Switzerland security reports

Lonza Group AG is a globally recognized contract development and manufacturing organization (CDMO) serving the healthcare industry, with a rich history dating back to 1897 in Switzerland. The company is a pioneer and world leader in the CDMO sector, offering integrated services across biologics, small molecules, specialized modalities, and health ingredients. Their target audience includes pharmaceutical, biotech, and nutrition companies seeking end-to-end manufacturing solutions. The website reflects a mature digital infrastructure with modern technologies such as Bootstrap, jQuery, Brightcove video integration, and robust cookie consent mechanisms, indicating a strong commitment to user experience and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be enhanced. Overall, the site demonstrates high professionalism, clear navigation, and comprehensive content relevant to their business model.

P

Parallels International GmbH

parallels.com

54

Parallels International GmbH operates a professional and comprehensive website offering virtualization and remote application solutions primarily for Mac users. The company is positioned as a market leader with over 7 million users worldwide, providing a range of products including Parallels Desktop, Parallels RAS, and cloud-based services. The website demonstrates strong digital maturity with modern technologies, responsive design, and extensive content tailored to various audiences including enterprises, developers, and educational sectors. Security posture is robust with HTTPS enforcement, secure forms, and privacy compliance evidenced by detailed policies and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and well-maintained online presence. Strategic recommendations include publishing explicit security policies and incident response contacts to further enhance trust and compliance.

E

ESPRIT St.Gallen

stgallenbusinessreview.com

28

St. Gallen Business Review is a student-run business magazine published by ESPRIT St.Gallen, affiliated with the University of St.Gallen. It provides independent journalism focused on business, entrepreneurship, finance, economics, politics, and sustainability. The website features a membership program (SGBR+) offering exclusive early access to content. Technically, the site is built on WordPress with modern plugins and libraries, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No direct contact emails or phone numbers are provided, but a contact form is available. The domain registration details align with the business claims, supporting legitimacy.

The website www.hixie.ch is a personal site primarily focused on sharing web-related materials, weblog entries, and indexes of other related personal sites. It serves as a hub for the site owner’s web content and personal projects, targeting web developers and technology enthusiasts. The site is small in scale, with basic content and minimal interactive features. Technically, the site uses simple HTML and CSS without any detected CMS or advanced frameworks. There is no evidence of modern analytics, advertising, or tracking technologies, indicating a low digital maturity level. Security posture is minimal with no HTTPS or security headers detected in the provided data, and no privacy or cookie policies are present. Overall, the site is accessible and functional but lacks professional security and compliance features, which limits its trustworthiness and business credibility.

K

Kanadevia Inova

hz-inova.com

41

Kanadevia Inova is a global cleantech company specializing in Waste to Energy (WtE) and renewable gas technologies. The company offers a comprehensive range of services including turnkey project development, engineering, construction, and service products. Positioned as a pioneering player in the cleantech sector, Kanadevia Inova targets clients and stakeholders interested in sustainable waste management and renewable energy solutions. The website reflects a mature digital presence with multilingual support and a strong emphasis on sustainability and innovation. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, supported by Google Tag Manager and CookieYes for analytics and privacy compliance. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility could be further enhanced. From a security perspective, the site enforces HTTPS, implements key security headers, and provides a robust cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, incident response contact details and vulnerability disclosure policies are absent, representing areas for improvement. Overall, Kanadevia Inova's website presents a professional, trustworthy, and compliant digital front that supports its business objectives effectively. Strategic recommendations include enhancing security transparency, improving accessibility, and formalizing terms of service to further strengthen user trust and compliance posture.

I

INFICON

inficon.com

54

INFICON is a globally recognized provider of advanced instrumentation, sensor technologies, and software solutions tailored for industrial vacuum processes, semiconductor fabrication, and gas leak detection. The company holds a strong market position with a broad portfolio serving diverse sectors including automotive, energy, security, and research. Their website reflects a mature digital presence with comprehensive product and market information, supported by modern web technologies and analytics tools implemented with user consent. Security posture is robust with HTTPS enforcement, security headers, and secure form handling, although explicit security policies and incident response details are not publicly disclosed. Overall, INFICON demonstrates a high level of professionalism, compliance, and technical sophistication, positioning them as a trustworthy and credible industrial technology provider.

O

Occlutech

occlutech.com

42

Occlutech is a specialized healthcare company founded in 2003 in Germany, now headquartered in Switzerland, focusing on minimally invasive cardiac devices for structural heart diseases including congenital defects, stroke prevention, and heart failure. The company maintains a strong market position as a leading supplier in this niche, targeting healthcare professionals, patients, and investors. Their business model revolves around design, manufacturing, and commercialization of cardiac implants with a broad product portfolio. The website reflects a medium-sized enterprise with consistent branding and good content quality.

B

BDO Schweiz

bdo.ch

68

BDO Schweiz is a leading auditing, fiduciary, tax consulting, and business advisory firm in Switzerland, operating with a large network of over 40 locations. The company offers comprehensive professional services targeting Swiss SMEs, larger enterprises, and private individuals. Their market position is strong, supported by a consistent brand presence and a broad portfolio of services including financial services and digital solutions. Technically, the website is built on modern frameworks such as React and Kentico CMS, with integrations for analytics and marketing tools like Google Tag Manager, Cookiebot, and Microsoft Application Insights. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS enforcement, security headers, and CSRF protections, although explicit public security policies and incident response contacts are not found. Privacy compliance is well addressed with GDPR-aligned privacy and cookie policies and a consent mechanism. Overall, the website reflects a professional, trustworthy, and mature digital presence suitable for a large enterprise in the finance sector.

P

Pineparks International LTD

pineparks.ch

62

Pineparks International LTD is a Swiss-based web agency specializing in tailored digital solutions including software development, app development, WordPress development, and UX design. The company positions itself as a business-oriented partner for companies seeking growth, supported by international presence with entities in London and Estonia.

E

enuvo GmbH

surveyhero.com

69

SurveyHero, operated by enuvo GmbH, is a mature and established online survey software provider founded in 2005 and based in Switzerland. The company offers a SaaS platform enabling users to create, distribute, and analyze surveys with a focus on ease of use, multilingual support, and GDPR compliance. With over 3 million users worldwide and endorsements from reputable platforms like Capterra and G2, SurveyHero holds a strong market position in the online survey industry. The website reflects a professional and user-friendly design, targeting individuals and organizations seeking reliable survey tools.

V

Virtually Live

virtuallylive.com

46

Virtually Live is a Swiss-based media and technology company specializing in creating immersive digital experiences for live events across multiple platforms. Their patented technology enables real-time CGI transposition of physical events into virtual environments, enhancing fan engagement through interactive and social experiences. The company also develops consumer-facing applications such as the Virtually Live Ghost Racing® mobile game, positioning itself as an innovator in the intersection of live media, gaming, and emerging metaverse technologies. Technically, the website is built on WordPress with a moderate tech stack including jQuery and Fancybox, delivering a responsive and multimedia-rich user experience. Security posture is adequate with HTTPS and anonymized Google Analytics, but lacks advanced security headers and published incident response policies. Privacy compliance is basic with privacy and cookie policies present but no explicit consent mechanisms. Overall, the site reflects a legitimate, small-sized technology company with consistent branding and moderate trust indicators.

L

LaPrairie

laprairiegroup.ch

63

LaPrairie is a premium luxury skincare brand operating under the Beiersdorf group, focusing on high-end beauty products and sustainability. The website reflects a strong brand presence with excellent content quality, clear navigation, and a professional design optimized for mobile devices. The technical infrastructure leverages Drupal CMS, modern JavaScript libraries for animations, and integrates Google Analytics and OneTrust for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its luxury market position.

B

Bauwerk Group Schweiz AG

bauwerk-parkett.com

43

Bauwerk Group Schweiz AG operates a professional and comprehensive website focused on manufacturing and retailing high-quality parquet and wood flooring products. The company positions itself as a leading European parquet manufacturer with a strong Swiss heritage, offering a wide range of products, accessories, and digital tools to both end consumers and professionals. The website is well-structured, multilingual, and rich in content, emphasizing sustainability and certifications such as Cradle to Cradle GOLD. Technically, the site uses modern frameworks including Neos CMS and the Flow PHP framework, integrates Google reCAPTCHA, and employs analytics and marketing tools responsibly. Security posture is good with HTTPS enforced and standard best practices observed, though some security headers could be explicitly declared. Privacy compliance is strong with accessible policies and consent mechanisms. Overall, the website reflects a mature digital presence with high trustworthiness and professionalism.

K

Kantonsspital Graubünden

ksgr.ch

47

Kantonsspital Graubünden is a large, well-established healthcare institution serving the Southeast Switzerland region. The website reflects a professional medical center offering a wide range of medical and surgical services, with a strong focus on patient care and comfort. It also serves as a certified training center for medical professionals. The site is well-structured, multilingual, and provides comprehensive information for patients, visitors, and referring physicians. Technically, the site is built on Drupal CMS with modern web technologies, including Bootstrap and Matomo analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not found, which could be improved. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and certifications.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 29 security findings identified across all modules.

P

Permapack AG

permapack.ch

26

Permapack AG is a Swiss family-owned manufacturing and trading company specializing in high-quality products such as labels, adhesive tapes, films, sealants, and garden articles. The company serves various sectors including food, cosmetics, industry, construction, and retail, offering both standard products and customized solutions. Their business model combines B2B sales with an online shop and extensive production services. The website reflects a medium-sized enterprise with a consistent brand presence and strong trust indicators such as awards and social media engagement. Technically, the site uses a custom e-commerce platform with modern JavaScript libraries and tracking tools, hosted by IP-Plus AG. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to risks and limiting secure communications. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the site is professional and trustworthy but requires urgent security improvements.

B

BROMsolutions AG (Career Experts in SAP®)

bromsolutions.ch

23

BROMsolutions AG is a specialized recruitment and consulting firm focusing on SAP professionals and companies in Switzerland and Germany. The company operates multiple offices and offers services including SAP job placement and recruitment consulting. Their website is professionally designed, targeting SAP job seekers and employers, with clear navigation and relevant content. The technical infrastructure is based on WordPress CMS with modern plugins and frameworks, but lacks a valid SSL certificate, which impacts security and trust. The site uses Matomo analytics, indicating a privacy-conscious approach. Security posture is weak due to missing HTTPS and modern TLS protocols, exposing the site to potential risks. Overall, the business appears legitimate and well-positioned in its niche, but should urgently address security gaps to improve trust and compliance.

T

Tecan Trading AG

tecan.com

40

Tecan Trading AG is a well-established Swiss company specializing in healthcare innovation, laboratory automation, diagnostics, and OEM partnering services. Their website reflects a strong market position with comprehensive product offerings in life sciences and diagnostics, supported by detailed investor relations and corporate policies. The digital infrastructure is built on HubSpot CMS, leveraging modern marketing and analytics tools such as Google Tag Manager and Microsoft Clarity, hosted behind Cloudflare for performance and security. However, a critical security gap exists due to an invalid or missing SSL certificate and lack of modern TLS protocol support, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, content-rich, and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Luxoft, a DXC Technology Company founded in 2000 and headquartered in Switzerland, is a global enterprise technology services provider specializing in software engineering and digital transformation. The company serves multiple industries including automotive, finance, telecommunications, energy, and retail, offering a broad portfolio of services such as cloud solutions, data analytics, machine learning, and legacy modernization. Luxoft positions itself as a trusted partner for enterprises seeking to modernize IT systems and achieve sustainable digital advantage. The website reflects a mature digital presence with comprehensive content, structured data, and clear navigation targeting enterprise clients worldwide. Technically, the site uses modern frameworks and integrates advanced marketing and analytics tools with consent management, indicating a high level of digital maturity. However, the security posture is weakened by an invalid SSL certificate and lack of TLS support, which poses significant risks to secure communications and user trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Luxoft demonstrates strong business credibility and professionalism but should urgently remediate SSL/TLS issues to enhance security and trust.

F

F-Top Institute

ftop.ch

24

F-Top Institute is a specialized organization focused on optimizing human capital to improve financial performance through data-driven people management solutions. The company offers research-backed HR solutions, live online training academies, advisory briefings, and a community platform targeting HR professionals and line managers. The website is built on WordPress with WooCommerce and several plugins, indicating a mature digital infrastructure but lacks a valid SSL certificate, which is a significant security concern. The site includes comprehensive privacy and cookie policies, reflecting good privacy compliance practices. However, the absence of HTTPS and incomplete DNS configuration pose risks to trust and security. Strategic improvements in SSL deployment and DNS management are recommended to enhance security posture and business credibility.

Georg Fischer Ltd is a well-established Swiss enterprise specializing in manufacturing and providing flow solutions across industrial, infrastructure, and building sectors. The company operates through four main divisions offering piping systems, casting solutions, machining solutions, and building flow solutions. The website reflects a mature digital presence with comprehensive content targeting industrial clients, investors, and job seekers. Technically, the site leverages Adobe Experience Manager, integrates modern analytics and marketing tools, and provides a good user experience with mobile optimization and accessibility features. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which is a critical issue that significantly impacts the overall security score. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by detailed investor relations and trust indicators. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

A

Angst+Pfister

angst-pfister.com

39

Angst+Pfister is a large Swiss-based engineering and manufacturing company specializing in custom materials design and engineering solutions. With over 300 engineers and a global presence across 24 locations, the company serves diverse industries including food & beverage, pharma, automotive, and energy. Their business model focuses on B2B partnerships delivering tailored solutions from design to production and distribution. The website reflects a mature digital presence with professional design, comprehensive content, and multilingual support. However, the absence of a valid SSL/TLS certificate is a critical security gap that undermines trust and data protection. Privacy policies and cookie consent mechanisms are in place, indicating GDPR compliance. The company maintains active social media channels and an online shop partner domain, supporting their market reach and customer engagement.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

C

Cannerald AG

cannerald.com

39

Cannerald AG is a Swiss-based medical cannabis producer specializing in pharmaceutical-grade cannabis products. The company operates a high-tech indoor vertical farming facility in Switzerland, targeting an international clientele with a focus on quality, safety, and sustainability. Their business model centers on B2B supply of medical cannabis with rigorous quality controls and upcoming GMP certification. Technically, the website is built on Webflow and uses modern frontend technologies, but lacks a valid SSL certificate, resulting in no HTTPS support which is a critical security gap. The site includes a cookie consent mechanism compliant with GDPR and provides contact via a form, but lacks explicit email or phone contact details. Social media presence is active on major platforms. Security posture is weak due to missing SSL/TLS, but no other major vulnerabilities are detected. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and trust.

Landis+Gyr is a global leader in smart metering and grid edge intelligence technologies, providing advanced energy management solutions to utilities and energy providers. The company offers a broad portfolio including smart meters, analytics, consumer engagement, and managed services, positioning itself as a key enabler of the modern digital energy grid. Their website reflects a mature enterprise with comprehensive content, strong branding, and active communication channels including news, blogs, and social media. Technically, the site is built on WordPress with a robust set of plugins and integrations for analytics, marketing, and multilingual support. However, the current lack of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses that undermine user trust and data protection. Security headers are partially implemented, and cookie consent mechanisms comply with GDPR standards. Overall, the website demonstrates high professionalism and business credibility but requires urgent remediation of its SSL/TLS configuration to meet modern security expectations.

R

Regent AG

regent.ch

33

Regent AG is a Swiss-based lighting manufacturer with a heritage spanning over 100 years, specializing in high-quality, human-centric lighting solutions and bespoke designs. Their website reflects a mature business with a strong brand presence, targeting professional customers such as electrical installers and corporate clients. The company offers a broad portfolio including connected lighting and upcycling services, supported by digital tools like product finders and configurators. Technically, the website is built on TYPO3 CMS and employs modern web technologies and marketing tools, but suffers from a critical security weakness due to the absence of a valid SSL certificate and disabled TLS protocols, which undermines secure HTTPS access. Privacy compliance is well addressed with clear policies and consent mechanisms. Contact information and social media presence are comprehensive, enhancing business credibility.

C

Coaching-Yes You Can

coaching-yesyoucan.ch

30

Coaching-Yes You Can is a small Swiss-based health coaching service specializing in stress, mobbing, burnout prevention, and workplace health promotion. The company targets private individuals, youth, children, and business clients, offering personalized coaching and consulting services. The website is hosted by Hostpoint and built on the cm4all CMS platform, utilizing standard web technologies including jQuery and Prototype. While the site presents professional content with clear navigation and partner references, it lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. The cookie policy with consent is implemented, but no privacy policy or terms of service are found, indicating partial privacy compliance. Contact information is limited to a phone number with no email or physical address explicitly provided. The site uses Logaholic analytics with minimal user tracking. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

H

HOSTSTAR - Multimedia Networks AG

selinatec.com

31

Hoststar is a webhosting and domain registration provider targeting German-speaking customers with affordable hosting packages and cloud services. The website content is currently a default hosting placeholder page indicating readiness for customer content upload. The technical infrastructure uses nginx web server and common web libraries like jQuery and WOW.js, hosted by Hoststar itself. However, the SSL certificate is invalid or missing, resulting in poor HTTPS security. The site lacks cookie consent mechanisms and vulnerability disclosures, indicating limited privacy and security maturity. Contact information and business details are clearly presented, supporting moderate business credibility. Overall, the website is functional but requires significant improvements in security and privacy compliance to meet modern standards.

K

Kempinski Hotels

kempinski.com

40

Kempinski Hotels is a well-established luxury hospitality brand offering five-star hotels and resorts worldwide. The website reflects a mature and professional digital presence with comprehensive content targeting luxury travelers and business clientele. The brand emphasizes direct booking, loyalty programs, and a rich portfolio of global destinations. Technically, the site uses modern frameworks such as Next.js and React, hosted behind Cloudflare, ensuring good performance and mobile optimization. However, a critical security gap exists due to the absence of SSL/TLS certificates, severely impacting the security posture. While security headers are properly configured, the lack of HTTPS undermines user trust and data protection. Privacy and legal policies are comprehensive and GDPR compliant, but no cookie consent mechanism was detected. Overall, the site is professional and credible but requires urgent security improvements to protect user data and maintain trust.

S

SIG Combibloc Group Ltd.

sig.biz

62

SIG Combibloc Group Ltd. is a leading enterprise in the manufacturing sector specializing in innovative and sustainable packaging solutions including carton, bag-in-box, and spouted pouch packaging. The company holds a strong market position as an industry leader with a comprehensive portfolio and a global reach. Their website reflects a mature digital presence with professional design, clear navigation, and a focus on sustainability and innovation. Technically, the site uses modern frameworks such as Next.js and React, hosted on Microsoft Azure, with good mobile optimization and SEO practices. However, the security posture is impacted by an invalid or missing SSL certificate, which is a critical issue that should be addressed promptly. Privacy compliance is well managed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professional but requires improvements in SSL configuration to enhance security.

dormakaba Holding is a globally recognized leader in smart and secure access solutions, providing a comprehensive range of products and services for secure access to buildings and rooms. The company operates internationally with a strong presence in multiple countries and serves diverse markets including security, technology, and manufacturing sectors. The website reflects a mature, well-established business with a clear focus on innovation, sustainability, and customer engagement. Technically, the site leverages modern frameworks such as Vue.js and Contentful CMS, ensuring a responsive and user-friendly experience across devices. Security measures are robust with multiple security headers and a comprehensive content security policy, although the SSL certificate is currently invalid, which is a critical issue that needs immediate attention. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, dormakaba demonstrates a strong security posture and business credibility, supported by transparent investor relations and active communication channels.

S

Scigility Switzerland AG

scigility.com

23

Scigility Switzerland AG is a specialized technology company focused on delivering advanced data solutions including AI, machine learning, data strategy, and governance primarily to enterprise clients in finance, healthcare, manufacturing, and utilities sectors. The company has a mature market presence with a domain age of 12 years and a strong client portfolio including major Swiss corporations. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates analytics tools such as Matomo and Google Analytics. However, the absence of a valid SSL certificate and HTTPS support is a critical security weakness that undermines user trust and data protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the business credibility and website professionalism are high, but the security posture requires urgent improvement.

Security assessment completed with an overall score of 0/100 (unknown risk). 4 critical issues require immediate attention. Total of 29 security findings identified across all modules.

J

Jungbunzlauer Suisse AG

jungbunzlauer.com

33

Jungbunzlauer Suisse AG is a leading manufacturer of biodegradable ingredients of natural origin, serving diverse industries including food, beverage, pharmaceutical, cosmetics, and cleaners. The company emphasizes sustainability and quality, positioning itself as a global leader in its sector. Their website reflects a professional and content-rich digital presence, targeting businesses seeking natural and sustainable ingredient solutions. Technically, the site is built on TYPO3 CMS and hosted on infrastructure likely provided by AWS, with integrations such as Google Tag Manager for analytics. However, the security posture is notably weak due to the absence of a valid SSL certificate and lack of HTTPS support, which poses risks to data confidentiality and user trust. Privacy and cookie policies are well implemented, showing GDPR compliance and user consent mechanisms. Overall, the site is trustworthy and professional but requires urgent security improvements to protect visitors and maintain credibility.

The website harmann.ch represents a small Swiss law firm operated by Robert Harmann, offering legal services primarily in the Zürich region. The site provides basic information about the firm's practice areas including commercial law, family law, inheritance law, and related legal fields. The business model is that of a traditional law firm targeting local clients seeking legal counsel. The website content is minimal and primarily informational, with no interactive features or detailed contact information visible on the main page. Technically, the site is outdated, using HTML 4.01 Transitional and generated by Adobe GoLive 6, with no modern CMS or frameworks detected. The hosting is provided by Hostpoint, but the site lacks HTTPS, exposing visitors to security risks. Security posture is weak due to absence of SSL/TLS, missing security headers, and no privacy or cookie policies, which also impacts compliance with GDPR and other regulations. Overall, the website presents a low digital maturity level and limited user experience, which may affect trust and professional perception. Strategic improvements in security, privacy compliance, and content quality are recommended to enhance credibility and protect client data.

Nexxchange AG operates a specialized SaaS platform focused on golf course and resort management, offering tools for booking, marketing optimization, and sales intelligence. The company targets golf managers and multi-site operators, positioning itself as an all-in-one solution in the hospitality sector. The website is professionally designed with multi-language support and social media presence, but lacks explicit privacy policy and contact information on the homepage. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and FontAwesome, but critically lacks a valid SSL certificate, serving content over HTTP only, which severely impacts security posture. Security headers are partially implemented, but without HTTPS, their effectiveness is limited. The domain registration data is consistent with the business claims, indicating legitimacy. Overall, the site demonstrates moderate digital maturity but requires urgent improvements in security and privacy compliance to enhance trust and protect users.

C

Consulteer

schindlercreations.com

37

Consulteer is a European consulting and software development company specializing in human-centered design, software engineering, and cybersecurity services. The company positions itself as a one-stop innovation partner delivering market-ready products and solutions with a strong focus on the human element. The website reflects a mature and professional business with a clear market position and a medium-sized operational scale, founded in 2015 and headquartered in Switzerland. Technically, the website is built on modern frameworks such as Next.js and React, hosted via Cloudflare, and uses Contentful as a CMS. However, the website suffers from a critical security issue: the absence of a valid SSL certificate and HTTPS support, which severely impacts the security posture and user trust. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact information is limited to a contact form, with no direct emails or phone numbers publicly available. Overall, the website is content-rich and professionally designed but requires urgent security improvements to meet modern standards.

M

Maschinenring Schweiz

maschinenring.ch

26

Maschinenring Schweiz is a Swiss umbrella organization dedicated to fostering inter-company collaboration in agriculture. It connects members, organizes purchasing cooperatives, and offers various services to support agricultural businesses. The website is professionally designed using TYPO3 CMS and hosted on Hostpoint, with a clear structure and multilingual support. However, the absence of a valid SSL certificate and HTTPS support significantly undermines the site's security posture. Privacy and cookie policies are well implemented with consent mechanisms, and social media presence is established on Facebook and Instagram. Overall, the site reflects a medium-sized, established non-profit entity with a strong community focus but requires urgent security improvements.

R

retailsolutions AG

retailsolutions.ch

27

retailsolutions AG is a leading SAP Retail consulting firm in Europe, specializing in digital transformation, forecasting, omnichannel customer centricity, and analytics solutions. With over 350 employees and multiple international offices, the company supports retail clients worldwide in implementing SAP projects with a focus on sustainable and future-proof IT solutions. The website reflects a professional and content-rich digital presence, leveraging TYPO3 CMS and modern web technologies to deliver a good user experience and clear navigation. However, the website suffers from critical security shortcomings, notably the absence of a valid SSL certificate and lack of HTTPS support, which severely impacts the security posture and user trust. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the business credibility and content quality are high, but urgent improvements in security infrastructure are necessary to protect users and enhance trust.

A

Akris CH

akris.ch

40

Akris CH operates a professional luxury fashion e-commerce website targeting women in Switzerland and Liechtenstein. The site offers high-end designer clothing and handbags, positioning itself as a premium brand with a consistent and elegant online presence. The business leverages Shopify as its platform, integrating advanced search (Algolia), marketing tools (Cookiebot, Mailchimp), and customer engagement features (Wishlist King, Globo Form Builder). The website content is rich, well-structured, and professionally designed, providing a seamless user experience with clear navigation and mobile optimization. Technically, the site is built on a modern e-commerce stack with Shopify hosting behind Cloudflare CDN. It uses multiple third-party scripts for analytics, marketing, and customer interaction. However, a critical security issue is the absence of a valid SSL certificate, resulting in no HTTPS encryption and no enabled TLS protocols. This severely impacts the security posture and user trust, despite the presence of strong security headers and content security policies. Privacy compliance is well addressed with explicit privacy and cookie policies, GDPR consent mechanisms, and transparent data collection practices. Contact information is available primarily via contact forms and multiple regional email addresses, supporting customer service and boutique inquiries. Overall, while the business and technical maturity are strong, the lack of proper SSL/TLS configuration is a major risk that must be remediated urgently to protect customer data and maintain brand reputation.

F

Federico Solutions

federico.pro

28

Federico Solutions operates a professional website focused on design, prototyping, and manufacturing services, targeting businesses seeking custom solutions. The company presents a mature market presence with a domain registered since 2009 and consistent branding. Technically, the site is built on WordPress using the Divi theme and integrates SEO and analytics tools, but lacks HTTPS, which is a significant security gap. The security posture is weak due to the absence of SSL/TLS encryption and modern security headers, exposing users to potential risks. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though direct contact details are limited to a contact form. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

O

OC Oerlikon Management AG

oerlikon.com

40

OC Oerlikon Management AG is a global industrial technology leader specializing in surface technologies, advanced materials, and additive manufacturing solutions. The company serves key growth markets including automotive, aerospace, energy, tooling, and luxury sectors through a portfolio of subsidiaries and partner brands. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. However, the technical infrastructure shows critical security weaknesses, notably the absence of a valid SSL certificate and HTTPS support, which poses significant risks to user trust and data security. Privacy compliance is well addressed with a robust cookie consent mechanism and clear privacy policies. Overall, the business demonstrates high legitimacy and market positioning but requires urgent improvements in security posture to align with best practices.

Bühler Group is a well-established enterprise specializing in manufacturing and technology solutions primarily for the food processing and advanced materials industries. The company offers a broad portfolio of industrial solutions, including extrusion, milling, and process technologies, supported by global services such as maintenance, expert consulting, and training centers. Their website reflects a mature digital presence with consistent branding and comprehensive corporate governance information. Technically, the site is built on Adobe Experience Manager and hosted on AWS infrastructure with CloudFront CDN, leveraging modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. However, a critical security gap exists due to the absence of a valid SSL certificate and HTTPS support, severely impacting the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR consent mechanisms on forms. Overall, Bühler Group's website demonstrates strong business credibility and content quality but requires urgent improvements in SSL/TLS security to protect user data and enhance trust.

M

Microlife AG

microlife.ch

37

Microlife AG is a well-established Swiss company specializing in the development and production of medical diagnostic devices such as blood pressure monitors, thermometers, and respiratory therapy equipment. The company holds a strong market position as a world leader in healthcare technology, targeting both home users and healthcare institutions. Their website reflects a professional and consistent brand image with multilingual support and a comprehensive product portfolio. Technically, the website uses modern JavaScript and tracking tools but lacks a valid SSL certificate, which is a significant security concern. The absence of HTTPS undermines user trust and exposes data to interception risks. Privacy compliance is well addressed with a cookie consent mechanism and clear privacy policies. However, no explicit security or incident response policies are publicly available. Overall, the site is functional and informative but requires urgent security improvements to align with best practices and user expectations.

A

AURIGON Advisors AG

aurigon.ch

40

AURIGON Advisors AG is a specialized consulting firm focused exclusively on reinsurance and insurance sectors, serving clients primarily in Switzerland, the EU, USA, UK, and Latin America. Their key services include conflict resolution, audits, claims management, exit strategies, and strategic consulting. The company maintains a multilingual website with professional team profiles and contact information, indicating a small but internationally oriented business. Technically, the website is built on WordPress using the Enfold theme and includes multiple shortcodes and scripts, but lacks a valid SSL certificate, which is a critical security deficiency. The cookie consent mechanism is implemented, supporting GDPR compliance. Security posture is weak due to missing HTTPS and security headers, exposing the site to potential risks. Overall, the website is functional and professional in content but requires urgent security improvements to protect user data and enhance trust.