Finance security reports

A

AB Syna

syna.se

63

AB Syna is a well-established Swedish company specializing in credit reporting and market information services since 1947. Their website, upplysningar.syna.se, targets Swedish businesses and government entities, offering credit reports, register maintenance, market analysis, and subscription-based services. The company emphasizes professional service, personal support, and compliance with GDPR regulations. Technically, the website uses modern frameworks like Bootstrap and integrates Google Tag Manager and reCAPTCHA for analytics and security. Security posture is strong with HTTPS, anti-forgery tokens, and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data for the subdomain is noted but does not detract significantly from the overall trustworthiness given the company's established presence and consistent branding. Overall, the site is professional, secure, and compliant, serving a clear B2B finance sector niche.

C

Current

current.com

71

Current is a well-established fintech company founded in 1997, providing innovative mobile banking solutions to over 6 million members. Their services include paycheck advances, fee-free overdraft, credit building cards, savings with competitive interest rates, crypto trading without fees, and teen banking debit cards. The company partners with FDIC member banks Choice Financial Group and Cross River Bank to deliver banking services, ensuring regulatory compliance and customer trust. The website is professionally designed, mobile-optimized, and rich in content, targeting consumers seeking modern, app-based financial products.

L

La Mobiliare

mobiliare.ch

71

La Mobiliare is a historic and leading Swiss insurance and pension company serving both private individuals and businesses. The website presents a professional digital presence with clear service offerings including premium calculation, claims notification, and online policy management. The technical infrastructure is modern, leveraging Angular framework and optimized image delivery via Rokka.io, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are missing. The site uses common analytics and advertising tools such as Google Analytics and Tealium, indicating moderate user tracking without clear privacy compliance disclosures. Overall, the website reflects a credible and trustworthy business entity with room for improvement in privacy and security transparency.

S

Schweizerischer Treuhänderverband

treuhand-talente.ch

58

The website www.treuhand-talente.ch serves as a professional job matching platform operated by the Schweizerischer Treuhänderverband, the Swiss fiduciary association. It targets fiduciary professionals, trainees, and career changers within Switzerland, offering a specialized service to connect job seekers and employers in the fiduciary sector. The platform supports multilingual content and provides detailed job listings and matching functionalities, reinforcing its niche market position. The business model includes free usage for members and paid job postings for non-members, indicating a membership-driven revenue stream. Technically, the website employs a modern technology stack including Bootstrap 5.2.2, jQuery, and Open Web Analytics for tracking. The site is mobile-optimized with good SEO practices and a custom CMS backend. Performance is moderate, with room for improvement in accessibility features. Security is robust with HTTPS enforced, CSRF tokens, and standard security headers, though the absence of a visible cookie consent mechanism and a dedicated security policy page are notable gaps. From a security perspective, the site demonstrates good practices but lacks published incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website’s claims, confirming legitimacy and consistent registration details. Overall, the site is trustworthy and professionally maintained, with minor recommendations to enhance privacy compliance and security transparency. The overall risk assessment is low, with strategic recommendations focusing on improving GDPR cookie consent mechanisms, publishing security policies, and adding incident response contacts to strengthen user trust and compliance.

S

Syz Group

syzgroup.com

68

Syz Group is a Swiss family-owned private banking and asset management group established in 1996, managing CHF 25.8 billion in assets. The company offers a range of wealth management services including discretionary portfolio management, advisory, digital asset services, and alternative investments. The website is professionally designed using Drupal 10, with good mobile optimization and accessibility. It integrates modern analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. WHOIS data is missing, which raises transparency concerns but the overall business credibility remains high based on content and branding. Contact is primarily via web forms, with no direct emails or phone numbers published. The site is safe for general audiences with no adult content detected.

Kontenvergleich.li is the official payment account comparison website operated by the Liechtensteiner Bankenverband, serving as a trusted platform for consumers in Liechtenstein to compare banking products and fees. The site provides structured access to information about payment accounts, associated services, and pricing from major Liechtenstein banks, positioning itself as a key resource for financial decision-making within the country. The business model centers on transparency and consumer empowerment in the banking sector, supported by the official banking association. Technically, the website employs a straightforward stack including jQuery, Bootstrap Grid, and Select2 for enhanced UI elements. The site is mobile-optimized with good navigation and user experience, though some SEO and accessibility features are basic. No advanced CMS or hosting details are evident, suggesting a custom or lightweight implementation. Performance is moderate with no blocking or WAF detected, indicating reliable accessibility. From a security perspective, the site uses HTTPS and secure form controls but lacks visible security headers and explicit security policies. Privacy compliance is partially addressed via a linked privacy policy on the parent domain, but cookie consent mechanisms are absent. No incident response or vulnerability disclosure information is provided. Overall, the security posture is adequate but could be improved with standard headers and transparency. The overall risk is low given the official nature and limited attack surface, but enhancements in security headers, privacy notices, and incident response readiness are recommended to strengthen trust and compliance. The site is safe for general audiences with no adult or questionable content detected.

R

REYL Intesa Sanpaolo

reyl.com

63

REYL Intesa Sanpaolo is a Swiss-based banking group established in 1973, offering wealth management, asset management, and asset services to high net worth individuals and institutional clients. The company positions itself as a partner delivering innovative financial solutions with a strong international presence including subsidiaries such as REYL Overseas. The website is professionally designed using Drupal CMS and modern web technologies, featuring multimedia content and clear navigation. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance practices. Security posture is solid with HTTPS and cookie consent but lacks explicit security policies and incident response information. WHOIS data is missing, which reduces transparency but the overall website and business presence appear legitimate and professional.

Bank CIC (Schweiz) AG is a Swiss banking institution serving entrepreneurs and private individuals with complex financial needs. The website presents a professional image with a clear focus on investment, financing, corporate finance, and private banking services. The bank positions itself as a trusted partner offering tailored financial solutions supported by Swiss tradition and corporate governance. The digital infrastructure is modern, leveraging Magnolia CMS and JavaScript frameworks, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not publicly disclosed. Overall, the website reflects a credible and trustworthy financial institution with a strong market presence in Switzerland.

B

BancaStato

bancastato.ch

58

BancaStato is a regional universal bank serving the Canton Ticino in Switzerland, offering a full range of banking services including credit, payment traffic, and asset management to private individuals, commercial clients, and private banking customers. The website reflects a mature digital presence with clear navigation and comprehensive service information. Technically, the site uses modern JavaScript libraries such as jQuery, integrates Matomo for analytics, and employs OneTrust for cookie consent management, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear cookie consent and privacy policies in Italian. Overall, the website is professional, trustworthy, and well-aligned with the business's regional banking focus.

B

Bellevue Asset Management AG

bbentrepreneurprivate.ch

41

Bellevue Entrepreneur Private is a specialized investment fund managed by Bellevue Asset Management AG, focusing on providing growth capital to small and medium-sized enterprises (SMEs) in the DACH region, particularly Switzerland. The fund targets established, profitable companies with strong growth potential, acting as a co-investor alongside experienced investors and entrepreneurs. The website reflects a professional and consistent brand image, with clear investor-focused content and legal disclaimers. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, integrating modern web technologies such as Google Tag Manager and Vimeo embeds. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security is well implemented with HTTPS, secure login forms, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies. The website maintains high business credibility with consistent WHOIS data and clear contact information. Strategic recommendations include publishing a dedicated security policy, incident response details, and vulnerability disclosure information to enhance trust and compliance.

A

adbodmer AG

adbodmer.ch

52

adbodmer AG is a Swiss investment group specializing in providing private capital and strategic support to medium-sized companies with growth ambitions, primarily in the DACH region. With approximately 20 years of experience, the company positions itself as a supportive and future-oriented partner for entrepreneurial ventures. The website reflects a professional and consistent brand image, targeting medium-sized enterprises seeking growth capital and expertise. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, leveraging modern web technologies including JavaScript and CSS. The site demonstrates good mobile optimization and SEO practices, with a moderate performance profile. Cookie consent mechanisms are implemented, ensuring compliance with privacy regulations. From a security perspective, the website enforces HTTPS and employs cookie consent for user privacy. However, it lacks visible security policies, incident response contacts, and advanced security headers, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious elements were detected in the content or scripts. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen the security posture and user trust.

B

Banque de Luxembourg Investments

banquedeluxembourginvestments.com

67

Banque de Luxembourg Investments (BLI) is a specialist asset management company based in Luxembourg, focusing on equities, bonds, multi-asset strategies, and sustainable investing. The company targets both private and professional investors primarily in Europe, emphasizing active management and ESG principles. The website reflects a professional and consistent brand image with clear navigation and relevant content about their investment expertise and fund offerings. Technically, the site is built on the Liferay CMS platform, utilizing modern JavaScript libraries and analytics tools such as Matomo, ensuring a moderate to good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness despite the professional presentation. Overall, the site is credible and well-maintained but would benefit from enhanced transparency in privacy and security policies.

C

Crédit Mutuel Impact

creditmutuelimpact.fr

66

Crédit Mutuel Impact is a specialized asset management company operating under Crédit Mutuel Alliance Fédérale, focusing on sustainable and impact investments primarily in infrastructure and private equity sectors. The company targets investors interested in long-term environmental and societal impact, managing funds that support renewable energy, electric mobility, and decarbonization projects. The website reflects a professional and consistent brand image aligned with its parent company, offering clear information about its investment philosophy and regulatory compliance. Technically, the site uses modern web technologies including jQuery and YouTube API, with a responsive design and good accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The absence of WHOIS data is a minor concern but is offset by the strong brand presence and regulatory adherence. Overall, the site is trustworthy, well-structured, and compliant with privacy regulations.

N

NewAlpha Asset Management

newalpha.com

71

NewAlpha Asset Management is a French asset management firm specializing in research, advisory, and portfolio management of investment funds. The company targets both professional and non-professional investors, offering a broad range of investment strategies including traditional asset classes, alternative investments, and private assets. The website is professionally designed, multilingual (French and English), and provides comprehensive information about the firm's expertise and services. Technically, the site is built on WordPress with modern SEO and privacy tools such as Yoast SEO and Cookiebot, and uses Matomo for analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and headers are lacking. The absence of WHOIS data reduces transparency and trust somewhat, but the overall presentation and regulatory references support legitimacy. Strategic recommendations include enhancing security headers, publishing incident response information, and verifying domain registration details to improve trust and compliance.

C

CIC Private Debt

cic-privatedebt.eu

70

CIC Private Debt is a specialized financial services firm focused on providing private debt financing solutions to European SMEs and mid-sized companies. Established in 2003, it manages a significant portfolio of 3.5 billion euros for institutional and private investors. The company operates under French financial regulations, including AMF oversight and AIFM authorization, and emphasizes responsible investment practices aligned with ESG principles. The website reflects a professional and consistent brand image, targeting investors and corporate clients seeking alternative financing options. Technically, the site employs modern JavaScript libraries and analytics tools, is mobile-optimized, and includes a comprehensive cookie consent mechanism, demonstrating digital maturity. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, the website and business present a trustworthy and credible profile with moderate risk.

C

Crédit Mutuel Asset Management

creditmutuel-am.eu

65

Crédit Mutuel Asset Management (CMAM) is a prominent asset management company operating primarily in France and Europe, offering a comprehensive range of investment funds focused on simplicity, transparency, performance, and risk management. The company emphasizes responsible and sustainable finance as part of its core business model. The website reflects a professional and consistent brand image aligned with its parent company, Crédit Mutuel. The target audience includes both professional and non-professional investors across multiple European countries. CMAM's market position is that of a significant player in the financial services sector, leveraging its parent group's reputation and resources. Technically, the website employs modern web technologies including jQuery and YouTube's widget API, with analytics powered by Piano Analytics. The site is served over HTTPS with cookie consent mechanisms that comply with GDPR requirements, offering users granular control over tracking preferences. While the site demonstrates good mobile optimization and SEO practices, accessibility compliance is partial, indicating room for improvement. No CMS or hosting provider details were explicitly identified. From a security perspective, the site benefits from HTTPS encryption and a cookie consent banner, alongside a published vulnerability disclosure policy, indicating a mature security posture. However, explicit security headers such as Content Security Policy or HSTS are not evident, and no direct incident response contacts are provided. The WHOIS data is privacy protected by EURid, which is common for European domains, and does not raise immediate concerns given the professional nature of the site and its alignment with a reputable financial institution. Overall, the security posture is solid but could be enhanced by adding more explicit security policies and headers.

S

SCOR

scor.com

71

SCOR is a leading global reinsurance company headquartered in France, offering a broad portfolio of innovative Property & Casualty, Life & Health, and Investment solutions. The company targets insurance firms and investors, positioning itself as a financially solid and innovative market leader. The website reflects a mature digital presence with comprehensive corporate, investor, and compliance information, supporting transparency and trust. Technically, the site is built on Drupal 10 with modern web technologies including Matomo analytics for privacy-respecting user tracking, lazy loading images, and embedded multimedia content. The site is mobile-optimized, accessible, and SEO-friendly, providing a fast and professional user experience. From a security perspective, the website enforces HTTPS, uses security cookies, and implements a robust cookie consent mechanism aligned with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers like Content-Security-Policy could be improved, and a security.txt file is absent. Overall, the domain WHOIS data is unavailable, likely due to privacy protection, but the website's professional content and compliance posture support legitimacy. The risk profile is low, with recommendations to enhance security transparency and incident response visibility.

I

Invesco

invesco.ch

78

Invesco is a global investment management firm with a strong market presence, offering a wide range of financial services primarily targeting investors and financial professionals. The website reflects a professional and enterprise-grade digital presence, leveraging Adobe Experience Manager as its CMS and integrating advanced analytics and marketing tools such as Adobe Target and New Relic. The site employs a robust cookie consent mechanism via OneTrust, demonstrating attention to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although explicit security headers and a published security policy are absent. Overall, the site is trustworthy and professionally maintained, but could improve transparency by publishing privacy and security policies and providing clear contact information.

S

SCOR Investment Partners SE

scor-ip.com

65

SCOR Investment Partners SE operates as the asset management arm of the SCOR Group, a leading global reinsurer. The company specializes in investment strategies that emphasize risk diversification, recurring returns, and capital preservation, with a strong commitment to sustainable development financing. Their market presence spans Paris, London, and Zurich, targeting professional institutional investors. The website reflects a mature digital presence built on Drupal 10, incorporating modern web technologies and compliance with EU privacy regulations. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies and incident response details. The absence of WHOIS registration data is a notable risk factor, potentially indicating privacy protection or registration issues. Overall, the site is professional and trustworthy but would benefit from enhanced transparency in domain registration and security disclosures.

Carmignac is an independent asset management company targeting professional and private investors primarily in Switzerland and Europe. The company offers a broad range of investment funds including equity, fixed income, diversified, alternative, and private asset strategies. The website is professionally designed with comprehensive content, clear navigation, and a focus on investment insights and sustainable investment. Technically, the site uses modern web technologies such as Next.js and React, with Google Tag Manager for analytics and marketing. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the site. Overall, the website is trustworthy and well-suited for its target audience.

L

La Française

la-francaise.com

74

La Française is a large, professional asset management group based in France, offering a broad range of investment solutions including equity, fixed income, diversified, alternative, and real estate management. The company operates multiple subsidiaries and is part of the Crédit Mutuel Alliance Fédérale asset management division. The website reflects a mature digital presence with comprehensive content, structured data, and clear navigation targeting institutional investors, distributors, and individual clients. Technically, the site uses modern web technologies and provides a responsive experience, though accessibility compliance is basic. Security posture is good with HTTPS and cookie consent mechanisms, but lacks explicit security headers and detailed incident response contacts. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site is trustworthy and professional, though the absence of WHOIS data slightly reduces domain trustworthiness.

L

Lindemann Law

lindemannlaw.ch

58

Lindemann Law is a specialized law firm focusing on asset management and international funds, with expertise in jurisdictions such as Luxemburg, Malta, Liechtenstein, and the Cayman Islands. The firm targets global financial institutions and asset managers, positioning itself as a premier legal advisor with a strong presence in Zurich and connections in the USA, Eastern Europe, CIS, and Russia. The website reflects a professional and consistent brand image, supported by recognized trust indicators such as The Legal 500 ranking. Technically, the website is built on WordPress using modern tools like Elementor and Yoast SEO, ensuring good SEO and mobile optimization. The presence of Google Tag Manager and Brevo indicates active marketing and analytics usage. Performance is moderate, with room for improvement in accessibility and explicit security headers. Security posture is solid with HTTPS enforced and use of reCAPTCHA on forms, but lacks published security policies and incident response information. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could enhance compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing incident response and vulnerability disclosure information to strengthen trust and compliance.

R

Riedweg & Hrovat AG

rh-finanz.ch

53

Riedweg & Hrovat AG is a Swiss independent asset management and financial advisory firm founded in 1997, serving private and professional clients with a focus on sustainable asset management and personalized service. The company holds a FINMA license as a collective investment manager and is a member of the Verband Schweizerischer Vermögensverwalter (VSV), underscoring its regulatory compliance and industry standing. The website reflects a professional and consistent brand image, with detailed information about the team and business principles. Technically, the site is built on WordPress with Elementor and Yoast SEO, offering good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers, but lacks explicit privacy and security policy documentation. Contact information is primarily via corporate email addresses listed for key personnel. Overall, the site is trustworthy and well-positioned in its niche, though improvements in privacy compliance and incident response transparency are recommended.

T

Tolomeo Capital AG

tolomeo-capital.com

59

Tolomeo Capital AG is a Swiss-based systematic asset management firm specializing in quantitative, technology-driven investing strategies. Founded in 2011, the company manages its own fund with a fully audited track record since 2012 and holds a license from the Swiss Financial Market Supervisory Authority (FINMA). Positioned uniquely between high-frequency and long-term asset managers, Tolomeo leverages scientific and technological expertise to deliver market-neutral, uncorrelated returns to professional and institutional investors. Their offerings include proprietary funds, systematic investment strategies, advisory services, and risk management tools.

B

Bellevue Group AG

bellevue.ch

54

Bellevue Group AG is a Swiss specialty asset manager focusing on healthcare investments, small and mid-cap companies, and growth strategies. The company offers a variety of investment products including ETFs and private equity solutions, targeting individual, professional, and institutional investors. The website reflects a strong market position in the finance and healthcare sectors with a clear, professional presentation and comprehensive investor relations content. Technically, the site is built on Neos CMS with the Flow PHP framework, leveraging modern JavaScript libraries and Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, although no explicit security policy or incident response information is publicly available. Overall, the website is well-designed, trustworthy, and compliant with GDPR and cookie regulations, supporting a medium-sized enterprise with a consistent brand and clear business focus.

Z

Zurich Invest Ltd

zurichinvest.ch

52

Zurich Invest Ltd is a Swiss-based financial services company specializing in investment opportunities for pension funds, institutional investors, and private customers. The website presents a professional and consistent brand image, targeting a medium-sized market segment within the finance industry. The company offers a range of investment services tailored to institutional and private clients, positioning itself as a reputable player in the Swiss financial market. Technically, the website leverages modern technologies including JavaScript, CSS, Azure Application Insights for analytics, and Tealium for tag management. Hosting appears to be on Microsoft Azure, indicating a robust infrastructure. The site is mobile-optimized with good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS with strong SSL configuration and sets secure cookies for tracking scripts. However, it lacks explicit security headers and visible security policies such as privacy or cookie policies. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. Overall, the website is safe, professional, and trustworthy with moderate technical maturity. The absence of explicit privacy and cookie policies and contact information slightly reduces privacy compliance and user trust. Strategic improvements in these areas would strengthen the security posture and regulatory adherence.

V

Vereon AG

swisspaymentforum.ch

49

Swiss Payment Forum is a specialized event platform organized by Vereon AG, focusing on payment industry trends and solutions primarily in Switzerland. The website serves as a hub for event information, partner engagement, and industry insights, targeting payment professionals and fintech stakeholders. The platform is well-positioned in the Swiss payment ecosystem with a growing reputation and strong partner network. Technically, the site uses a modern CMS (concrete5) with common web technologies such as jQuery, Bootstrap, and integrates multimedia content and social media feeds effectively. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong, with clear policies linked to the parent company’s domain. Overall, the website is professional, trustworthy, and provides a good user experience with clear navigation and relevant content.

T

Tareno AG

tareno.ch

54

Tareno AG is an established Swiss independent wealth management company with over 25 years of experience, operating primarily in Basel and Zürich. The company offers tailored asset management and financial advisory services to private clients and institutions, emphasizing transparency, sustainability, and personalized strategies. It holds a strong market position, evidenced by multiple awards including the BILANZ Vermögensverwalter des Jahres and a 5-star Morningstar rating for its water fund. The website reflects a mature digital presence with multilingual support, professional design, and comprehensive content aligned with its business model. Technically, the site is built on WordPress with modern SEO and performance optimizations, including Google Tag Manager for analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. Overall, the site projects high trustworthiness and professionalism, supporting the company's credibility in the finance sector.

R

Richmond Events

richmondevents.ch

55

Richmond Events Switzerland is a small, specialized event organizer focusing on strategic business forums held at prestigious venues in Switzerland. Their services cater primarily to C-level executives and management professionals across sectors such as finance, healthcare, marketing, and IT. The company positions itself as a niche player offering cost-effective and time-efficient networking and learning opportunities through its forums. The website reflects a professional and modern digital presence, leveraging technologies like Vue.js, Nuxt.js, and Storyblok CMS, ensuring a good user experience and mobile optimization. Security-wise, the site employs HTTPS and standard security headers, with a cookie consent mechanism in place, but lacks explicit privacy policies and incident response information, which are areas for improvement. Overall, the website is trustworthy and well-structured, though enhancing compliance documentation and direct contact details would strengthen its credibility and security posture.

F

FINANZ

finanz-ch.ch

65

FINANZ is a leading B2B event organizer in the Swiss financial industry, hosting a major congress featuring around 100 expert lectures, panels, and roundtables on current financial topics. The event provides a platform for professional networking and knowledge exchange in an exclusive atmosphere. The website is built on the Wix platform, leveraging Wix Thunderbolt technology, and presents a professional and consistent brand image. Technical infrastructure is modern and supports mobile optimization, though SEO and accessibility could be improved. Security posture is adequate with HTTPS and some security best practices, but lacks explicit security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and legitimate, with room for improvement in privacy and security transparency.

S

Swiss Fund Data AG

swissfunddata.ch

58

Swiss Fund Data AG operates a professional online platform providing comprehensive data, documents, and market insights related to investment funds approved for public distribution in Switzerland. The company targets Swiss residents interested in investment funds, including both qualified and private investors, and offers personalized services such as the MyFunds user account. The website is positioned as a trusted publication organ approved and supervised by FINMA, reinforcing its credibility in the Swiss financial market. Technically, the website employs a traditional but stable technology stack including jQuery, Bootstrap, and Google Analytics for tracking. The site is mobile-optimized with good navigation and content quality. However, some JavaScript libraries are outdated, and no explicit security headers are detected, which could be improved. The site uses HTTPS with good SSL configuration, but personalized data transmission is unencrypted, which is a notable security risk acknowledged in the legal disclaimers. From a security perspective, the website demonstrates moderate maturity with HTTPS enforcement and privacy-conscious analytics configurations such as IP anonymization. However, the lack of security headers and unencrypted personalized data exchange represent vulnerabilities. No explicit incident response or vulnerability disclosure mechanisms are present. Privacy policies are comprehensive and GDPR-compliant, with clear data protection officer contact information. Overall, the website is professional, trustworthy, and compliant with relevant privacy regulations, but it could benefit from enhanced security controls and clearer incident response provisions to strengthen its security posture and user trust.

C

Candriam

candriam.com

54

Candriam is a professional asset management firm offering investment solutions, funds, and market insights primarily targeting professional investors globally. The website is well-structured, multilingual, and designed to provide detailed regulatory and investor information. Technically, the site employs modern analytics tools such as Piwik PRO, Google Tag Manager, Microsoft Application Insights, and Optimizely, alongside a consent management platform (Usercentrics) and reCAPTCHA for security on login and registration forms. The security posture is strong with HTTPS enforced and secure form handling, though explicit security headers could not be fully verified from the provided data. The absence of WHOIS data for the domain is notable but may be due to privacy or registry policies. Overall, the site demonstrates a mature digital presence with good compliance and security practices.

V

Verband Schweizerischer Vermögensverwalter (VSV)

vsv-asg.ch

41

The Verband Schweizerischer Vermögensverwalter (VSV) is a Swiss finance industry association focused on supporting wealth managers through legal support, training, events, and member services. The website is professionally designed using TYPO3 CMS and modern web technologies, providing multi-language support and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. The domain registration data aligns well with the organization's Swiss finance sector identity, supporting legitimacy. Overall, the site presents a trustworthy and professional digital presence suitable for its target audience of Swiss financial professionals.

L

Liechtensteinischer Bankenverband

bankenverband.li

67

The Liechtensteinischer Bankenverband website serves as the official online presence of the Liechtenstein banking association, representing the rights and interests of the banking sector in Liechtenstein. It provides comprehensive information about the banking industry, sustainability initiatives, digitalization, and educational programs. The site targets banking professionals, customers, and stakeholders interested in the Liechtenstein financial market. The business model focuses on advocacy, information dissemination, and networking within the banking community. Technically, the website is built on the concrete5 CMS platform and leverages modern JavaScript libraries such as Vue.js and jQuery, along with UI frameworks like Foundation. It features responsive design, interactive elements like carousels and live search, and integrates third-party services for analytics and newsletter management. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and uses email obfuscation to protect contact information. However, it lacks explicit security headers and does not provide a vulnerability disclosure or incident response contact. Privacy compliance is partially addressed with a comprehensive privacy policy and newsletter consent but lacks a cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance standing.

A

AllSecure

allsecure.rs

57

AllSecure is a Serbian-based company specializing in secure internet payment solutions, offering services primarily to businesses requiring reliable online payment processing. The website is built on a modern WordPress platform using Elementor and Yoast SEO, indicating a moderate level of digital maturity. The technical infrastructure includes Google Tag Manager for analytics and tracking, and the site is served over HTTPS with a domain registered since 2008, reflecting stability and legitimacy. However, the absence of explicit privacy and cookie policies, as well as contact information, limits the site's compliance and user trust. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Overall, the site presents a professional business front but would benefit from enhanced privacy compliance and security transparency.

D

die Mobiliar

mobiliar.ch

74

Die Mobiliar is a leading Swiss insurance and pension company, established in 1826, serving both private individuals and businesses. The company holds a strong market position, insuring approximately one-third of Swiss households and enterprises. Their website offers comprehensive online services including premium calculators and damage reporting, reflecting a mature digital presence. The site is professionally designed, mobile-optimized, and provides clear navigation and contact options, supporting a high level of user trust and engagement. Technically, the site is built on Angular 20.1.0 with modern web standards, leveraging CDNs and analytics tools such as Google Analytics and Tealium for performance and marketing insights.

Itaú Unibanco is the largest private bank in Brazil, offering comprehensive financial services including retail and corporate banking, investment, and insurance. The website reflects a mature digital presence with extensive use of analytics and optimization tools, ensuring a high-quality user experience. The infrastructure leverages global CDN services and modern JavaScript frameworks, supporting fast and responsive access. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism and trustworthiness consistent with a leading financial institution.

P

PRO Mervärde

promervarde.se

52

PRO Mervärde operates a Swedish membership benefits platform primarily targeting members of the PRO pensioners' organization and affiliated unions. The website offers various discounts, financial services including a Mastercard credit card, insurance, leisure, and travel offers. The business model focuses on providing value-added services to union members, positioning itself as a trusted partner in the Swedish market. The website is built on WordPress with modern SEO and consent management tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit privacy and terms policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

H

Hipotekarna Banka AD Podgorica

hipotekarnabanka.com

48

Hipotekarna Banka AD Podgorica is a well-established financial institution in Montenegro offering a wide range of banking services including retail and corporate banking, investment banking, and digital banking solutions. The website reflects a professional and comprehensive presentation of their services targeting both individual and business customers within Montenegro. The bank emphasizes accessibility through multiple channels including e-banking platforms and mobile banking. Technically, the website employs modern web technologies such as AngularJS, Bootstrap, and integrates security features like HTTPS and Google reCAPTCHA to protect user interactions. While the security posture is strong with encrypted connections and secure forms, there is room for improvement in implementing comprehensive security headers and explicit cookie consent mechanisms to enhance privacy compliance. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration legitimacy, but the overall professional appearance and detailed content suggest a legitimate banking entity. Strategic recommendations include enhancing privacy compliance, publishing security policies, and verifying domain registration details to strengthen trust and security posture.

M

Moneyhouse

moneyhouse.ch

61

Moneyhouse is a Swiss-based business information platform specializing in commercial register and economic data for over 630,000 active Swiss companies. It offers a freemium subscription model with premium access to detailed company and person dossiers, credit reports, and API integration services. The platform is positioned as a leading source for Swiss business data, supported by its parent company Neue Zürcher Zeitung AG, a reputable media organization. The website is professionally designed, multilingual, and targets SMEs and business professionals seeking reliable economic information. Technically, the site uses modern JavaScript frameworks, Google Tag Manager for analytics, and consent management tools to comply with privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, Moneyhouse demonstrates a mature digital presence with good privacy compliance and business credibility.

T

TOTVS TECHFIN

totvstechfin.com.br

62

TOTVS TECHFIN is a joint venture between TOTVS, Brazil's largest technology company, and Itaú, the largest private bank in Latin America. The company offers personalized financial services tailored for businesses, especially clients using TOTVS ERP systems. Their services include credit products, payment solutions such as Pix and boleto híbrido, and cash flow management tools. The website reflects a strong market position supported by major industry players and targets Brazilian businesses seeking integrated financial technology solutions. Technically, the site is built on WordPress with modern SEO and analytics tools, hosted on AWS infrastructure, and optimized for mobile devices. Security posture is good with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is basic, with a cookie consent mechanism present but no clear privacy or terms of service pages. Overall, the website is professional, trustworthy, and business-focused, with room for improvement in transparency and security disclosures.

V

VCM Schweiz

creditmanager.ch

48

VCM Schweiz is a Swiss non-profit association dedicated to advancing and professionalizing credit management within Swiss companies. The organization offers education, networking opportunities, standards, and publications to credit management professionals, positioning itself as a national platform with international connections. The website is well-structured, professionally designed, and targets credit managers and related professionals in Switzerland. Technically, the site is built on WordPress with WooCommerce and modern plugins, providing moderate performance and good mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, though it lacks visible security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy business entity.

P

Publicontext AG

investrends.ch

56

Investrends.ch is a Swiss-based professional news platform operated by Publicontext AG, targeting professional investors with up-to-date news and trends in asset management and finance. The website offers a variety of services including news articles, newsletters, event listings, advertorials, and a job board focused on the investment sector. It maintains a strong market position within the niche of Swiss financial news for professionals, supported by partnerships with reputable financial institutions and asset managers. Technically, the site is built on the ProcessWire CMS and utilizes a range of JavaScript libraries and analytics tools such as Matomo and Google Analytics, with privacy-conscious configurations like IP anonymization and cookie consent mechanisms. The site is mobile-optimized and features good SEO practices, though some technical debt is noted with the use of an outdated jQuery version and missing security headers. From a security perspective, the site enforces HTTPS and implements cookie consent and email obfuscation to protect user data. However, it lacks explicit security headers and uses an outdated JavaScript library, which could pose risks. No incident response or security policy information is publicly available. The WHOIS data confirms the legitimacy of the domain ownership by Publicontext AG in Switzerland, consistent with the website's business claims. Overall, investrends.ch presents a professional and trustworthy platform for its target audience, with good privacy compliance and business credibility. Security improvements are recommended to enhance protection and trust further.

J

jobchannel ag

emploi-bancassurance.ch

56

emploi-bancassurance.ch is a specialized Swiss job platform focusing on bancassurance employment opportunities, operated by jobchannel ag. It offers a comprehensive range of services including job listings, salary calculators, employer profiles, and career advice tailored to banking and insurance sectors. The platform targets job seekers and employers within Switzerland's financial services industry, positioning itself as a niche leader with a professional and user-friendly interface. Technically, the site employs modern web technologies such as JavaScript, jQuery, Bootstrap, and integrates Google Analytics and Tag Manager for tracking and marketing purposes. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No vulnerabilities or suspicious elements were detected, and the domain registration aligns well with the business identity, supporting legitimacy. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and effective platform for its target audience.

J

jobchannel ag

versicherungsjobs-schweiz.ch

61

versicherungsjobs-schweiz.ch is a specialized online job platform focused on the Swiss insurance industry, operated by jobchannel ag. It provides comprehensive job listings, career advice, and company profiles tailored to insurance professionals and job seekers in Switzerland. The platform integrates trusted partner services such as Kununu for employer reviews, enhancing its market position as a niche leader in insurance recruitment. Technically, the website employs modern web technologies including JavaScript, jQuery, Bootstrap, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is well-optimized for SEO and mobile devices, with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses secure forms with validation, though it lacks explicit security headers and a published security policy. Privacy compliance is addressed with a clear privacy policy, cookie consent mechanism, and GDPR considerations. Overall, the website demonstrates a solid security posture and business credibility with no critical vulnerabilities detected.

R

Riverty Group GmbH

riverty.com

69

Riverty Group GmbH operates a professional and comprehensive website focused on providing Buy Now Pay Later (BNPL) financial services to both consumers and businesses primarily in Finland. The company offers a range of payment solutions including deferred payment options, installment plans, and debt management tools such as the MyRiverty portal and Back in Flow service. The website is well-structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Extensive use of analytics and marketing technologies is evident, with strong privacy compliance through Usercentrics consent management and detailed privacy policies. However, the absence of WHOIS data and registrant information introduces some uncertainty about domain registration details, though the overall site professionalism mitigates this concern. Security posture is good with HTTPS and monitoring tools in place, but could be improved by adding explicit security headers and publishing a security policy. Overall, the site represents a credible and trustworthy financial services provider with room for minor security and transparency enhancements.

F

Finansinspektionen

fi.se

56

Finansinspektionen is the Swedish financial supervisory authority responsible for ensuring a stable financial system, high consumer protection, and sustainable development in the financial sector. The website serves as an official government portal providing regulatory information, reports, warnings, and consumer guidance. It targets the general public, financial institutions, and consumers with a focus on transparency and public service. The domain is well-established since 1994, reinforcing its credibility and authority. Technically, the website uses a modern but straightforward technology stack including jQuery and FontAwesome, with custom JavaScript bundles and CSS for styling. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Hosting details are not explicit, but the registrar is a reputable Swedish provider. Performance is moderate, suitable for a government informational site. From a security perspective, HTTPS is used, but DNSSEC is not enabled, and no explicit security headers were detected in the provided data. No vulnerabilities or exposed sensitive data were found. The site lacks a dedicated security policy or incident response contact information, which could be improved. Privacy compliance is good with clear privacy and cookie policies, though no explicit consent mechanism was detected. Overall, the website is trustworthy, professional, and well-aligned with its role as a government financial regulator. Recommendations include enabling DNSSEC, adding security headers, and publishing a security.txt file to enhance security posture and transparency.

P

Prevo-System AG

prevo.ch

58

Prevo-System AG is a Swiss-based software company specializing in providing the PAKT management system tailored for collective life insurance providers. The company is a joint venture involving msg systems ag, Baloise, and Helvetia Versicherungen, positioning it strongly within the Swiss insurance software market. Their product PAKT supports the entire lifecycle of collective life insurance administration, including BVG and over-obligatory occupational benefits, offering a comprehensive and integrated solution for insurers. The website reflects a professional and consistent brand image with clear business focus and customer testimonials from reputable insurance companies, indicating a solid market position. Technically, the website is built on Joomla CMS with modern frameworks such as Bootstrap and jQuery, enhanced by custom MSG group scripts and third-party integrations like hCaptcha for bot protection. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security measures include HTTPS enforcement and CSRF tokens, though some security headers are missing. Privacy compliance is well addressed with a clear cookie consent mechanism and a comprehensive privacy policy. The security posture is generally strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. The domain registration aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, Prevo-System AG presents a credible, professional, and secure online presence suitable for its target audience in the Swiss insurance sector. Strategic enhancements in security transparency and incident response communication would further strengthen trust and compliance.

L

Leading Portfolio Partners GmbH

lpp.eu

60

Leading Portfolio Partners GmbH is a German-based subsidiary of msg systems AG specializing in insurance portfolio management and revitalization services. The company operates in partnership with Swiss Re, offering innovative solutions such as legacy portfolio relief, new business development via sandbox environments, and professional insurance services through its subsidiary COMPIN GmbH. The website reflects a professional B2B service provider targeting insurance companies, emphasizing operational and economic relief for insurers. Technically, the site is built on the Ghost CMS platform, uses modern web technologies, and integrates privacy-conscious analytics (Plausible) and multilingual support (Weglot). Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of a cookie consent mechanism and security policy pages are noted. WHOIS data is unavailable due to EURid privacy restrictions, but the website's trust signals and business information support legitimacy. Overall, the site is well-designed, content-rich, and trustworthy, suitable for its professional audience.

M

msg Rethink Compliance GmbH

msg-compliance.de

64

msg Rethink Compliance GmbH is a specialized consulting and technology firm focused on Anti-Financial Crime Compliance, serving a broad international client base primarily in the financial sector. The company offers a comprehensive portfolio of services including advisory, compliance outsourcing, digital compliance solutions, and AI-driven compliance frameworks. Their market position is strong, supported by extensive consultant experience and integration within the larger msg Group corporate family. The website reflects a mature digital presence with modern technologies, effective consent management, and professional branding. Security posture is solid with HTTPS enforcement and ISO 27001 certification, though explicit security headers and incident response disclosures could be improved. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.