Switzerland security reports

S

Seriöses Online Casino Schweiz 2023 | Alle Online Casinos CH Bewertungen

swisscasinohex.com

68

SwissCasinoHex is an affiliate and informational website specializing in Swiss online casinos, providing detailed reviews, bonus information, and legal guidance for Swiss players. The platform targets adult users interested in online gambling within Switzerland, offering a curated list of casinos with ratings and deposit options. Technically, the site is built on WordPress, uses Cloudflare DNS, and integrates Google Tag Manager for analytics. The website demonstrates good design quality, mobile optimization, and clear navigation, although accessibility features are basic. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies, and no contact information is provided. Overall, the site is legitimate and trustworthy but would benefit from enhanced privacy and security practices.

P

Parier Suisse

parier-suisse.ch

54

Parier Suisse is a specialized online platform focused on providing comprehensive reviews and comparisons of the top online casinos available in Switzerland as of 2025. The website targets adult Swiss users interested in online gambling, offering detailed information on casino security, bonuses, games, and promotional codes. The business model is primarily affiliate marketing, linking users to partner casinos such as Casino777, Jackpots, MyCasino, 7Melons, and Swiss4win. Technically, the site is built on WordPress with SEO optimization via Yoast and uses modern analytics tools like Google Tag Manager and Microsoft Clarity. The site is mobile-optimized and presents a professional design with clear navigation.

O

Seriöses Online Casino Schweiz 2023 | Alle Online Casinos CH Bewertungen

onlinecasinoschweiz.com

48

SwissCasinoHex is an affiliate and informational website focused on providing comprehensive reviews and data about Swiss online casinos. It targets adult Swiss users interested in legal and licensed online gambling options. The platform offers detailed casino ratings, bonus information, and guides on payment methods and casino types. Technically, the site is built on WordPress with performance optimizations via WP Rocket and uses Google Tag Manager for analytics. The website is mobile optimized and has a professional design with clear navigation. Security-wise, the site uses HTTPS with a good SSL configuration but lacks DNSSEC and some recommended security headers, which could be improved. Privacy compliance is basic with a cookie consent banner present but no visible privacy policy or terms of service pages in the provided content. Overall, the site is trustworthy and legitimate with a domain age consistent with its business claims.

T

Touring Club Schweiz (TCS)

tcs-mymed.ch

50

TCS MyMed is a Swiss medical information platform operated by the Touring Club Schweiz (TCS), offering independent, professional health content and telemedicine services. The website targets the general public seeking reliable health information and access to medical consultations through partner networks. The platform is well-positioned in the Swiss healthcare information market, supported by numerous reputable healthcare partners and institutions. Technically, the site is built on Drupal 11, uses modern web technologies, and includes privacy compliance mechanisms such as Usercentrics for cookie consent. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, providing a safe and informative user experience.

T

Touring Club Suisse (TCS)

lex4you.ch

53

The website lex4you.ch is an interactive legal information platform operated by Touring Club Suisse (TCS), targeting the Swiss public with practical legal advice on everyday issues. It offers multiple services including searchable legal topics, community forums, telephone and written legal consultations, and AI-powered assistance via lex4youGPT. The platform is multilingual, supporting German, French, and Italian, reflecting its Swiss market focus. The content is professionally presented with good navigation and relevant legal topics, positioning it as a trusted niche resource in the Swiss legal information space. Technically, the site uses modern web technologies with asynchronous JavaScript loading and SVG icons, ensuring good mobile responsiveness and moderate performance. SEO and accessibility are adequately addressed, though some improvements could be made. Security posture is solid with HTTPS and CSRF tokens, but lacks some security headers and explicit cookie consent mechanisms, indicating room for enhancement in compliance and security best practices. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy, incident response contacts, and vulnerability disclosure mechanisms suggests limited transparency in security governance. The WHOIS data confirms the domain is registered to the legitimate parent organization, supporting the site's credibility. Overall, lex4you.ch is a credible, well-structured legal information platform with moderate technical maturity and a good security baseline. Strategic improvements in privacy compliance and security headers would further strengthen its trustworthiness and regulatory adherence.

T

Touring Club Suisse (TCS)

madevisible.swiss

50

MADE VISIBLE® by TCS is a traffic safety awareness campaign operated by the Touring Club Suisse (TCS), a reputable Swiss organization focused on improving road safety. The website promotes visibility in traffic to reduce accidents, targeting road users in Switzerland. The campaign is well-branded and supported by official TCS credentials, with multilingual support for German, French, and Italian audiences. The business model is non-profit and educational, emphasizing public safety and awareness.

Velocorner.ch is a leading Swiss online marketplace specializing in bicycles, e-bikes, and related accessories. It operates under the reputable Touring Club Schweiz (TCS) brand, offering a trusted platform for both private sellers and dealers. The website provides a comprehensive catalog of over 37,000 bikes and accessories, supported by personal customer service via chat, email, and phone. Its market position as the #1 bike marketplace in Switzerland is reinforced by buyer and seller protection mechanisms and secure transaction processes. Technically, the website is built on modern web technologies including Next.js and React, ensuring fast performance and excellent mobile optimization. It integrates popular analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel, while maintaining GDPR compliance through clear privacy and cookie policies. The site employs HTTPS with strong security headers, reflecting a mature security posture. Security-wise, Velocorner demonstrates good practices with no detected vulnerabilities or exposed sensitive data. However, it lacks a dedicated security policy or incident response page, which could enhance transparency and preparedness. The WHOIS data confirms the legitimacy of the domain, with consistent registrant information matching the business claims. Overall, Velocorner.ch presents a professional, secure, and user-friendly platform with strong business credibility. Strategic improvements could include publishing explicit security policies and incident response contacts to further strengthen trust and compliance.

A

auto-schweiz

auto.swiss

58

auto-schweiz is the official association representing automobile importers in Switzerland and Liechtenstein. It serves as a central body for coordinating import and distribution of numerous vehicle brands, providing detailed automotive market statistics, policy advocacy, and information services to its members and the public. The website reflects a professional and authoritative presence in the transportation sector with a focus on sustainability and market data transparency. Technically, the site is built on WordPress with modern SEO and multilingual capabilities, integrating interactive data visualizations and secure contact forms with Google reCAPTCHA. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations, supporting its role as a key industry association.

T

TCS Pop-Up Glamping

tcs-glamping.ch

47

TCS Pop-Up Glamping is a hospitality business offering unique glamping accommodations and outdoor activities in the Alp Nagens Laax region of Switzerland. The website is professionally designed using the Weblication CMS platform and provides multilingual support and clear navigation. The business has received recognition such as the ADAC Camping Award 2023, enhancing its market credibility. Technically, the website employs modern tracking and analytics tools including Google Analytics, Facebook Pixel, and Usercentrics for cookie consent management. Security posture is solid with HTTPS and security headers implemented, although explicit privacy and security policies are not found on the main page. Overall, the website is trustworthy and well-positioned in the hospitality sector, targeting tourists seeking premium glamping experiences.

P

PiNCAMP by TCS

pincamp.ch

65

PiNCAMP by TCS is a leading European camping platform offering over 14,400 camping sites across 44 countries, with a strong brand association to the Touring Club Schweiz (TCS) and ADAC certifications. The platform targets camping enthusiasts seeking comprehensive listings, booking capabilities, and trusted reviews. The website demonstrates a mature digital infrastructure using modern web technologies such as React and Next.js, with excellent mobile optimization and accessibility. Privacy compliance is well addressed with visible cookie consent mechanisms and a comprehensive privacy policy. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are not publicly disclosed. Overall, PiNCAMP presents a professional, trustworthy, and user-friendly platform with a high level of business credibility and technical maturity.

N

NiceHash AG

nicehash.com

74

NiceHash AG operates a leading cryptocurrency platform specializing in mining and hashrate marketplace services. The company provides a comprehensive ecosystem including mining software, a marketplace for buying and selling computing power, and Bitcoin payment solutions. Positioned as a global leader in the cryptocurrency mining industry, NiceHash targets miners, investors, and merchants seeking efficient and accessible blockchain mining and payment services. The website reflects a mature digital presence with professional branding, mobile app availability, and active community engagement across multiple social media platforms. Technically, the website leverages modern web technologies such as Vue.js and integrates Google Tag Manager and Analytics for performance and user behavior tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. However, some security headers are not explicitly detected, and WHOIS data is missing, which slightly impacts transparency. The platform enforces HTTPS and provides privacy and cookie policies with consent mechanisms, indicating a commitment to user privacy and compliance. From a security perspective, NiceHash shows strengths in secure communications and privacy policy implementation but could improve by publishing explicit security headers and incident response contacts. The absence of WHOIS data is a concern but is mitigated by the company's strong market reputation and external presence. Overall, the platform presents a secure and professional environment suitable for its business model. The overall risk assessment is moderate with recommendations to enhance transparency and security posture. Strategic improvements in security headers, incident response visibility, and WHOIS data clarity would further strengthen trust and compliance.

A

Anna Claire models and events

annaclaire.net

63

Anna Claire is a luxury international escort agency specializing in high-class social escorts and elite travel companions across Europe, USA, Asia, and Australia. The company targets affluent and influential clientele, offering bespoke introductions and concierge travel packages. The website is professionally designed with good content quality and clear navigation, supported by a Drupal CMS infrastructure and Cloudflare services for performance and security. Security posture is moderate with HTTPS enforced and some security headers present, but lacks DNSSEC and comprehensive security policies. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and legitimate, supporting the business claims. The site contains adult content and is intended for an adults-only audience.

X

XXX HUBS

nhentai.io

55

nHentai.io is a niche adult content website specializing in free hentai manga and doujinshi distribution. The platform targets adult manga enthusiasts seeking uncensored and translated hentai comics. It operates primarily as a free content provider monetized through advertising networks. Technically, the site runs on WordPress with common SEO and security plugins, hosted via Cloudflare, and integrates Google Analytics and reCAPTCHA for analytics and bot protection. While the site is accessible and functional with good content quality and mobile optimization, it lacks critical privacy and security policies, including privacy, cookie, and terms of service pages. No contact or incident response information is provided, which reduces business credibility and user trust. Security headers are missing, and advertising practices rely heavily on third-party ad networks, which may impact user privacy. Overall, the site is operational but requires significant improvements in privacy compliance and security posture to enhance trustworthiness and regulatory adherence.

G

Geschwindigkeit.CH

geschwindigkeit.ch

63

Geschwindigkeit.CH is a specialized online service providing free internet speed testing primarily targeting Swiss and German-speaking internet users. The website offers key services such as download, upload, and ping tests, supported by advertising revenue mainly through Google Adsense. The site maintains a consistent brand presence and provides localized content with links to partner sites in other countries. Technically, the site uses modern web technologies including JavaScript, CSS3, and HTTPS, with moderate performance and good mobile optimization. However, it lacks advanced security headers and explicit security policies. Privacy compliance is basic but includes a cookie consent mechanism and privacy policy. No direct company contact emails or phone numbers are publicly listed, with contact facilitated via a dedicated contact page.

Webbilling AG is a Swiss-based technology company specializing in providing European payment and billing solutions to merchants worldwide. Established since 1997, the company offers a comprehensive suite of services including easy integration of payment methods, risk and fraud management, collection services, and consulting. Their market position is that of a trusted, established payment service provider focused on European markets, targeting merchants who want to offer local payment options to European consumers. The website is professionally designed with clear navigation and relevant content tailored to their target audience. Technically, the website uses a modern JavaScript stack including jQuery and Owl Carousel, hosted behind Cloudflare for DNS and CDN services. The site is mobile optimized and includes basic accessibility features. Performance is moderate with room for improvement in SEO and accessibility. No CMS or advanced frameworks were detected, indicating a custom or lightweight implementation. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited domain status, indicating domain transfer protection. However, DNSSEC is not enabled, and no explicit security headers were detected in the provided data. The site includes a cookie consent banner and privacy policy consistent with GDPR compliance. No incident response or vulnerability disclosure policies are published, which could be improved. No vulnerabilities or exposed sensitive data were found. Overall, the website demonstrates a solid business credibility and technical foundation with good privacy compliance. Strategic improvements in security headers, DNSSEC, and published security policies would enhance trust and security posture further.

G

GC International GmbH

gc.dental

77

GC International GmbH is a leading global manufacturer and distributor of dental materials, serving dental laboratories and surgeries in over 100 countries. The company positions itself as a market leader with a broad international presence and a comprehensive product portfolio tailored to dental professionals. The website reflects a mature digital presence with clear branding, structured content, and multilingual support. Technically, the site is built on Drupal CMS and integrates modern tools such as Google Tag Manager and CookiePro for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies could be improved. WHOIS data is unavailable, which slightly impacts trust but the website's content and contact information support legitimacy. Overall, the site is professional, compliant with privacy regulations, and well-structured for its target audience.

P

PDS PETER HANDELS AG

vkf-renzel.ch

49

PDS PETER HANDELS AG operates the website www.vkf-renzel.ch, an e-commerce platform specializing in retail display and promotional products such as scannerschienen, prospektständer, and preisauszeichnung. The company targets retailers and businesses seeking point-of-sale advertising solutions, positioning itself as an established regional supplier in Switzerland. The website features a professional design with clear navigation and product categorization, supporting multiple languages and VAT display options. Structured data and product reviews enhance trust and SEO effectiveness. Technically, the site employs modern web technologies including JavaScript frameworks, Bootstrap for responsive design, and a consent management platform (Usercentrics) to comply with cookie regulations. The platform appears to be based on OXID eShop CMS, indicating a mature e-commerce infrastructure. Performance is moderate with good mobile optimization, though accessibility features are basic. Security posture is solid with HTTPS enforced and use of consent management for privacy compliance. However, the site lacks some advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and professionally managed, with room for improvement in privacy transparency and security hardening. The domain registration data aligns well with the business claims, supporting legitimacy.

D

Domain Privacy Trustee SA

reflets.info

64

Reflets.info is a French-language online investigative journalism platform established since 2010, offering in-depth articles, dossiers, interviews, and radio content focused on societal, political, economic, cultural, and technological issues. The site operates on a subscription and donation business model, emphasizing independent journalism without advertising or tracking. The target audience is French-speaking readers interested in investigative news and societal topics. Technically, the website uses a custom CMS likely built on Ruby on Rails, with Turbolinks and Semantic UI for frontend styling. Hosting is provided by Infomaniak Network SA, a reputable Swiss hosting provider. The site is mobile-optimized and uses Matomo analytics for privacy-respecting user tracking. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site enforces HTTPS and uses CSRF tokens for form protection. However, DNSSEC is not enabled, and no explicit security headers were detected, which could be improved. Privacy compliance is partial: a privacy policy and terms of service exist, but no cookie consent mechanism is present. Contact information is limited to secure contact forms without direct emails or phone numbers. Overall, Reflets.info presents a trustworthy and professional media outlet with a solid content offering and a privacy-conscious approach. Security and privacy practices could be enhanced by enabling DNSSEC, adding security headers, and implementing cookie consent. The domain registration is privacy protected but consistent with legitimate media operations, supporting a high legitimacy score.

E

Eden Springs (Switzerland) SA

edensprings.ch

60

Eden Springs (Switzerland) SA operates as a specialized provider of water and coffee solutions targeting businesses and households within Switzerland. The company offers a range of products including water dispensers with gallons, plumbed water dispensers, and home water delivery services. As part of the Culligan group, Eden Springs holds a strong market position with a focus on quality, environmental responsibility, and customer service. The website reflects a professional brand image with consistent messaging and trust signals such as Trustpilot reviews. Technically, the website is built on Drupal CMS and leverages modern JavaScript libraries and tracking tools such as Google Tag Manager and Microsoft Clarity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and accessible privacy and cookie policies. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, explicit security headers and published security policies are absent, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional controls and transparency. The domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the website. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Strategic recommendations include implementing stronger security headers, publishing incident response contacts, and enhancing accessibility features to further strengthen the site’s security and compliance stance.

D

de Sede Switzerland

desede.ch

68

de Sede Switzerland is a premium luxury furniture brand specializing in handcrafted leather furniture and designer sofas, masterfully crafted in Switzerland. The company targets affluent consumers and businesses seeking exclusive, high-quality seating solutions. Their e-commerce platform is built on Shopify, leveraging modern web technologies and ensuring a seamless user experience with excellent design, mobile optimization, and clear navigation. The website features comprehensive privacy and cookie policies with consent mechanisms, reflecting good privacy compliance. Security posture is strong with HTTPS enforcement, security headers, and form protection via hCaptcha, although explicit security policies and incident response information are absent. WHOIS data confirms the legitimacy of the domain and its alignment with the business claims. Overall, the website demonstrates a mature digital presence with high trustworthiness and professionalism.

S

Selectchemie AG

selectchemie.com

51

Selectchemie AG is a well-established Swiss company founded in 1969, specializing in supplying high-quality pharmaceutical and nutrition ingredients as well as generic finished dosage forms. The company operates globally with locations in 17 countries, offering comprehensive technical, scientific, regulatory, and commercial support along the entire value chain. Their business model focuses on being a full-service provider to pharmaceutical and nutrition industries, emphasizing quality, reliability, and innovation. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and analytics tools such as Google Tag Manager and Plausible Analytics. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. However, some security headers are missing, and there is no explicit incident response or vulnerability disclosure information. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, aligning with GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable anomaly that requires further verification to confirm domain legitimacy and registration status. Overall, Selectchemie AG presents a professional and trustworthy online presence with strong business credibility and privacy compliance. Strategic improvements in security headers, incident response transparency, and domain registration verification would enhance their security posture and trustworthiness.

S

Swiss Finance Startups

swissfinancestartups.com

57

Swiss Finance Startups operates as a niche platform dedicated to the Swiss finance startup ecosystem, providing information and resources to finance professionals, startup founders, and investors. The website is built on WordPress and leverages common plugins such as Yoast SEO to enhance search engine visibility. Hosting is managed by a reputable registrar and DNS is handled via Cloudflare, ensuring reliable infrastructure. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks advanced DNS security features like DNSSEC and security headers. Privacy compliance is limited due to the absence of a privacy policy and terms of service, although a cookie consent mechanism is implemented. Overall, the website presents a basic but functional digital presence with room for improvement in security and compliance documentation.

G

gategroup

gategroup.com

75

gategroup is a global leader in airline catering and hospitality services, connecting people worldwide through culinary experiences. The company operates multiple brands and subsidiaries, serving airlines and airports with a comprehensive portfolio of food and hospitality solutions. The website reflects a mature enterprise with a strong market position and a clear focus on sustainability and corporate governance. Technically, the site is built on WordPress with modern tools like Elementor and integrates advanced analytics while maintaining good privacy compliance. Security posture is strong with HTTPS, security headers, and domain protections, though DNSSEC is not enabled. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

S

SwissCognitive | AI Ventures, Advisory & Research

swisscognitive.ch

47

SwissCognitive is a Switzerland-based organization dedicated to advancing artificial intelligence through ventures, advisory services, and research. Positioned as a global AI hub, it serves corporates, startups, and AI professionals by providing expert guidance, networking, and events. The website reflects a mature digital presence with a professional design, structured data, and active content updates, indicating a well-established brand in the AI ecosystem. Technically, the site is built on WordPress with modern plugins and analytics tools, offering moderate performance and good mobile optimization. Security posture is solid with HTTPS and no exposed sensitive data, though it lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies, which should be addressed to meet GDPR standards. Overall, the domain registration aligns well with the business profile, enhancing trustworthiness. Strategic recommendations include enhancing privacy disclosures, publishing security and incident response policies, and improving accessibility features to strengthen compliance and user trust.

E

elvatec ag

elvatec.ch

68

elvatec ag is a Swiss-based company specializing in lightning protection, surge protection, and electrical occupational safety solutions. With a history dating back to 1910 and as a subsidiary of DEHN SE, the company offers a comprehensive portfolio of products and services targeting construction, energy, industrial, and safety sectors. Their website reflects a mature digital presence with professional design, clear navigation, and multilingual support. Technically, the site is built on Drupal 10, employs modern JavaScript libraries, and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the domain registration and WHOIS data align well with the company's identity, supporting legitimacy and trust.

W

WebPros International GmbH

platform360.io

68

Plesk 360, operated by WebPros International GmbH, is a modern SaaS platform designed to empower IT professionals and server administrators with integrated server monitoring, license management, and configurable dashboards. The platform positions itself strongly within the Plesk and cPanel ecosystems, offering centralized management capabilities that cater to builders and IT teams. The website reflects a professional and consistent brand image, supported by comprehensive privacy and cookie policies, and a clear focus on user experience and accessibility. Technically, the platform leverages modern web technologies including Angular, Usercentrics for consent management, Google Analytics, Mixpanel, and Sentry for error tracking. Hosting infrastructure is robust, utilizing AWS DNS services, and the site demonstrates good performance and mobile optimization. Security practices include HTTPS enforcement, secure login forms, and domain registration protections, though there is room for improvement in implementing additional security headers and explicit incident response documentation. The security posture is solid with no critical vulnerabilities detected, and the domain registration aligns well with the business entity, enhancing trustworthiness. Privacy compliance is well addressed with GDPR-aligned policies and consent mechanisms. Overall, the platform presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuing to monitor third-party scripts for security risks to maintain and improve the security and compliance posture.

P

PricewaterhouseCoopers AG

pwc.ch

69

PricewaterhouseCoopers AG (PwC Switzerland) is a leading professional services firm specializing in auditing, consulting, tax, and advisory services. The company holds a strong market position in Switzerland, serving enterprises and individuals with a comprehensive portfolio of services. The website reflects PwC's brand consistency and professionalism, targeting Swiss and multinational clients seeking trusted financial and consulting expertise. The business model is centered on delivering value through expert advisory and assurance services, supported by a global parent company, PricewaterhouseCoopers International Limited. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies including jQuery, Adobe Launch, and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance characteristics. Security is robust, featuring HTTPS, security headers, CSRF protection, and cookie consent mechanisms, demonstrating compliance with GDPR and industry best practices. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent management. Business credibility is high, supported by transparent contact information, certifications like ISO 27001, and trust indicators. Overall, the website is a secure, professional, and trustworthy digital presence for PwC Switzerland.

L

Loxam

loxam.ch

72

Loxam is a leading European company specializing in the rental and sale of professional equipment for construction and industrial sectors, with a strong presence in Switzerland since 1996. The company offers a wide range of machinery and tools targeting private customers, businesses, and craftsmen. Their market position is reinforced by over 1100 agencies across 30 countries, positioning them as a market leader in equipment rental services. The website reflects this stature with comprehensive service offerings and clear contact channels. Technically, the site is built on SAP Hybris Commerce platform, utilizing modern web technologies such as Algolia for search and responsive design for mobile optimization. Security posture is solid with HTTPS enforcement and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie consent and detailed privacy policies. Overall, the site is professional, trustworthy, and well-aligned with the company's business objectives.

F

FEDERATION INTERNATIONALE DE L'AUTOMOBILE

fiawec.tv

55

The FIA WEC TV website serves as the official streaming platform for the Fédération Internationale de l'Automobile's World Endurance Championship. It offers live and on-demand motorsport content targeting endurance racing fans globally. The platform operates on a subscription model, providing access to premium racing content with a professional and consistent brand presence aligned with the FIA. Technically, the site leverages modern web technologies including React, integrates multiple third-party analytics and advertising tools, and uses secure payment processing via Stripe. While the site is mobile optimized and performs moderately well, there is room for improvement in accessibility and SEO. Security posture is generally good with HTTPS enforced and domain protections in place, but lacks visible security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service documents found in the analyzed content. Overall, the domain registration data confirms legitimacy and consistency with the FIA organization.

I

International Organisation of Employers

ioe-emp.org

60

The International Organisation of Employers (IOE) is a well-established global network representing over 150 employer and business organizations across more than 140 countries. Founded in 1920 and headquartered in Geneva, Switzerland, IOE serves as a powerful and balanced voice for business at the international level, advocating on social and employment policies and engaging with major international organizations. The website reflects a mature digital presence with professional design, multilingual support, and comprehensive content including news, events, policy priorities, and business networks. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and standard analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism and a comprehensive privacy policy indicating GDPR compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, although security headers could be improved and explicit incident response information is absent. Overall, the website and organization demonstrate a high level of professionalism and trustworthiness. The lack of WHOIS registrant data is mitigated by the organization's nature and consistent contact information. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure details, and maintaining ongoing audits of third-party scripts to sustain security and compliance.

F

FICSA

ficsa.org

49

FICSA is a well-established federation representing international civil servants, advocating for their rights and working conditions within interagency bodies and legislative organs of the common system. The organization operates primarily as a non-profit entity based in Switzerland, with a global membership and over 70 years of history. Their key services include advocacy, training, webinars, publications, and organizing meetings and councils. The website reflects a professional and consistent brand image with clear navigation and relevant content targeted at international civil servants and related stakeholders. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery, Slick Carousel, and Select2. It uses Google Fonts and integrates social media SDKs for Facebook and Twitter, alongside AddThis for sharing. The site is mobile-optimized with good SEO and accessibility basics, though there is room for improvement in accessibility compliance. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs domain transfer protection. However, DNSSEC is not enabled, and there is no visible security policy or incident response information. The site includes a cookie consent mechanism and privacy policy, indicating basic GDPR compliance. No critical vulnerabilities or suspicious domains were found. WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the organization's profile. Overall, the website presents a trustworthy and credible digital presence with good content quality and technical implementation. Strategic recommendations include enabling DNSSEC, publishing a security policy and incident response contacts, and enhancing accessibility features to improve compliance and user experience.

E

European Geothermal Congress

europeangeothermalcongress.eu

50

The European Geothermal Congress 2025 website serves as the official platform for a major event focused on the geothermal energy sector in Europe. It provides comprehensive information about the congress, including programme details, sponsorship and exhibition opportunities, and registration. The site targets industry professionals, researchers, policymakers, and financiers interested in geothermal energy and the energy transition. The business model revolves around event organization, sponsorship, and networking facilitation within the energy sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Contact Form 7, and Mailchimp integration for mailing list management. The site is well-structured, mobile-optimized, and uses HTTPS with a good SSL configuration. However, some security best practices like security headers and explicit security policies are missing. From a security perspective, the site has a solid foundation with HTTPS enabled and no visible vulnerabilities or WAF blocking. However, it lacks published security policies, incident response contacts, and cookie consent mechanisms, which are important for compliance and user trust. The absence of direct contact emails and phone numbers limits immediate contact options but the presence of a contact form provides a communication channel. Overall, the website is professional and trustworthy, with good content quality and technical implementation. To enhance security posture and privacy compliance, it is recommended to implement security headers, publish security and incident response policies, and introduce a cookie policy with consent mechanisms. These improvements will strengthen user trust and regulatory compliance.

D

Dukascopy Bank

dukascoin.com

66

Dukascoin.com is the official website for Dukascoin (DUK+), a cryptocurrency project issued by Dukascopy Bank, a reputable Swiss financial institution. The site promotes the cryptocurrency with features such as free initial coins, staking rewards, and integrated banking services including multi-currency accounts and crypto lending. The business model leverages the trust and regulatory compliance of a Swiss bank to position Dukascoin as a credible crypto asset in the finance sector. Technically, the website uses standard web technologies including jQuery and Google Analytics, hosted on AWS infrastructure, with a moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled and domain locked with multiple prohibitions, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy disclosures and security policies.

D

Dukascopy Bank

dukas.io

64

Dukascopy Bank operates a specialized crypto services platform offering clients the ability to buy, sell, store, and trade cryptocurrencies, including their proprietary Dukascoin. The bank leverages its Swiss regulatory status and FINMA authorization to provide fiduciary custody and blockchain operations, positioning itself as a pioneer in regulated crypto banking. The website reflects a mature digital infrastructure with integration of Google Tag Manager and AWS hosting, delivering a professional and mobile-optimized user experience. Security posture is solid with HTTPS and domain protections, though improvements such as DNSSEC and explicit security policies are recommended. Privacy compliance is currently weak due to absence of visible privacy and cookie policies. Overall, the site is trustworthy and well-branded but would benefit from enhanced transparency and security disclosures.

D

Dukascopy Bank SA

dukascopy.bank

72

Dukascopy Bank SA is a Swiss financial institution offering a broad range of banking services including multi-currency accounts, private and corporate banking, investment options, and payment card solutions. The bank emphasizes Swiss precision and innovation, providing a mobile app for seamless banking access. The website reflects a mature digital presence with professional design and comprehensive content targeting individuals and businesses seeking Swiss banking services. Technically, the site employs modern JavaScript libraries, analytics tools, and security best practices including HTTPS and security headers. However, public WHOIS data is unavailable due to .bank domain privacy policies, which is typical for regulated banking domains. The security posture is strong with no evident vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

A

ALSO Holding AG

alsocloud.eu

73

ALSO Holding AG operates a comprehensive cloud marketplace platform serving ICT industry customers across multiple European countries and beyond. The company provides a broad range of cloud and value-added services, targeting resellers, vendors, and end customers in the technology sector. The website reflects a mature digital presence with multi-language support, localized country portals, and extensive legal and privacy documentation, indicating a strong commitment to compliance and user experience. Technically, the site leverages a proprietary CMS platform with modern frontend technologies including Bootstrap and jQuery, integrated with advanced analytics and marketing tools such as Webtrekk, Marketo, and Usercentrics for consent management. The infrastructure supports multi-country operations with localized content and login portals, demonstrating a scalable and well-architected platform. Security posture is solid with enforced HTTPS and cookie consent mechanisms, though explicit security headers are not clearly visible in the HTML source. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is likely due to privacy protection, which is common for enterprises of this scale and does not detract from the domain's legitimacy. Overall, ALSO Holding AG presents a trustworthy and professional online presence with good compliance and security practices. Strategic recommendations include enhancing security headers, improving accessibility, and publishing explicit incident response and vulnerability disclosure policies to further strengthen trust and security culture.

C

CembraPay AG

byjuno.ch

61

CembraPay AG is a leading Swiss financial services company specializing in flexible payment solutions such as invoice purchase, installment payments, monthly billing, and digital wallets. It operates primarily in the Swiss market, targeting both consumers and merchants, and is a subsidiary of the publicly listed Cembra Money Bank AG. The website presents a professional and user-friendly interface with clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site employs modern web standards and integrates Google reCAPTCHA v3 to secure its contact forms, indicating a good level of security awareness. However, there is room for improvement in implementing comprehensive security headers and publishing explicit security policies. Overall, the site is secure, compliant with GDPR, and trustworthy, supported by consistent WHOIS data and transparent contact information.

The UNECE website is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge that blocks direct content access. UNECE is a well-established United Nations regional commission focused on economic cooperation in Europe, headquartered in Switzerland. The domain registration data aligns with the organization's identity and history, indicating legitimacy and trustworthiness. However, the lack of accessible content prevents a full assessment of the website's privacy, security, and compliance posture. The technical infrastructure includes Cloudflare services for security and DNS, but no further details on CMS or frameworks are available. Security posture cannot be fully evaluated due to blocked content, but no immediate vulnerabilities are evident from the WHOIS data or visible scripts. Overall, the site is trustworthy but currently limited in accessible information, requiring resolution of the WAF challenge for comprehensive analysis.

ETA SA Manufacture Horlogère Suisse is a historic Swiss manufacturer specializing in the development and production of quartz and mechanical watch movements since 1793. As a subsidiary of the Swatch Group, it holds a significant position in the global watch industry, offering high precision and reliable calibres primarily to B2B customers. The company emphasizes quality, innovation, and customer service, supported by a professional and well-structured digital presence. The website reflects a mature business model focused on manufacturing and B2B commerce, including an online B2B shop interface.

F

FinTeX

fintex.ch

46

FinTeX is a Geneva-based IT consulting company specializing in finance industry solutions, particularly trading room deployments. The website presents a professional and consistent brand image with a focus on financial technology consulting. The technical infrastructure is built on WordPress with modern plugins such as Yoast SEO and Smart Slider 3, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks comprehensive privacy and cookie policies, which impacts compliance posture. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Overall, the site is legitimate and functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

Z

Zetcom

zetcom.com

49

Zetcom is a technology company specializing in software solutions and services tailored for museums, collections, corporate archives, and organizational management. Their website presents a professional and multilingual platform targeting institutions requiring collection management software. The company leverages modern web technologies including WordPress CMS with Elementor, Google Analytics, Hubspot marketing and analytics tools, and Cookiebot for cookie consent management. The technical infrastructure is solid with HTTPS enforced and a moderate performance profile. Security posture is good with no visible vulnerabilities, though explicit security headers and policies are absent. Privacy compliance is partially met with cookie consent but lacks a clear privacy policy and terms of service. The domain WHOIS data is missing, which raises concerns about registration transparency but does not detract from the website's operational professionalism. Overall, Zetcom demonstrates a mature digital presence with room for improvement in compliance documentation and security policy transparency.

H

Hérens Quality Asset Management

hqam.ch

64

Hérens Quality Asset Management (HQAM) is a specialized asset management boutique focused on serving institutional and private investors primarily in Switzerland. The company offers key services including asset management, investment advisory, and portfolio analysis. The website is professionally designed using WordPress with modern plugins such as Elementor and Rank Math SEO, indicating a mature digital presence. The site is well-structured, mobile-optimized, and includes a customer portal for client access. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, HQAM presents a credible and professional business front with room for improvement in privacy and security transparency.

E

Ente Ospedaliero Cantonale

eoc.ch

69

Ente Ospedaliero Cantonale (EOC) is a public healthcare organization managing a network of hospitals and medical institutes in the Canton of Ticino, Switzerland. The website serves as a comprehensive portal for patients, healthcare professionals, and researchers, providing detailed information on specialties, hospital locations, services, and ongoing research activities. The organization positions itself as a key regional healthcare provider with a strong emphasis on quality care and clinical research. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and integrates Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized, accessible, and SEO-friendly with clear navigation and professional design. Security posture is good with HTTPS enforced and consent mechanisms for cookies and analytics, though it lacks explicit security policies or incident response information. Overall, the domain registration aligns well with the organization's identity, supporting legitimacy and trustworthiness.

S

Selectchemie AG

selectchemie.ch

50

Selectchemie AG is a well-established Swiss company founded in 1969, specializing in supplying high-quality pharmaceutical and nutrition ingredients as well as generic finished dosage forms. The company operates globally with locations in 17 countries and offers comprehensive technical, scientific, regulatory, and commercial support along the entire value chain. Their business model focuses on being a full-service provider to pharmaceutical and nutrition industries, emphasizing quality, regulatory compliance, and supply chain reliability. Technically, the website is built on WordPress using the Elementor framework, incorporating modern web technologies such as Google Tag Manager and Plausible Analytics for tracking. The site is mobile-optimized, well-structured, and includes SEO best practices. Performance is moderate, with good accessibility and user experience. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, with obfuscated contact emails to reduce spam. However, explicit security headers like Content-Security-Policy are not detected, and no incident response or vulnerability disclosure pages are present. The absence of WHOIS data for the domain is a notable concern, potentially indicating privacy protection or domain registration issues, which slightly reduces trustworthiness. Overall, the website presents a professional and trustworthy front for Selectchemie AG, but domain registration transparency should be improved to enhance legitimacy and trust. Strategic recommendations include adding explicit security headers, publishing incident response contacts, and verifying domain WHOIS information.

L

Loylogic

loylogic.com

65

Loylogic is a global loyalty and rewards solutions provider with over 20 years of experience, serving more than 50 million members worldwide. The company specializes in designing and operating engagement programs, including points and miles optimization, channel incentives, employee motivation, and gamified reward experiences. Their business model focuses on B2B partnerships with consumer brands, banks, travel companies, and telecom providers, leveraging a global merchant network and advanced technology platforms such as PointsSphere™, Cashcutter™, and Ultimate™. Loylogic positions itself as a market leader with a strong reputation, supported by industry awards and extensive client testimonials. Technically, the website is built on Webflow with modern JavaScript libraries like Swiper.js for interactive content and Google Tag Manager for analytics. The site demonstrates excellent design quality, mobile responsiveness, and SEO optimization. However, there is no explicit evidence of advanced security headers or cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data for the domain raises questions about domain registration transparency, although the website content and business information appear credible and professional. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a strong business presence with minor gaps in privacy compliance and domain registration transparency. Strategically, Loylogic should enhance its security posture by implementing security headers, publishing incident response and vulnerability disclosure policies, and ensuring GDPR cookie consent compliance. Addressing the WHOIS data inconsistency would also improve trustworthiness. These steps will strengthen the company's digital maturity and reduce potential risks.

A

Austrenis Capital SA

frigate.ch

61

Austrenis Capital SA is a Swiss-based investment business service provider specializing in asset management, investment advice, financial intermediary services, and documentary maintenance of financial and investment operations. The company targets investors seeking secure investment opportunities and operates a multipurpose investment platform. The website presents a professional and consistent brand image with clear navigation and relevant content, positioning Austrenis as a niche player in the finance sector in Geneva, Switzerland. Technically, the website uses modern web technologies including jQuery, AjaxForm, and Cloudflare Zaraz for script management and analytics. The site is hosted behind Cloudflare, providing good SSL configuration and moderate performance. Mobile optimization and accessibility are adequate but could be improved. SEO practices are basic with minimal meta descriptions and no structured data. From a security perspective, the site enforces HTTPS and uses secure form submission. However, it lacks explicit security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. The contact form posts data to an external domain (frigate.ch), which may raise data protection concerns. No incident response or vulnerability disclosure information is available, indicating room for improvement in security maturity. Overall, the website scores moderately well in business credibility and technical implementation but falls short in privacy compliance and security best practices. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, clarifying data handling for forms, and enhancing GDPR compliance to improve trust and reduce risk.

M

MEDENA AG

medena.ch

48

MEDENA AG is a Swiss-based company specializing in the manufacturing and development of cosmetics, medical devices, and food supplements. With over 50 years of experience, the company offers a broad range of services including contract manufacturing, quality management, regulatory consulting, product development, and research. Their market position is that of an established, certified manufacturer serving international clients with a focus on compliance and quality standards such as ISO 13485, ISO 22716, and ISO 9001. The website reflects a professional B2B business model targeting companies seeking manufacturing and regulatory support in the healthcare and cosmetics sectors. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and has good SEO and accessibility basics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is well addressed with a cookie consent mechanism and GDPR-aligned policies. Overall, the site is trustworthy and professionally maintained, supporting the company's credibility in its sector.

O

Osservatorio europeo di giornalismo (EJO)

ejo.ch

62

The Osservatorio europeo di giornalismo (EJO) is a specialized academic and media research network focused on journalism and media industry analysis across Europe. Affiliated with the Università della Svizzera italiana, it provides research dissemination, news articles, and events targeting media professionals, researchers, and students. The website is well-structured, multilingual, and content-rich, reflecting a mature digital presence since 2015. Technically, it leverages WordPress CMS with common plugins for analytics, forms, and user engagement, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. No critical vulnerabilities or WAF blocks were detected. Overall, the site demonstrates high trustworthiness and professionalism appropriate for an academic media observatory.

E

Esri Schweiz

esri.ch

67

Esri Schweiz operates as a leading provider of geospatial information systems and solutions based on the ArcGIS platform, targeting private sector, government, and academic customers in Switzerland. The website content emphasizes spatial analysis, indoor mapping, and integration of artificial intelligence to enhance geospatial insights. The company is positioned as an enterprise-level entity with a strong brand presence consistent with its parent company Esri Inc. The digital infrastructure leverages Adobe Experience Manager CMS, modern JavaScript frameworks, and multiple analytics and marketing tools, indicating a mature digital presence. Security posture is generally strong with HTTPS and no visible vulnerabilities, but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. Overall, the website is professional, content-rich, and trustworthy, though privacy compliance and contact transparency could be enhanced.