Education security reports

M

McCall MacBain Foundation

fondationmccallmacbain.org

57

The McCall MacBain Foundation is a large, well-established philanthropic organization focused on investing in leadership development, scholarships, and community initiatives primarily in education, environment, and youth mental health sectors. The foundation operates mainly in Canada and Switzerland, with a strong emphasis on responsible and creative leadership. The website is professionally designed, multilingual (French and English), and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it is built on WordPress with modern plugins including Yoast SEO, WPML for multilingual support, and Complianz for GDPR compliance. Security posture is good with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism. No critical vulnerabilities or suspicious indicators were found. The foundation maintains active social media channels and integrates newsletter subscription via Mailchimp, supporting engagement and outreach. Overall, the website and domain registration details align well with the foundation’s public profile, indicating legitimacy and trustworthiness.

Open Education Day is an educational event organized by CH Open, focusing on open source technologies and open educational resources in the Swiss education sector. The website presents a professional and well-structured platform for event information, partner promotion, and community engagement. The technical infrastructure is based on WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is adequate with HTTPS and privacy-conscious analytics, though lacking explicit security policies and cookie consent mechanisms. Overall, the site is trustworthy and serves its niche audience effectively.

U

Université de Genève

unige.ch

69

Université de Genève is a prominent public university in Switzerland offering a wide range of academic programs and research activities. The website serves students, researchers, collaborators, and the public with information about faculties, courses, research, and services. The institution maintains a professional online presence with consistent branding and multilingual support. Technically, the website is built on the concrete5 CMS platform and utilizes modern JavaScript libraries such as jQuery, Isotope, and Nivo Slider. It employs Matomo for analytics and OneTrust for cookie consent management, indicating a moderate level of digital maturity and privacy awareness. The site is mobile optimized and provides a good user experience with clear navigation. From a security perspective, the website enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data confirms the domain's legitimacy and consistency with the university's identity. Overall, the website is trustworthy and professionally maintained, with room for improvement in security policy transparency and contact information availability.

O

ODEC - Schweizerischer Verband der dipl. HF

odec.ch

57

ODEC is a Swiss non-profit umbrella association representing graduates of Higher Vocational Schools (HF) across all disciplines. With over 14,000 members, it provides networking, career services, and promotes recognition of HF diplomas to enhance professional opportunities. The website is well-structured, professionally designed, and targets HF graduates and students in Switzerland. Technically, the site is built on Drupal 10, uses modern analytics tools like Google Analytics and Microsoft Clarity, and implements GDPR-compliant cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

E

edu-suisse

edu-suisse.ch

62

edu-suisse is a Swiss association dedicated to promoting educational diversity and strengthening the vocational education sector in Switzerland. It represents private educational institutions, associations, and professional organizations, facilitating dialogue with economic bodies and government. The website reflects a medium-sized organization with a clear focus on education advocacy and member support. Technically, the site is built on the Squarespace platform, leveraging standard web technologies and providing a moderate performance and good mobile experience. Security posture is solid with HTTPS and HSTS enabled, though some advanced security headers are missing. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

E

ENAIP Internationaler Bund GmbH

enaip-ib.ch

62

ENAIP Internationaler Bund GmbH operates the website www.enaip-ib.ch, providing adult education and vocational training primarily in Luzern and Zürich, Switzerland. The company offers a broad range of courses including construction trades, language courses, IT, and company-specific training. The website reflects a well-established educational institution with over 48 years of experience and eduQua certification, indicating quality standards in Swiss adult education. The target audience is adults seeking professional development and continuing education in the region. Technically, the website uses modern frameworks such as Bootstrap and integrates Google reCAPTCHA and Altcha CAPTCHA for security. The presence of Google Analytics and Google Adsense indicates moderate user tracking and advertising practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. Contact information is comprehensive and transparent, including phone, email, physical addresses, and social media channels. Overall, the website is professional, trustworthy, and well-aligned with its business objectives.

C

Centro di Formazione Professionale OCST

cfp-ocst.ch

65

Centro di Formazione Professionale OCST is a well-established vocational training center based in Switzerland, offering a wide range of professional courses including languages, construction, commerce, accounting, and IT. The organization targets adults and professionals seeking continuing education and qualification preparation. The website reflects a mature digital presence with a modern tech stack and good mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though dedicated security and incident response policies are not publicly detailed. The business demonstrates high credibility with clear contact information, certifications such as eduQua, and membership in Travail.Suisse Formation. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

K

kv zürich

kvz-moodle2.ch

68

The analyzed website is a Microsoft Azure Active Directory login portal for the kvzschulech.onmicrosoft.com tenant, serving the educational institution 'kv zürich' in Switzerland. It facilitates secure user authentication for access to services such as the kvz-moodle2.ch learning platform. The site leverages Microsoft's identity platform technologies, including OAuth2 and OpenID Connect, ensuring robust security and compliance with privacy standards. The presence of official Microsoft privacy and terms of service links further reinforces trustworthiness. From a technical perspective, the site is hosted on Microsoft Azure infrastructure, utilizing modern JavaScript frameworks and secure authentication flows. Performance and mobile optimization are good, with accessibility features implemented. Security headers and HTTPS enforcement are in place, contributing to a strong security posture. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital infrastructure aligned with enterprise-grade security practices. The lack of direct contact information on the login page is typical for such portals, with user support likely managed through the parent educational organization. The domain is a Microsoft-managed subdomain, consistent with the service provided, and no WHOIS data is available for the subdomain, which is expected. The risk assessment is low, with no critical issues identified. Strategic recommendations include maintaining up-to-date security libraries, conducting regular security audits, and monitoring for phishing attempts targeting the login portal to ensure continued protection of user credentials and data.

S

SDBB | CSFO

orientamento.ch

69

orientamento.ch is the official Swiss portal dedicated to professional, university, and career orientation. It provides comprehensive information on apprenticeship positions, professions, educational programs, and career planning tools primarily targeting students, apprentices, job seekers, educators, and parents within Switzerland. The portal is multilingual and maintained by SDBB | CSFO, indicating a government affiliation and high trustworthiness. Technically, the site uses JavaScript libraries such as jQuery and Zepto.js, along with Piwik (Matomo) for analytics, and features a secure login form with anti-CSRF tokens. The website is well-structured, mobile-optimized, and accessible, offering an excellent user experience. However, it lacks publicly linked privacy and cookie policies, which is a compliance gap. Security posture is strong with HTTPS and secure forms, but missing security headers and incident response information are areas for improvement. Overall, the site is professional, trustworthy, and serves as a key resource for educational and career guidance in Switzerland.

S

SDBB | CSFO

orientation.ch

69

orientation.ch is the official Swiss portal dedicated to providing comprehensive information on professional, university, and career orientation. It serves a broad audience including students, job seekers, educators, parents, and foreigners in Switzerland. The portal offers extensive resources such as apprenticeship place searches, profession databases, training offers, career planning tools, and multilingual support, positioning itself as a key educational resource in Switzerland. Technically, the website employs modern JavaScript libraries including Zepto.js and Piwik analytics for user tracking, with a custom CMS likely tailored for the Swiss educational sector. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. Security-wise, the site enforces HTTPS and uses secure login forms with anti-CSRF tokens, though explicit security headers and privacy policies are not evident in the provided content. Overall, the site is trustworthy and professionally maintained but would benefit from publishing clear privacy, cookie, and incident response policies to enhance compliance and user trust.

M

Movetia

movetia.ch

59

Movetia is a Swiss national agency dedicated to promoting exchange and mobility in the education sector. It operates on behalf of the Swiss federal and cantonal governments to finance and support educational exchange projects, including class exchanges, internships, and cooperation projects. The website targets educational institutions, youth, and professionals involved in education and mobility. It offers funding opportunities, advisory services, event information, and project management portals. The agency maintains a strong market position as a trusted government-related entity in Switzerland's education ecosystem. Technically, the website employs modern web technologies including ES modules, Vite build tools, Google Tag Manager for analytics, and Cookiebot for cookie consent management. The site is well-optimized for performance, mobile responsiveness, and accessibility, with structured data enhancing SEO. The content is professionally designed, multilingual, and rich in relevant information. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, explicit security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the legitimacy of the domain and its alignment with the agency's identity. Overall, Movetia's website demonstrates a high level of professionalism, security, and compliance suitable for a government-affiliated educational agency. Strategic improvements could include adding explicit security headers, publishing a security policy, and enhancing incident response transparency.

S

SVEB Schweizerischer Verband für Weiterbildung

eduqua.ch

53

SVEB Schweizerischer Verband für Weiterbildung operates alice.ch, a leading Swiss portal for adult education and quality certification, notably the eduQua label. The website serves as an authoritative source for information on eduQua certification, educational standards, and related services, targeting educational institutions, authorities, and learners in Switzerland. The organization holds a strong market position as a trusted non-profit association in the education sector. Technically, the site is built on WordPress with modern SEO and privacy compliance tools, including Yoast SEO and Complianz GDPR Cookie Consent. The site is mobile-optimized, accessible, and performs moderately well. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and a formal security policy could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR, providing clear contact information and certifications. No critical vulnerabilities or suspicious content were detected.

T

Travail.Suisse Formation

ts-formation.ch

54

Travail.Suisse Formation is a Swiss non-profit organization focused on improving access to public continuing education for all adults, especially targeting people with disabilities and low qualifications. It operates under a government performance agreement with the Swiss State Secretariat for Education, Research and Innovation (SBFI). The website is professionally designed using Drupal 10, with good mobile optimization and accessibility features. It provides comprehensive information about its projects, partners, and news related to inclusive education. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent registration. Overall, the site is trustworthy, compliant with privacy regulations, and serves as a credible resource in the Swiss education sector.

W

WIGL

wigl.ch

60

WIGL operates as a specialized digital learning platform focused on personalized education and professional development, primarily targeting the hospitality and gastronomy sectors in Switzerland. The platform supports lifelong learning through interactive tools such as digital content, e-portfolios, quizzes, and instructional videos. The company positions itself as an innovative player in the education technology space, leveraging modern web technologies and a user-friendly interface to enhance learning experiences. Technically, the website is built on WordPress with Elementor and Yoast SEO, incorporating modern JavaScript libraries like Lottie and Swiper for animations and interactive elements. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, explicit security headers are not detected, and no formal security or incident response policies are published. Cookie consent is managed via CookieYes, indicating GDPR awareness. No vulnerability disclosure or security.txt files are present, suggesting an area for improvement. Overall, the website is professional, trustworthy, and well-aligned with its business goals. The domain registration details support legitimacy, and the site maintains a strong presence with testimonials and social media integration. Strategic recommendations include enhancing security headers, publishing security policies, and implementing a vulnerability disclosure mechanism to strengthen trust and compliance.

S

SHL Schweizerische Hotelfachschule Luzern

shl.ch

54

SHL Schweizerische Hotelfachschule Luzern is a well-established Swiss educational institution specializing in practical and academic hospitality management training since 1909. The institution offers a range of degree programmes, training, consulting services, and international educational projects, targeting students and professionals in the hospitality and gastronomy sectors. The website reflects a strong market position with multiple accreditations and memberships, reinforcing its credibility and reputation in the education sector. Technically, the website employs modern web technologies including Pimcore CMS, UKit framework, and Google Tag Manager for analytics and marketing. The site is well-optimized for mobile devices, accessible, and performs moderately well. Security best practices such as HTTPS enforcement and cookie consent mechanisms are implemented, although a dedicated security policy and incident response information are not publicly available. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent banner aligned with GDPR requirements. The website maintains high professionalism and trustworthiness, supported by clear contact information and social media presence. Overall, SHL's digital presence is mature and secure, supporting its business objectives effectively. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and trust further.

U

Università della Svizzera italiana

innosuisse-training-ticino.ch

65

The website innosuisse-training-ticino.ch represents the Innosuisse Entrepreneurship Training program offered in the Ticino region of Switzerland. It is organized by the Università della Svizzera italiana (USI) on behalf of Innosuisse, the Swiss innovation agency. The program offers entrepreneurship training modules aimed at startups and innovators, coordinated by the USI Startup Centre in collaboration with SUPSI. The site reflects a regional educational initiative with strong institutional backing and clear target audience focus. Technically, the website is built on Drupal 10 CMS, leveraging modern web technologies including jQuery, Google Tag Manager, Microsoft Clarity, and Usercentrics for cookie consent management. The site is mobile optimized with good SEO and accessibility basics, though some advanced accessibility features could be improved. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks published security policies, incident response contacts, or vulnerability disclosure information. No security headers were detected in the provided data, suggesting room for improvement in hardening. No vulnerabilities or exposed sensitive data were found. Overall, the security posture is adequate but could be enhanced with formal policies and additional technical controls. The domain registration data aligns well with the website's educational and governmental affiliations, indicating high legitimacy and trustworthiness. Contact information is clearly provided, and social media presence is consistent with official university channels. No adult or questionable content is present, making the site safe for general audiences. Strategic recommendations include publishing security and incident response policies, adding security headers, and maintaining regular security audits to improve trust and compliance.

U

Università della Svizzera italiana

usi.ch

73

Università della Svizzera italiana (USI) is a Swiss public university offering a broad range of academic programs including Bachelor, Master, Doctorate, and lifelong learning courses. It is internationally recognized and positioned among the top 250 universities globally. The website serves students, academic staff, alumni, and corporate partners, providing comprehensive information about academic offerings, research, innovation, and events. The university maintains a strong digital presence with active social media channels and regularly updated news and events sections. Technically, the website is built on Drupal CMS and employs modern web technologies including Google Tag Manager, Usercentrics for consent management, and Bing tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy and cookie policies are clearly implemented with consent mechanisms, reflecting good compliance with GDPR. From a security perspective, the site uses HTTPS with excellent SSL configuration and includes consent management for cookies. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not visibly implemented, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected. Overall, USI's website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for an academic institution. Strategic recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism to further strengthen security posture.

H

Hochschule Luzern

hslu.ch

67

Hochschule Luzern is a prominent higher education institution in Switzerland offering practical Bachelor and Master degree programs, extensive continuing education, and innovative research. It serves students, professionals, and businesses with a strong focus on applied knowledge and career development. The institution is well-positioned in the Central Switzerland region as a large employer and educational provider. Technically, the website leverages modern web technologies including ASP.NET, jQuery, and a consent management platform, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and consent-based tracking, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

C

Controller Akademie AG

controller-akademie.ch

49

Controller Akademie AG is a leading Swiss educational institution specializing in continuing education for controlling, accounting, and management professionals. Founded by reputable organizations Kaufmännischer Verband Zürich and SwissAccounting, it offers a broad range of courses including preparation for federal diplomas, CAS programs, and seminars focused on digitalization and practical finance skills. The website reflects a strong market position with comprehensive, professionally presented content targeting finance professionals seeking career advancement. Technically, the site is built on WordPress with modern libraries and is well-optimized for mobile and SEO, though some improvements in security headers and cookie consent are recommended. Security posture is solid with HTTPS and obfuscated emails, but lacks explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and well-aligned with its business goals.

K

KV Business School Zürich

kv-business-school.ch

62

KV Business School Zürich is a professional educational institution specializing in continuing education and business training programs. The website targets professionals and students seeking to enhance their business skills. The institution appears to have a solid regional presence in Zurich, Switzerland, with a medium-sized operation. The website is built on Drupal 10, leveraging modern web technologies and third-party services such as Cookiebot for cookie consent, Google Tag Manager, Hotjar, and LogRocket for analytics and user experience monitoring. The design is professional and mobile-optimized, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies are missing. Privacy compliance is partial, with no visible privacy policy or terms of service pages, which should be addressed to improve compliance and user trust. Overall, the website is trustworthy and professional but would benefit from enhanced transparency and security documentation.

K

KV Zürich

kvz-schule.ch

61

KV Zürich is a Swiss educational institution specializing in commercial vocational training and professional maturity programs. The website clearly presents its educational offerings targeting youth and adults, including Kaufleute EFZ, Berufsmaturität BM2, and additional courses. The institution maintains a solid market position within the Zurich region, supported by a consistent brand presence and active social media engagement. Technically, the site is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, indicating a mature digital infrastructure. Security-wise, the site enforces HTTPS and integrates secure login mechanisms, though it lacks visible security policies and cookie consent mechanisms, which are areas for improvement. Overall, the website is professional, trustworthy, and well-structured, serving its educational mission effectively.

Buchknacker is an online library platform operated by the SBS Schweizerische Bibliothek für Blinde, Seh- und Lesebehinderte, targeting children and youth with dyslexia, AD(H)S, and other reading impairments. It offers free access to audiobooks, e-books, and text-audio books, focusing on accessibility and educational support. The platform is positioned as a niche service within the education and non-profit sectors in Switzerland, providing specialized content and services for its audience. Technically, the website employs a moderate technology stack including Dojo Toolkit, jQuery, and Google Tag Manager, running on the Iguana CMS platform. The site is moderately optimized for performance and mobile use, with good accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts. The absence of a cookie consent mechanism despite using tracking scripts indicates partial privacy compliance. Overall, the security posture is adequate but could be improved with better transparency and controls. The website is trustworthy and professional, with consistent branding and clear business information. No adult or unsafe content is present, making it safe for its intended audience. The domain registration aligns well with the organization, supporting legitimacy. Strategic improvements in privacy compliance and security transparency would enhance the platform's trust and compliance standing.

A

Aimigo

aimigo.coach

66

Aimigo is an AI-powered language learning platform offering personalized coaching and conversation practice to learners worldwide. The company leverages adaptive learning technologies and large language models to tailor content to individual needs. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools. Security posture is good with HTTPS and secure forms, though explicit security headers are missing. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. WHOIS data is unavailable due to privacy protection, which is justified for this business type. Overall, Aimigo presents a credible and mature digital presence in the education technology sector.

Z

Zürcher Arbeitsgemeinschaft Lehrpersonenweiterbildung

zal.ch

52

ZAL (Zürcher Arbeitsgemeinschaft Lehrpersonenweiterbildung) is a Swiss educational organization focused on providing continuing education and professional development courses for teachers, school assistants, school leadership, and childcare staff in the Canton of Zürich. The website offers a broad range of services including in-person and online courses, seminars, coaching, and administrative support for school-related training. The organization positions itself as a regional leader in teacher training with a strong emphasis on practical, affordable, and accessible learning opportunities. Technically, the website is built on WordPress with a modern tech stack including React, Backbone.js, and jQuery. It integrates several plugins for SEO (Yoast), consent management (Ownbit Consent Manager), social media feeds (Instagram via Spotlight), and email marketing (Mailchimp). The site is mobile-optimized, SEO-friendly, and employs HTTPS with strong security headers, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent management, and spam protection via Google reCAPTCHA. However, explicit security policies and incident response information are not published, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, ZAL's website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its target audience with clear contact information, comprehensive content, and transparent privacy practices. The domain registration data aligns well with the business claims, supporting its legitimacy and credibility.

Z

ZHAW Zürcher Hochschule für Angewandte Wissenschaften

zhaw.ch

68

ZHAW Zürcher Hochschule für Angewandte Wissenschaften is a leading Swiss university of applied sciences offering education, research, continuing education, and services. The institution is well-established with a strong market position in Switzerland's education sector, providing bachelor and master programs, research projects, and professional development courses. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, responsive design, and comprehensive navigation tailored to students, researchers, and partners. Security posture is strong with HTTPS, security headers, and consent management implemented, though explicit security policies and incident response information are not publicly detailed. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the institution's mission and audience.

S

Schweizerischer Verband für Weiterbildung SVEB

formazionecontinua.swiss

47

formazionecontinua.swiss is a Swiss-based educational platform focused on providing a comprehensive search engine for continuing education courses across various sectors including management, economics, IT, coaching, languages, health, and culture. Supported by the Schweizerischer Verband für Weiterbildung SVEB, it aggregates offerings from approximately 230 Swiss course providers, targeting adult learners and professionals seeking further education. The platform emphasizes ease of use with advanced filtering options and regional selections, positioning itself as a key national resource in the Swiss continuing education market. Technically, the website employs a modern technology stack including jQuery, Google Tag Manager, and a proprietary CMS (InnoWAYtor by 3way.ch). The site is mobile-optimized, accessible, and uses HTTPS with good performance metrics. However, there is room for improvement in security headers and explicit incident response disclosures. Advertising and analytics are managed primarily through Google services, with basic privacy compliance mechanisms such as cookie consent banners in place. From a security perspective, the site demonstrates a solid baseline with HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The lack of detailed security policies and incident response information suggests an opportunity to enhance trust and compliance further. WHOIS data is privacy protected, which is typical for Swiss domains, and the domain appears legitimate and well-maintained. Overall, formazionecontinua.swiss presents a trustworthy, professional, and functional platform with good business credibility and technical implementation. Strategic improvements in security headers, transparency, and vulnerability disclosure would further strengthen its security posture and compliance standing.

S

Schweizerischer Verband für Weiterbildung SVEB

formationcontinue.swiss

49

formationcontinue.swiss is a Swiss-based online platform aggregating continuing education courses from approximately 230 providers across Switzerland. Powered by the Schweizerischer Verband für Weiterbildung (SVEB) and the Fédération suisse pour la formation continue (FSEA), it offers users a comprehensive searchable database of courses in management, economics, IT, coaching, languages, health, and culture. The platform targets individuals seeking professional development or leisure learning opportunities within Switzerland. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, and the YAML CSS framework, with a CMS named InnoWAYtor by 3way.ch. The site is mobile-optimized, accessible, and uses HTTPS with cookie consent mechanisms, though it lacks some advanced security headers and explicit security policies. Security posture is solid but could be improved with additional headers and documented incident response processes. WHOIS data is privacy protected, typical for Swiss .swiss domains, and the domain appears legitimate and consistent with the business purpose. Overall, the platform is professional, trustworthy, and well-positioned in the Swiss continuing education market.

C

CSFO

csfo.ch

48

CSFO is a Swiss public institution agency specializing in vocational training and professional, university, and career orientation services. It operates under the Swiss Conference of Cantonal Ministers of Education (CDIP) and is supported by the Swiss Confederation. The website provides comprehensive information and services targeted at education specialists and partners across Swiss cantons. The agency offers coordination of qualification procedures, information media, online platforms, and continuing education programs. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and is well-optimized for mobile and accessibility. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and well-aligned with its public service mission.

S

SDBB (Schweizerisches Dienstleistungszentrum Berufsbildung)

panorama.ch

64

Panorama.ch is an official Swiss vocational education news platform operated by SDBB with support from cantonal and federal authorities. It provides comprehensive news, updates, and resources related to vocational training, higher education, labor market developments, and career counseling in Switzerland. The platform targets professionals, educators, students, and policymakers involved in the Swiss education system. The website is well-branded, consistent, and trusted due to its government backing and professional content. Technically, the site uses a proprietary CMS (PC3 by The Toolpark Corporation AG) with modern JavaScript libraries such as jQuery and GSAP. It employs Matomo for analytics, indicating a privacy-conscious approach. The site is mobile-optimized and performs moderately well, though some accessibility features could be enhanced. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit incident response information. Overall, the site is secure, professional, and compliant with privacy regulations, though it would benefit from implementing a cookie consent mechanism and publishing security policies. The domain registration aligns well with the website's claims, reinforcing its legitimacy. No adult or questionable content is present, making it safe for general audiences.

Berufsbildung.ch is the official Swiss portal dedicated to vocational education, providing comprehensive information and practical tools for various stakeholders including vocational trainers, apprentices, and educational institutions. Supported by the Swiss cantons and federal authorities, it holds a strong market position as a trusted resource in the education sector. The website offers key services such as downloadable documents, quality assessment tools, and guidance for vocational trainers, enhancing the vocational training ecosystem in Switzerland. Technically, the site leverages modern web technologies including React and Next.js, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement and no visible vulnerabilities, though some security headers could be explicitly documented. Privacy compliance is good with a clear privacy policy, though cookie consent mechanisms could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and alignment with its official educational mission.

S

SDBB | CSFO

berufsberatung.ch

69

The website www.berufsberatung.ch serves as the official Swiss information portal for career, study, and professional guidance. It provides comprehensive resources including job and apprenticeship searches, educational pathways, and career planning tools targeted at students, professionals, educators, and foreigners in Switzerland. The portal is well-positioned as a trusted national resource with multilingual support and extensive content coverage. Technically, the site employs modern JavaScript libraries and analytics tools, with a custom CMS backend. The site is mobile-optimized and accessible, offering a professional user experience. Security-wise, HTTPS is enforced and forms use anti-forgery tokens, but additional security headers and explicit privacy disclosures are recommended. Overall, the site demonstrates a strong business credibility and technical maturity with room for enhanced privacy compliance and security transparency.

U

Universität Bern

unibe.ch

68

Universität Bern is a well-established public university in Switzerland, founded in 1834, offering a broad range of academic programs and research opportunities. The website serves as a comprehensive portal for students, researchers, and staff, providing detailed information on studies, research, innovation, and lifelong learning. The institution holds a strong market position as a leading Swiss university with extensive academic and organizational resources. Technically, the website is built on the ZMS CMS platform, employs modern web standards, and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, includes essential security headers, and uses etracker for analytics with cookie consent, though explicit security policies and incident response information are not prominently published. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting the university's credibility and commitment to privacy.

E

Entrepreneurship Training

entrepreneurship-training.ch

45

Entrepreneurship Training is a consortium-led educational platform commissioned by Innosuisse, providing free entrepreneurship training modules (Module 1, 2, and 2+) targeted at aspiring entrepreneurs in the central region of Switzerland. The website is professionally designed using WordPress with modern plugins and themes, offering a good user experience and clear navigation. The technical infrastructure includes Google reCAPTCHA for form security and a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced, though some security headers could be improved. Contact information is transparent and linked to reputable academic institutions, enhancing trust. Overall, the website is a credible and well-maintained resource for entrepreneurship education.

L

LearnUpon

learnupon.com

70

LearnUpon is a medium-sized company founded in 2012 specializing in providing a powerful Learning Management System (LMS) platform designed to deliver engaging learning experiences that enhance performance, retention, and business growth. The company targets businesses and organizations seeking online training solutions, positioning itself as an established player in the education technology sector. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress and leverages modern tools such as Google Tag Manager and OneTrust for consent management, indicating a mature digital infrastructure. The site is well-optimized for SEO, mobile responsiveness, and accessibility, with fast performance and comprehensive metadata including structured data for enhanced search visibility. From a security perspective, the site enforces HTTPS, implements key security headers, and uses consent mechanisms for cookies, reflecting good security hygiene. However, there is no explicit security policy or incident response information publicly available, which could be improved to enhance transparency and trust. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional presentation and contact information. Overall, LearnUpon presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure policy to further strengthen security posture and compliance.

INTERPRET is a Swiss non-profit organization specializing in intercultural interpreting and mediation services. It provides certification, training, and organizes annual conferences to support communication in multilingual and intercultural contexts. The website is professionally designed, multilingual, and targets professionals and institutions requiring interpreting services and qualifications. Technically, the site uses a proprietary CMS (fuman), modern JavaScript, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and a cookie consent mechanism. Overall, the site is trustworthy and well-maintained, though improvements in privacy compliance and security policies are recommended.

P

PH Zürich

phzh.ch

67

PH Zürich is a well-established educational institution in Switzerland focused on teacher education, continuing education, research, and educational services. The website reflects a professional and comprehensive digital presence targeting students, educators, and researchers. The institution maintains a strong market position within the Swiss education sector, supported by accreditations and a broad range of educational offerings. Technically, the website employs modern technologies including Blazor, Matomo analytics, and Monsido for accessibility and heatmaps, hosted on a secure HTTPS platform with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements can be made in cookie consent and security policy transparency. Overall, the website is trustworthy, professional, and compliant with GDPR, though it lacks explicit cookie consent mechanisms and published security policies. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing incident response information to further strengthen compliance and trust.

S

Schweizerischer Verband für Weiterbildung SVEB

weiterbildung.swiss

48

weiterbildung.swiss is a Swiss online course portal operated in association with the Schweizerischer Verband für Weiterbildung SVEB, providing a comprehensive database of continuing education courses across Switzerland. The platform targets adult learners and professionals seeking courses in various fields such as management, IT, languages, and health. It aggregates offerings from approximately 230 course providers, facilitating course search and comparison with filters for region, price, and certifications. Technically, the website uses a custom CMS (InnoWAYtor by 3way.ch) with a modern tech stack including jQuery, Google Tag Manager, and responsive design frameworks, delivering a good user experience with mobile optimization and accessibility considerations. Security posture is moderate with HTTPS implied but lacking explicit security headers; cookie consent and privacy policies are implemented aligning with GDPR requirements. WHOIS data is privacy protected as per Swiss Registry policies, consistent with the domain's legitimate educational purpose. Overall, the site demonstrates a professional and trustworthy presence in the Swiss education sector.

V

Verein ARC, Bildungsinstitut für Arbeitnehmende

formation-arc.ch

63

Verein ARC is a Swiss non-profit educational institute focused on providing continuing education and training for employees, particularly those affiliated with labor unions such as Travail.Suisse, Syna, transfair, SCIV, and swissPersona. The organization operates under the umbrella of Travail.Suisse and offers courses aimed at enhancing skills in customer handling, member engagement, and organizational effectiveness. The website reflects a professional and consistent brand identity with clear messaging targeted at employees and union members in Switzerland. Technically, the website is built on Drupal 10 with Bootstrap and FontAwesome, ensuring a modern and responsive user experience. The site is well-optimized for mobile devices and accessibility, with good SEO practices and social media integration. Performance is moderate, with no significant technical debt or errors observed. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and a published incident response or vulnerability disclosure policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's organizational claims, indicating legitimacy and transparency. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

F

fh-ch

fh-ch.ch

49

fh-ch is a Swiss non-profit association representing educators and researchers at Swiss universities of applied sciences. It acts as a national umbrella organization advocating for the rights, working conditions, and educational quality for its members. The website is professionally designed using WordPress, with multilingual support and standard web technologies. While the site is accessible and well-structured, it lacks explicit privacy, cookie, and security policies, which are important for compliance and trust. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosures. Overall, the organization appears legitimate and trustworthy with a clear mission and target audience.

T

Travail.Suisse

swype.swiss

46

Swype is a Swiss educational project operated by Travail.Suisse and its member associations, offering vocational experience and language courses abroad, primarily targeting young professionals. The website is built on Drupal 10 and hosted with Cloudflare DNS services, featuring a clean, professional design with good mobile optimization and accessibility. Security posture is adequate with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. Privacy compliance is strong with a cookie consent banner and a linked privacy policy hosted on the parent organization's site. No direct contact information or security policies are published on the main site, which could be improved. Overall, the site is trustworthy, well-branded, and serves a niche educational market in Switzerland.

F

France Éducation International

lefilplurilingue.org

55

Le fil plurilingue is an educational platform operated under the auspices of France Éducation International, providing resources and support for bilingual French education worldwide. The website targets educators, coordinators, and directors involved in bilingual francophone sections, offering a variety of teaching materials, methodological guidance, and country-specific information. The platform positions itself as a niche resource provider within the education sector, leveraging its affiliation with a reputable French educational institution. Technically, the website is built on Drupal 10, utilizing modern web technologies including jQuery and Google Fonts. It employs Matomo for analytics, indicating a preference for privacy-conscious tracking. The site demonstrates good mobile optimization and a professional design, though accessibility features are basic and SEO optimization is moderate. Hosting details are not explicitly disclosed. From a security perspective, the domain is registered consistently with no privacy protection, and the registrar status clientTransferProhibited adds a layer of domain security. However, the absence of DNSSEC and security headers, along with missing explicit privacy and cookie policies, indicates room for improvement in security posture and compliance. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Overall, the website presents a trustworthy and professional educational resource with moderate technical maturity and some compliance gaps. Strategic improvements in privacy policy publication, cookie consent mechanisms, and security header implementation would enhance its security and compliance standing.

L

Label Qualité Français Langue Etrangère

qualitefle.fr

61

The website www.qualitefle.fr represents the official Label Qualité Français Langue Etrangère, a state-backed certification for French language education centers in France. It is supported by multiple French government ministries and aims to promote quality assurance in French language teaching. The site offers comprehensive information about the label, certified centers, and resources for learners and professionals. Technically, the site is built on Drupal 11, uses Matomo for analytics, and integrates Facebook social media. It is well-structured, multilingual, and GDPR compliant with a cookie consent mechanism. Security posture is strong with HTTPS and security headers, though no explicit security policy or incident response contacts are published. WHOIS data is not publicly available, which is typical for .fr domains, but the site’s official nature and government affiliation support its legitimacy. Overall, the site is professional, trustworthy, and serves an essential role in the French language education sector.

C

Cned

cned.fr

59

Cned is a prominent public operator specializing in distance education and professional training in France. The website serves a broad audience including students, parents, employees, public servants, and job seekers, offering a wide range of educational programs from primary school to professional certifications. The platform is well-structured, professionally designed, and optimized for mobile use, reflecting a mature digital presence. Technically, the site is built on Drupal 10 and integrates modern marketing and analytics tools such as Google Tag Manager, Algolia, and Abtasty. It employs secure HTTPS connections and implements cookie consent mechanisms, demonstrating compliance with privacy regulations. The presence of Qualiopi certification and government logos further reinforces its credibility. Security posture is strong with HTTPS and secure form handling, though explicit security headers could be more visible. The absence of WHOIS data is typical for .fr domains managed by AFNIC and does not detract from the site's legitimacy given its public affiliation. Overall, the site presents a trustworthy, professional, and user-friendly platform for distance learning.

A

Aimigo

gymglish.com

66

Gymglish, part of Aimigo, is an established online language learning platform founded in 2004, offering AI-powered adaptive courses in multiple languages. The company targets a broad audience from beginners to proficient learners, including private individuals, educational institutions, and businesses. Their market position is strong, supported by over 8 million users worldwide and recognition by Time magazine as a top EdTech leader in 2024. The platform emphasizes short, engaging daily lessons infused with humor and cultural insights, accessible via web and mobile apps. Technically, the website is modern, fast, and mobile-optimized, leveraging technologies like Google Tag Manager and Plausible Analytics, with a CDN provider Fastly ensuring performance. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and a public security policy are absent. The lack of WHOIS domain registration data is a concern but does not outweigh the strong business and technical indicators of legitimacy. Overall, Gymglish presents a professional, trustworthy, and user-friendly online education service.

A

Aimigo

frantastique.com

67

Gymglish is an established online language learning platform founded in 2004, offering AI-powered adaptive courses in multiple languages including French, English, Spanish, German, and Italian. The company targets learners from beginners to advanced levels with engaging, culturally rich content delivered in short daily episodes. The platform serves over 8 million users worldwide, including private individuals, educational institutions, and businesses, positioning itself as a leader in the EdTech sector with recognition from Time magazine in 2024. Technically, the website uses modern web technologies, is mobile-optimized, and leverages a CDN for fast performance. Privacy and cookie policies are comprehensive and GDPR-compliant, with a clear consent mechanism. However, the absence of WHOIS data for the domain www.gymglish.com raises concerns about domain transparency and trustworthiness. No direct company contact emails or phone numbers are found on the site, which could impact user trust and support accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but incident response and security policy information are not published. Overall, the website is professional, secure, and user-friendly, but domain registration opacity and limited contact info slightly reduce business credibility.

U

Universités de Francophonia | Apprendre de tous, savoir ensemble

universitesdefrancophonia.com

46

Francophonia.com is an educational platform focused on the Francophone academic community, promoting collaborative learning and university networking. The website is built on WordPress using the Divi theme and integrates HubSpot for marketing and analytics. The technical infrastructure is modern but shows moderate performance and basic SEO and accessibility features. Security posture is basic with HTTPS enabled but lacks advanced security headers and visible security policies. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. No privacy or cookie policies were detected, indicating potential compliance gaps. Overall, the website serves its educational purpose well but requires improvements in security, privacy compliance, and domain registration transparency.

W

Wirtschaftsschule KV Winterthur

wskvw.ch

47

Wirtschaftsschule KV Winterthur (WSKVW) is a leading vocational and continuing education institution in the Winterthur region of Switzerland, specializing in business and commerce education. The website clearly presents its educational offerings including basic vocational training (Grundbildung), continuing education (Weiterbildung), and vocational baccalaureate programs. It targets students and professionals seeking business-related qualifications and career advancement. The institution holds recognized certifications such as eduQua and SBFI, reinforcing its market position and trustworthiness. Technically, the website is built on WordPress 6.7 with WooCommerce integration and uses modern plugins like WPBakery Page Builder and Slider Revolution. It employs standard web analytics tools including Google Analytics and Facebook Pixel, and implements cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features could be improved. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data confirms the domain's legitimacy and consistency with the institution's Swiss location and educational purpose. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable digital presence for the educational institution. Strategic improvements in security headers and accessibility would further enhance its posture.

F

Fondation Esprit Francophonie

evalang.ch

58

Evalang.ch is a website dedicated to providing information about the Evalang language proficiency test, operated under the Fondation Esprit Francophonie. The site primarily serves individual candidates and educational institutions interested in language testing services in the French-speaking region of Switzerland. The business model focuses on offering test ordering and general information, with partnerships including France Education International and the Fondation Esprit Francophonie. The website content is minimal and directs users to a new primary site for detailed information, indicating a transition or migration of services. Technically, the website is built on TYPO3 CMS with the Bootstrap Package framework, incorporating Google Analytics with IP anonymization and Google reCAPTCHA for bot protection. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. No forms or direct contact information are present on the homepage, limiting direct user engagement. From a security perspective, the site uses HTTPS and implements cookie consent with opt-out for analytics, but lacks visible security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The domain uses privacy protection for WHOIS data, which is justified given the foundation's nature. Overall, the security posture is moderate but could be improved with better header implementation and transparency. The overall risk assessment indicates a low risk environment with no critical issues detected. Strategic recommendations include enhancing security headers, publishing clear security and incident response policies, improving accessibility and SEO, and providing clearer contact information to increase trust and compliance.

F

Fondation Esprit Francophonie

formafle.ch

62

Fondation Esprit Francophonie operates the FormaFLE website as a non-profit organization dedicated to promoting French language evaluation and continuing education in Switzerland. Established in 2010, the foundation offers recognized certifications such as DELF and DALF, alongside training and coaching services for French language educators and learners. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its educational audience. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and demonstrates good mobile optimization and moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and explicit policies could enhance protection. WHOIS data confirms domain legitimacy and consistency with the foundation's history. Overall, the site is trustworthy, safe, and well-positioned within its niche, though improvements in security transparency and contact information accessibility are recommended.