Switzerland security reports

R

Ringier AG

tvstar.ch

61

The website shop.tvstar.ch/abo-print is a professional e-commerce platform offering subscription services for a Swiss TV program magazine called TV-Star. The business is operated by Ringier AG, a well-known Swiss media company. The site targets Swiss TV viewers interested in printed TV program magazines and related content. The business model is subscription-based, focusing on print magazine sales with additional services like a TV newsletter. The website demonstrates a good level of digital maturity, utilizing modern web technologies such as React and Next.js, and employs monitoring and analytics tools like New Relic and Tealium. Cookie consent is managed via OneTrust, indicating attention to privacy compliance. Security posture is strong with HTTPS enforced and appropriate security headers present. However, the site lacks explicit privacy policy and terms of service pages, and no direct contact or incident response information is found, which are areas for improvement. Overall, the site is trustworthy and professionally maintained, suitable for its target audience.

R

Ringier AG

style-magazin.ch

66

Schweizer Illustrierte is a well-established Swiss media brand owned by Ringier AG, focusing on lifestyle, fashion, beauty, and health content targeted at the German-speaking Swiss audience. The website demonstrates a high level of professionalism with comprehensive content, modern design, and clear navigation. The business model revolves around media publishing with advertising and subscription services, supported by a strong digital presence and partnerships within the Ringier group. Technically, the site uses modern JavaScript frameworks like React, integrates advanced advertising technologies such as Prebid.js and Google DoubleClick, and employs a consent management platform (OneTrust) to comply with privacy regulations. Security posture is strong with HTTPS enforced, security headers likely in place, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms. Overall, the site is trustworthy, performant, and user-friendly, reflecting a mature digital infrastructure.

R

Ringier AG

schweizer-illustrierte.ch

66

Schweizer Illustrierte is a prominent Swiss media brand operated by Ringier AG, a well-established family-owned media group. The website offers rich content focused on celebrity news, fashion, beauty, family, and health, targeting a broad general audience interested in lifestyle and entertainment. The business model revolves around digital publishing, advertising, and subscription services, positioning itself as a leading media outlet in Switzerland. The company maintains a strong brand presence with consistent and professional content quality.

R

Ringier AG | Ringier Medien Schweiz

pme.ch

63

PME.ch is a well-established Swiss media platform focused on providing news and information to small and medium enterprises (SMEs) in the French-speaking region of Switzerland. It operates under the Ringier AG media group, which lends it strong corporate backing and credibility. The website offers a broad range of content including business news, strategy, investment insights, and lifestyle features, supported by subscription services, newsletters, and events. Technically, the site employs modern web technologies such as React and GraphQL, integrates advanced advertising and tracking solutions with user consent mechanisms, and maintains good SEO and accessibility standards. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, PME.ch presents a professional, trustworthy, and user-friendly digital media presence with a high level of compliance and technical maturity.

G

Gryps AG

gryps.ch

69

Gryps AG operates as an online partner network focused on outsourcing and procurement services tailored for small and medium enterprises (KMU) in Switzerland. The company offers advisory services and facilitates offer comparisons across more than 50 product and service categories including IT, finance, insurance, and HR. Gryps is a subsidiary of Ringier, a reputable media company, which enhances its market credibility. The website is professionally designed with consistent branding and targets SMEs seeking efficient outsourcing solutions. Technically, the site employs modern tracking and marketing technologies such as Google Tag Manager, Microsoft Clarity, and OneTrust for cookie consent, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers implemented. However, the absence of explicit privacy and terms of service pages indicates room for improvement in compliance documentation. Overall, Gryps AG presents a trustworthy and professional online presence with a solid business model and good technical implementation.

R

Ringier Axel Springer Schweiz AG

glueckspost.ch

57

GlücksPost is a Swiss women’s magazine focused on celebrity and entertainment news, operated by Ringier Axel Springer Schweiz AG. The website serves as a digital platform for the magazine, offering articles, multimedia content, subscription services, and advertising opportunities. It targets a general adult audience interested in lifestyle and entertainment. The site is professionally designed, mobile-optimized, and integrates social media channels to enhance user engagement. Technically, it is built on WordPress with modern JavaScript libraries and SEO tools, ensuring good performance and search visibility. Privacy compliance is robust, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Overall, GlücksPost presents a trustworthy and mature digital media presence with clear business legitimacy and operational transparency.

Die Schweizerische Post AG operates as the national postal service provider in Switzerland, offering a broad range of physical and digital services including mail and parcel delivery, express and courier services, digital mailboxes, and financial services through its subsidiary PostFinance. The company holds a strong market position as a trusted government entity with extensive reach and a large enterprise scale. The website reflects this stature with comprehensive service offerings, multilingual support, and consistent branding. Technically, the site employs modern web technologies such as Sitecore CMS, Coveo search integration, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforcement, input validation, and privacy compliance, although explicit security policies and vulnerability disclosure mechanisms are not publicly detailed. Overall, the website is professional, secure, and user-friendly, supporting a high level of trust and credibility.

D

DAO Suisse Association

daosuisse.com

55

DAO Suisse is a Swiss-based association dedicated to fostering the development and adoption of Decentralized Autonomous Organizations (DAOs) by leveraging Swiss cultural values of participation and collaboration. The organization acts as a hub for DAO stakeholders, including industry experts, academia, and DAO founders, providing networking, education, advocacy, and working groups focused on legal, organizational, and technological aspects of DAOs. With over 60 members, DAO Suisse positions itself as a key player in the Swiss and global DAO ecosystem. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Fonts and jQuery. The site is well-designed, mobile-optimized, and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, including enhanced accessibility features and SEO optimizations. From a security perspective, the site uses HTTPS and has secure form inputs, but lacks visible security headers and published security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR-specific disclosures. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the professional presentation and active community engagement mitigate some risk. Overall, DAO Suisse presents a credible and professional front as a DAO-focused association, but should address privacy compliance gaps, improve security posture, and clarify domain registration details to enhance trust and reduce risk.

S

SICTIC

sictic.ch

43

SICTIC is a leading Swiss angel investor network that connects smart money investors with seed and early-stage technology startups in Switzerland. The organization facilitates investment opportunities through matchmaking events, educational programs, and a strong community presence. Their market position is well-established as a key player in the Swiss startup ecosystem, providing valuable services to investors and startups alike. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, MonsterInsights, and Google Analytics integrations. It employs best practices in performance, mobile optimization, and accessibility, ensuring a professional and user-friendly digital presence. The use of structured data and SEO optimization further enhances discoverability. From a security perspective, the site enforces HTTPS, uses security headers, and integrates Google reCAPTCHA for form protection. Cookie consent mechanisms and comprehensive privacy policies demonstrate good compliance with GDPR. However, there is no explicit security policy or incident response information published, which could be improved. Overall, the website presents a low-risk profile with strong business credibility, good technical implementation, and solid privacy compliance. Strategic recommendations include publishing a dedicated security policy, adding incident response contacts, and considering a vulnerability disclosure policy to further enhance trust and security posture.

S

Swiss FinTech Association

swissfinte.ch

45

The Swiss FinTech Association is a well-established non-profit organization dedicated to fostering the development of the Swiss FinTech ecosystem. It serves as a neutral hub connecting various stakeholders including startups, corporates, investors, and professionals in finance and technology. The association offers key services such as advocacy, mentoring, marketplace access, and organizes networking events to strengthen the FinTech community in Switzerland. The website reflects a strong market position as the leading FinTech hub in the country, with a clear focus on community engagement and ecosystem development. Technically, the website is built on WordPress using a modern stack of plugins and frameworks including Yoast SEO, WPBakery Page Builder, and Mailchimp integration for newsletter subscriptions. The site demonstrates good mobile optimization, SEO practices, and a moderate performance profile. The technical infrastructure supports a professional and user-friendly experience for visitors. From a security perspective, the site enforces HTTPS and shows no signs of exposed sensitive data or vulnerabilities in the visible content. However, it lacks some advanced security headers and does not provide explicit security policies or incident response information. Privacy compliance is mostly addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website presents a low-risk profile with strong business credibility and professional content. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and enhancing security headers to further strengthen the security posture.

C

Crypto Valley Association

cryptovalley.swiss

56

Crypto Valley Association is a well-established non-profit organization based in Switzerland, focused on fostering growth, collaboration, and integrity within the global blockchain and crypto ecosystem. Founded in 2017, it serves as a professional network uniting top blockchain and crypto professionals and companies. The association offers key services including membership networking, working groups, advocacy, and flagship events such as the Crypto Valley Conference and Web3 Banking Symposium. The website reflects a strong market position as Switzerland's leading blockchain ecosystem with global reach. Technically, the website is built on WordPress using the Avada theme and integrates modern libraries such as jQuery and Yoast SEO for optimization. Hosting is provided by Hostpoint AG, inferred from DNS data. The site demonstrates good mobile optimization, SEO practices, and moderate performance. However, some improvements in accessibility and security headers could enhance the technical posture. From a security perspective, the site uses HTTPS and has domain transfer protections enabled, but lacks DNSSEC and security headers like Content-Security-Policy. There is no visible cookie consent mechanism or published security policy and incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and content-rich, targeting blockchain professionals and companies. Strategic recommendations include enabling DNSSEC, implementing security headers, adding cookie consent, and publishing security and incident response policies to strengthen compliance and trust.

M

Maerki Baumann & Co. AG

archip.ch

59

Maerki Baumann & Co. AG operates as an independent Zurich-based private bank specializing in blockchain and cryptocurrency asset management services. The website presents a professional image targeting private and corporate clients interested in custody, trading, staking, crypto investment advice, asset management, and NFT custody. The bank emphasizes generational expertise and a focused business model in the finance sector. Technically, the website is built on Drupal 10, integrates Google Tag Manager and Cookiebot for consent management, and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be further enhanced. The website uses multiple third-party advertising and tracking services with transparent consent. Overall, the domain registration data aligns well with the website's claims, indicating a legitimate and trustworthy entity. No critical security or content safety issues were detected.

J

JayBee AG

jaybeeconsulting.ch

49

JayBee AG is a Swiss-based consulting firm specializing in simplifying regulatory and compliance processes for sectors including Fintech, Crypto, Banking, and Asset Management. The company positions itself as a goal-oriented partner providing pragmatic and innovative solutions to empower business success. Their website reflects a niche market focus with professional branding and client testimonials that enhance trust. Technically, the site is built on WordPress with Elementor and integrates SEO and analytics tools such as Rank Math and Google Tag Manager, indicating a modern digital infrastructure. Security posture is solid with HTTPS enforced, but could be improved by adding security headers and explicit incident response policies. Privacy compliance is partially addressed with a privacy policy present, but lacks cookie consent mechanisms. Overall, the site is accessible, professional, and trustworthy with moderate user tracking and good content quality.

S

SIX Digital Exchange

sdx.com

74

SIX Digital Exchange (SDX) is a pioneering financial market infrastructure provider offering the world's first fully regulated digital exchange and central securities depository based on blockchain technology. It operates under the regulatory oversight of FINMA and is part of the reputable SIX Group. SDX provides a secure and transparent platform for issuance, trading, settlement, and custody of digital assets, targeting institutional investors, issuers, and market participants interested in digital securities and tokenized assets. The website reflects a mature digital presence with comprehensive content, strong branding, and advanced technical implementation using WordPress and Elementor frameworks. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. WHOIS data is missing or privacy protected, which slightly reduces transparency but is likely justified given the regulated financial nature of the business. Overall, SDX presents a trustworthy and professional digital asset exchange platform with a strong market position and clear regulatory compliance.

I

ISP Group

ispgroup.com

57

ISP Group is a Swiss-based financial services boutique established in 1993, specializing in asset services, investment management, and global markets access. The company targets institutional investors, asset managers, and family offices, offering a broad range of services including digital assets, securitisation, paying agent services, trading, wealth and asset management, and placement agent services. The firm operates globally with offices in Switzerland, Israel, Hong Kong, and Dubai, positioning itself as a trusted partner in the financial sector with strong regulatory compliance evidenced by FINMA licensing and SIX reporting membership. Technically, the website employs modern JavaScript libraries such as jQuery, Alpine.js, and Axios, alongside UI frameworks like Slick and Sly sliders, hosted on Azure DNS infrastructure. The site demonstrates good mobile optimization, SEO practices, and performance, though accessibility features are basic. Analytics are implemented via Google Analytics and Tag Manager with a cookie consent mechanism ensuring privacy compliance. From a security perspective, the site uses HTTPS with a strong SSL configuration but lacks DNSSEC and some recommended security headers. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contacts suggests room for improvement in transparency and readiness. The domain's WHOIS data is consistent with the business claims, showing a long-established domain without privacy protection, enhancing trust. Overall, ISP Group's website is professional, secure, and compliant with privacy regulations, reflecting a credible and trustworthy financial services provider. Strategic enhancements in security policy publication and DNS security would further strengthen its posture.

C

CoreLedger AG

coreledger.net

63

CoreLedger AG is a specialized blockchain technology company founded in 2016, offering expert blockchain consulting and customized software development services to businesses seeking secure and innovative blockchain solutions. The company positions itself as a professional and trusted provider in the blockchain technology sector, targeting enterprises and organizations aiming to leverage blockchain technology at scale. The website reflects a medium-sized business with a consistent brand presence and professional content tailored to its target audience. Technically, the website is built on WordPress with Elementor, utilizing modern JavaScript libraries and tracking tools such as Microsoft Clarity, Google Tag Manager, and LinkedIn Insight Tag. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. The security posture is strong with HTTPS enabled and appropriate security headers, although DNSSEC is not enabled, representing a minor improvement opportunity. Privacy compliance is lacking due to the absence of privacy and cookie policies and consent mechanisms, which should be addressed to meet GDPR and other regulations. No incident response or vulnerability disclosure information is published, indicating a gap in security transparency. Overall, the website is professional, secure, and trustworthy but would benefit from enhanced privacy and security policy disclosures.

M

MME Compliance AG

mme.ch

68

MME Compliance AG is a Swiss-based integrated legal, tax, and compliance consultancy firm serving both corporate and private clients domestically and internationally. The company positions itself as an innovative and comprehensive advisory service provider with a strong focus on personalized client support. Their website reflects a professional and modern digital presence, leveraging HubSpot CMS and various analytics and marketing tools to optimize user experience and engagement. The firm maintains clear contact information and multiple office locations in Zurich and Zug, reinforcing accessibility and trust. Technically, the website is built on a robust infrastructure using HubSpot's platform, enhanced with Google Analytics 4, Google Tag Manager, Hotjar, and LinkedIn Insight for marketing and analytics purposes. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security practices include HTTPS enforcement and cookie consent mechanisms, although some HTTP security headers could be improved. From a security perspective, the site demonstrates good maturity with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent management. However, explicit security policies and incident response information are not publicly available, which could be enhanced to improve transparency and readiness. Overall, MME Compliance AG's website presents a trustworthy, professional, and secure digital front that aligns well with its business objectives and market positioning. Strategic improvements in security headers and disclosure policies would further strengthen its security posture and compliance stance.

C

Crypto Finance AG

crypto-finance.com

68

Crypto Finance AG, part of the Deutsche Börse Group, operates a regulated and integrated platform enabling financial institutions to securely manage, trade, and store digital assets. The company holds regulatory licenses from FINMA and BaFin, including a MiCAR license for European operations, positioning it as a market leader in Switzerland and Germany. The website reflects a professional and trustworthy digital presence with detailed executive bios and clear service offerings in custody, trading, and staking of digital assets. Technically, the site is built on WordPress with modern plugins and SEO optimizations, delivering good performance and mobile responsiveness. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security and incident response policies are not published. WHOIS data is missing, which slightly reduces trust but does not outweigh the strong regulatory and business signals. Overall, the site is a credible and professional representation of a regulated financial services provider in the digital asset space.

LGT Impact Fellowship is a non-profit initiative under LGT Venture Philanthropy, focused on fostering impact investing and social entrepreneurship globally, with a strong presence in Africa, India, Europe, and Latin America. The website serves as a blog platform sharing insights, experiences, and trends related to impact investing and fellowship activities. Technically, the site is built on WordPress with a modern theme and plugins supporting SEO and cookie compliance. Security posture is adequate with HTTPS and domain transfer protections, though improvements like DNSSEC and security headers are recommended. Overall, the site is professional, trustworthy, and well-aligned with its mission, though it lacks explicit security and incident response policies.

B

BX Swiss AG

regservices.ch

60

BX Swiss AG operates regservices.ch, a specialized platform providing regulatory compliance services under the Swiss Financial Services Act (FinSA). The company offers a FINMA authorized Prospectus Review Office and maintains a Swiss Register of Client Advisors, facilitating prospectus examination, deposit, and advisor registration. The website targets financial institutions, client advisors, and regulatory bodies within Switzerland, positioning itself as a niche service provider in the Swiss financial regulatory ecosystem. The business model revolves around regulatory compliance facilitation and digital service delivery for financial market participants. Technically, the website is built on WordPress with modern plugins and SEO tools, offering a good user experience and mobile optimization. Security posture is adequate with HTTPS and some best practices but lacks certain security headers and explicit vulnerability disclosure mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

T

Traders Cup | Börsenspiel für Strukturierte Produkte

traders-cup.ch

61

Traders Cup is an educational online platform based in Switzerland that offers a trading game focused on structured financial products. It targets individuals interested in learning trading skills through a gamified experience, offering prizes valued over CHF 25,000. The platform leverages a WordPress CMS with Elementor and integrates performance and privacy tools such as WP Rocket and Borlabs Cookie. The website is well-structured, mobile-optimized, and uses HTTPS with proper security headers, reflecting a mature technical infrastructure. However, direct contact information and explicit security policies are not prominently available, which could be improved to enhance trust and compliance. Overall, the site presents a professional and trustworthy front for its niche educational service.

B

BXPlus

bxplus.ch

66

BXPlus operates as a specialized membership portal providing exclusive investment and trading content related to the Swiss stock exchange BX Swiss. The website targets investors and traders interested in Swiss financial markets, offering curated information and membership benefits. The business model focuses on content exclusivity and community engagement within the Swiss finance sector. Technically, the site is built on WordPress with a modern plugin ecosystem supporting events and membership management. The infrastructure includes standard security practices such as HTTPS and cookie consent mechanisms, though lacks explicit privacy and terms of service documentation. Security posture is strong with appropriate headers and SSL configuration, but could be improved by publishing formal policies and incident response contacts. Overall, the site presents a professional and trustworthy front for its niche audience, with room for enhanced compliance and transparency.

T

Trusty AG

trusty-compliance.com

56

Trusty AG operates a professional SaaS compliance platform offering AI-powered solutions for risk assessment, policy management, supply chain monitoring, whistleblowing, and employee training. The company targets businesses globally, with a strong market presence evidenced by thousands of clients and multilingual support. The website is well-designed, user-friendly, and optimized for SEO and mobile devices. Technically, it leverages WordPress with Elementor, Yoast SEO, and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is solid with HTTPS and encryption but lacks some advanced headers and published policies. WHOIS data confirms domain legitimacy and consistency with company information. Overall, the platform is credible and positioned well in the compliance technology market.

C

CV Summit

blockchainsummit.ch

70

CV Summit is a leading Swiss conference focused on blockchain, AI, digital assets, and crypto technologies, attracting over 3,000 attendees including industry leaders, investors, and policymakers. The event offers multiple stages, workshops, and networking opportunities, positioning itself as Switzerland's largest event in this sector. The website is professionally designed using WordPress with modern technologies and optimized for mobile devices. It integrates Google Tag Manager for analytics and tracking. Security posture is good with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not published. Privacy compliance is partial due to missing privacy and terms of service pages. Overall, the site is trustworthy and well-positioned in its market niche.

C

CV Labs

cvlabs.com

64

CV Labs is a Switzerland-based blockchain ecosystem builder and accelerator affiliated with the venture capital firm CV VC. Founded in 2018, it operates as a hub for blockchain startups and Web3 companies, offering services such as a 10-week accelerator program, coworking spaces, private offices, company setup assistance, and event hosting. The company positions itself as a key driver in the blockchain and crypto industry within Crypto Valley, Switzerland, and internationally. The website reflects a professional and modern digital presence with comprehensive content, clear navigation, and strong branding consistency. Technically, the website is built on Webflow CMS and integrates multiple modern technologies including Google Tag Manager, HubSpot analytics and forms, Google reCAPTCHA for form security, and 3D model rendering with model-viewer. The site is fast, mobile-optimized, and accessible with good SEO practices. Security posture is solid with HTTPS enforced and privacy compliance evident through cookie consent mechanisms and detailed privacy policies. However, no explicit security headers or incident response policies are published, which could be improved. The WHOIS data for the domain www.cvlabs.com is unavailable, showing no match in the registry, which raises some concerns about domain legitimacy or recent registration. Despite this, the website's professional quality, valid contact information, and extensive partner network support its credibility. Overall, CV Labs presents a trustworthy and authoritative presence in the blockchain accelerator space, though domain registration verification is recommended. Strategically, CV Labs should enhance its security posture by publishing security policies and incident response contacts, implementing security headers, and verifying domain registration details to strengthen trust and compliance.

B

BX Swiss

bxswiss.com

67

BX Swiss operates as a Swiss regulated stock exchange with a long historical legacy dating back to 1884. The website presents a professional platform offering market data, trading information, and tools for investors and financial professionals. The company targets investors and market participants primarily within Switzerland but also offers access to international shares and ETFs. The business model centers on providing regulated trading services and market infrastructure under FINMA supervision. Technically, the website employs modern JavaScript libraries including SignalR for real-time data, Google Analytics for tracking, and Swiper.js for UI components. The site is mobile optimized, accessible, and SEO friendly, though some improvements in security headers and cookie consent mechanisms are recommended. Performance is moderate with a clean and professional design. Security posture is solid with HTTPS enforced and no visible sensitive data exposure. However, the absence of security headers and lack of published security policies or incident response contacts represent areas for enhancement. Privacy compliance is basic with a privacy policy present but no explicit cookie consent mechanism. Overall, the website is trustworthy and professional, though the lack of WHOIS registration data introduces some uncertainty about domain legitimacy. Strategic recommendations include improving security headers, implementing cookie consent, publishing security and incident response policies, and verifying domain registration transparency.

U

UWZ.at

unwetter.ch

70

unwetter.ch is a professional weather warning platform focused on providing real-time and accurate severe weather alerts for Switzerland. The site offers free content such as radar, videos, and news, alongside subscription-based premium alert services delivered via SMS and email. It maintains a consistent brand presence and is part of a network of related European weather warning sites. The technical infrastructure leverages modern JavaScript frameworks, OpenLayers for mapping, and integrates Google Analytics and a consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is well-structured, user-friendly, and trustworthy, serving a general audience seeking weather information and alerts.

F

Fundplat

fundplat.com

51

Fundplat.com is a Zurich-based multimedia and events platform targeting professional investors, focusing on finance, innovation, and lifestyle. The platform offers multimedia content such as interviews, clips, and videos, alongside exclusive events like Afterworks, Breakfasts, Roundtables, and Summits, bridging markets between Switzerland, Germany, Dubai, and Abu Dhabi. The business model centers on providing high-quality content and networking opportunities for finance professionals. Technically, the website is built on WordPress, hosted on SiteGround, and uses common web technologies including jQuery, YouTube and Vimeo APIs, and Google Analytics. The site is mobile-optimized with good navigation and professional design. Security posture is moderate with HTTPS enforced and domain protections in place, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced privacy and security practices.

I

iMaps ETI AG

imaps-capital.com

57

iMaps ETI AG is a Swiss-based financial services company specializing in the creation and issuance of Exchange Traded Instruments (ETIs), including Actively Managed Certificates (AMCs) and Fund-Linked Notes. The company targets financial institutions, asset managers, and investors seeking innovative investment products in the European market. Founded in 2018, iMaps ETI AG positions itself as a niche player offering white label solutions and a proprietary issuance platform to streamline ETI creation. The website infrastructure is built on WordPress with Elementor and Astra theme, leveraging modern web technologies and integrating marketing and analytics tools such as HubSpot and Google Ads. The site is multilingual, GDPR compliant, and features cookie consent mechanisms, reflecting a mature digital presence. Performance and mobile optimization are good, though some accessibility features could be enhanced. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but there is room for improvement by enabling DNSSEC, adding security headers, and publishing formal security policies and incident response contacts. No critical security issues were detected. The WHOIS data aligns well with the business profile, indicating legitimacy and consistent domain registration. Overall, iMaps ETI AG demonstrates a professional and trustworthy online presence suitable for its financial services business, with recommendations to strengthen security transparency and technical safeguards to further enhance trust and compliance.

S

SwissComply

swisscomply.ch

45

SwissComply is a Swiss-based company specializing in compliance and risk management services. The website presents a professional but basic digital presence primarily targeting businesses seeking compliance consulting and risk management solutions. The site is built on WordPress and integrates common technologies such as Google Fonts, Google reCAPTCHA, and Google Tag Manager for analytics and marketing. Security posture is solid with HTTPS and security headers implemented, but lacks explicit privacy, cookie, and incident response policies. Contact information is not clearly presented in the analyzed content, which may impact user trust and compliance. Overall, the website is functional and moderately mature digitally but could benefit from enhanced privacy compliance and clearer business contact details.

G

Grant Thornton Switzerland / Liechtenstein

grantthornton.ch

76

Grant Thornton Switzerland / Liechtenstein is a well-established professional services firm providing audit, tax, advisory, and consulting services primarily to businesses in Switzerland and Liechtenstein. The firm operates as a member of the global Grant Thornton International network, positioning itself as a leading mid-tier player in the finance sector within its geographic market. The website reflects a professional and consistent brand image aligned with international standards, targeting corporate clients seeking high-quality financial and advisory services. Technically, the website employs modern analytics and marketing technologies such as Google Analytics, Microsoft Clarity, Optimizely, and OneTrust for cookie consent management, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO and accessibility features, although some technical details like CMS and hosting provider are not explicitly identified. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. Privacy compliance is robust with comprehensive privacy and cookie policies and active consent mechanisms. However, the absence of a dedicated security policy, incident response information, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security maturity. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing explicit security and incident response policies and implementing a vulnerability disclosure program to enhance trust and security posture further.

C

CV VC AG

cvvc.com

68

CV VC AG is a Swiss-based blockchain venture capital firm established in 2016, specializing in seed funding and acceleration programs for transformative blockchain startups globally. Positioned as a pioneer in Crypto Valley, Switzerland, CV VC offers investment products to qualified investors and operates an ecosystem arm called CV Labs, which supports startups through coworking spaces and events. The website reflects a professional and modern digital presence with comprehensive content targeting blockchain innovators and investors. Technically, the site is built on Webflow with integrations including Google Analytics, HubSpot, and CookieScript, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and reCAPTCHA usage, though lacks visible HTTP security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for VC firms. Overall, the site demonstrates a mature digital footprint suitable for its business domain.

G

GenTwo AG

gentwo.com

67

GenTwo AG is a fintech company specializing in assetization and financial engineering, aiming to expand the investment universe by making all assets investable. The company targets financial intermediaries such as banks, hedge funds, asset managers, family offices, and digital investors, offering a unique platform called GenTwo PRO along with other financial technology solutions. The website presents a professional and modern digital presence, leveraging advanced web technologies including Nuxt.js and Vue.js, integrated with HubSpot for marketing and analytics. Security measures are robust, with HTTPS enforced and appropriate security headers in place, although explicit security policies and incident response details are not publicly available. The absence of WHOIS registration data is a notable concern, suggesting the need for further verification of domain ownership. Overall, the website demonstrates a high level of professionalism, content quality, and compliance with privacy regulations, positioning GenTwo as a credible player in the fintech sector.

E

Eidgenössische Finanzmarktaufsicht FINMA

finma.ch

63

The Eidgenössische Finanzmarktaufsicht FINMA is the Swiss federal financial market supervisory authority responsible for licensing, prudential supervision, and enforcement in the Swiss financial sector. It serves a broad audience including banks, insurance companies, asset managers, and the general public. The website is professionally designed, content-rich, and provides extensive regulatory information and resources. Technically, the site uses modern JavaScript frameworks and Matomo analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy policies are recommended. Overall, the site is trustworthy and authoritative, reflecting its role as a national regulator.

C

Classen GmbH

classen.ch

61

Classen GmbH is a specialized advisory firm focused on carbon markets and UNFCCC Article 6 compliance, providing policy advisory, business proofing, and training services to governments, institutions, and corporates. The company positions itself as an experienced player with over a decade of expertise in climate change mitigation and carbon market mechanisms. Their target audience includes governments, multilateral organizations, NGOs, family offices, and corporate entities engaged in sustainability initiatives. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Typekit fonts and standard JavaScript and CSS. The site demonstrates good mobile optimization and a professional design, though SEO and accessibility features could be enhanced. Performance is moderate, typical for a Squarespace-hosted site. From a security perspective, the site enforces HTTPS with HSTS enabled, employs a cookie consent banner indicating GDPR awareness, and does not expose sensitive data. However, it lacks explicit privacy policies, terms of service, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for improved compliance and trust. Overall, the website is trustworthy and professional, with a solid business credibility score. Strategic improvements in privacy compliance documentation and security transparency would further enhance its posture and user trust.

E

EBP Schweiz AG

ebp.ch

65

EBP Schweiz AG is a well-established Swiss consulting and engineering firm with over 50 years of experience, specializing in sustainable development and interdisciplinary solutions across infrastructure, environment, energy, transportation, and real estate sectors. The company operates globally with a network of over 800 experts and locally with more than 400 professionals in Switzerland. Their website reflects a mature digital presence built on Drupal CMS with React integration, offering comprehensive service descriptions and expert profiles. Security posture is strong with HTTPS and some security best practices, though explicit security headers could be improved. Privacy compliance is evident with a GDPR-compliant privacy policy and cookie consent mechanisms. The absence of detailed WHOIS data limits domain trust analysis, but the professional website and consistent branding support legitimacy. Overall, the site is professional, secure, and trustworthy, serving a business audience effectively.

S

SHR Schweizer Holzrevue

holzrevue.ch

46

SHR Schweizer Holzrevue is a Swiss trade magazine specializing in woodworking and wood processing industries. It publishes 8 issues annually, providing industry news, product descriptions, company profiles, and market overviews targeted at professionals such as craftsmen, suppliers, architects, and consumers interested in wood construction and finishing. The website is built on WordPress with a moderate technical infrastructure including common plugins and libraries. While the site is well-structured and content-rich, it lacks key compliance elements such as privacy and cookie policies, and does not provide explicit contact information on the homepage. Security posture is adequate with HTTPS enabled but missing important security headers. Overall, the site is trustworthy and professionally maintained but could improve compliance and security practices.

M

MRB FUND PARTNERS AG

mrbpartner.ch

49

MRB FUND PARTNERS AG is a Swiss-based financial services company specializing in the structuring and management of sophisticated investment solutions, including funds and asset management companies (AMCs). Founded in 1999 and regulated by FINMA, MRB offers platform services that enable fund initiators to reduce structural requirements and costs while ensuring compliance and risk management. The company maintains strong partnerships with reputable financial institutions and subsidiaries, such as MRB Securities in Luxembourg, positioning itself as a trusted player in the asset management and securitization market. The website reflects a professional and consistent brand image targeting asset managers, fintech firms, pension funds, and institutional investors. Technically, the website is built on a Redaxo CMS platform using Bootstrap, jQuery, and modern UI components like TomSelect and Plyr. It is mobile-optimized with good SEO and accessibility basics, though some JavaScript libraries are outdated. Security posture is solid with HTTPS enforced, cookie consent implemented, and secure form handling, but lacks explicit security headers and published security policies. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the site is trustworthy and professionally maintained, with no signs of malicious content or security risks. However, improvements could be made by updating libraries, adding security headers, publishing incident response contacts, and including terms of service. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

S

S-WIN – Die Schweizer Plattform für Holzforschung. Forschungsprojekte, Netzwerk

s-win.ch

58

The website www.s-win.ch is a small Swiss business site built on the Wix platform, indicated by the use of Wix Thunderbolt framework and associated scripts. The site appears to represent a company named S-WIN, but lacks detailed business descriptions, contact information, or policy disclosures. The technical infrastructure is standard for Wix-hosted sites, with moderate performance and good mobile optimization. Security posture is basic, with HTTPS enforced but lacking advanced security headers or incident response information. Privacy compliance is minimal due to absence of privacy and cookie policies. Overall, the site is functional but lacks comprehensive business and security transparency.

Z

Zurich Carbon Market Association

zurich-cma.org

46

The Zurich Carbon Market Association is a small, non-political membership organization established in 2010, focused on advancing sustainability and high-quality carbon markets in the Zurich region. It serves as a platform for networking, knowledge sharing, and organizing events related to carbon markets and greenhouse gas mitigation. The website is professionally designed using WordPress and Elementor, featuring event listings, news updates, and a newsletter subscription form. The technical infrastructure includes privacy-conscious Matomo analytics and standard WordPress plugins, hosted likely by inware.ch. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Business credibility is high due to consistent WHOIS data and professional content. Overall, the website is trustworthy and serves its niche audience effectively.

S

Swiss Sustainable Finance

sustainablefinance.ch

71

Swiss Sustainable Finance (SSF) is a leading Swiss platform dedicated to promoting sustainable finance within Switzerland. The organization focuses on fostering collaboration among financial institutions, investors, and policymakers to advance sustainable investment practices. Their offerings include market studies, conferences, publications, and active member engagement, positioning them as a key player in the sustainable finance sector in Switzerland. The website reflects a professional and consistent brand image with comprehensive content tailored to finance and sustainability professionals. Technically, the website employs a modern technology stack including jQuery, Foundation framework, and Google Analytics, with a CMS likely provided by MySign. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security practices include HTTPS enforcement and cookie consent mechanisms, but explicit security headers and published security policies are absent. The security posture is solid with no detected vulnerabilities or exposed sensitive data, but improvements are recommended in security header implementation and incident response transparency. WHOIS data confirms domain legitimacy and consistency with the organization's Swiss sustainable finance focus. Overall, the website is trustworthy, professional, and compliant with privacy regulations, making it a reliable resource in its domain.

T

Timber Finance Management AG

timberfinance.ch

46

Timber Finance Management AG operates as a leading competence center specializing in timber carbon finance, focusing on unlocking and monetizing the climate potential of the forest and timber industry. Their market position is strong within the niche of sustainable building and investment portfolios, offering key services such as carbon removals in buildings, investment products, and a knowledge network. The company targets investors, building sector professionals, and sustainability advocates, primarily operating in Switzerland. Technically, the website is built on WordPress with Elementor, integrating HubSpot forms and analytics, reflecting a mature digital infrastructure with good SEO and mobile optimization. Security posture is solid with HTTPS and secure form handling, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting a high legitimacy score and strong business credibility.

C

Climeworks AG

climeworks.com

75

Climeworks AG is a Swiss-based company specializing in high-quality carbon removal solutions, leveraging cutting-edge Direct Air Capture technology combined with nature-based approaches. The company targets both businesses and individuals aiming to meet net-zero climate goals, positioning itself as a leader in the carbon removal industry with a strong portfolio of global business clients. The website reflects a mature digital infrastructure using modern technologies such as Alpine.js, Swiper.js, and Matomo analytics, hosted with Cloudflare DNS services and employing Statamic CMS. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

I

ICROA

icroa.org

48

ICROA is a specialized non-profit organization focused on accrediting best practices in the voluntary carbon market to support the Paris Agreement goals. It operates under the umbrella of the International Emissions Trading Association (IETA) and provides accreditation and endorsement services to voluntary carbon market service providers. The website reflects a mature and professional digital presence with clear messaging, strong branding, and a focus on environmental integrity and climate leadership. Technically, the site is built on WordPress with modern plugins and technologies, including Gravity Forms for data collection and Google Tag Manager for analytics. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

L

Lev Diet® — You Nutrition Experts

levdiet.ch

40

Lev Diet® is a Swiss-based company specializing in natural diet and nutrition products, offering a medication-free weight loss method. The website serves as an e-commerce platform and informational resource, targeting consumers seeking healthy and effective diet solutions. The company maintains a consistent brand presence with active social media channels and a clear business focus. Technically, the site is built on WordPress with WooCommerce, leveraging modern web technologies and marketing tools such as Google Analytics and Facebook Pixel. While the site is secure with HTTPS and no visible sensitive data exposure, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security headers are partially implemented, and no vulnerability disclosure or incident response information is provided. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security practices.

W

World Archery

worldarchery.org

63

World Archery is the official international federation governing the Olympic sport of archery. The website serves as a comprehensive platform for archery athletes, officials, and fans worldwide, providing world rankings, event schedules, competition results, and news updates. The organization has a long-standing history dating back to 1931 and operates globally with a focus on promoting and regulating archery as a sport. Technically, the website employs modern web technologies such as web components and Bootstrap, offering a good user experience with responsive design and clear navigation. However, the site lacks visible privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. The WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's claims. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

E

eBay Inc.

ebay.ch

71

eBay.ch is the Swiss localized version of eBay, a leading global e-commerce marketplace founded in 1995. The platform facilitates buying and selling of a wide range of products including electronics, vehicles, fashion, collectibles, and refurbished goods. It targets general consumers and businesses seeking an online marketplace with auction and fixed-price sales models. The website demonstrates a mature digital infrastructure with modern web technologies, optimized performance, and strong SEO and accessibility features. Security posture is robust with HTTPS, security headers, and client-side monitoring, although explicit security policies and incident response contacts are not publicly detailed. Privacy and cookie policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, eBay.ch presents a professional, trustworthy, and well-maintained e-commerce platform with extensive content and user engagement capabilities.

G

Grand Casino Luzern AG

grandcasinoluzern.ch

61

Grand Casino Luzern AG operates a well-established casino and hospitality business in Luzern, Switzerland, offering a comprehensive range of gaming options including table games and slot machines, alongside high-quality dining and event hosting services. The website reflects a mature digital presence with multilingual support and integration of an online casino platform (mycasino.ch). The company holds multiple certifications including ISO 27001 and ISO 9001, underscoring its commitment to quality and security. The target audience is adults interested in gambling and entertainment.

C

Casinò Lugano

swiss4win.ch

62

Swiss4Win.ch is an online casino platform operated by Casinò Lugano, targeting Swiss residents interested in online gambling. The website offers casino games, player account management, and promotional bonuses. The platform is built on Playtech technology and integrates SafeCharge for payment processing and analytics. The site uses modern JavaScript libraries and tracking tools such as Google Analytics and Google Tag Manager. The technical infrastructure is moderately optimized for performance and mobile use, though SEO and accessibility are basic. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some security headers and explicit privacy policies. Overall, the site is functional and consistent with its business purpose but would benefit from enhanced privacy compliance and security transparency.

C

Casino777

casino777.ch

55

Casino777.ch is an online casino platform licensed in Switzerland, offering a variety of casino games and bonuses targeting adult users. The website is professionally designed with good mobile optimization and uses a modern technology stack including Bootstrap and multiple analytics and advertising tools. Security posture is generally good with HTTPS enforced and use of reCAPTCHA, but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. Business credibility is supported by consistent WHOIS data and clear market positioning in the hospitality/gambling sector. Overall, the site is functional and professional but should improve privacy and security transparency to enhance trust.