frameworks like React, integrates advanced advertising technologies such as Prebid.js and Google DoubleClick, and employs a consent management platform (OneTrust) to comply with privacy regulations. Security posture is strong with HTTPS enforced, security headers likely in place, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site is trustworthy, performant, and user-friendly, reflecting a mature digital infrastructure.

R

Ringier AG

schweizer-illustrierte.ch

66

Schweizer Illustrierte is a prominent Swiss media brand operated by Ringier AG, a well-established family-owned media group. The website offers rich content focused on celebrity news, fashion, beauty, family, and health, targeting a broad general audience interested in lifestyle and entertainment. The business model revolves around digital publishing, advertising, and subscription services, positioning itself as a leading media outlet in Switzerland. The company maintains a strong brand presence with consistent and professional content quality.

R

Ringier AG | Ringier Medien Schweiz

pme.ch

63

PME.ch is a well-established Swiss media platform focused on providing news and information to small and medium enterprises (SMEs) in the French-speaking region of Switzerland. It operates under the Ringier AG media group, which lends it strong corporate backing and credibility. The website offers a broad range of content including business news, strategy, investment insights, and lifestyle features, supported by subscription services, newsletters, and events. Technically, the site employs modern web technologies such as React and GraphQL, integrates advanced advertising and tracking solutions with user consent mechanisms, and maintains good SEO and accessibility standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, PME.ch presents a professional, trustworthy, and user-friendly digital media presence with a high level of compliance and technical maturity.

G

Gryps AG

gryps.ch

69

Gryps AG operates as an online partner network focused on outsourcing and procurement services tailored for small and medium enterprises (KMU) in Switzerland. The company offers advisory services and facilitates offer comparisons across more than 50 product and service categories including IT, finance, insurance, and HR. Gryps is a subsidiary of Ringier, a reputable media company, which enhances its market credibility. The website is professionally designed with consistent branding and targets SMEs seeking efficient outsourcing solutions. Technically, the site employs modern tracking and marketing technologies such as Google Tag Manager, Microsoft Clarity, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers implemented. However, the absence of explicit privacy and terms of service pages indicates room for improvement in compliance documentation. Overall, Gryps AG presents a trustworthy and professional online presence with a solid business model and good technical implementation.

R

Ringier Axel Springer Schweiz AG

glueckspost.ch

57

GlücksPost is a Swiss women’s magazine focused on celebrity and entertainment news, operated by Ringier Axel Springer Schweiz AG. The website serves as a digital platform for the magazine, offering articles, multimedia content, subscription services, and advertising opportunities. It targets a general adult audience interested in lifestyle and entertainment. The site is professionally designed, mobile-optimized, and integrates social media channels to enhance user engagement. Technically, it is built on WordPress with modern JavaScript libraries and SEO tools, ensuring good performance and search visibility. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Overall, GlücksPost presents a trustworthy and mature digital media presence with clear business legitimacy and operational transparency.

Die Schweizerische Post AG operates as the national postal service provider in Switzerland, offering a broad range of physical and digital services including mail and parcel delivery, express and courier services, digital mailboxes, and financial services through its subsidiary PostFinance. The company holds a strong market position as a trusted government entity with extensive reach and a large enterprise scale. The website reflects this stature with comprehensive service offerings, multilingual support, and consistent branding. Technically, the site employs modern web technologies such as Sitecore CMS, Coveo search integration, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforcement, input validation, and privacy compliance, although explicit security policies and vulnerability disclosure mechanisms are not publicly detailed. Overall, the website is professional, secure, and user-friendly, supporting a high level of trust and credibility.

D

DAO Suisse Association

daosuisse.com

55

DAO Suisse is a Swiss-based association dedicated to fostering the development and adoption of Decentralized Autonomous Organizations (DAOs) by leveraging Swiss cultural values of participation and collaboration. The organization acts as a hub for DAO stakeholders, including industry experts, academia, and DAO founders, providing networking, education, advocacy, and working groups focused on legal, organizational, and technological aspects of DAOs. With over 60 members, DAO Suisse positions itself as a key player in the Swiss and global DAO ecosystem. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts and jQuery. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, including enhanced accessibility features and SEO optimizations. From a security perspective, the site uses HTTPS and has secure form inputs, but lacks visible security headers and published security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the professional presentation and active community engagement mitigate some risk. Overall, DAO Suisse presents a credible and professional front as a DAO-focused association, but should address privacy compliance gaps, improve security posture, and clarify domain registration details to enhance trust and reduce risk.

S

SICTIC

sictic.ch

43

SICTIC is a leading Swiss angel investor network that connects smart money investors with seed and early-stage technology startups in Switzerland. The organization facilitates investment opportunities through matchmaking events, educational programs, and a strong community presence. Their market position is well-established as a key player in the Swiss startup ecosystem, providing valuable services to investors and startups alike. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, MonsterInsights, and Google Analytics integrations. It employs best practices in performance, mobile optimization, and accessibility, ensuring a professional and user-friendly digital presence. The use of structured data and SEO optimization further enhances discoverability. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA for form protection. Cookie consent mechanisms and comprehensive privacy policies demonstrate good compliance with GDPR. However, there is no explicit security policy or incident response information published, which could be improved. Overall, the website presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and considering a vulnerability disclosure policy to further enhance trust and security posture.

S

Swiss FinTech Association

swissfinte.ch

45

The Swiss FinTech Association is a well-established non-profit organization dedicated to fostering the development of the Swiss FinTech ecosystem. It serves as a neutral hub connecting various stakeholders including startups, corporates, investors, and professionals in finance and technology. The association offers key services such as advocacy, mentoring, marketplace access, and organizes networking events to strengthen the FinTech community in Switzerland. The website reflects a strong market position as the leading FinTech hub in the country, with a clear focus on community engagement and ecosystem development. Technically, the website is built on WordPress using a modern stack of plugins and frameworks including Yoast SEO, WPBakery Page Builder, and Mailchimp integration for newsletter subscriptions. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. The technical infrastructure supports a professional and user-friendly experience for visitors. From a security perspective, the site enforces HTTPS and shows no signs of exposed sensitive data or vulnerabilities in the visible content. However, it lacks some advanced security headers and does not provide explicit security policies or incident response information. Privacy compliance is mostly addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website presents a low-risk profile with strong business credibility and professional content. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to further strengthen the security posture.

C

Crypto Valley Association

cryptovalley.swiss

56

Crypto Valley Association is a well-established non-profit organization based in Switzerland, focused on fostering growth, collaboration, and integrity within the global blockchain and crypto ecosystem. Founded in 2017, it serves as a professional network uniting top blockchain and crypto professionals and companies. The association offers key services including membership networking, working groups, advocacy, and flagship events such as the Crypto Valley Conference and Web3 Banking Symposium. The website reflects a strong market position as Switzerland's leading blockchain ecosystem with global reach. Technically, the website is built on WordPress using the Avada theme and integrates modern libraries such as jQuery and Yoast SEO for optimization. Hosting is provided by Hostpoint AG, inferred from DNS data. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, some improvements in accessibility and security headers could enhance the technical posture. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers like Content-Security-Policy. There is no visible cookie consent mechanism or published security policy and incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and content-rich, targeting blockchain professionals and companies. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to strengthen compliance and trust.

M

Maerki Baumann & Co. AG

archip.ch

59

Maerki Baumann & Co. AG operates as an independent Zurich-based private bank specializing in blockchain and cryptocurrency asset management services. The website presents a professional image targeting private and corporate clients interested in custody, trading, staking, crypto investment advice, asset management, and NFT custody. The bank emphasizes generational expertise and a focused business model in the finance sector. Technically, the website is built on Drupal 10, integrates Google Tag Manager and Cookiebot for consent management, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further enhanced. The website uses multiple third-party advertising and tracking services with transparent consent. Overall, the domain registration data aligns well with the website's claims, indicating a legitimate and trustworthy entity. No critical security or content safety issues were detected.