Switzerland security reports

S

Swiss Networking Solutions

swns.ch

62

Swiss Networking Solutions (SNS) is a Switzerland-based telecommunications company specializing in secure, reliable global MPLS and data connectivity solutions. Their services target operators, service providers, enterprises, and MVNOs, offering flexible, personalized network connectivity to extend international footprints and scale business opportunities. The company emphasizes robust infrastructure, secure private connectivity, and optimized performance with strong SLAs. Their website reflects a professional, well-structured digital presence with modern technologies such as Joomla CMS, UIkit framework, and integrated consent management via Usercentrics, ensuring GDPR compliance. Analytics are implemented through Google Analytics and Google Tag Manager, supporting moderate user tracking with privacy considerations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. WHOIS data is unavailable, limiting domain trust assessment, but the website's professionalism and content quality support legitimacy. Overall, SNS presents as a credible, specialized B2B telecommunications provider with a mature digital presence.

U

Universitäts-Kinderspital beider Basel (UKBB)

ukbb.ch

60

The Universitäts-Kinderspital beider Basel (UKBB) is a leading pediatric university hospital located in Basel, Switzerland. It provides specialized medical care for children and adolescents, alongside active research and educational programs. The website reflects a professional healthcare institution with a clear focus on patient care and academic excellence. The digital infrastructure is based on WordPress with Elementor, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS and standard security headers, though improvements in CSP and vulnerability disclosure are recommended. Privacy compliance is strong, with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, the website demonstrates high trustworthiness and professionalism, suitable for its healthcare audience.

B

Bucher Municipal

buchermunicipal.com

69

Bucher Municipal is a globally recognized manufacturer and supplier of municipal vehicles and equipment, specializing in sustainable and efficient cleaning technologies. The company targets municipalities and urban infrastructure sectors, offering a broad range of products including sweepers, sewer and drainage equipment, refuse equipment, winter maintenance machinery, and construction equipment. Their market position is strong as a world leader in municipal vehicles, supported by a professional and multilingual website that reflects their global reach. Technically, the website is built on Drupal 9 and leverages modern analytics and tracking tools such as Google Tag Manager, Hotjar, and Microsoft Clarity. The site is hosted on Amazon CloudFront CDN, ensuring fast performance and excellent mobile optimization. Security measures include HTTPS enforcement and a Content Security Policy, although additional security headers could enhance protection. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. However, the absence of WHOIS registration data reduces transparency and slightly impacts trustworthiness. No explicit security policy or incident response information is published, which could be improved. Overall, Bucher Municipal's website demonstrates a mature digital presence with strong business credibility and technical implementation. Strategic improvements in domain transparency and security policy publication would further enhance trust and compliance.

D

Dukascopy Bank SA

dukascopy.com

76

Dukascopy Bank SA is a Swiss-based financial institution specializing in online forex, CFD, binary options, and cryptocurrency trading, complemented by retail and corporate banking services. With over 20 years of market presence, it offers a comprehensive suite of trading platforms including JForex, MetaTrader 4 and 5, and binary options platforms, targeting retail and institutional clients globally. The bank emphasizes Swiss-quality service, competitive spreads, and multi-currency account offerings, positioning itself as a leading Swiss forex broker and bank with a strong digital presence. Technically, the website employs modern web technologies such as SVG graphics, Google Tag Manager, Hotjar analytics, and JSON-LD structured data for SEO. The site is mobile-optimized, accessible, and well-structured with clear navigation and multilingual support. Performance is moderate with room for optimization. Security best practices are observed with HTTPS enforcement, security headers, and consent management for cookies, though explicit security policies and incident response information are not prominently published. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with GDPR-aligned cookie and privacy policies. However, the WHOIS data for the domain is missing or unavailable, which is unusual for a regulated financial entity and may indicate privacy protection or registrar issues. Despite this, the website content, branding, and regulatory disclosures support the legitimacy of the business. Overall, Dukascopy Bank SA's website reflects a mature, professional financial services provider with robust digital infrastructure and security practices. The main risk lies in the lack of transparent WHOIS data, which should be addressed to enhance trust and compliance visibility.

W

World Rowing

worldrowing.com

69

World Rowing is an established international sports federation responsible for organizing rowing events worldwide, including the upcoming 2025 World Rowing Cup in Lucerne, Switzerland. The website serves as an official platform to provide event information and promote the sport to athletes, fans, and the rowing community. The domain is long-standing, registered since 1999, and hosted on a reliable infrastructure with AWS DNS and CDN services, reflecting a mature digital presence. Technically, the website employs modern JavaScript frameworks such as Vue.js, uses Google Tag Manager for analytics and marketing, and implements HTTPS with appropriate security headers. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, some standard compliance elements like a dedicated privacy policy and terms of service pages are not detected on the event page, though a cookie consent mechanism is present. From a security perspective, the site demonstrates good practices including HTTPS enforcement and clientTransferProhibited domain status, but lacks DNSSEC and a published security.txt file for vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website's claims, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and credible, serving its purpose effectively. Enhancements in privacy compliance documentation and security disclosures would further strengthen its posture.

A

ANOC Association of National Olympic Committees

anoc.tv

55

The ANOC.tv website serves as the official digital platform for the Association of National Olympic Committees, a Swiss-based non-profit organization dedicated to supporting and promoting Olympic committees worldwide. The site offers comprehensive coverage of sporting events, news, and specialized programs such as sustainability workshops, targeting Olympic committees, sports professionals, and enthusiasts. The business model focuses on media dissemination and informational services within the Olympic sports ecosystem. Technically, the website leverages modern web technologies including React, Google Tag Manager, Stripe.js, and push notification SDKs, indicating a mature digital infrastructure. The site is mobile-optimized with good design quality and user experience, although some accessibility and SEO aspects could be enhanced. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks advanced security headers and explicit security policies or incident response contacts. WHOIS data is transparent and consistent with the organization's identity, supporting domain legitimacy. Overall, the website presents a professional and trustworthy front with moderate privacy compliance and security posture. Strategic improvements in privacy policy publication, security headers, and incident response transparency would enhance compliance and user trust.

S

SIUS AG

sius.com

58

SIUS AG is a Swiss-based manufacturer specializing in electronic target scoring systems primarily for sports shooting and military applications. With over 50 years of market presence, SIUS AG holds a leading position globally and serves as the official ISSF Results Provider, underscoring its prominence in the shooting sports industry. The company targets shooting sports enthusiasts, military clients, and international shooting organizations, offering high-quality electronic scoring solutions and related services. The website is professionally designed using the Wix platform, providing essential business information and contact details, though it lacks comprehensive privacy and security disclosures. Technically, the site employs modern web technologies typical of Wix-hosted sites but shows room for improvement in security headers and privacy compliance. The absence of WHOIS data raises concerns about domain registration transparency, which slightly impacts trustworthiness despite the professional presentation. Overall, the site reflects a medium-sized manufacturing business with a solid market position but could enhance its digital security and compliance posture to align with best practices.

S

SportAccord

aimsisf.org

43

The Alliance of Independent Recognized Members of Sports (AIMS) operates as a non-profit international sports alliance representing various independent sports federations. The organization is positioned as a key stakeholder in the global sports governance ecosystem, partnering with major entities such as the International Olympic Committee (IOC), SportAccord, WADA, and ITA. The website serves as a communication platform providing news, member federation information, and partnership details to its target audience of sports professionals and federations worldwide. Technically, the website is built on WordPress using the Elementor page builder, hosted on StableServer infrastructure. The site demonstrates good mobile optimization, clear navigation, and a professional design, although some accessibility features could be improved. Performance is moderate, with no major technical issues detected in the HTML content. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but DNSSEC is not enabled and some security headers are not explicitly detected, suggesting room for improvement. From a security and compliance perspective, the website lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. No incident response or vulnerability disclosure information is available, and no direct contact emails or phone numbers are provided, limiting transparency in communication channels. The WHOIS data is consistent and transparent, confirming the legitimacy of the domain ownership and alignment with the organization's identity. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance measures, improved security header implementation, and clearer contact information to strengthen user trust and regulatory adherence.

S

SportAccord

sportaccord.com

60

SportAccord is a globally recognized organization dedicated to connecting International Sport Federations, cities, right holders, and businesses to shape the future of sport. The website reflects a professional and well-established entity with a strong market position in the sports event and federation engagement sector. Key services include organizing major events such as the SportAccord Convention and the International Federation Forum, alongside providing platforms for sustainability and membership applications. The technical infrastructure is built on WordPress with modern plugins and analytics tools, ensuring a robust digital presence. Security posture is strong with HTTPS enforcement, security headers, and monitoring tools like New Relic, although explicit security policies and incident response details are not publicly disclosed. Overall, the website demonstrates high professionalism, good privacy compliance, and trustworthy business credibility.

S

SportAccord

gaisf.sport

60

SportAccord is a globally recognized organization dedicated to connecting International Sport Federations, cities, right holders, and businesses to shape the future of sport. The website reflects a professional and well-structured platform offering information about major events such as the SportAccord Convention and the International Federation Forum. The organization positions itself as a key player in the sports event and federation engagement sector, supported by the International Olympic Committee and a broad network of partners. The digital infrastructure is built on WordPress with modern plugins and analytics tools, ensuring a good user experience and performance. Security posture is strong with HTTPS enforcement and privacy compliance mechanisms like Usercentrics CMP. However, WHOIS data is privacy protected, limiting transparency on domain ownership, though this is common and justified for such entities. Overall, the website demonstrates a mature digital presence with good content quality, technical implementation, and business credibility.

I

International Olympic Committee (IOC)

olympic.org

63

Olympics.com is the official digital platform of the International Olympic Committee (IOC), providing authoritative and comprehensive coverage of the Olympic Games, athletes, sports, and related news. The website serves a global audience of sports enthusiasts, athletes, and stakeholders by delivering live event coverage, video highlights, original series, and historical Olympic content. It is positioned as the primary source for Olympic information and media worldwide. Technically, the site employs a modern technology stack including JavaScript frameworks (likely React), advanced search via Algolia, customer identity management through Gigya, and robust analytics with Google Tag Manager and Conviva. The site is hosted on a high-performance CDN (Akamai), ensuring fast load times and excellent mobile optimization. Accessibility and SEO practices are well implemented, supporting a broad and inclusive user experience. From a security perspective, Olympics.com enforces HTTPS with strong SSL configuration and implements key security headers such as Content-Security-Policy and Strict-Transport-Security. The site uses a comprehensive cookie consent mechanism compliant with GDPR, and no critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public WHOIS record and lack of visible incident response contacts or vulnerability disclosure pages suggest areas for improvement in transparency and security communication. Overall, Olympics.com demonstrates a mature digital presence with strong content quality, technical infrastructure, and security posture. The main risks relate to WHOIS data opacity and limited direct contact information for security incidents. Strategic recommendations include enhancing incident response visibility, publishing a security.txt file, and continuous monitoring of third-party scripts to maintain security integrity.

S

Sorglos Design AG

sorglos-design.ch

57

Sorglos Design AG is a Swiss-based company specializing in the retail and exhibition of premium wellness and outdoor living products including solid wood saunas, the Round Cube Sauna, sauna stoves by Huum, hot tubs, the proprietary low-smoke fireplace 'Feuerzunge', glamping accommodations, and garden furniture. The company targets consumers seeking high-quality wellness and outdoor lifestyle products, positioning itself as a niche premium provider in the Swiss market. The website reflects a professional and consistent brand image with a clear product focus and multiple social media channels to engage customers. Technically, the website employs modern web technologies such as Font Awesome 6 Pro, Google Fonts, and the Splide.js slider, likely built on Ruby on Rails given the presence of CSRF tokens and asset pipeline conventions. The site is mobile-optimized with good SEO practices and moderate performance. Google Analytics is integrated for user tracking, though no explicit cookie consent mechanism or privacy policy is present. From a security perspective, the site uses HTTPS with a valid SSL configuration and includes CSRF protection tokens, indicating a baseline security posture. However, it lacks advanced security headers and does not provide a vulnerability disclosure or security.txt file. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is consistent with the business claims, supporting legitimacy. Overall, the website is functional, professional, and secure at a basic level but would benefit from enhanced privacy compliance and security best practices to improve trust and regulatory adherence.

H

Hubert Inglin Transporte AG

inglintransporte.ch

44

Hubert Inglin Transporte AG is a Swiss transportation company specializing in transport, crane, and grapple services, serving trades such as carpenters, gardeners, metal and steel builders, and roofers. The company has over 30 years of experience, positioning itself as a reliable partner in the transportation sector. Their website provides detailed descriptions of their services and equipment, targeting businesses and professionals needing specialized transport and crane operations. Technically, the website is built using Incomedia WebSite X5 Evo CMS and employs common JavaScript libraries like jQuery and Anime.js. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features. Security-wise, the website lacks visible security headers and does not enforce cookie consent mechanisms, which are important for GDPR compliance. No incident response or security contact information is provided, indicating room for improvement in security posture. Overall, the website is professional and credible but could enhance its security and privacy compliance to better protect users and build trust.

G

Gemeinde Stansstad

stansstad.ch

65

Gemeinde Stansstad operates as the official municipal government website for the town of Stansstad in Switzerland. It provides residents and visitors with comprehensive information about local administration, politics, cultural events, and public services. The website targets local citizens and stakeholders, offering online administrative tools such as a citizen account and online service counters. The business model is that of a public sector entity focused on community engagement and service delivery. The site maintains a consistent and professional brand image with clear navigation and relevant content.

E

Einwohnergemeinde Cham

cham.ch

54

The Einwohnergemeinde Cham website serves as the official digital presence for the municipality of Cham, Switzerland. It provides comprehensive information and services related to local governance, community life, infrastructure, environment, education, and events. The site targets residents and visitors seeking municipal services and information. The business model is that of a government entity providing public services and information digitally. The website is well-branded, consistent, and includes trust indicators such as official contact details and certifications like Energiestadt GOLD. Technically, the site uses a modern CMS platform (i-web.ch) with Bootstrap for responsive design, ensuring good mobile optimization and accessibility. The performance is moderate with proper SEO and meta tags. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies could be improved. Privacy compliance is good, with clear privacy and cookie policies and user consent mechanisms. Overall, the site is trustworthy and professional, with clear contact information and partner links to regional and cantonal entities. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen security posture.

P

Popup Sauna GmbH

popup-sauna.ch

57

Popup Sauna GmbH operates a niche hospitality business offering exclusive panoramic sauna rentals at lakeside locations in Switzerland, specifically in Cham, Oberwil, and Stansstad. The company targets private individuals and groups seeking unique sauna experiences with easy online booking via a third-party platform. The website is professionally designed with consistent branding and clear navigation, supporting German and English languages. Social media presence on Instagram and Facebook enhances customer engagement. Technically, the site uses modern web technologies and a Flexbe CMS platform, delivering moderate performance and good mobile optimization. Security posture is strong with HTTPS and security headers, though lacking published security policies or incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and credible for its business scope.

P

Puratos

puratos.ch

76

Puratos is a well-established Swiss company specializing in manufacturing and supplying innovative bakery, patisserie, and chocolate ingredients. The website reflects a professional and consistent brand presence with a clear focus on B2B customers in the food manufacturing sector. The company offers a broad product range and supports customers with tailored solutions and an online ordering platform called My Puratos. Technically, the website is built on Adobe Experience Manager CMS with modern JavaScript frameworks and integrates Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and secure login mechanisms, although some security headers are missing and no explicit privacy or cookie policies were detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

C

Cicor Technologies Ltd.

cicor.com

61

Cicor Technologies Ltd. operates as a global provider of full-cycle electronic solutions, serving key sectors including medical technology, industrial, and aerospace & defence. The company offers a broad portfolio of services such as engineering, electronic manufacturing, precision plastics, hybrid circuits, and prototyping. With approximately 4,300 employees across 12 countries, Cicor holds a strong market position, particularly in the European defence sector. The website reflects a professional and comprehensive digital presence, supporting investor relations and corporate responsibility initiatives. Technically, the website is built on TYPO3 CMS and integrates modern technologies including Vimeo for video content and CookieFirst for consent management. The site demonstrates good performance, mobile optimization, and accessibility. Security best practices are observed with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly available. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, which is notable for a publicly traded company. Overall, Cicor's website presents a trustworthy and professional image with minor areas for improvement in transparency and security communication. The risk level is low, but verification of domain registration details is recommended to enhance trust.

S

SIGA

siga.swiss

70

SIGA is a Swiss-based company specializing in providing high-quality vapour control layers, tapes, adhesives, and sealants aimed at enabling architects, builders, and installers to construct energy-efficient and airtight buildings. The company positions itself as a trusted supplier in the building materials sector with a focus on sustainable and durable building envelope solutions. Their website is well-structured, multilingual, and rich in technical content including product catalogs and guides, targeting professional audiences in the construction industry. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, integrating modern analytics and tracking tools such as Google Tag Manager and Hotjar. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is basic with cookie consent implemented but no explicit privacy policy page found. Overall, the website reflects a professional and credible business presence with good digital maturity.

F

Footshop a.s.

footshop.ch

69

Footshop a.s. operates a well-established e-commerce platform specializing in sneakers, clothing, and accessories, targeting a unisex audience primarily in German-speaking European markets. The company maintains a strong market position with multiple physical stores and a loyalty program, offering a broad selection of popular brands. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization, reflecting a mature digital presence. Technically, the site leverages modern technologies including Google Tag Manager, GA4 analytics, Cookiebot for consent management, and Typekit fonts, built likely on the PrestaShop CMS platform. Security posture is strong with HTTPS enforced and privacy compliance evident, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness with no critical security issues detected.

C

Concrete Sustainability Council

csc.eco

52

The Concrete Sustainability Council (CSC) operates a global certification system focused on responsibly sourced ready-mixed and precast concrete, promoting sustainability in the construction materials sector. The organization targets concrete producers, suppliers, and construction professionals, positioning itself as a key authority in sustainable concrete certification. The website is built on WordPress with modern technologies including Bootstrap and Google Maps integration, providing a professional and user-friendly experience. Security posture is adequate with HTTPS enabled and domain registration consistent with the business entity, though there are gaps in privacy compliance and vulnerability disclosure. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security transparency.

F

Franke

franke.coffee

60

Franke is a Swiss enterprise specializing in manufacturing advanced coffee systems and foodservice equipment, emphasizing Swiss craftsmanship and precision engineering. Their website showcases a comprehensive portfolio of coffee machines and modular solutions targeted at commercial and business customers globally. The site is professionally designed, multilingual, and structured to support diverse markets and languages. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies and includes cookie consent mechanisms to comply with privacy regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. The absence of WHOIS registration data is unusual but does not detract from the overall legitimacy indicated by the website's content and branding. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

Alamo.ch is a professionally maintained car rental website targeting the Swiss market, operated under the umbrella of Enterprise Holdings, Inc. The site offers competitive car rental services with a focus on customer satisfaction, including premium packages and accelerated check-in options. The business is positioned as a major player in the transportation sector with a strong international presence. Technically, the website leverages Adobe Experience Manager CMS, integrates modern analytics and consent management tools, and is hosted on a robust infrastructure with Akamai CDN. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site demonstrates high professionalism, good user experience, and trustworthy business credibility.

C

corvaglia group

corvaglia.ch

62

corvaglia group is a medium-sized manufacturing company specializing in innovative cap solutions, including tamper-evident and ergonomic caps, serving a global market from its Swiss base. The company emphasizes expertise across the entire value chain from design to application, with over 30 years of industry presence. Their website reflects a professional digital presence with multilingual support and comprehensive privacy and cookie policies, indicating a mature approach to user privacy and compliance. Technically, the site is built on WordPress with modern plugins and analytics tools, offering good performance and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though explicit security policies and incident response details are absent. The missing WHOIS data introduces some uncertainty about domain registration transparency, but the overall trust signals and contact information support legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and monitoring domain registration details.

A

Avesco AG

avesco.ch

65

Avesco AG is a Swiss company specializing in construction machinery for earthmoving, road construction, recycling, quarrying, gardening, and concrete transport, as well as emergency power supply for data centers, hospitals, and industry. The company targets B2B clients in the construction and energy sectors within Switzerland, positioning itself as a reliable provider of essential machinery and power solutions. The website is built on TYPO3 CMS and integrates modern technologies such as Cookiebot for cookie consent management and Matomo for privacy-focused analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism, although explicit privacy and terms of service policies are not found in the provided content. Overall, the site demonstrates good technical implementation and business credibility, with room for improvement in privacy documentation and contact transparency.

A

Alpen Pharma

alpenpharma.com

48

Alpen Pharma is a healthcare-focused pharmaceutical company with an international presence, operating multiple country-specific websites to serve diverse markets. The company appears established since 2007, with a medium-sized business footprint primarily in the healthcare sector. Their website is built on WordPress, leveraging common plugins for forms and GDPR-compliant cookie consent, indicating a moderate level of digital maturity. The technical infrastructure includes modern JavaScript libraries and analytics tools, supporting a good user experience and mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with clear policies and opt-in mechanisms. However, contact information and security policies are not explicitly presented, which could impact user trust and compliance transparency. Overall, the website is professional and functional with room for enhanced security and business transparency.

A

AsstrA-Associated Traffic AG

asstra.com

62

AsstrA-Associated Traffic AG is a well-established international transport and logistics company founded in 2004, headquartered in Switzerland. The company offers a broad range of logistics services including road, air, sea, rail, and multimodal transport, serving diverse industries globally. Their website reflects a professional and comprehensive digital presence with clear service descriptions, client engagement features, and regional partner sites. Technically, the site uses modern web technologies such as jQuery, Bootstrap, and integrates analytics and cookie consent tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain protections in place, though there is room for improvement in security headers and incident response transparency. Overall, the company demonstrates strong business credibility and compliance with privacy regulations, making it a trustworthy logistics partner.

I

iSun AG

isun.ch

64

iSun AG is a Swiss-based custom software development company specializing in blockchain technology, fintech solutions, and compliance software. Their offerings include exchange software, asset digitization, banking software, compliance tools, virtual and physical debit cards, money transfer software, and payment gateways. The company targets businesses requiring advanced, secure, and tailored digital financial solutions, positioning itself as a niche technology provider in the Swiss and European markets. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built using modern frameworks such as Hugo and Bootstrap, with integration of analytics and tracking tools like Google Analytics and Google Tag Manager. Security posture is solid with HTTPS enforced and secure form handling, though the absence of security headers and incident response information suggests room for improvement. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms despite tracking usage. Overall, the website and domain registration data indicate a legitimate and credible business with a good digital maturity level.

S

SUNSEEKER SWITZERLAND

sunseekerswitzerland.com

57

Sunseeker Switzerland operates as a premier luxury motor yacht brand, offering a diverse portfolio of yachts ranging from performance models to superyachts. Established in 1969, the company has built a strong market position as a world-leading luxury yacht manufacturer and broker, targeting affluent customers seeking high-end yachting experiences. The website reflects a mature digital presence with multi-language support, comprehensive product information, and professional branding. Technically, the website leverages modern frameworks such as React and Next.js, combined with Chakra UI for styling, ensuring a responsive and accessible user experience across devices. Integration with Google Tag Manager and OneTrust indicates a mature approach to analytics and privacy compliance. Performance is moderate with good SEO and accessibility practices in place. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. However, there is no explicit public security policy or incident response information, which could be improved. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, security, and compliance, supporting the brand's luxury market positioning. Strategic enhancements in security transparency and incident response readiness would further strengthen trust and resilience.

F

Feedgenic

feedgenic.swiss

51

Feedgenic Sàrl is a Swiss-based technology company specializing in the integration of IT network solutions, VPN services, Synology NAS, and hosting. The company targets businesses and individuals seeking to maintain local control over their data with performant IT solutions. The website is professionally designed using WordPress with the Divi theme and incorporates modern SEO practices via Rank Math. Hosting is provided by Infomaniak Network SA, a reputable Swiss hosting provider. The domain registration is consistent with the business identity and location, enhancing trustworthiness. Technically, the website employs standard web technologies including jQuery and Slider Revolution for interactive content. The site is mobile optimized and performs moderately well, though accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. No explicit privacy policy or terms of service were found, though a cookie policy with consent mechanism is present. Overall, the security posture is moderate with room for improvement in published policies and technical security controls. The absence of contact emails and phone numbers on the homepage limits direct communication channels. No signs of malicious activity or blocking by WAFs were detected, allowing full content analysis. Strategic recommendations include enabling DNSSEC, publishing comprehensive privacy and security policies, and adding incident response contacts to improve compliance and trust.

Bacthera AG in Liquidation is a biotech joint venture between Novonesis and Lonza with offices in Switzerland, Denmark, and Spain. The company appears to be in the process of liquidation, as indicated by the website content. The business focuses on biotechnological manufacturing services, targeting industry stakeholders and partners. The website is built on WordPress and uses Google Analytics and Tag Manager for tracking visitor data. The technical infrastructure is moderate with basic mobile optimization and SEO features. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response or security policies. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Privacy and cookie policies exist but lack a consent mechanism, impacting GDPR compliance. Overall, the website provides minimal content and basic business information with moderate trust indicators.

D

Dreamlab Technologies AG

dreamlab.net

77

Dreamlab Technologies AG is a Swiss-based cybersecurity company with over 25 years of experience, providing innovative advisory, consulting, and education services globally. The company emphasizes Swiss quality and international expertise, offering independent and product-neutral cybersecurity solutions including audits, penetration testing, system monitoring, and training. Their market position is that of a pioneer and trusted expert in the cybersecurity domain, targeting organizations, authorities, and individuals seeking robust cyber resilience strategies. Technically, the website is built on WordPress with modern plugins and frameworks, optimized for mobile and SEO, and uses Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and no explicit security policy or incident response information is published. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and transparent business details.

A

alpine

alpinecars.ch

72

Alpine Schweiz operates as the official regional website for the Alpine sports car brand in Switzerland, providing detailed information on their sports car models, motorsport activities including Formula 1 and WEC, and connected services for customers. The site targets automotive enthusiasts and potential buyers interested in premium sports cars and motorsport. The business is positioned as a premium automotive brand under the Renault Group umbrella, with a medium-sized market presence in Switzerland. Technically, the website leverages modern web technologies such as React, uses a CDN hosted by Renault Group, and implements cookie consent via OneTrust, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and Google site verification present, though explicit security headers and incident response policies are not evident. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service in the provided content. Overall, the site is professional, well-branded, and trustworthy, but could improve transparency around privacy and security policies.

A

Avaloq

avaloq.com

53

Avaloq is a leading enterprise provider of cloud banking software and services, specializing in wealth management technology. The company offers a comprehensive platform that covers the entire banking value chain, including digital experience, client management, investment management, trading, lending, payments, treasury, risk, compliance, data analytics, and integration services. Avaloq serves financial institutions and wealth managers globally, positioning itself as a trusted partner with over 170 clients including major banks such as HSBC, Deutsche Bank, and Barclays. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the site is built on the Neos CMS and Flow PHP framework, leveraging modern technologies and integrating Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be more visible. No blocking or WAF interference was detected, allowing full content access. Overall, Avaloq demonstrates a high level of digital maturity and business credibility, supported by consistent WHOIS data and a clear connection to its parent company NEC Corporation.

G

Global Initiative Against Transnational Organized Crime

globalinitiative.net

46

Global Initiative Against Transnational Organized Crime is a well-established non-profit organization based in Switzerland, focused on combating organized crime through a global network of experts and multiple research initiatives. The website serves as a hub for analysis, events, publications, and multimedia content targeting professionals and policymakers engaged in this field. The organization maintains a strong market position with over 600 experts and a broad portfolio of initiatives and observatories worldwide. Technically, the website is built on WordPress with modern SEO and analytics tools, providing a good user experience with responsive design and clear navigation. Security posture is solid with HTTPS and no exposed sensitive data, though there is room for improvement in security headers and incident response transparency. Privacy compliance is partial, lacking cookie consent mechanisms and explicit GDPR compliance statements. Overall, the site is professional, trustworthy, and content-rich, supporting the organization's mission effectively.