Technology security reports

I

Infomaniak Network SA

infomaniak.ch

77

Infomaniak Network SA is a Swiss-based sovereign cloud service provider specializing in hosting, domain registration, and collaborative tools. Positioned as a leading independent cloud provider in Europe, Infomaniak emphasizes data sovereignty, privacy, and security, hosting its solutions in the heart of Europe. The company targets businesses and professionals seeking secure and compliant cloud services. The website reflects a mature digital presence with excellent design, clear navigation, and comprehensive content that aligns with its business objectives. Technically, the website is built using modern frameworks such as React and Gatsby, ensuring fast performance and mobile optimization. The infrastructure appears robust, likely self-hosted, with strong SEO and accessibility features. Security posture is strong, with HTTPS enforced, multiple security headers, and no visible vulnerabilities. The company holds ISO 27001 certification and maintains transparent security and privacy policies, including GDPR compliance and a dedicated data protection officer. Overall, Infomaniak demonstrates a high level of professionalism and trustworthiness. The absence of WHOIS data is a limitation but does not detract significantly from the site's credibility given the strong business and security indicators. Strategic recommendations include maintaining up-to-date security audits, enhancing incident response transparency, and continuing user education on security best practices.

I

Issuu Inc.

issuu.com

76

Issuu Inc. operates a mature and well-established digital publishing platform that transforms PDFs and other document types into interactive flipbooks and various shareable content formats. The company targets individual creators, marketers, publishers, and enterprises, offering a comprehensive suite of tools for content creation, publishing, sharing, and analytics. Their market position is strong, supported by integrations with major platforms like Canva, HubSpot, and Adobe, and a clear business model that includes freemium and paid subscription plans with commission-free digital sales. Technically, Issuu leverages modern web technologies including React and Next.js, hosted on AWS infrastructure, with performance and mobile optimization rated as excellent. The website employs robust tracking and consent management tools such as Google Tag Manager and Cookiebot, ensuring compliance with privacy regulations. Security posture is solid with HTTPS enforcement, domain locking, and bot protection via reCAPTCHA, though DNSSEC is not enabled, representing a minor area for improvement. From a security perspective, the platform demonstrates good practices but lacks publicly available dedicated security policies or incident response contacts. No vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness. Overall, Issuu presents a professional, secure, and privacy-conscious digital publishing service with a high level of technical maturity and business credibility. Strategic recommendations include enabling DNSSEC, publishing explicit security and vulnerability disclosure policies, and enhancing incident response transparency to further strengthen trust and compliance.

E

EWM SA

ewm.swiss

52

EWM SA is a Swiss-based digital agency specializing in branding, web design, web development, and digital marketing services. Founded in 2020, the company serves a diverse clientele including world-leading brands, SMEs, and NGOs, with offices in Geneva, Zurich, Paris, London, and Nice. Their service offering is comprehensive, leveraging modern technologies such as Symfony, Laravel, Next.JS, and Concrete5, positioning them as a competitive player in the European digital agency market. The website reflects a professional and polished brand image with a strong portfolio and client references.

Yellow.Camera is a front-end website operated by avisec ag, a Swiss technology company specializing in cloud solutions and camera systems for project monitoring, including construction site cameras and panorama webcams. The company positions itself as a leader in cloud-based image data storage, analysis, and visualization, targeting customers and distribution partners interested in advanced camera and cloud solutions. The website reflects a professional business presence with consistent branding and active social media channels. Technically, the website is built on WordPress using the Themify Landing theme, enhanced with Yoast SEO Premium for search optimization and WP Rocket for performance. It employs Matomo analytics configured for privacy-friendly tracking, respecting Do Not Track and disabling cookies. The site is mobile-optimized and loads quickly, providing a good user experience. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics but lacks visible security headers and published privacy or cookie policies. WHOIS data is privacy protected, which is reasonable for this business type, though it limits transparency. No forms or sensitive data exposure were detected, and no adult or questionable content is present. Overall, the website demonstrates a solid technical and business foundation with room for improvement in privacy disclosures and security headers to enhance trust and compliance.

A

Amauri Champeaux

tarteaucitron.io

56

tarteaucitron.io is a specialized GDPR-compliant cookie consent management platform founded in 2020 by Amauri Champeaux in France. The company offers a SaaS solution with an online dashboard, automatic service detection, and integration with Google Consent Mode v2. The platform is open source, enhancing transparency and trust. The target audience includes website owners and developers seeking to comply with privacy regulations. The website is built on WordPress with a modern theme, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and anti-spam measures, though explicit security policies and headers could be improved. Privacy compliance is strong, with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.

K

Kalungi

kalungi.com

68

Kalungi, Inc. is a specialized full-service marketing agency focused exclusively on B2B SaaS companies that have achieved product market fit. The company offers a comprehensive suite of marketing services including fractional CMOs, full marketing teams, coaching, audits, and growth services tailored for SaaS businesses and VC/PE firms. Kalungi positions itself as a market leader with strong trust signals such as high customer ratings, partner badges, and detailed client testimonials. The website is professionally designed, mobile-optimized, and built on the HubSpot CMS platform, leveraging modern marketing and analytics technologies such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Wistia for video content. Despite the lack of publicly available WHOIS data, the website's professionalism and transparency in services and client success stories support its legitimacy. Privacy and cookie policies are present and indicate GDPR compliance, though explicit security policies and incident response contacts are not found. Overall, Kalungi demonstrates a mature digital presence with a strong focus on SaaS marketing growth.

D

Dream-Theme

dream-theme.com

52

Dream-Theme is an established international web design and development studio specializing in premium WordPress themes. With over a decade of experience and a large customer base exceeding 285,000 users, the company holds a reputable position in the WordPress theme market, further validated by its membership in the Envato Hall of Fame. Their business model focuses on theme development, sales, and customer support primarily through ThemeForest and their dedicated support portal. Technically, the website is built on WordPress using Elementor and Elementor Pro, leveraging modern web technologies and Cloudflare DNS for performance and security. The site is mobile-optimized and presents a professional design with good user experience and SEO practices. Security-wise, the site uses HTTPS and has domain transfer protections but lacks advanced security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the website is trustworthy and professional but could enhance its privacy compliance and security posture to align with best practices.

A

aiaibot

aiaibot.com

72

aiaibot is a Swiss-based AI platform specializing in intelligent customer service automation through AI agents, chatbots, and robotic process automation. The company targets enterprise clients across multiple sectors including insurance, banking, public administration, healthcare, energy, and transportation. The website demonstrates a professional digital presence with multimedia content, client testimonials, and a clear focus on Swiss data security and compliance. Technically, the site is built on HubSpot CMS with integrations for analytics and marketing tools, showing a moderate to good level of digital maturity. Security posture is solid with HTTPS and bot protection, though explicit security headers and policies are not fully documented. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency. Overall, the site is trustworthy and business credible but would benefit from clearer privacy and security policy disclosures.

M

myCONVOTIS

myaspectra.ch

62

myCONVOTIS operates as an IT infrastructure and managed services provider with data centers located in Zürich and Basel, Switzerland. The website serves as a status page displaying operational status, uptime metrics, and system performance charts for various components such as DNS, SSLVPN, and OpenShift platforms. The target audience appears to be business customers and internal users relying on these IT services. The business model focuses on providing reliable data center services and IT platform management.

C

Copybara

copybara.com

59

Copybara is a technology company specializing in AI-powered continuous copy testing and optimization for marketers and growth teams. Their SaaS platform automates the process of A/B testing for ads and landing pages, enabling rapid experimentation and learning without requiring engineering resources. The company positions itself as a niche player focused on accelerating copy testing at scale to improve marketing performance. Technically, the website is built using modern frameworks such as Next.js and React, hosted on AWS infrastructure. The site demonstrates good performance, mobile optimization, and SEO practices. However, some security enhancements such as enabling DNSSEC and implementing security headers could improve the overall posture. The site uses third-party marketing and tracking scripts including Google Tag Manager and Leadsy.ai. From a security perspective, the site enforces HTTPS and has domain transfer protections in place, but lacks explicit security policies, incident response contacts, and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is basic, with a privacy policy present but no clear GDPR compliance statements or cookie consent. Overall, the website is professional and trustworthy with moderate risk. Strategic improvements in privacy compliance, DNS security, and security policy transparency are recommended to enhance trust and security maturity.

R

RUAG International

ruag.com

66

RUAG International is a large, established technology and manufacturing company specializing in aerospace and defense sectors. The company offers key services including aerostructures manufacturing, space technology, and defense technology, positioning itself as a trusted international player with a strong brand presence. The website reflects a professional corporate identity with clear navigation and relevant content targeted at industry professionals and partners. Technically, the site is built on Drupal CMS, uses modern web technologies such as Google Fonts, Matomo analytics, and Google Maps API, and implements cookie consent mechanisms for privacy compliance. Security posture is good with HTTPS enforced and security headers present, though explicit security policies and vulnerability disclosures are absent. The WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the professional presentation of the website. Overall, RUAG International's digital presence is solid but could benefit from enhanced transparency in privacy and security documentation.

J

Jimdo

jimdo.com

73

Jimdo is a technology company specializing in providing an all-in-one platform for small businesses to create websites, online stores, and manage bookings, logos, SEO, analytics, domains, and hosting. The company positions itself as a comprehensive solution for entrepreneurs and small business owners seeking easy-to-use digital tools. The website reflects a mature digital presence with a modern tech stack including React and Gatsby, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data limits domain registration insights but does not detract from the overall legitimacy and professionalism of the site. Strategic recommendations include publishing detailed security and incident response policies and enhancing transparency around vulnerability disclosures.

D

digifor GmbH

digifor.ch

54

digifor GmbH is a Swiss-based small technology service provider specializing in web design, IT services, digitalization consulting, and digital printing. The company targets small and medium enterprises seeking to enhance their digital presence and IT infrastructure. Their market position is regional with a focus on delivering tailored digital solutions. The website is built on TYPO3 CMS with SEO optimizations and presents a professional, consistent brand image. Contact information is clearly provided, including phone, email, and multiple contact forms, enhancing business credibility. Technically, the site uses modern frameworks and scripts, performs moderately well, and is mobile optimized. Security posture is good with HTTPS enforced and secure forms, though lacking formal published security policies and some security headers. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and safe for general audiences.

F

FormulaBerry

formulaberry.com

57

FormulaBerry is a small technology startup offering an AI-powered bot that simplifies the use of Excel and Google Sheets by generating, explaining, and correcting formulas. The website presents a professional and consistent brand image targeting businesses and individuals seeking to improve spreadsheet efficiency without coding expertise. The technical infrastructure leverages modern frontend technologies such as Bootstrap, jQuery, and Google Fonts, with Cloudflare providing DNS and likely CDN services. Analytics are handled via Plausible, emphasizing privacy-conscious tracking. Security posture is adequate with HTTPS enforced and domain transfer protection enabled, but lacks DNSSEC and explicit security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is limited to an email address, with no phone or physical address provided. Overall, the website is well-designed, mobile-optimized, and content-rich, but could improve in security and privacy transparency.

I

Invoiceberry Limited

invoiceberry.com

64

InvoiceBerry is a UK-based small business SaaS company specializing in online invoicing software tailored for freelancers and small businesses. The platform offers invoice creation, expense tracking, payment management, and integrates with popular payment gateways. The website is professionally designed, mobile-optimized, and provides clear business and contact information, including customer testimonials that reinforce trust. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Cloudfront CDN, with analytics tools like Plausible and Facebook Pixel for user tracking. Security posture is good with HTTPS enforced and secure forms, though no explicit security headers or incident response contacts are published. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. WHOIS data is unavailable, which slightly reduces trust but the overall business presence and content quality support legitimacy.

C

CH Open

ch-open.ch

46

CH Open is a Swiss non-profit association dedicated to promoting open source software and open standards within Switzerland. Established in 1982, it has a strong market presence with a diverse membership base including premium, collective, individual, student, and honorary members. The organization actively engages its community through events such as business apéros, cafés, lunches, workshops, and conferences like DINAcon and Open Education Day. It also offers services like an open source video conferencing server and maintains the OSS Directory platform for news, jobs, and resources related to open source. Technically, the website is built on WordPress with modern frameworks such as Bootstrap 4 and uses performance optimizations like lazy loading and caching via WP Rocket. It employs Matomo analytics for privacy-conscious user tracking and integrates social media channels for broader community engagement. The site is mobile optimized and SEO friendly, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers, a published security policy, incident response contacts, and a vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance statements. Overall, CH Open presents a trustworthy and professional online presence aligned with its mission. To enhance its security posture and compliance, it should implement cookie consent, publish detailed privacy and security policies, and provide clear incident response contacts.

F

FGTCLB

fgtclb.com

54

FGTCLB is a specialized technology service provider focusing on open source TYPO3 and Magento development projects. The company positions itself as an agile team of open source specialists delivering high-quality web development solutions. The website is built on TYPO3 CMS and integrates modern consent management tools such as Usercentrics, alongside analytics services like Google Analytics and Leadinfo. While the website content is professional and well-structured, there is a lack of publicly available WHOIS data, which raises some concerns about domain registration transparency. Security posture is moderate with some best practices observed, such as IP anonymization in analytics and consent management, but lacks visible security headers and published security policies. Overall, the site is accessible, well-optimized for mobile, and provides a good user experience, but could improve in privacy compliance and security transparency.

F

flake GmbH

flake.ch

54

flake GmbH is a Swiss-based WordPress agency specializing in web design, development, hosting, security, SEO, and WooCommerce services. The company targets businesses and organizations seeking professional WordPress solutions, positioning itself as a niche provider with a focus on quality and customer support. The website reflects a professional and consistent brand image with comprehensive service descriptions and contact information. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, jQuery, Google Maps API, and Matomo analytics. The site demonstrates good SEO practices, mobile optimization, and moderate performance. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and some best practices such as honeypot protection on forms and privacy-focused analytics. Nonetheless, it lacks several important security headers and explicit cookie consent mechanisms, which are recommended for enhanced security and compliance. Overall, the website is trustworthy and professionally maintained, with no signs of malicious activity or suspicious content. Strategic improvements in security headers, privacy consent, and incident response transparency would further strengthen its security posture and compliance.

I

In The Pocket

inthepocket.mobi

71

In The Pocket is a well-established European digital product studio headquartered in Belgium, specializing in strategy, design, and technology services. With over 200 in-house experts and a client base exceeding 400, the company offers a broad range of services including AI development, platform engineering, mobile and web development, and strategic consulting. Their market position is strong within the technology sector, supported by notable client partnerships and case studies. Technically, the website is built on modern frameworks such as Webflow, integrates advanced animation libraries like GSAP, and uses marketing and analytics tools including HubSpot and Google Tag Manager. The site is performant, mobile-optimized, and SEO-friendly. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and incident response information, which are areas for improvement. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency, though the professional quality of the website mitigates concerns. Overall, the website demonstrates a mature digital presence with room to enhance security and compliance disclosures.

A

Artionet

eseances.ch

51

eSéances is a Swiss-based digital governance software solution developed by Artionet.Group, targeting public and private organizations requiring efficient session and meeting management. The platform offers a comprehensive suite of tools including agenda preparation, document consultation, decision tracking, and automated minutes generation, emphasizing security and collaboration. The website reflects a mature digital presence with integration of modern web technologies and marketing tools, supporting a medium-sized business with a strong foothold in the Swiss market. Security posture is solid with HTTPS and encryption practices, though lacks publicly accessible privacy and cookie policies, which are critical for compliance. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

A

Artionet

egov4.ch

58

egov4.ch is a Swiss-based digital governance solutions provider developed by Artionet, offering a comprehensive suite of e-government products tailored for public institutions and private enterprises. The company has a strong market position in Switzerland with over 1,500 clients and emphasizes secure, compliant, and paperless digital transformation. Their key services include digital forms, secure data sharing, digital signatures, meeting management, and virtual service desks, all hosted and developed in Switzerland to ensure data sovereignty and security. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and AutopilotHQ for marketing automation. The site is well-designed with good navigation and mobile optimization, though some accessibility features could be improved. Hosting appears to be Swiss-based, aligning with the company's data residency claims. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS and integrates SuisseID for legally valid digital signatures, indicating a strong security posture. However, the absence of explicit security headers and published security policies represents an area for improvement. Privacy compliance is limited due to the lack of visible privacy and cookie policies, which could pose regulatory risks. Overall, egov4.ch presents a professional and trustworthy digital presence with solid business credibility and technical implementation. Strategic enhancements in privacy compliance and security transparency would further strengthen their position and reduce potential risks.

D

Dunkel

dunkel.cc

51

Dunkel is a Swiss-based creative agency specializing in branding, web development, UI/UX design, and motion design. Founded in 2010 and located in Bern, the company serves a discerning clientele including government entities and corporate clients. Their business model focuses on delivering purpose-driven, user-friendly digital and communication solutions, positioning themselves as a niche provider with a strong emphasis on quality and creativity. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript with jQuery. It uses Matomo analytics configured to disable cookies, demonstrating a privacy-conscious approach. The site is mobile optimized and SEO friendly, though it lacks some advanced security headers. Performance is moderate, with room for optimization. Hosting details are not explicitly disclosed. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and public security policies suggests opportunities for strengthening the security posture. No incident response or vulnerability disclosure information is publicly available. Overall, Dunkel's website presents a trustworthy and professional front with strong business credibility and privacy compliance. The risk profile is low, but security enhancements and transparency improvements are recommended to further solidify trust and resilience.

R

ReviewForest

reviewforest.org

61

ReviewForest is a technology-driven platform that enables businesses to increase customer reviews by planting trees for their customers, thereby combining marketing with environmental sustainability. The company positions itself as a niche leader in eco-friendly review generation and climate positive branding, targeting businesses that want to grow their online reputation while contributing to climate action. The platform offers tools such as marketing templates, review widgets, and integration with major review platforms like Google and Amazon. Technically, the website is built on Webflow with integrations including PostHog for analytics and Cloudflare for hosting and CDN services, delivering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and explicit security policies are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business mission.

T

Terminal8 GmbH

terminal8.ch

52

Terminal8 GmbH is a small, professional web design and development agency based in Bern, Switzerland, specializing in TYPO3 CMS-based responsive websites, branding, and print design. The company positions itself as a creative and experienced partner for businesses seeking distinctive digital and print presence. Their website reflects a high level of professionalism with comprehensive service descriptions and a strong focus on user experience and accessibility. Technically, the site leverages modern JavaScript libraries and frameworks, including TYPO3 CMS, jQuery, Plyr, and Mapbox GL JS, ensuring a responsive and engaging user interface. Privacy is respected through a detailed cookie consent mechanism and the use of Matomo analytics, which is privacy-friendly. Security posture is good with HTTPS enforced and CAPTCHA protection on forms, though formal security policies and vulnerability disclosures are not published. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

J

Job Board Doctor

jobboarddoctor.com

57

Job Board Doctor is a specialized consulting and advisory service focused on improving job boards and talent acquisition technology. The website offers expert guidance on revenue generation, strategy, analysis, and start-up support for job boards and recruiting sites. The business targets job board owners, recruiters, and talent acquisition professionals globally. The site is built on WordPress with a modern tech stack including Google Analytics and AdSense for monetization and tracking. The content is professional, well-structured, and optimized for SEO and mobile devices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. WHOIS data is missing, raising concerns about domain registration legitimacy despite the site's professional appearance and long-standing content history. Overall, the site is credible but would benefit from improved transparency on domain registration and enhanced security practices.

R

RecTech Media

rectechmedia.com

59

RecTech Media is a small, specialized consulting and media company serving the recruitment technology industry. They provide brand marketing services to HR Tech vendors and publish relevant news, tools, and shows to inform modern recruiters. The company targets recruitment professionals and HR technology vendors, positioning itself as a niche media and consulting provider within the recruitment tech sector. Their digital presence includes a well-structured website built on Squarespace, enriched with multimedia content such as videos, podcasts, and downloadable ebooks. Social media integration is strong, with active accounts on Twitter, LinkedIn, Facebook, and YouTube. Technically, the website uses modern web technologies and third-party analytics tools, but there is room for improvement in security headers and privacy compliance. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust, although the website content and social presence support legitimacy. Overall, the site is professional, informative, and well-targeted to its audience.

T

TAtech

tatech.org

49

TAtech is a professional association dedicated to talent acquisition solutions, providing a comprehensive platform for industry professionals through events, digital programming, certification, and membership services. The website reflects a mature and well-established organization with a clear market position as a leader in talent acquisition technology. The technical infrastructure is built on a modern WordPress platform with integrations such as WooCommerce, Gravity Forms, and HubSpot, supporting a rich user experience and digital engagement. Security posture is solid with HTTPS and domain protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is addressed with cookie consent mechanisms and a basic privacy policy, but could be enhanced with more explicit GDPR compliance details. Overall, the site demonstrates high professionalism, trustworthiness, and effective business credibility.

RangeTouch is a small-scale open source project focused on providing a lightweight JavaScript library that improves the usability of HTML range sliders on touch devices. The website serves primarily as a documentation and download portal, linking to its GitHub repository where the code is hosted and maintained. The target audience is developers and designers seeking to enhance user interface components for touch-enabled devices. The business model is based on open source distribution without direct monetization. The market position is niche, catering to a specific UI enhancement need within the web development community. Technically, the website is simple and performant, built with standard HTML, CSS, and JavaScript, and hosted with Cloudflare DNS services. The site is mobile optimized and provides a clean user experience with clear navigation and relevant content. However, it lacks advanced SEO and accessibility features. There are no CMS or complex frameworks detected, reflecting the site's minimalistic approach. From a security perspective, the domain is registered with a reputable registrar and has clientTransferProhibited status, indicating some protection against unauthorized transfers. However, DNSSEC is not enabled, and no security headers are evident in the HTML content. The site does not provide privacy or cookie policies, nor does it offer contact information or incident response details, which limits its compliance posture. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. Overall, the website is low risk with a moderate security posture suitable for its purpose as an informational and download site for an open source library. Strategic improvements include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing contact or security incident channels to enhance trust and compliance.

S

sesamnet GmbH

sesamnet.ch

57

sesamnet GmbH is a Swiss-based web design and hosting agency specializing in TYPO3 CMS solutions, serving primarily the Bern and Freiburg regions. As a subsidiary of digifor GmbH, it offers a comprehensive suite of services including web design, hosting, digital printing, and IT solutions. The company targets small to medium-sized enterprises seeking tailored and professional web solutions. The website reflects a solid regional market position with clear branding and consistent messaging. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as Bootstrap, Font Awesome, and jQuery. It employs Google Tag Manager and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and demonstrates good SEO practices, though accessibility could be improved. Hosting is described as high-quality with modern colocation facilities, though specific hosting providers are not named. From a security perspective, the site uses HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks visible security headers and does not publish a security policy or incident response information. Cookie consent mechanisms are absent, which may pose GDPR compliance risks. Tracking tools are used moderately, with some privacy compliance gaps. Overall, the website is professional, trustworthy, and technically sound but would benefit from enhanced privacy compliance and security transparency. Strategic improvements in cookie consent, security policies, and accessibility would strengthen its security posture and regulatory adherence.

B

BST Software

bst.software

50

BST Software is a small, established German technology company specializing in custom software development, web development, and web design services primarily serving the Mittelhessen and Rhein Main regions. The company offers a broad range of services including Microsoft .NET software development, modern web technologies such as Laravel, Vue, Angular, and Node.js, as well as CMS-based web design and web hosting. Their market position is supported by longstanding client relationships and certifications such as Microsoft Partner Network membership. Technically, the website is built on WordPress with modern frameworks and libraries, demonstrating good digital maturity. The site is mobile optimized, SEO friendly, and uses SSL encryption, although some security headers are not explicitly detected. No analytics or tracking scripts were found, aligning with their cookiefree zone policy. Security posture is solid with SSL and no visible vulnerabilities, but the absence of explicit security policies and incident response information suggests room for improvement. WHOIS data is unavailable due to TLD restrictions, but the website content and trust indicators support legitimacy. Overall, the site is professional, secure, and compliant with GDPR, though cookie consent mechanisms are not implemented due to their cookiefree stance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and considering a cookie consent mechanism to improve compliance and user trust.

I

Idea Creation GmbH

e-guma.ch

71

Idea Creation GmbH operates the e-guma platform, a comprehensive voucher and ticketing system targeted at businesses in Switzerland and surrounding regions. The company provides SaaS solutions enabling clients to sell, manage, and market vouchers, tickets, and related products through customizable online shops integrated directly into their websites. The platform supports both online and on-site sales with real-time redemption and administrative tools. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a well-established market position. Technical infrastructure is based on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though a dedicated security policy and incident response information are absent. Overall, the site demonstrates high business credibility and compliance with GDPR, supported by visible contact information and trust signals such as client testimonials and social media presence.

S

Seitz Phototechnik AG

roundshot.com

66

Roundshot, operated by Seitz Phototechnik AG, is a Swiss-based company specializing in high-precision 360° panoramic cameras and webcam solutions. The company emphasizes quality manufacturing with CNC-milled aluminum parts and hand assembly, targeting professional and business customers requiring advanced imaging technology. Their product portfolio includes Livecam webcams, VR Drive automated stitching heads, and software for cross-media image distribution. The website reflects a niche market leader with a consistent brand and comprehensive product offerings. Technically, the site uses modern JavaScript libraries, a govis CMS, and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security headers and published security policies. WHOIS data is unavailable, which slightly reduces trust but the professional content and contact information support legitimacy. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations.

A

Actito

actito.com

67

Actito is a marketing automation and customer activation software provider targeting marketers and businesses seeking to transform customer satisfaction into revenue. The website presents a professional and modern digital presence, leveraging contemporary JavaScript frameworks and multiple marketing and tracking technologies. The technical infrastructure includes tools such as Microsoft Clarity, LinkedIn Insight Tag, and a consent management platform, indicating a moderate level of digital maturity. Security posture is adequate but could be improved by implementing standard security headers and publishing explicit privacy and cookie policies. The absence of WHOIS data for the domain www.actito.com is a notable concern, potentially indicating privacy protection or registry issues, which slightly impacts trustworthiness. Overall, the website is functional, business-focused, and safe for general audiences.

I

iAdvize

iadvize.com

74

iAdvize is a technology company specializing in AI-powered conversational commerce solutions for e-commerce businesses. Their platform offers AI shopping assistants designed to enhance customer journeys and increase conversion rates, positioning them as a leader in generative AI for e-commerce. The website is professionally designed, mobile-optimized, and integrates advanced marketing and analytics tools such as HubSpot, Google Analytics 4, and Didomi for consent management. Security posture is good with HTTPS and consent mechanisms in place, though some security headers could be improved and the jQuery version updated. The absence of WHOIS registration data is a concern for domain legitimacy but does not detract significantly from the professional presentation and trust signals on the site. Overall, the site is safe, business-focused, and well-structured, targeting e-commerce companies seeking AI-driven customer engagement solutions.

Box, Inc. is a leading enterprise cloud content management and file sharing service provider, founded in 2005 and headquartered in Redwood City, California. The company offers a subscription-based SaaS platform that enables businesses to securely store, share, and collaborate on content with robust workflow automation and compliance features. Box holds a strong market position as a trusted provider in the technology sector, serving a broad range of enterprise customers worldwide. Their website reflects a mature digital presence with comprehensive business and security information, targeting business users and IT professionals.

D

diff

diff.ch

60

diff.ch is a Swiss-based branding and web agency located in Bern, specializing in creating services in branding and web solutions. The website presents a professional image with clear descriptions of their offerings and a focus on delivering communicative solutions that add value and enjoyment. The target audience appears to be businesses and organizations seeking branding and web development services within Switzerland. The business model is service-oriented, focusing on client projects in branding and web solutions. The company positions itself as a regional player with a consistent brand presence and a small-sized agency profile.

A

Artionet.Group

artionet.group

66

Artionet.Group is a Swiss-based digital transformation company established in 2001, offering agile methodology-driven services combining strategy, design, and technology. The company operates multiple brands targeting diverse sectors including SMEs, public administrations, large groups, associations, and sports events. Their services range from custom website and e-commerce development to digital governance and video production. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information. Technically, the site uses modern web technologies and a proprietary CMS (IceCube2.Net), hosted on a reliable infrastructure with HTTPS enforced. Security posture is good but could be improved by adding security headers and updating analytics tools. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms pages detected. WHOIS data is unavailable, limiting domain trust verification, but the website content and branding indicate a legitimate and established business.

S

SNELLO

snello.eu

52

SNELLO is a German-based technology company offering a headless enterprise email marketing solution designed to empower decentralized teams, dealers, and partners to enhance customer engagement through personalized and regionally relevant campaigns. The platform emphasizes brand consistency, GDPR compliance, and international deployment capabilities, targeting enterprises seeking advanced email marketing tools integrated with CRM and SSO authentication. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and video backgrounds, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. Tracking is limited to WebTouchPoint scripts, indicating moderate user tracking. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

J

jobiqo GmbH

jobiqo.com

72

Jobiqo GmbH operates a leading job board software platform focused on recruitment marketing automation and AI-powered job advertising. The company targets media publishers, associations, and recruiters globally, offering a flexible white-label SaaS solution that enhances candidate reach and recruitment revenue. Their market position is strong, supported by industry awards and a comprehensive product suite including Jobiqo AIR and AI-driven search and match technologies. Technically, the website is built on WordPress with modern plugins and scripts, optimized for SEO, mobile, and accessibility. Security posture is solid with HTTPS, cookie consent, and a responsible disclosure policy, though explicit security headers and incident response contacts could be improved. The absence of WHOIS data is a concern but offset by the professional presentation and trust signals. Overall, Jobiqo demonstrates a mature digital presence with good compliance and security practices.

O

OWNBIT GmbH

ownbit.agency

55

OWNBIT GmbH is a Swiss web agency specializing in creating custom websites and web applications primarily for Swiss small and medium-sized enterprises (KMU). The company emphasizes user-centered digital solutions and has a strong market presence with over 12 years of experience and more than 200 clients. Their key services include bespoke website development, WordPress solutions, and client-specific web portals. The website is professionally designed using modern technologies such as Vue.js and Gridsome, ensuring excellent performance, mobile optimization, and user experience. Security-wise, the site employs HTTPS and cookie consent mechanisms but lacks explicit security policies or incident response information. WHOIS data is privacy-protected, which is typical for small agencies, and no suspicious patterns were detected. Overall, OWNBIT demonstrates a mature digital presence with strong business credibility and trust indicators.

I

Infomaniak Network SA

infomaniak.com

78

Infomaniak Network SA is a well-established Swiss cloud service provider specializing in sovereign cloud hosting, domain registration, and collaborative tools. Founded in 1994, the company positions itself as a leader in European independent cloud services, emphasizing data sovereignty and confidentiality. Their target audience primarily includes businesses and professionals seeking secure and compliant cloud solutions. The website reflects a mature business model with a strong market presence in the technology sector, particularly within Switzerland and Europe. Technically, the website is built using modern frameworks such as Gatsby and React, ensuring fast performance, mobile optimization, and good accessibility. Security is robust, with HTTPS enforced, comprehensive security headers, and ISO 27001 certification, indicating a strong commitment to information security and privacy. Privacy policies and GDPR compliance are clearly articulated, with mechanisms for cookie consent and data protection officer contact information readily available. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, making it a reliable platform for its users.

A

Artionet Web Agency

artionet.com

61

Artionet Web Agency is a Swiss-based digital agency specializing in comprehensive web solutions including site creation, e-commerce, content management, and digital marketing. Established in 2001, it serves a broad clientele with over 1,500 projects completed, positioning itself as a trusted regional player in the technology sector. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site uses a modern CMS (IceCube2.Net), integrates Google Analytics and Tag Manager for tracking, and employs responsive design techniques for mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and a formal security policy are absent. Privacy compliance is addressed with a GDPR-related privacy policy and cookie banner. Contact information is clearly presented, enhancing business credibility. Overall, the site scores well on content quality, technical implementation, and business credibility, with room for improvement in security best practices and privacy transparency.

O

Ortto

autopilothq.com

76

Ortto operates as a technology company providing a SaaS platform that integrates customer data, marketing automation, and analytics into a unified solution. The website presents a professional and modern design built using the Framer platform, indicating a moderate level of digital maturity. The technical infrastructure leverages JavaScript and web fonts with a focus on responsive design and user experience. Security posture appears limited based on the absence of visible security headers and explicit security policies, which suggests room for improvement in protecting user data and enhancing trust. Privacy compliance is weak due to the lack of privacy and cookie policies, which could expose the company to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced security and compliance transparency to improve trustworthiness and reduce risk.

W

Warfare Plugins, Inc.

warfareplugins.com

57

Warfare Plugins, Inc. operates the website warfareplugins.com, offering a specialized WordPress plugin called Social Warfare that enhances social sharing capabilities for content creators and marketers. Established in 2014, the company has positioned itself as a trusted provider with over one million downloads, focusing on performance, customization, and social media optimization. The website demonstrates a mature digital presence with strong SEO, marketing integrations, and a professional design tailored to WordPress users. Technically, the site leverages a modern WordPress stack with multiple plugins for e-commerce, affiliate marketing, and GDPR compliance, ensuring a fast and responsive user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though there is room for improvement in security headers and published policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the website is trustworthy, professional, and safe for general audiences.

N

n8n GmbH

n8n.io

77

n8n GmbH operates the website n8n.io, offering an AI-powered workflow automation platform that combines no-code speed with code flexibility. The company targets technical teams and businesses seeking to automate processes with AI integration. The platform is positioned as an innovative, source-available tool in the automation market, founded in 2018 and headquartered in Germany. The website demonstrates a high level of digital maturity, employing modern web technologies such as Vue.js and Tailwind CSS, with strong mobile optimization and fast performance. Analytics and marketing tools like Plausible Analytics and Google Tag Manager are used responsibly with a cookie consent mechanism in place. Security posture is strong with HTTPS enforced and domain registration consistent with the business identity. However, explicit privacy, terms of service, and security policies are not prominently found, which slightly impacts compliance and trust scores.

E

eMinded GmbH

eminded.de

61

eMinded GmbH is a Munich-based online marketing agency specializing in performance marketing services including SEO, SEA, social ads, content marketing, and digital analytics. Established in 2015, the company positions itself as a technology leader and trusted business partner for clients primarily in the German-speaking market. Their service portfolio is comprehensive, targeting businesses seeking to optimize their digital marketing performance. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern plugins and tools, ensuring good SEO and mobile optimization. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some HTTP security headers could be improved. Overall, the domain and business information align well, supporting the legitimacy of the company.

A

AB3 Creative Collective GmbH

ab3.ch

62

AB3 Creative Collective GmbH is a Swiss-based marketing and digital transformation agency founded in 2019, specializing in branding, e-commerce, SEO, marketing automation, and digital visibility. Positioned as a creative collective, AB3 serves a diverse clientele including SMEs, e-commerce brands, cultural projects, and service providers primarily in Switzerland but also internationally. The company leverages partnerships with Shopify and Webflow and employs a modern technology stack to deliver tailored digital solutions. Technically, the website is built on Webflow CMS, hosted on a CDN with fast performance and excellent mobile optimization. It integrates multiple modern JavaScript libraries and marketing tools such as Google Analytics, Google Tag Manager, LinkedIn Insight Tag, and cookie consent mechanisms, reflecting a mature digital infrastructure. The site demonstrates good SEO practices and accessibility features. From a security perspective, the site uses HTTPS with a solid SSL configuration and implements cookie consent for GDPR compliance. However, explicit security headers and a public security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data, which aligns well with the company's Swiss registration and business claims. Overall, AB3 presents a professional, trustworthy, and technically sound online presence with strong business credibility and compliance posture. Strategic enhancements in security transparency and incident response readiness would further strengthen their security posture and client trust.

F

Friendly

friendly.ch

63

Friendly is a Swiss software company specializing in privacy-focused web analytics and marketing automation solutions. Their flagship products, Friendly Analytics and Friendly Automate, provide businesses with tools to optimize website performance and automate marketing workflows while ensuring compliance with Swiss data protection laws (nFADP) and the EU GDPR. The company positions itself as a Swiss market leader emphasizing data sovereignty, transparency, and security certifications such as ISO 27001 and ISO 9001. Their open startup approach further enhances trust by publicly sharing financial and operational data. Technically, the website is built on WordPress with modern SEO and analytics integrations, including Matomo and Mautic, reflecting a mature digital infrastructure. The site is well-optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices. Hosting and data storage are Swiss-based, aligning with their privacy commitments. Security posture is strong with HTTPS enforced, certified standards, and privacy-conscious analytics configurations. However, the absence of a visible cookie consent mechanism and lack of published incident response or vulnerability disclosure policies represent areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, Friendly demonstrates a high level of business credibility, technical maturity, and privacy compliance, making it a trustworthy provider in the privacy-centric analytics and marketing automation market. Strategic recommendations include enhancing cookie consent transparency, publishing security incident contacts, and adding security headers to further harden the website.

M

MD Systems GmbH

digital-storytelling.ch

62

MD Systems GmbH operates the website digital-storytelling.ch, promoting Primer, a Drupal 10-based content management system tailored for organizations, products, and campaigns. The company positions itself as a provider of cost-effective, easy-to-use CMS solutions with a focus on online marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including a contact form, email, phone, and physical address in Switzerland. The presence of partner logos and client references such as Paul Scherrer Institut and UNICEF enhances credibility. Technically, the site is built on Drupal 10, leveraging modern web technologies including JavaScript and CSS. It employs cookie compliance mechanisms with opt-in consent and integrates Google Analytics for user tracking. Security posture is solid with HTTPS enforced and anti-bot protections on forms, though it lacks explicit security headers and published security policies. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital infrastructure suitable for its business goals. The domain registration data aligns well with the business identity, supporting legitimacy. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy. However, the absence of terms of service and incident response information suggests areas for improvement. The risk profile is low with no critical security issues found. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

M

Microsoft

appnexus.com

78

Microsoft Advertising is a division of Microsoft Corporation offering a comprehensive digital marketing platform that enables advertisers and publishers to reach billions of users across search, display, video, retail, and gaming environments. Leveraging Microsoft's extensive network and partnerships with platforms like Netflix, Ecosia, DuckDuckGo, and Yahoo, the service empowers businesses to optimize campaigns using AI-driven tools such as Copilot and Performance Max. The website demonstrates a high level of professionalism, technical sophistication, and compliance with privacy regulations, reflecting Microsoft's market leadership in technology and advertising solutions. The technical infrastructure is robust, utilizing Adobe Experience Manager as the CMS, hosted on Microsoft Azure, and employing modern analytics and monitoring tools including oneDS Application Insights and Microsoft Clarity. The site is well-optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices and comprehensive metadata. Security measures include HTTPS enforcement, security headers, and cookie consent mechanisms, contributing to a strong security posture. While WHOIS data for the subdomain is unavailable, this is consistent with large enterprises managing internal subdomains. The overall risk is low, with no detected vulnerabilities or suspicious content. Strategic recommendations include enhancing incident response visibility and publishing a vulnerability disclosure policy to further strengthen trust and security culture.