Switzerland security reports

A

atelier d'architecture stéphane klingele

aask.ch

42

The website represents a small architectural firm named 'atelier d'architecture stéphane klingele' based in Sion, Switzerland, serving the Valais region. The firm offers architectural services including new constructions, renovations, transformations, and consulting with a focus on environmental and energy respect. The website is built using Infomaniak Site Creator and employs modern web technologies such as jQuery, Bootstrap, and FontAwesome. The site is accessible, mobile-optimized, and provides clear contact information, but lacks comprehensive privacy and security policies. Security posture is moderate with no visible security headers or incident response details, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the site is functional but could improve in privacy compliance and security best practices.

E

Elsie Group

elsiegroup.com

50

Elsie Group is a specialized energy sector company providing turnkey technical assistance and services focused on high voltage (HV) and medium voltage (MV) switchgear, power stations, and platforms. Their expertise spans construction, commissioning, operation, supervision, testing, management, and training, with a strong emphasis on personnel secondment that incorporates social, legal, and tax considerations. The company positions itself as a customer-centered service provider with a commitment to health and safety, serving clients internationally with a network of reputable partners such as Siemens, Schneider Electric, and EDF. Technically, the website is built on WordPress with a mature technology stack including Revolution Slider and jQuery. The site is mobile-optimized, well-structured, and incorporates modern web practices such as cookie consent management and Google Analytics tracking. Performance is moderate, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent with the business claims, indicating legitimacy. Overall, Elsie Group’s digital presence reflects a professional and trustworthy energy services company with room for improvement in security best practices and transparency around incident response. The risk profile is low, with recommendations to enhance security headers and update platform components regularly.

I

IMI International Management Institute Switzerland Ltd.

imi-luzern.com

53

IMI International Management Institute Switzerland Ltd. is a well-established hospitality management school located in Switzerland, offering UK-accredited degrees validated by Manchester Metropolitan University. The institution targets prospective students seeking education and career opportunities in hospitality, business, and culinary arts. The website demonstrates a high level of professionalism with comprehensive content, clear navigation, and strong branding consistency. Technically, the site is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools, and is optimized for mobile devices with good accessibility and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and a dedicated security policy are absent. The domain uses privacy protection for WHOIS data, which is justified for this business type. Overall, the website is trustworthy, well-maintained, and effectively supports the institution's business goals.

P

Parallels International GmbH

2x.com

50

Parallels International GmbH operates a professional and comprehensive website offering virtualization and remote application solutions primarily for Mac users and enterprises. The company is positioned as a leading provider in the technology sector, offering a range of products including Parallels Desktop for Mac, Parallels RAS, and cloud-based services. The website demonstrates strong branding consistency, excellent content quality, and clear navigation targeting a broad audience including developers, businesses, and educational institutions. Technically, the site uses modern frameworks like Bootstrap and jQuery, integrates multiple marketing and analytics tools, and is optimized for mobile devices with good performance. Security posture is strong with HTTPS enforcement, CSRF protections, and cookie consent mechanisms, though explicit security policy pages and vulnerability disclosures are absent. Overall, the domain registration and business information align well, indicating a trustworthy and legitimate enterprise presence.

AFM Genève is a non-profit association established in 1977 in Geneva, Switzerland, dedicated to supporting single-parent families through legal assistance, coaching, social aid, and member activities. The organization is recognized as a public utility and collaborates with local government and foundations. The website is built on WordPress using the Divi theme and includes modern features such as a Revolution Slider and newsletter subscription via Infomaniak. The site is well-structured, mobile-optimized, and provides clear contact information, but lacks explicit privacy, cookie, and security policies. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and formal policies. Overall, the website presents a trustworthy and professional image suitable for its target audience.

S

Siegfried

siegfried.ch

53

Siegfried AG is a well-established contract development and manufacturing organization (CDMO) specializing in pharmaceutical ingredients and finished products. With a history spanning 150 years and a global footprint of 13 production sites, the company holds a strong market position in the healthcare manufacturing sector. Their services cover drug substances, drug products including various dosage forms, and advanced technologies, targeting pharmaceutical companies and healthcare stakeholders worldwide. The website reflects a professional and comprehensive digital presence, supporting investor relations, career opportunities, and sustainability initiatives. Technically, the website is built on WordPress with modern integrations such as HubSpot for marketing and analytics, Vimeo for video content, and CookieYes for cookie consent management. The site is mobile-optimized, fast-loading, and SEO-friendly, with structured data enhancing search visibility. Security-wise, the site enforces HTTPS and uses secure external scripts but lacks some advanced security headers and explicit security policies or incident response contacts. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The domain registration data aligns well with the company's identity and history, supporting legitimacy and trustworthiness. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

S

SICPA HOLDING SA

sicpa.com

58

SICPA HOLDING SA is a globally recognized leader specializing in security inks and authentication solutions primarily serving governments, central banks, and high-security printers. The company offers a comprehensive platform that integrates material and digital technologies to address challenges in currency protection, revenue mobilisation, brand protection, and identity verification. Their market position is strong, supported by a long history and ISO 27001 certification, reflecting a commitment to security and trust. Technically, the website is built on Drupal CMS with modern JavaScript libraries and includes robust privacy and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement, CAPTCHA on forms, and cookie consent, though explicit security headers could be enhanced. Overall, the site demonstrates high professionalism, good privacy compliance, and trustworthy business information consistent with WHOIS data.

S

Sonova AG

sonova.com

58

Sonova AG is a leading global provider of innovative hearing care solutions, including hearing instruments, audiological care, consumer hearing products, and cochlear implants. Founded in 1947 and headquartered in Switzerland, Sonova operates multiple core brands and serves customers worldwide. The website reflects a mature digital presence built on Drupal 10, with modern web technologies and a strong focus on user experience, accessibility, and mobile optimization. Security posture is solid with HTTPS enforcement and cookie consent managed via OneTrust, though some security headers could be improved. Privacy compliance is robust, with clear policies and GDPR adherence. Overall, the website projects high professionalism and trustworthiness, supporting Sonova's market leadership in healthcare technology.

Avolta AG operates in the transportation sector, providing travel retail services including loyalty programs, customs information, and customer support. The company targets travelers, investors, and media, positioning itself as a significant player in travel retail with a global customer service presence. The website is built on Drupal 10 and uses modern web technologies and analytics tools, hosted behind Incapsula WAF for security. However, the site content is currently blocked with a 403 Access Denied error, limiting full content visibility. Privacy and cookie policies are present and GDPR compliant, with detailed contact information segmented by department. Security posture is generally good with HTTPS and security headers, but lacks explicit security policy and incident response information.

A

Avolta AG

dufry.com

57

Avolta AG operates as a leading global travel retailer with a presence in over 70 countries and more than 5,100 outlets worldwide. The company focuses on uniting retail, convenience, and food & beverage services under one brand to enhance the traveler experience. Their business model includes physical retail locations, a loyalty program (Club Avolta), and digital services such as Reserve & Collect. The website reflects a mature digital infrastructure built on Drupal 10, integrating modern JavaScript libraries and compliance tools like OneTrust for privacy and cookie management. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site demonstrates high professionalism, good privacy compliance, and strong business credibility, positioning Avolta as a trustworthy enterprise in the travel retail sector.

S

SR Technics Switzerland Ltd.

srtechnics.com

52

SR Technics Switzerland Ltd. is a globally recognized Maintenance, Repair, and Overhaul (MRO) service provider specializing in aircraft, engines, and components. With over 500 customers worldwide and more than 90 years of operational experience, the company serves airlines, leasing companies, OEMs, and component traders with tailored aviation solutions. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service information. Technically, the site uses modern technologies including Umbraco CMS, Google Tag Manager, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement, CSRF protection, and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

Lonza Group AG is a globally recognized contract development and manufacturing organization (CDMO) serving the healthcare industry, with a rich history dating back to 1897 in Switzerland. The company is a pioneer and world leader in the CDMO sector, offering integrated services across biologics, small molecules, specialized modalities, and health ingredients. Their target audience includes pharmaceutical, biotech, and nutrition companies seeking end-to-end manufacturing solutions. The website reflects a mature digital infrastructure with modern technologies such as Bootstrap, jQuery, Brightcove video integration, and robust cookie consent mechanisms, indicating a strong commitment to user experience and regulatory compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be enhanced. Overall, the site demonstrates high professionalism, clear navigation, and comprehensive content relevant to their business model.

P

Parallels International GmbH

parallels.com

54

Parallels International GmbH operates a professional and comprehensive website offering virtualization and remote application solutions primarily for Mac users. The company is positioned as a market leader with over 7 million users worldwide, providing a range of products including Parallels Desktop, Parallels RAS, and cloud-based services. The website demonstrates strong digital maturity with modern technologies, responsive design, and extensive content tailored to various audiences including enterprises, developers, and educational sectors. Security posture is robust with HTTPS enforcement, secure forms, and privacy compliance evidenced by detailed policies and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and well-maintained online presence. Strategic recommendations include publishing explicit security policies and incident response contacts to further enhance trust and compliance.

E

ESPRIT St.Gallen

stgallenbusinessreview.com

28

St. Gallen Business Review is a student-run business magazine published by ESPRIT St.Gallen, affiliated with the University of St.Gallen. It provides independent journalism focused on business, entrepreneurship, finance, economics, politics, and sustainability. The website features a membership program (SGBR+) offering exclusive early access to content. Technically, the site is built on WordPress with modern plugins and libraries, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy or cookie policies. No direct contact emails or phone numbers are provided, but a contact form is available. The domain registration details align with the business claims, supporting legitimacy.

The website www.hixie.ch is a personal site primarily focused on sharing web-related materials, weblog entries, and indexes of other related personal sites. It serves as a hub for the site owner’s web content and personal projects, targeting web developers and technology enthusiasts. The site is small in scale, with basic content and minimal interactive features. Technically, the site uses simple HTML and CSS without any detected CMS or advanced frameworks. There is no evidence of modern analytics, advertising, or tracking technologies, indicating a low digital maturity level. Security posture is minimal with no HTTPS or security headers detected in the provided data, and no privacy or cookie policies are present. Overall, the site is accessible and functional but lacks professional security and compliance features, which limits its trustworthiness and business credibility.

K

Kanadevia Inova

hz-inova.com

41

Kanadevia Inova is a global cleantech company specializing in Waste to Energy (WtE) and renewable gas technologies. The company offers a comprehensive range of services including turnkey project development, engineering, construction, and service products. Positioned as a pioneering player in the cleantech sector, Kanadevia Inova targets clients and stakeholders interested in sustainable waste management and renewable energy solutions. The website reflects a mature digital presence with multilingual support and a strong emphasis on sustainability and innovation. Technically, the website is built on WordPress using modern plugins such as WPBakery Page Builder and Slider Revolution, supported by Google Tag Manager and CookieYes for analytics and privacy compliance. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility could be further enhanced. From a security perspective, the site enforces HTTPS, implements key security headers, and provides a robust cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, incident response contact details and vulnerability disclosure policies are absent, representing areas for improvement. Overall, Kanadevia Inova's website presents a professional, trustworthy, and compliant digital front that supports its business objectives effectively. Strategic recommendations include enhancing security transparency, improving accessibility, and formalizing terms of service to further strengthen user trust and compliance posture.

I

INFICON

inficon.com

54

INFICON is a globally recognized provider of advanced instrumentation, sensor technologies, and software solutions tailored for industrial vacuum processes, semiconductor fabrication, and gas leak detection. The company holds a strong market position with a broad portfolio serving diverse sectors including automotive, energy, security, and research. Their website reflects a mature digital presence with comprehensive product and market information, supported by modern web technologies and analytics tools implemented with user consent. Security posture is robust with HTTPS enforcement, security headers, and secure form handling, although explicit security policies and incident response details are not publicly disclosed. Overall, INFICON demonstrates a high level of professionalism, compliance, and technical sophistication, positioning them as a trustworthy and credible industrial technology provider.

O

Occlutech

occlutech.com

42

Occlutech is a specialized healthcare company founded in 2003 in Germany, now headquartered in Switzerland, focusing on minimally invasive cardiac devices for structural heart diseases including congenital defects, stroke prevention, and heart failure. The company maintains a strong market position as a leading supplier in this niche, targeting healthcare professionals, patients, and investors. Their business model revolves around design, manufacturing, and commercialization of cardiac implants with a broad product portfolio. The website reflects a medium-sized enterprise with consistent branding and good content quality.

B

BDO Schweiz

bdo.ch

68

BDO Schweiz is a leading auditing, fiduciary, tax consulting, and business advisory firm in Switzerland, operating with a large network of over 40 locations. The company offers comprehensive professional services targeting Swiss SMEs, larger enterprises, and private individuals. Their market position is strong, supported by a consistent brand presence and a broad portfolio of services including financial services and digital solutions. Technically, the website is built on modern frameworks such as React and Kentico CMS, with integrations for analytics and marketing tools like Google Tag Manager, Cookiebot, and Microsoft Application Insights. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS enforcement, security headers, and CSRF protections, although explicit public security policies and incident response contacts are not found. Privacy compliance is well addressed with GDPR-aligned privacy and cookie policies and a consent mechanism. Overall, the website reflects a professional, trustworthy, and mature digital presence suitable for a large enterprise in the finance sector.

P

Pineparks International LTD

pineparks.ch

62

Pineparks International LTD is a Swiss-based web agency specializing in tailored digital solutions including software development, app development, WordPress development, and UX design. The company positions itself as a business-oriented partner for companies seeking growth, supported by international presence with entities in London and Estonia.

E

enuvo GmbH

surveyhero.com

69

SurveyHero, operated by enuvo GmbH, is a mature and established online survey software provider founded in 2005 and based in Switzerland. The company offers a SaaS platform enabling users to create, distribute, and analyze surveys with a focus on ease of use, multilingual support, and GDPR compliance. With over 3 million users worldwide and endorsements from reputable platforms like Capterra and G2, SurveyHero holds a strong market position in the online survey industry. The website reflects a professional and user-friendly design, targeting individuals and organizations seeking reliable survey tools.

V

Virtually Live

virtuallylive.com

46

Virtually Live is a Swiss-based media and technology company specializing in creating immersive digital experiences for live events across multiple platforms. Their patented technology enables real-time CGI transposition of physical events into virtual environments, enhancing fan engagement through interactive and social experiences. The company also develops consumer-facing applications such as the Virtually Live Ghost Racing® mobile game, positioning itself as an innovator in the intersection of live media, gaming, and emerging metaverse technologies. Technically, the website is built on WordPress with a moderate tech stack including jQuery and Fancybox, delivering a responsive and multimedia-rich user experience. Security posture is adequate with HTTPS and anonymized Google Analytics, but lacks advanced security headers and published incident response policies. Privacy compliance is basic with privacy and cookie policies present but no explicit consent mechanisms. Overall, the site reflects a legitimate, small-sized technology company with consistent branding and moderate trust indicators.

L

LaPrairie

laprairiegroup.ch

63

LaPrairie is a premium luxury skincare brand operating under the Beiersdorf group, focusing on high-end beauty products and sustainability. The website reflects a strong brand presence with excellent content quality, clear navigation, and a professional design optimized for mobile devices. The technical infrastructure leverages Drupal CMS, modern JavaScript libraries for animations, and integrates Google Analytics and OneTrust for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit security policies are absent. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its luxury market position.

B

Bauwerk Group Schweiz AG

bauwerk-parkett.com

43

Bauwerk Group Schweiz AG operates a professional and comprehensive website focused on manufacturing and retailing high-quality parquet and wood flooring products. The company positions itself as a leading European parquet manufacturer with a strong Swiss heritage, offering a wide range of products, accessories, and digital tools to both end consumers and professionals. The website is well-structured, multilingual, and rich in content, emphasizing sustainability and certifications such as Cradle to Cradle GOLD. Technically, the site uses modern frameworks including Neos CMS and the Flow PHP framework, integrates Google reCAPTCHA, and employs analytics and marketing tools responsibly. Security posture is good with HTTPS enforced and standard best practices observed, though some security headers could be explicitly declared. Privacy compliance is strong with accessible policies and consent mechanisms. Overall, the website reflects a mature digital presence with high trustworthiness and professionalism.

K

Kantonsspital Graubünden

ksgr.ch

47

Kantonsspital Graubünden is a large, well-established healthcare institution serving the Southeast Switzerland region. The website reflects a professional medical center offering a wide range of medical and surgical services, with a strong focus on patient care and comfort. It also serves as a certified training center for medical professionals. The site is well-structured, multilingual, and provides comprehensive information for patients, visitors, and referring physicians. Technically, the site is built on Drupal CMS with modern web technologies, including Bootstrap and Matomo analytics, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and privacy compliance evident through GDPR-aligned policies and cookie consent mechanisms. However, explicit security policies and incident response contacts are not found, which could be improved. Overall, the site demonstrates high business credibility and trustworthiness with clear contact information and certifications.

Security assessment completed with an overall score of 0/100 (unknown risk). 3 critical issues require immediate attention. Total of 29 security findings identified across all modules.

P

Permapack AG

permapack.ch

26

Permapack AG is a Swiss family-owned manufacturing and trading company specializing in high-quality products such as labels, adhesive tapes, films, sealants, and garden articles. The company serves various sectors including food, cosmetics, industry, construction, and retail, offering both standard products and customized solutions. Their business model combines B2B sales with an online shop and extensive production services. The website reflects a medium-sized enterprise with a consistent brand presence and strong trust indicators such as awards and social media engagement. Technically, the site uses a custom e-commerce platform with modern JavaScript libraries and tracking tools, hosted by IP-Plus AG. However, a critical security gap exists due to the absence of a valid SSL/TLS certificate, exposing users to risks and limiting secure communications. Privacy compliance is well addressed with cookie consent mechanisms and a comprehensive privacy policy. Overall, the site is professional and trustworthy but requires urgent security improvements.

B

BROMsolutions AG (Career Experts in SAP®)

bromsolutions.ch

23

BROMsolutions AG is a specialized recruitment and consulting firm focusing on SAP professionals and companies in Switzerland and Germany. The company operates multiple offices and offers services including SAP job placement and recruitment consulting. Their website is professionally designed, targeting SAP job seekers and employers, with clear navigation and relevant content. The technical infrastructure is based on WordPress CMS with modern plugins and frameworks, but lacks a valid SSL certificate, which impacts security and trust. The site uses Matomo analytics, indicating a privacy-conscious approach. Security posture is weak due to missing HTTPS and modern TLS protocols, exposing the site to potential risks. Overall, the business appears legitimate and well-positioned in its niche, but should urgently address security gaps to improve trust and compliance.

T

Tecan Trading AG

tecan.com

40

Tecan Trading AG is a well-established Swiss company specializing in healthcare innovation, laboratory automation, diagnostics, and OEM partnering services. Their website reflects a strong market position with comprehensive product offerings in life sciences and diagnostics, supported by detailed investor relations and corporate policies. The digital infrastructure is built on HubSpot CMS, leveraging modern marketing and analytics tools such as Google Tag Manager and Microsoft Clarity, hosted behind Cloudflare for performance and security. However, a critical security gap exists due to an invalid or missing SSL certificate and lack of modern TLS protocol support, which significantly impacts the site's security posture. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, content-rich, and trustworthy but requires urgent remediation of SSL/TLS issues to ensure secure user interactions.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 8 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

Luxoft, a DXC Technology Company founded in 2000 and headquartered in Switzerland, is a global enterprise technology services provider specializing in software engineering and digital transformation. The company serves multiple industries including automotive, finance, telecommunications, energy, and retail, offering a broad portfolio of services such as cloud solutions, data analytics, machine learning, and legacy modernization. Luxoft positions itself as a trusted partner for enterprises seeking to modernize IT systems and achieve sustainable digital advantage. The website reflects a mature digital presence with comprehensive content, structured data, and clear navigation targeting enterprise clients worldwide. Technically, the site uses modern frameworks and integrates advanced marketing and analytics tools with consent management, indicating a high level of digital maturity. However, the security posture is weakened by an invalid SSL certificate and lack of TLS support, which poses significant risks to secure communications and user trust. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, Luxoft demonstrates strong business credibility and professionalism but should urgently remediate SSL/TLS issues to enhance security and trust.

F

F-Top Institute

ftop.ch

24

F-Top Institute is a specialized organization focused on optimizing human capital to improve financial performance through data-driven people management solutions. The company offers research-backed HR solutions, live online training academies, advisory briefings, and a community platform targeting HR professionals and line managers. The website is built on WordPress with WooCommerce and several plugins, indicating a mature digital infrastructure but lacks a valid SSL certificate, which is a significant security concern. The site includes comprehensive privacy and cookie policies, reflecting good privacy compliance practices. However, the absence of HTTPS and incomplete DNS configuration pose risks to trust and security. Strategic improvements in SSL deployment and DNS management are recommended to enhance security posture and business credibility.

Georg Fischer Ltd is a well-established Swiss enterprise specializing in manufacturing and providing flow solutions across industrial, infrastructure, and building sectors. The company operates through four main divisions offering piping systems, casting solutions, machining solutions, and building flow solutions. The website reflects a mature digital presence with comprehensive content targeting industrial clients, investors, and job seekers. Technically, the site leverages Adobe Experience Manager, integrates modern analytics and marketing tools, and provides a good user experience with mobile optimization and accessibility features. However, the security posture is weak due to the absence of a valid SSL certificate and lack of HTTPS enforcement, which is a critical issue that significantly impacts the overall security score. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Business credibility is high, supported by detailed investor relations and trust indicators. Overall, the website is professional and trustworthy but requires urgent security improvements to protect user data and maintain trust.

A

Angst+Pfister

angst-pfister.com

39

Angst+Pfister is a large Swiss-based engineering and manufacturing company specializing in custom materials design and engineering solutions. With over 300 engineers and a global presence across 24 locations, the company serves diverse industries including food & beverage, pharma, automotive, and energy. Their business model focuses on B2B partnerships delivering tailored solutions from design to production and distribution. The website reflects a mature digital presence with professional design, comprehensive content, and multilingual support. However, the absence of a valid SSL/TLS certificate is a critical security gap that undermines trust and data protection. Privacy policies and cookie consent mechanisms are in place, indicating GDPR compliance. The company maintains active social media channels and an online shop partner domain, supporting their market reach and customer engagement.

Security assessment incomplete. Successfully analyzed: emailSecurity, sslTls, dnsHealth, networkSecurity. Failed to analyze: securityHeaders, gdpr, nis2. 9 security issues were identified in the completed modules. The website may be inaccessible or protected by security measures. Please retry the scan or verify website accessibility.

C

Cannerald AG

cannerald.com

39

Cannerald AG is a Swiss-based medical cannabis producer specializing in pharmaceutical-grade cannabis products. The company operates a high-tech indoor vertical farming facility in Switzerland, targeting an international clientele with a focus on quality, safety, and sustainability. Their business model centers on B2B supply of medical cannabis with rigorous quality controls and upcoming GMP certification. Technically, the website is built on Webflow and uses modern frontend technologies, but lacks a valid SSL certificate, resulting in no HTTPS support which is a critical security gap. The site includes a cookie consent mechanism compliant with GDPR and provides contact via a form, but lacks explicit email or phone contact details. Social media presence is active on major platforms. Security posture is weak due to missing SSL/TLS, but no other major vulnerabilities are detected. Overall, the site is professional and content-rich but requires urgent security improvements to protect user data and trust.

Landis+Gyr is a global leader in smart metering and grid edge intelligence technologies, providing advanced energy management solutions to utilities and energy providers. The company offers a broad portfolio including smart meters, analytics, consumer engagement, and managed services, positioning itself as a key enabler of the modern digital energy grid. Their website reflects a mature enterprise with comprehensive content, strong branding, and active communication channels including news, blogs, and social media. Technically, the site is built on WordPress with a robust set of plugins and integrations for analytics, marketing, and multilingual support. However, the current lack of a valid SSL certificate and disabled TLS protocols represent significant security weaknesses that undermine user trust and data protection. Security headers are partially implemented, and cookie consent mechanisms comply with GDPR standards. Overall, the website demonstrates high professionalism and business credibility but requires urgent remediation of its SSL/TLS configuration to meet modern security expectations.

R

Regent AG

regent.ch

33

Regent AG is a Swiss-based lighting manufacturer with a heritage spanning over 100 years, specializing in high-quality, human-centric lighting solutions and bespoke designs. Their website reflects a mature business with a strong brand presence, targeting professional customers such as electrical installers and corporate clients. The company offers a broad portfolio including connected lighting and upcycling services, supported by digital tools like product finders and configurators. Technically, the website is built on TYPO3 CMS and employs modern web technologies and marketing tools, but suffers from a critical security weakness due to the absence of a valid SSL certificate and disabled TLS protocols, which undermines secure HTTPS access. Privacy compliance is well addressed with clear policies and consent mechanisms. Contact information and social media presence are comprehensive, enhancing business credibility.

C

Coaching-Yes You Can

coaching-yesyoucan.ch

30

Coaching-Yes You Can is a small Swiss-based health coaching service specializing in stress, mobbing, burnout prevention, and workplace health promotion. The company targets private individuals, youth, children, and business clients, offering personalized coaching and consulting services. The website is hosted by Hostpoint and built on the cm4all CMS platform, utilizing standard web technologies including jQuery and Prototype. While the site presents professional content with clear navigation and partner references, it lacks a valid SSL certificate, resulting in no HTTPS support, which is a critical security vulnerability. The cookie policy with consent is implemented, but no privacy policy or terms of service are found, indicating partial privacy compliance. Contact information is limited to a phone number with no email or physical address explicitly provided. The site uses Logaholic analytics with minimal user tracking. Overall, the website is functional and professional but requires urgent security improvements to protect user data and enhance trust.

H

HOSTSTAR - Multimedia Networks AG

selinatec.com

31

Hoststar is a webhosting and domain registration provider targeting German-speaking customers with affordable hosting packages and cloud services. The website content is currently a default hosting placeholder page indicating readiness for customer content upload. The technical infrastructure uses nginx web server and common web libraries like jQuery and WOW.js, hosted by Hoststar itself. However, the SSL certificate is invalid or missing, resulting in poor HTTPS security. The site lacks cookie consent mechanisms and vulnerability disclosures, indicating limited privacy and security maturity. Contact information and business details are clearly presented, supporting moderate business credibility. Overall, the website is functional but requires significant improvements in security and privacy compliance to meet modern standards.

K

Kempinski Hotels

kempinski.com

40

Kempinski Hotels is a well-established luxury hospitality brand offering five-star hotels and resorts worldwide. The website reflects a mature and professional digital presence with comprehensive content targeting luxury travelers and business clientele. The brand emphasizes direct booking, loyalty programs, and a rich portfolio of global destinations. Technically, the site uses modern frameworks such as Next.js and React, hosted behind Cloudflare, ensuring good performance and mobile optimization. However, a critical security gap exists due to the absence of SSL/TLS certificates, severely impacting the security posture. While security headers are properly configured, the lack of HTTPS undermines user trust and data protection. Privacy and legal policies are comprehensive and GDPR compliant, but no cookie consent mechanism was detected. Overall, the site is professional and credible but requires urgent security improvements to protect user data and maintain trust.

S

SIG Combibloc Group Ltd.

sig.biz

62

SIG Combibloc Group Ltd. is a leading enterprise in the manufacturing sector specializing in innovative and sustainable packaging solutions including carton, bag-in-box, and spouted pouch packaging. The company holds a strong market position as an industry leader with a comprehensive portfolio and a global reach. Their website reflects a mature digital presence with professional design, clear navigation, and a focus on sustainability and innovation. Technically, the site uses modern frameworks such as Next.js and React, hosted on Microsoft Azure, with good mobile optimization and SEO practices. However, the security posture is impacted by an invalid or missing SSL certificate, which is a critical issue that should be addressed promptly. Privacy compliance is well managed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professional but requires improvements in SSL configuration to enhance security.

dormakaba Holding is a globally recognized leader in smart and secure access solutions, providing a comprehensive range of products and services for secure access to buildings and rooms. The company operates internationally with a strong presence in multiple countries and serves diverse markets including security, technology, and manufacturing sectors. The website reflects a mature, well-established business with a clear focus on innovation, sustainability, and customer engagement. Technically, the site leverages modern frameworks such as Vue.js and Contentful CMS, ensuring a responsive and user-friendly experience across devices. Security measures are robust with multiple security headers and a comprehensive content security policy, although the SSL certificate is currently invalid, which is a critical issue that needs immediate attention. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Overall, dormakaba demonstrates a strong security posture and business credibility, supported by transparent investor relations and active communication channels.

S

Scigility Switzerland AG

scigility.com

23

Scigility Switzerland AG is a specialized technology company focused on delivering advanced data solutions including AI, machine learning, data strategy, and governance primarily to enterprise clients in finance, healthcare, manufacturing, and utilities sectors. The company has a mature market presence with a domain age of 12 years and a strong client portfolio including major Swiss corporations. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and integrates analytics tools such as Matomo and Google Analytics. However, the absence of a valid SSL certificate and HTTPS support is a critical security weakness that undermines user trust and data protection. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the business credibility and website professionalism are high, but the security posture requires urgent improvement.