Technology security reports

U

Universe

universe.com

66

Universe is a large-scale online event ticketing and management platform that enables event organizers to create, manage, and sell tickets for general admission and timed-entry events. The platform is integrated with Ticketmaster, leveraging a vast distribution network and marketing expertise to expand event reach globally. Universe offers advanced tools for customer data ownership, checkout customization, and marketing optimization, targeting event hosts and ticket buyers worldwide. Technically, Universe employs modern web technologies including Webflow CMS, Google Tag Manager, Transifex for localization, and ContentSquare for UX analytics. The site is well-optimized for performance, mobile responsiveness, and accessibility, hosted on AWS Cloudfront CDN. Security is robust with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly detailed. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is comprehensive, with clear privacy and cookie policies and GDPR adherence. However, the absence of WHOIS registration data for the domain www.universe.com is unusual and warrants further investigation to confirm domain legitimacy. Overall, the site presents a professional, trustworthy, and user-friendly experience with strong business credibility. Strategic recommendations include enhancing security transparency by publishing a security policy and incident response contacts, implementing additional security headers, and clarifying domain registration details to improve trust and compliance visibility.

D

Devillard Holding SA

devillard.ch

47

Devillard Holding SA is a well-established Swiss technology company founded in 1958, specializing in IT infrastructure, printing systems, document management (GED), and interactive screens. It holds a leading market position in Suisse Romande, targeting SMEs with comprehensive technology solutions and premium maintenance services. The company operates multiple physical locations across the region, emphasizing proximity and high-quality customer service. The website reflects a mature digital presence with professional design, clear navigation, and relevant content tailored to its business audience. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Tag Manager for performance monitoring. Security posture is strong with HTTPS, captcha protections, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is robust with a detailed privacy policy and cookie banner. Overall, the website and business demonstrate high credibility and trustworthiness.

E

Epwise AG

wise.swiss

46

Wise.swiss, operated by Epwise AG, is a Swiss-based technology company specializing in AI-enhanced software solutions for event and real estate co-ownership assembly management. Their product suite includes Eventwise and Estatewise, designed to streamline invitations, registrations, check-ins, document sharing, and voting processes. The company targets Swiss organizations, including public agencies, SMEs, and large groups, emphasizing data sovereignty and compliance with Swiss data protection laws. The website reflects a professional and consistent brand image with strong trust signals such as customer testimonials and Swiss Made Software certification. Technically, the site uses modern web technologies including HubSpot forms, Google Tag Manager, and Bootstrap, hosted by Infomaniak Network SA. Performance and mobile optimization are good, with clear navigation and SEO best practices. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though DNSSEC is not enabled and security headers are not explicitly detected in the HTML. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the website and business present a credible, secure, and mature digital presence.

D

Darest Informatic SA

darest.com

61

Darest Informatic SA is a well-established Swiss IT solutions provider founded in 1978, specializing in delivering innovative and personalized IT and digital services to SMEs and large enterprises in the Suisse Romande region. Their offerings include IT infrastructure management, cybersecurity, telephony, printing, digitalization, AI solutions, and IT staff delegation. The company positions itself as a trusted partner with a strong regional presence and a portfolio of recognized certifications and partnerships with major technology vendors. Technically, the website is built on WordPress using modern tools such as Elementor and Yoast SEO, supporting multilingual content and optimized for performance and mobile devices. Security posture is good with HTTPS and reCAPTCHA integration, though explicit privacy and cookie policies are not found, indicating room for compliance improvement. The absence of WHOIS registration data reduces transparency but does not contradict the professional business presentation. Overall, the company demonstrates a mature digital presence with solid business credibility and moderate security maturity.

S

StorifyMe GmbH

storifyme.com

69

StorifyMe GmbH operates a technology platform specializing in mobile-native storytelling formats such as Stories, Shorts, Snaps, and Ads, designed to enhance user engagement and monetization for apps and websites. The company targets a broad range of clients from startups to large enterprises, positioning itself as a leader in visual content creation and distribution. The website demonstrates strong branding, client trust signals, and a comprehensive suite of services aimed at digital marketing and content innovation. Technically, the site leverages modern web technologies including Webflow CMS, GSAP animations, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and HubSpot, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly disclosed. The absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy, but the overall professional presentation and client endorsements support a trustworthy business profile. Strategic recommendations include enhancing security transparency, publishing incident response contacts, and improving direct contact availability to further strengthen trust and compliance.

V

VeronaLabs

wp-statistics.com

64

WP Statistics is a mature and well-established WordPress plugin developed by VeronaLabs, specializing in privacy-friendly website analytics that comply with GDPR, CCPA, and PECR regulations. The company positions itself as a leader in privacy-centric analytics for WordPress users, boasting over 600,000 active users and offering a comprehensive suite of features including content analytics, author performance tracking, marketing campaign insights, and geographical reporting. The business model revolves around plugin sales, add-ons, and an affiliate program, targeting website owners, bloggers, and marketers who prioritize privacy and data ownership.

J

Jooce Digital Agency

jooce.ch

60

Jooce Digital Agency is a small, local digital agency based in Geneva, Switzerland, specializing in web development, IT assistance, and digital solutions tailored for local businesses. The company positions itself as a trusted local partner emphasizing Swiss quality and personalized service. Their website is professionally designed using modern technologies such as React and Next.js, hosted on Vercel, and optimized for performance and mobile devices. Structured data is well implemented to enhance SEO and local business visibility. However, the website lacks critical compliance and security documentation such as privacy policies, cookie consent mechanisms, and incident response information. No contact emails or phone numbers are explicitly provided, which may impact user trust and business credibility. Overall, the site is secure with HTTPS and no visible vulnerabilities, but improvements in privacy compliance and transparency are recommended.

E

EveryWare AG

ewcs.ch

64

EveryWare AG operates an Open Cloud Authentication Service, providing identity and access management solutions primarily targeting enterprise clients. The website analyzed is a login portal leveraging modern authentication protocols such as OpenID Connect and technologies including Keycloak and PatternFly. The site is designed for secure user authentication but lacks publicly accessible information such as privacy policies, terms of service, or contact details on this page. Technically, the site uses a modern tech stack with React-based UI components and standard security practices like disabling autocomplete on password fields. However, no explicit security headers were detected, and privacy compliance indicators are absent, which could be improved to enhance trust and security posture. Overall, the site is functional and professional but minimalistic in public content.

C

Cloudinary

cloudinary.com

70

Cloudinary is a leading cloud-based media management platform founded in 2011, specializing in image and video upload, storage, optimization, and delivery via APIs and CDN. The company targets developers, IT teams, marketers, and enterprises across various industries, providing scalable and AI-powered media solutions. The website reflects a mature digital presence with comprehensive product information, strong branding, and clear navigation. Technically, the site leverages modern web technologies including WordPress CMS, Bootstrap framework, and integrates analytics and marketing tools such as Google Analytics and LinkedIn Insight Tag. Security posture is solid with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, Cloudinary demonstrates a high level of professionalism, technical maturity, and business credibility.

R

Rexx Systems

rexx-recruitment.com

62

Rexx Systems is a well-established German technology company specializing in HR software solutions tailored for medium and large enterprises. With over 25 years of experience and a customer base of approximately 3,000 clients, the company offers modular, cloud-based and on-premise HR software products including recruiting, talent management, digital personnel files, and AI-enhanced tools. Their market position is strong within the HR technology sector, supported by consistent branding and professional digital presence. Technically, the website is built on WordPress with Elementor and leverages modern web technologies such as jQuery and Google Tag Manager. The site is optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, although there is room for improvement in public vulnerability disclosure and incident response transparency. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is good, with comprehensive privacy and cookie policies and consent mechanisms in place. However, the absence of WHOIS registration data introduces some uncertainty regarding domain registration transparency, though this is likely due to privacy protection. Overall, Rexx Systems presents a trustworthy and professional business with a secure and well-implemented web presence. Strategic recommendations include enhancing security transparency through vulnerability disclosure and incident response information, and maintaining rigorous audits of third-party scripts and data retention policies.

E

EveryWare AG

everyware.ch

71

EveryWare AG is a well-established Swiss IT service provider specializing in cloud, hosting, datacenter, network, and managed IT services. The company positions itself as a leading provider in Switzerland with over 25 years of experience, offering comprehensive business IT solutions focused on public, hybrid, and private cloud environments. Their services cater primarily to Swiss businesses and IT organizations seeking secure, scalable, and sovereign cloud and IT infrastructure solutions. The website reflects a professional and consistent brand image with detailed service offerings and customer success stories, reinforcing their market position. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is mobile-optimized, well-structured, and performs moderately well. Privacy and cookie policies are clearly presented with consent mechanisms in place, demonstrating good compliance with GDPR requirements. However, explicit security policies and incident response contacts are not publicly available, which could be improved. From a security perspective, the site enforces HTTPS and uses privacy-focused tools but lacks visible advanced security headers and a dedicated vulnerability disclosure policy. No vulnerabilities or suspicious content were detected. WHOIS data confirms the legitimacy of the domain registration, consistent with the company’s Swiss identity and business history. Overall, EveryWare AG’s website presents a trustworthy, professional, and compliant digital presence suitable for its target market. Strategic improvements in security transparency and incident response communication would further enhance their security posture and customer trust.

E

ELCA Security

elcasecurity.ch

85

ELCA Security is a Swiss-based cybersecurity company specializing in securing IT infrastructure, identities, and business operations for both businesses and government entities. The company positions itself as a robust security solutions provider with a focus on anticipating, protecting, detecting, and defending against cyber threats. Their website reflects a professional and modern digital presence, leveraging advanced web technologies such as Next.js and React, and integrating reputable third-party services like Stripe for payments and Matomo for privacy-focused analytics. The site is well-optimized for mobile devices and includes comprehensive cookie consent management via Cookiebot, demonstrating a commitment to privacy compliance.

B

bbv Software Services AG

bbv-software.de

59

bbv Software Services AG is a well-established Swiss software and consulting company specializing in digital consulting, software engineering, and digital transformation services. Founded in 1995, the company serves a broad range of clients, focusing on delivering scalable digital businesses, innovative digital experiences, and sustainable software products. Their market position is strong within Switzerland, supported by a medium-sized team and a comprehensive portfolio of services including AI consulting, cloud services, cybersecurity, and data management. The website reflects a professional and consistent brand image with multilingual support and rich content tailored to business clients. Technically, the website is built on WordPress with modern plugins and tools such as WPBakery Page Builder, Google Tag Manager, HubSpot, and LinkedIn Insight Tag. It employs standard web technologies including JavaScript and jQuery, and integrates multiple analytics and marketing tools with a robust cookie consent mechanism ensuring GDPR compliance. The site demonstrates good performance, mobile optimization, and accessibility features. From a security perspective, the site uses HTTPS with strong SSL configuration and employs Google reCAPTCHA to protect forms from spam. While some security headers are not explicitly detected, the overall security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management system. However, the site could improve by publishing explicit security policies and incident response contacts. Overall, bbv Software Services AG presents a trustworthy and professional online presence with strong business credibility, good technical implementation, and solid privacy and security practices. The risk level is low, and the company is well-positioned to maintain compliance and security in its digital operations.

J

JobCloud

jobcloud.ch

80

JobCloud AG operates as Switzerland's leading job portal and recruitment technology provider, serving over 30,000 Swiss companies. The company offers a comprehensive suite of services including job ads, programmatic job ads, employer branding, international recruitment, and candidate management. Their market position is strong, supported by well-known subsidiary portals jobs.ch and jobup.ch, and a clear focus on the Swiss recruitment market. The website is professionally designed with consistent branding and clear messaging targeting Swiss employers and recruiters.

S

Standout GmbH

standout.ch

55

Standout GmbH is a Swiss-based online marketing agency established in 2012, specializing in services such as SEO, Google Ads, social media marketing, lead generation, e-commerce marketing, and digital recruiting. The company holds reputable certifications including Google Premier Partner and Meta Business Partner, positioning it as a credible player in the Swiss digital marketing sector. Their website reflects a professional and modern design with clear navigation and comprehensive service offerings tailored to businesses seeking to enhance their online visibility and lead acquisition. Technically, the website leverages a modern technology stack including Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Cookiebot for privacy compliance. The use of Craft CMS is inferred from security cookies. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. Cookie consent mechanisms are robust, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements security best practices such as CSRF protection and security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a dedicated security policy or incident response contact is noted. Overall, the website demonstrates a high level of professionalism, security, and privacy compliance, making it a trustworthy digital presence for Standout GmbH. Strategic recommendations include publishing a security policy, providing incident response contacts, and establishing a vulnerability disclosure program to further enhance trust and security posture.

H

Hoststar - Multimedia Networks AG

hoststar.ch

73

Hoststar - Multimedia Networks AG is a Swiss-based web hosting and domain registration provider established since 2013. The company offers a wide range of hosting solutions including shared hosting, reseller hosting, virtual servers, SSL certificates, and security services such as SiteLock and VPN. Their market position is that of a reputable mid-sized hosting provider serving individuals and businesses primarily in Switzerland. The website is professionally designed with good content quality and clear navigation, targeting customers seeking reliable and affordable hosting services. Technically, the website is built on Drupal CMS and integrates multiple third-party marketing and analytics tools including Google Analytics, Facebook Pixel, Intercom, and SalesManago. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and security headers. HTTPS is properly implemented, ensuring secure communications. From a security perspective, the site follows basic best practices such as HTTPS and offers security-related products. However, it lacks visible security policies, incident response contacts, and comprehensive security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of explicit privacy and cookie policies, which is a notable compliance gap. Overall, the website is trustworthy and legitimate, supported by consistent WHOIS data showing transparent Swiss company ownership and an appropriate domain age. The risk level is moderate, primarily due to privacy compliance shortcomings and limited security policy disclosures. Strategic recommendations include implementing clear privacy and cookie policies, enhancing security headers, and publishing incident response information to improve trust and compliance.

M

Mautic

mautic-vr.ch

44

The website at mautic-vr.ch/s/login serves as a login portal for the Mautic marketing automation platform. It targets users such as marketers and administrators who utilize Mautic's services. The site is minimalistic, focusing on user authentication without providing extensive business or policy information. The technical infrastructure is based on the Mautic CMS platform, utilizing JavaScript and Froala editor libraries. The site shows basic mobile optimization and accessibility but lacks SEO optimization and comprehensive metadata. Security measures include CSRF tokens and password input masking; however, no explicit security headers or HTTPS status were provided, indicating room for improvement in security posture. Privacy and compliance policies are absent from this page, limiting transparency and GDPR compliance indicators. Overall, the site is functional but basic in content and security maturity.

B

billbox AG

billbox.com

55

billbox AG is a Swiss-based technology company specializing in digital invoice management and financial process automation. With over two decades of experience, the company offers web-based software solutions that enable businesses to digitize and control their financial workflows efficiently. Their services include business partner management, reporting, and integration with various ERP and accounting systems, positioning them as a trusted partner for companies seeking digital transformation in financial operations. The website reflects a mature, professional business with a clear focus on innovation, security, and customer-centric services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security practices include HTTPS enforcement and data encryption, although some improvements like DNSSEC and security headers could enhance their posture. Overall, the domain's long history and consistent WHOIS data support the company's legitimacy. The site is fully accessible without WAF or blocking mechanisms, and privacy compliance is addressed through a privacy policy and cookie consent banner.

A

ALEKS & SHANTU GmbH

aleksundshantu.com

53

ALEKS & SHANTU GmbH is a Berlin-based full-stack digital agency specializing in web development, design, animation, film production, and digital marketing services. With over 30 employees and a portfolio of more than 1000 projects, the company serves clients across diverse sectors including art, culture, industry, medicine, TV, and technology. The agency emphasizes high aesthetic standards, scalability, and technical precision, positioning itself as a trusted partner for digital-first movers and brands seeking impactful online presence. Technically, the website leverages modern frameworks such as Next.js and React, incorporates advanced multimedia elements like Lottie animations and video content, and demonstrates strong SEO and accessibility practices. The site is mobile-optimized and performs well, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, includes key security headers, and maintains secure contact forms with clear privacy policies. However, the absence of a published security policy and incident response contacts suggests room for improvement in formal security governance. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy, and well-structured digital presence. The main risk factor is the lack of WHOIS domain registration data, which raises questions about domain legitimacy and registration transparency. This should be investigated further to ensure full trustworthiness.

The website ospedaledelgiocattolo.ch currently displays a PHP version unsupported error page managed by Hostpoint AG, the largest Swiss web hosting provider. The site lacks any accessible business content, contact information, or compliance policies, indicating it is either under maintenance or misconfigured. The technical infrastructure relies on an outdated PHP version and includes jQuery 3.6.0, with no visible modern frameworks or CMS. Security posture is weak due to the unsupported PHP version and absence of security headers or HTTPS enforcement. Privacy compliance is non-existent, with no privacy or cookie policies found. Overall, the site presents a low trust profile and poor user experience.

Jsabelle Forrer is a small Swiss-based design service provider specializing in graphic, web, and app design as well as illustration. The website presents a professional design with clear focus on delivering quality design experiences to consumers. The technical infrastructure is based on BaseKit CMS and hosted by Hoststar, utilizing modern web fonts and iconography. However, the site lacks critical privacy and cookie policies, contact information, and security disclosures, which impacts its compliance and trustworthiness. Security posture is minimal with no detected security headers or incident response information. Overall, the website is functional and professional but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

I

INWX

inwx.de

68

INWX is a well-established domain registrar based in Germany, operating since 2004 with a strong market presence and over 100,000 customers worldwide. The company offers comprehensive domain registration services, including real-time registration, provider changes, and domain management via their Domain Robot platform. Their service portfolio also includes SSL certificates and hosting solutions, targeting businesses and individuals seeking domain-related services. The website is professionally designed, multilingual, and provides extensive TLD options with transparent pricing. Technically, the site uses a modern JavaScript stack with jQuery, Slick Carousel, and Matomo analytics, hosted behind Cloudflare for performance and security. Security posture is strong, with HTTPS, two-factor authentication, Whois privacy, DNSSEC, and Anycast DNS. However, explicit privacy and cookie policies are not found in the provided content, which is a compliance gap. No direct contact emails or phone numbers are visible, which may affect user trust and support accessibility. Overall, the domain registration data aligns well with the website content, indicating high legitimacy and trustworthiness.

L

LeanData, Inc

leandata.com

66

LeanData, Inc is a technology company specializing in intelligent go-to-market orchestration solutions designed to improve buyer experience, accelerate revenue, and enhance operational alignment for B2B companies. The company positions itself as an established player in the GTM orchestration space, offering SaaS-based services that integrate with sales and marketing operations. The website reflects a mature digital presence with professional design, clear messaging, and comprehensive privacy and cookie policies, indicating a strong commitment to user experience and compliance. Technically, the website is built on WordPress with a modern tech stack including jQuery, HubSpot, Clearbit, and Cookiebot for marketing, analytics, and consent management. SEO is well implemented with Yoast SEO and structured data (JSON-LD) for enhanced search visibility. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registrant data slightly reduces trust but is common for commercial entities using privacy protection. Overall, LeanData's website demonstrates a solid business and technical foundation with good privacy compliance and marketing sophistication. Recommendations include enhancing security headers, publishing security policies, and providing clearer direct contact information to improve trust and security posture.

D

Dept (formerly Hinderling Volkart)

hinderlingvolkart.com

67

The website represents the rebranding of Hinderling Volkart as part of the global digital agency Dept. It positions itself as a leading full-service digital agency in Switzerland with a broad range of services from strategy to experience design. The site is professionally designed with modern technologies such as Vue.js and Nuxt.js, and integrates analytics and marketing tools like Google Analytics and Google Tag Manager. Security posture is good with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and explicit privacy and terms policies. The missing WHOIS data is a concern but the website's professional appearance and parent company affiliation mitigate trust issues. Overall, the site is a credible digital agency landing page with room for improvement in compliance transparency and security hardening.

T

ti&m AG

ti8m.com

76

ti&m AG is a Swiss-based technology company specializing in digital solutions and security products, serving clients primarily in Switzerland and the European Union. Positioned as a market leader, the company focuses on innovation projects and digital transformation services. Their website reflects a professional and modern digital presence, emphasizing their expertise and leadership in the technology sector. The company targets business clients seeking advanced digital and security solutions, leveraging certifications such as ISO 27001 to reinforce trust and credibility. The technical infrastructure of the website includes modern web technologies and multiple analytics tools such as Google Analytics, Microsoft Clarity, Hotjar, and LinkedIn Insight Tag, integrated with a consent management platform (OneTrust) to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital strategy. However, the absence of explicit CMS or hosting provider details limits full infrastructure transparency. From a security perspective, the website enforces HTTPS with strong SSL configuration and employs privacy-conscious tracking practices like IP anonymization. While security headers are implied, explicit implementation details are not fully visible. The presence of ISO 27001 certification suggests a robust internal security framework, though the lack of a dedicated security policy or incident response page indicates room for improvement in transparency and readiness. Overall, the website presents a trustworthy and professional image with good privacy compliance and security posture. The main risk factor is the lack of WHOIS data, which raises questions about domain registration transparency. Strategic recommendations include enhancing security header implementation, publishing detailed security policies, and establishing clear incident response contacts to further strengthen trust and compliance.

P

Puzzle ITC

puzzle.ch

70

Puzzle ITC is a Swiss-based technology company specializing in open source software and sustainable IT solutions. They offer a broad range of services including digital transformation, software development, platform engineering, cloud infrastructure, AI, IT security, and mobility IT services. Their market presence is focused on Switzerland and parts of Germany, targeting businesses and organizations seeking innovative and sustainable IT solutions. The company demonstrates a solid market position with reputable client partnerships and a professional online presence. Technically, the website is built on WordPress with modern technologies such as Yoast SEO, Matomo analytics, and Google reCAPTCHA, indicating a mature digital infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features could be improved. Performance is moderate, and the site uses structured data for enhanced search engine understanding. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics (Matomo). However, it lacks explicit security policies, incident response contacts, and security headers, which are areas for improvement. Privacy compliance is partial, with no visible privacy or cookie policies and no consent mechanisms, which could pose compliance risks. Overall, Puzzle ITC presents a trustworthy and professional business with a good security posture but should enhance privacy and security transparency to meet higher compliance standards and user trust expectations.

P

PRODYNA

prodyna.com

73

PRODYNA is a large, established technology consulting and software development company specializing in digital transformation, cloud services, data and AI, and managed IT services. Their website demonstrates a high level of digital maturity with a professional design, multi-language support, and comprehensive cookie consent mechanisms. The company targets enterprise clients seeking holistic digital business solutions. Technically, the site is built on modern web technologies including Webflow CMS, Weglot for translations, and CookieYes for consent management, hosted likely via Cloudflare for performance and security. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly available. WHOIS data is unavailable, indicating privacy protection, which slightly reduces transparency but is common for professional firms. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements, supporting PRODYNA's market position as a credible technology partner.

M

mp technology AG

mptechnology.ch

62

mp technology AG is a Swiss-based software development company specializing in custom business and mobile applications for both B2B and B2C markets. The company positions itself as an agile development specialist with award-winning projects such as the Smile App, indicating a strong market presence in Switzerland's technology sector. Their service offerings include e-business applications, enterprise solutions, technology consulting, and mobile app development using modern frameworks like Vaadin and Angular. Technically, the website is built on WordPress with a moderate tech stack including jQuery and FontAwesome, showing a blend of modern and legacy technologies. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and avoids exposing sensitive data, but lacks important security headers and uses an outdated jQuery version, which could pose risks. Privacy compliance is weak due to the absence of privacy and cookie policies and no visible consent mechanism. Overall, the domain registration aligns well with the business claims, supporting legitimacy and trustworthiness.

I

Inventage AG

inventage.com

70

Inventage AG is a Swiss-based technology company specializing in custom software solutions leveraging modern web technologies and open-source components. Established in 2000, the company targets businesses and organizations seeking tailored digital solutions. Their market position is that of a trusted, established provider with a focus on quality and innovation. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting credibility and trust. Technically, the website uses modern web standards with JavaScript and CSS, and integrates Matomo Analytics for privacy-conscious user tracking. Hosting is provided by Cloud DNS Ltd, and the domain is well-maintained with a long history. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. From a security perspective, HTTPS is enforced, and domain status includes clientTransferProhibited, indicating domain transfer protection. However, DNSSEC is not enabled, and no security headers were detected, which could be improved. No explicit security policies or incident response contacts are published, representing an area for enhancement. Privacy compliance is good with a comprehensive privacy policy, but no cookie consent mechanism was found. Overall, the website and business demonstrate a solid risk posture with no critical vulnerabilities or suspicious indicators. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security policies, and implementing cookie consent to enhance compliance and trust.

I

INNOQ

innoq.com

73

INNOQ is a professional technology consulting firm specializing in software architecture, digital product development, AI, and training services. The company operates primarily in Germany and Switzerland with multiple office locations, serving technology-focused clients seeking innovative and pragmatic software solutions. Their market position is that of an established medium-sized consultancy with a strong emphasis on future-proofing technology and delivering effective digital infrastructures. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, including optimized performance, mobile responsiveness, and accessibility features. The use of Cloudflare for hosting and analytics, Cloudinary for media delivery, and FriendlyCaptcha for form protection indicates a well-architected and secure technical environment. From a security perspective, the site enforces HTTPS, uses CAPTCHA to prevent spam, and offers S/MIME certificates for encrypted email communication, reflecting a strong security posture. However, the absence of explicit security headers and a public security policy or vulnerability disclosure program suggests areas for improvement. The lack of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the professional presentation and contact information. Overall, INNOQ presents a low-risk profile with a solid business and technical foundation. Strategic recommendations include enhancing security headers, publishing security policies, and implementing cookie consent mechanisms to further improve compliance and trust.

Hexagon AB is a global leader in measurement technologies, providing advanced solutions that enhance productivity, quality, safety, and sustainability across vital industries such as construction, manufacturing, mining, and transportation. The company leverages cutting-edge technologies including robotics, AI, digital twins, and spatial intelligence to deliver innovative products and services tailored for enterprise clients. Hexagon's market position is strong, supported by numerous customer success stories and a consistent brand presence. Technically, the website is built on modern frameworks like Next.js and React, with content managed via Sitecore Content Hub. The site demonstrates excellent performance, mobile optimization, and SEO practices. Security is robust with HTTPS enforced and multiple security headers implemented, alongside a cookie consent mechanism indicating privacy awareness. However, explicit privacy policies, terms of service, and security incident response information are not visibly published. The security posture is solid with no detected vulnerabilities or exposed sensitive data. WHOIS data confirms the legitimacy of the domain and company information, aligning with the website's claims. The absence of direct contact emails or phone numbers and lack of published security policies represent areas for improvement. Overall, Hexagon's website reflects a mature, enterprise-grade digital presence with strong business credibility and technical implementation. Strategic enhancements in privacy and security transparency would further strengthen trust and compliance.

Fincons Group AG is a well-established IT business consulting and system integration company with over 40 years of experience. The company operates internationally with offices across Europe and the US, serving industries such as media, financial services, energy, transportation, manufacturing, public administration, and international institutions. Their business model focuses on providing consulting, system integration, proprietary solutions, and smart-shore services, supported by a strong partnership ecosystem. The website reflects a professional and consistent brand image targeting enterprise clients and organizations seeking digital transformation solutions. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Slick Carousel, with integration of Google Analytics and Tag Manager for analytics and marketing. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility enhancements could be made. The CMS used is Kali, a custom solution, indicating a tailored digital infrastructure. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. While explicit security headers are not fully confirmed, no critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's claims, showing transparent and consistent registration information, supporting the legitimacy of the business. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Recommendations include enhancing security headers, publishing a security policy or incident response contact, and improving accessibility features to further strengthen compliance and trust.

E

Eviden

eviden.com

78

Eviden is a technology enterprise and a subsidiary of the Atos Group, specializing in AI-enabled technologies across advanced computing, cybersecurity, mission-critical systems, and quantum computing. The company targets enterprise clients, public sector organizations, and defense agencies, offering a broad portfolio of digital solutions and infrastructure products. Eviden positions itself as a leader in innovation with a strong emphasis on sustainability and security. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation. Technically, Eviden leverages WordPress CMS with modern analytics and marketing tools, including Matomo and Marketo, while implementing a robust cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforcement and bot protection, though some security headers could be improved. The domain eviden.com is well-established since 2003, registered transparently, and consistent with the business identity. Overall, Eviden demonstrates a high level of digital maturity and business credibility.

E

ERNI

betterask.erni

73

ERNI is a Swiss-based software engineering consultancy specializing in advising companies on innovation and technology to enhance performance through software and digitalization of critical business processes. The company positions itself as a leading provider in software engineering and digital transformation with a broad portfolio of services including software engineering, requirements engineering, quality assurance, architecture advisory, design, embedded software, digital business solutions, agile consulting, DevOps, cloud, data and AI, and cybersecurity. The website reflects a mature digital presence with multilingual support and professional branding consistent with a large enterprise. Technically, the website is built on WordPress using Elementor and several modern plugins for SEO, multilingual support, and GDPR compliance. It employs Google Analytics and Hotjar for analytics and user behavior tracking. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and vulnerability disclosure policies could be improved. The WHOIS data is privacy-protected but consistent with the corporate identity of Erni Group Holding AG, indicating legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the website demonstrates a professional, secure, and compliant digital presence suitable for its business domain. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and making incident response contacts more visible to strengthen trust and security posture.

E

Emineo - so geht digital

emineo.ch

51

Emineo is a well-established Swiss IT consulting and software engineering company with over 200 employees and nearly two decades of experience. The company specializes in SAP consulting, software engineering, business applications, data analytics, digital supply chain, and artificial intelligence services. Their market position is strong within Switzerland, targeting businesses and organizations seeking digital transformation and IT solutions. The website reflects a professional and consistent brand image with comprehensive service offerings and a clear focus on technology-driven solutions. Technically, the website is built on WordPress using modern plugins such as Elementor and Slider Revolution, with SEO optimizations and structured data implemented. The site is mobile-optimized and performs moderately well, leveraging common marketing and analytics tools including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Security posture is good with HTTPS enforced, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could benefit from explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is supported by a cookie consent mechanism and a privacy policy, though terms of service and data protection officer information are not evident. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration. Overall, Emineo presents a trustworthy and professional digital presence with room for enhancements in security transparency and privacy documentation. Strategic recommendations include improving security headers, publishing security and incident response policies, and enhancing accessibility features to further strengthen compliance and user trust.

E

ELCA Informatique SA

elca.ch

80

ELCA Informatique SA is a leading independent Swiss IT company specializing in business and technology solutions, including IT consulting, software development, and systems integration. With over 2300 employees and a turnover of CHF 339 million in 2024, ELCA holds a strong market position in Switzerland and Europe, serving diverse sectors such as energy, transportation, finance, and public administration. The company emphasizes tailored digital transformation solutions and maintains a broad portfolio of subsidiaries and partner companies. Technically, ELCA employs modern web technologies including Next.js and React, integrates advanced analytics tools like Matomo and Hotjar, and uses robust consent management via Cookiebot. The website is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, security headers, and secure form handling, although a dedicated security policy and incident response contact channels are not explicitly published. Overall, ELCA demonstrates a professional, trustworthy online presence aligned with its business stature.

D

Deimos AG

deimos.ch

60

Deimos AG is a Swiss technology company specializing in the development of high-quality software applications and IT system integrations. The company targets businesses and organizations seeking tailored IT integration, web and software applications, AI solutions, and business analysis with UX design. Their market position is that of a specialized, small-sized player focused primarily on the Swiss market, offering niche services such as API gateways and AI chatbots leveraging modern AI frameworks like LangChain and OpenAI's ChatGPT. Technically, the website is built on a modern CMS platform with integration of popular libraries and services such as jQuery, FontAwesome, Vimeo, and Google Tag Manager, demonstrating a moderate to good level of digital maturity and performance. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional, well-branded, and trustworthy, with clear contact information and compliance with GDPR indicated by privacy and cookie policies. No critical vulnerabilities or suspicious patterns were detected, supporting a high legitimacy score.

Astina AG is a Swiss technology company specializing in e-commerce, process digitization, and system integrations. Their business model focuses on providing tailored digital transformation solutions to other businesses, leveraging platforms such as the Paloma Platform and various e-commerce and automation services. The company maintains a professional online presence with a clear focus on customer success and digital innovation, supported by a portfolio of reputable clients and partners. Technically, the website employs standard web technologies including JavaScript, CSS, and HTML5, with a responsive design optimized for mobile devices. While the site performs moderately well, there is room for improvement in accessibility and SEO enhancements. No CMS or hosting provider details were explicitly identified. From a security perspective, the website uses HTTPS, indicating basic encryption standards. However, there is a lack of visible security headers and no published security or incident response policies, which could be improved to enhance trust and compliance. The absence of privacy and cookie policies represents a compliance gap, especially under GDPR regulations. Overall, the website is trustworthy and professionally maintained, with clear business contact information and no signs of malicious content or blocking mechanisms. Strategic improvements in privacy compliance and security transparency would further strengthen the company's digital maturity and customer trust.

A

Adnovum

adnovum.ch

68

Adnovum is a technology company specializing in digital business solutions, cybersecurity, consulting, and cloud services, with a strong focus on banking, insurance, public sector, and transportation industries. The company positions itself as a trusted partner with over 30 years of experience, delivering tailored software and security solutions to enterprises and organizations. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that targets enterprise clients seeking digital transformation and security expertise. Technically, the website is built on the HubSpot CMS platform, leveraging modern analytics and marketing tools such as Google Analytics 4, Google Tag Manager, and Facebook Pixel. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained digital infrastructure. Security best practices are observed with HTTPS enforcement and security headers, though explicit security policy and incident response information are not publicly detailed. From a security perspective, the site demonstrates good posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR requirements. However, the absence of WHOIS registration data and domain transparency slightly reduces trustworthiness, suggesting possible privacy protection or registration under a different domain variant. Overall, Adnovum's website presents a professional, secure, and privacy-conscious digital front that supports its business credibility. Strategic improvements could include publishing detailed security policies, incident response plans, and enhancing domain registration transparency to further strengthen trust and compliance.

A

Adcubum AG

adcubum.com

68

Adcubum AG is a leading Swiss software company specializing in core insurance systems for the health and accident insurance sectors. Recently acquired by the Helsana Group, Adcubum continues to operate independently, providing modular, cloud-capable software solutions such as Syrius ad.Cloud. The company targets insurance providers in Switzerland, emphasizing digital transformation and operational efficiency. The website reflects a mature digital presence with modern technologies including React and Next.js, hosted on Vercel, and integrates comprehensive cookie consent and privacy compliance mechanisms. Security posture is strong with HTTPS, security headers, and CSRF protections in place. However, WHOIS data is unavailable, which slightly impacts transparency but does not detract from the overall legitimacy given the business context and parent company ownership. The site is well optimized for performance, mobile use, and SEO, with clear branding and professional content. No critical security vulnerabilities or compliance gaps were detected in the analyzed content.

A

Abacus Research AG

abacus.ch

79

Abacus Research AG is a well-established Swiss company specializing in ERP and business software solutions, serving over 65,000 companies with a broad partner network. Their website reflects a mature digital presence built on TYPO3 CMS, incorporating modern web technologies and a clear focus on user experience and accessibility. The company demonstrates strong compliance with privacy regulations, including GDPR, through comprehensive privacy and cookie policies with active consent mechanisms. Security posture is robust with HTTPS enforcement and no visible vulnerabilities, though incident response details and vulnerability disclosure mechanisms could be improved. Overall, the website and business presence indicate a trustworthy and professional organization with a strong market position in the Swiss technology sector.

Z

Zühlke Group

zuehlke.com

66

Zühlke Group is a well-established global technology and innovation service provider specializing in digital transformation, software engineering, and business innovation. The company targets enterprise clients seeking to modernize and innovate their business processes and products. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content that aligns with the company's market positioning and services. Technically, the site leverages modern frameworks such as Nuxt.js and includes advanced UI components like Plyr and Flickity, ensuring a fast and responsive user experience across devices. Security is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, complemented by comprehensive privacy and cookie policies that demonstrate GDPR compliance. However, the absence of WHOIS registration data limits domain trust analysis, though the website's professionalism and certifications like ISO 27001 support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and technical maturity.

O

Orange Business

orange-business.com

77

Orange Business is a leading global provider of digital transformation services, specializing in end-to-end intelligent solutions, hybrid and public cloud services, cybersecurity, AI, and IoT. The company targets enterprise clients seeking to modernize their IT infrastructure and enhance operational efficiency. Their market position is strong, supported by partnerships with major technology firms and a comprehensive portfolio of services. Technically, the website is built on Drupal CMS with modern JavaScript frameworks and includes personalization and privacy management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and privacy compliance mechanisms in place, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website reflects a professional and trustworthy enterprise presence with moderate to high technical and security maturity.

N

Netcetera AG

netcetera.com

64

Netcetera AG is a well-established Swiss technology company specializing in tailored software solutions for sectors including banking, payments, healthcare, mobility, and publishing. The company positions itself as a trusted partner with over 25 years of industry experience and a strong client base including major financial institutions. Their business model focuses on B2B software development, AI integration, and cloud services, emphasizing security and user experience. Technically, the website employs modern web technologies such as Google Tag Manager, Matomo Analytics, and Usercentrics for consent management, with responsive design and accessibility features. The site demonstrates good SEO practices and a professional user experience. However, some security best practices like explicit security headers and published security policies are missing. From a security perspective, the site uses HTTPS and secure forms but lacks visible incident response contacts and vulnerability disclosure mechanisms. The absence of WHOIS data for the domain is a notable anomaly, reducing trustworthiness despite the professional web presence. Overall, the website is high quality and trustworthy in content and design but would benefit from improved transparency in domain registration and enhanced security disclosures to strengthen its risk posture and compliance standing.

Ergon Informatik AG is a well-established Swiss IT company founded in 1984, specializing in custom software development, digital transformation consulting, security solutions, and advanced technologies such as artificial intelligence and blockchain. The company holds a strong market position in Switzerland and Germany, serving diverse industries including finance, healthcare, retail, and government. Their business model focuses on delivering tailored software solutions and consulting services to ambitious organizations seeking digital innovation and operational excellence. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Technically, the website employs modern web technologies including JavaScript frameworks (likely Vue.js), CSS, and integrates a consent management platform (Usercentrics) alongside Google Tag Manager for analytics. The site is mobile-optimized, fast-loading, and SEO-friendly, indicating a high level of digital maturity. Security measures such as HTTPS enforcement, security headers, and privacy compliance mechanisms are in place, demonstrating a responsible approach to user data protection. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive information. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and trust. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. Overall, Ergon Informatik AG presents a trustworthy and professional online presence with robust technical and privacy standards. Strategic recommendations include publishing explicit security policies, adding vulnerability disclosure information, and enhancing incident response readiness to further strengthen their security posture and stakeholder confidence.

B

bbv Software Services AG

bbv.ch

61

bbv Software Services AG is a well-established Swiss technology company specializing in digital consulting, software development, and digital transformation services. With a medium-sized workforce and a history dating back to 1995, bbv positions itself as a trusted partner for companies seeking to innovate and scale digital businesses. Their offerings include software engineering, AI consulting, data management, cybersecurity, and cloud services, targeting enterprises aiming to leverage modern technologies for sustainable success. The website reflects a mature digital presence with multilingual support and comprehensive content tailored to business clients. Technically, the website is built on WordPress with modern plugins and tools such as Yoast SEO, WPML for multilingual support, and advanced cookie consent management aligned with GDPR and Google Consent Mode. The site demonstrates good performance, mobile optimization, and SEO practices, supporting a positive user experience. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA to protect forms, and manages cookie consent effectively. However, explicit security headers and published security policies are lacking, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected. Overall, bbv.ch presents a professional, trustworthy, and compliant digital presence suitable for its business domain. Strategic recommendations include enhancing security headers, publishing incident response information, and establishing a vulnerability disclosure policy to further strengthen security posture and stakeholder confidence.

M

Mimacom AG

mimacom.com

77

Mimacom AG is a Swiss-based software engineering and consulting company specializing in digital transformation services including cloud, data, automation, and AI. The company targets enterprise clients across multiple industries such as banking, insurance, manufacturing, retail, and life sciences. Mimacom positions itself as a trusted partner with a comprehensive portfolio of services and a strong customer base. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not prominently published. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for companies of this nature. Overall, Mimacom demonstrates a mature digital presence with professional branding and compliance practices.

I

iJUG Interessenverbund der Java User Groups e.V.

ijug.social

64

The website ijug.social serves as a decentralized social network platform powered by Mastodon, specifically targeting the Java User Groups community under the non-profit organization iJUG Interessenverbund der Java User Groups e.V. It provides a niche social networking service within the fediverse, fostering community engagement and collaboration among Java enthusiasts. The platform is administered by the iJUG e.V. infrastructure team, with clear contact information and a professional presentation. Technically, the site leverages Mastodon version 4.4.5 with modern web technologies including React and ES modules, offering a responsive and user-friendly experience. Security posture is moderate, with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is supported by a clear privacy policy, though terms of service and cookie policies are absent. Overall, the domain registration is privacy protected but consistent with the organization's identity, indicating legitimacy. The site is free from adult or questionable content, targeting a general audience of technology professionals and enthusiasts.

C

Crownpeak Technology, Inc.

evidon.com

67

Crownpeak Technology, Inc. is an enterprise technology company specializing in AI-driven product discovery and enterprise content management solutions. Their flagship products, Fredhopper and FirstSpirit CMS, empower global brands to enhance digital experiences, improve conversions, and ensure accessibility compliance. The company targets large enterprises seeking scalable and flexible digital growth solutions. The website reflects a mature digital presence with professional design, comprehensive content, and clear branding. Technically, the site employs modern analytics and marketing tools, including Google Analytics, Marketo, and LinkedIn Insight, alongside a robust consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS and Content Security Policy in place, though additional security headers and explicit security policies could enhance trust. WHOIS data is incomplete, which slightly impacts transparency but does not detract significantly from the site's legitimacy. Overall, Crownpeak presents as a credible and professional technology provider with a strong market position.

Manatal operates careers-page.com as a service to enable HR departments and recruitment agencies to create and customize career pages easily. Positioned as a next generation recruitment software provider, Manatal targets HR professionals and recruitment agencies with a SaaS business model. The website is a simple landing page linking to the main Manatal site, with basic content and branding consistency. Technically, the site uses modern frontend libraries like jQuery and Bootstrap, hosted partially on Amazon S3, indicating a cloud-based infrastructure. Performance and mobile optimization are basic but functional. Security posture is moderate with HTTPS usage but lacks advanced security headers and policies. No privacy or cookie policies are present, indicating compliance gaps. Contact information is minimal but present in structured data. Overall, the site is professional but could improve in privacy and security transparency.