Security Directory

C

Cloudinary

cloudinary.com

70

Cloudinary is a leading cloud-based media management platform founded in 2011, specializing in image and video upload, storage, optimization, and delivery via APIs and CDN. The company targets developers, IT teams, marketers, and enterprises across various industries, providing scalable and AI-powered media solutions. The website reflects a mature digital presence with comprehensive product information, strong branding, and clear navigation. Technically, the site leverages modern web technologies including WordPress CMS, Bootstrap framework, and integrates analytics and marketing tools such as Google Analytics and LinkedIn Insight Tag. Security posture is solid with HTTPS enforced and no exposed sensitive data, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR indicators. Overall, Cloudinary demonstrates a high level of professionalism, technical maturity, and business credibility.

J

JobCloud

jobcloud.ch

80

JobCloud AG operates as Switzerland's leading job portal and recruitment technology provider, serving over 30,000 Swiss companies. The company offers a comprehensive suite of services including job ads, programmatic job ads, employer branding, international recruitment, and candidate management. Their market position is strong, supported by well-known subsidiary portals jobs.ch and jobup.ch, and a clear focus on the Swiss recruitment market. The website is professionally designed with consistent branding and clear messaging targeting Swiss employers and recruiters.

A

Advanced Sterilization Products, Inc.

asp.com

71

Advanced Sterilization Products, Inc. (ASP) is a leading healthcare company specializing in infection prevention and sterilization products. The company offers a broad portfolio including terminal sterilization systems, sterilization monitoring, and high-level disinfection solutions, targeting healthcare professionals and institutions. ASP is positioned as a market leader with strong branding and a comprehensive product offering, supported by its parent company Fortive Corporation. The website reflects a professional and well-structured digital presence with multi-regional support and extensive product information. Technically, the website is built on Drupal 10 with modern web technologies such as jQuery, Bootstrap, and AOS for animations. It demonstrates good performance, mobile optimization, and accessibility features. The site uses HTTPS and integrates tracking tools like Google Tag Manager and Facebook Pixel, with clear privacy and cookie policies indicating GDPR compliance. From a security perspective, the site enforces HTTPS and secure form handling but lacks explicit security headers and a public security policy or incident response page. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data reduces domain trustworthiness, but the strong corporate branding and external references mitigate concerns. Overall, the website is a secure, professional, and compliant digital asset for ASP, with recommendations to enhance security headers and publish a vulnerability disclosure policy to further improve trust and security posture.

C

Chambre de commerce, d’industrie et des services de Genève

ccig.ch

63

The Chambre de commerce, d’industrie et des services de Genève (CCIG) is a well-established private association founded in 1865, representing approximately 2600 member companies. It serves as a key economic actor in Geneva, promoting a strong economy and supporting its members through business networking, events, export services, legal advice, and publications. The website reflects a professional and consistent brand image, targeting local businesses and economic stakeholders. Technically, the site uses a modern tech stack including jQuery, Bootstrap, Kendo UI, and integrates analytics tools such as Google Analytics and LinkedIn Insight Tag. The site is mobile-optimized and well-structured, though performance is moderate. Security posture is good with HTTPS enforced, but lacks visible security headers and a public security policy. Privacy compliance is limited due to absence of explicit privacy and cookie policies or consent mechanisms. Overall, the domain registration data aligns well with the organization's claims, indicating a legitimate and trustworthy entity.

T

Théâtre de Beausobre

beausobre.ch

54

Théâtre de Beausobre is a well-established Swiss cultural venue located in Morges, attracting over 42,000 visitors per season to attend a diverse program of approximately 60 performances including theatre, dance, music, and circus. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization, supporting ticket sales and subscriptions through a partnered external platform. Technically, the site leverages WordPress with modern plugins and frameworks, ensuring good performance and SEO optimization. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant, and serves its audience effectively.

T

Terravigna AG

terravigna.ch

66

Terravigna AG operates a specialized e-commerce platform and physical retail stores focused on wine and spirits in Switzerland. The company offers a curated selection of wines, spirits, gift boxes, and organizes events and tastings, targeting wine enthusiasts and retail customers primarily in Switzerland. The website is built on the Magento platform, leveraging modern web technologies such as jQuery, Bootstrap, and integrates analytics and marketing tools like Google Analytics and Facebook Pixel. The digital infrastructure supports a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and use of invisible reCAPTCHA on forms, but lacks some security headers and explicit cookie consent mechanisms. Privacy and terms policies are present and comprehensive, supporting GDPR compliance. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

B

billbox AG

billbox.com

55

billbox AG is a Swiss-based technology company specializing in digital invoice management and financial process automation. With over two decades of experience, the company offers web-based software solutions that enable businesses to digitize and control their financial workflows efficiently. Their services include business partner management, reporting, and integration with various ERP and accounting systems, positioning them as a trusted partner for companies seeking digital transformation in financial operations. The website reflects a mature, professional business with a clear focus on innovation, security, and customer-centric services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA, ensuring a responsive and secure user experience. Security practices include HTTPS enforcement and data encryption, although some improvements like DNSSEC and security headers could enhance their posture. Overall, the domain's long history and consistent WHOIS data support the company's legitimacy. The site is fully accessible without WAF or blocking mechanisms, and privacy compliance is addressed through a privacy policy and cookie consent banner.

S

SERV – Swiss Export Risk Insurance

serv-ch.com

70

SERV is a Swiss government-backed export risk insurance provider that supports Swiss companies in managing risks associated with export transactions and expanding into new markets. The website presents a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern web technologies to deliver a user-friendly experience. The site is well-optimized for SEO, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and use of Google Tag Manager for controlled script loading. No critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS data for the domain is unavailable, which is inconsistent with the active and professional website presence and warrants further investigation. Overall, the website demonstrates a high level of trustworthiness and compliance with privacy regulations, making it a reliable resource for its target audience.

E

ERNI

betterask.erni

73

ERNI is a Swiss-based software engineering consultancy specializing in advising companies on innovation and technology to enhance performance through software and digitalization of critical business processes. The company positions itself as a leading provider in software engineering and digital transformation with a broad portfolio of services including software engineering, requirements engineering, quality assurance, architecture advisory, design, embedded software, digital business solutions, agile consulting, DevOps, cloud, data and AI, and cybersecurity. The website reflects a mature digital presence with multilingual support and professional branding consistent with a large enterprise. Technically, the website is built on WordPress using Elementor and several modern plugins for SEO, multilingual support, and GDPR compliance. It employs Google Analytics and Hotjar for analytics and user behavior tracking. The site is well-optimized for mobile and accessibility, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and vulnerability disclosure policies could be improved. The WHOIS data is privacy-protected but consistent with the corporate identity of Erni Group Holding AG, indicating legitimacy. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the website demonstrates a professional, secure, and compliant digital presence suitable for its business domain. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and making incident response contacts more visible to strengthen trust and security posture.

S

SAF AEROGROUP

safaerogroup.com

46

SAF AEROGROUP is a medium-sized aviation company headquartered in France, specializing in mission-aviation services including training, air operations, and consulting. The company targets multinational organizations, states, and commercial companies, aiming to be a global leader with a glocal business model that combines strong corporate functions with local agility. The website presents a professional image with detailed company history and executive team information. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, hosted by OVH sas. The site is mobile optimized and has moderate performance. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, representing compliance gaps. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

S

skyguide

skybriefing.com

69

Skybriefing.com is a professional aviation service website operated under the brand skyguide, providing essential services such as flight plan filing, NOTAM briefings, weather briefings, and access to aviation publications primarily for the Swiss aviation community. The website is well-structured, uses modern web technologies including Vaadin and Liferay, and maintains a consistent brand identity aligned with its parent organization. The domain is well-established since 2012, with registration details consistent with the business profile. Privacy and cookie policies are implemented with GDPR compliance in mind, and user tracking is conducted via Google Analytics with event tracking for downloads and form interactions. However, direct contact information such as emails or phone numbers is not prominently displayed, and no explicit security or incident response policies are published on the site.

global office GmbH is a German-based service provider specializing in telephone answering, office, and secretarial services. The company targets businesses requiring professional and empathetic customer communication, serving sectors such as public authorities, hospitality, and automotive dealerships. Their market position is supported by a sizable team of over 450 telephone agents and multiple locations, emphasizing personalized service and customer satisfaction. The website content is well-structured, professional, and includes multimedia testimonials to reinforce trust. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery, Swiper, and Tiny Slider to enhance user experience. The site is mobile-optimized with good navigation clarity and basic accessibility features. Performance is moderate, with no critical technical issues detected. SEO is basic but functional. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks published security policies, incident response information, and a cookie consent mechanism, which are important for GDPR compliance and user trust. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website presents a professional and trustworthy business front with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen the company's digital maturity and customer confidence.

global office Franchise AT GmbH is a medium-sized Austrian company specializing in outsourced telephone answering and customer service solutions. Established in 2012, the company offers a broad range of services including inbound and outbound call handling, backoffice support, and industry-specific packages for sectors such as hospitality, government, and automotive. Their 24/7 service model and high customer satisfaction position them as a reliable partner for businesses seeking to enhance customer communication and operational efficiency. Technically, the website is built on the Contao CMS platform, leveraging modern JavaScript libraries and responsive design, providing a good user experience across devices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the website reflects a professional and trustworthy business presence with room for improvement in security and privacy transparency.

A

A Bankers Journey

abankersjourney.com

46

The website 'A Bankers Journey' serves as a promotional platform for a biography book about Edmond J. Safra, a notable figure in global finance. It targets readers interested in financial history and banking biographies, offering news, endorsements, multimedia, and event information related to the book and its author, Daniel Gross. The site positions itself as a niche resource with a professional presentation and consistent branding, leveraging social media channels to extend its reach. Technically, the site is built on WordPress with popular plugins such as WPBakery Page Builder and Complianz for GDPR compliance. It uses standard web technologies including jQuery, Bootstrap, and Owl Carousel. Hosting is via GoDaddy, and the site employs HTTPS with a valid SSL certificate. Performance is moderate with good mobile optimization, though accessibility and SEO could be improved. From a security perspective, the site has basic protections including HTTPS and a cookie consent mechanism. However, it lacks advanced security headers and DNSSEC is not enabled, which are recommended for enhanced security. No privacy policy or terms of service pages were found, which is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, the website is safe, professional, and credible for its purpose but would benefit from improved privacy documentation and enhanced security configurations to strengthen trust and compliance.

M

Mühldorfer

muehldorfer.com

56

Mühldorfer is a German premium bedding manufacturer with a heritage spanning over 100 years, specializing in natural and synthetic down bedding products such as duvets, pillows, toppers, and mattress protectors. The company serves both end consumers and high-end hotel clients, positioning itself as a trusted supplier for luxury hospitality establishments worldwide. The website reflects a mature e-commerce platform with comprehensive product categorization and customer service features, including multilingual support and a dedicated hotline. Technically, the website is built on the Shopware 6 platform, integrating modern marketing and analytics tools such as Google Tag Manager, Matomo, and Uptain. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are not explicitly present. HTTPS is enforced, and privacy compliance is well addressed with clear cookie consent mechanisms and a detailed privacy policy. From a security perspective, the site shows a solid baseline with encrypted connections and anonymized analytics data. However, the absence of explicit security headers and lack of published incident response or vulnerability disclosure policies indicate areas for improvement. The missing WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trustworthiness despite the professional presentation. Overall, Mühldorfer's digital presence is robust and user-friendly, supporting its market position as a premium bedding provider. Addressing domain registration transparency and enhancing security headers would further strengthen its security posture and business credibility.

A

Association Valaisanne des Banques

banques-valais.ch

49

The Association Valaisanne des Banques is a regional banking association in Switzerland focused on representing and promoting the interests of banks in the Valais region. The website serves as an informational and promotional platform highlighting banking careers, apprenticeship opportunities, and news relevant to the local banking sector. The site features partnerships with major Swiss banks, reinforcing its credibility and regional influence. Technically, the website uses modern web technologies including jQuery, Bootstrap, and tracking pixels from major platforms, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

C

CS2 AG

zweiblog.com

72

CS2 AG is a well-established Swiss digital and web agency founded in 1997, specializing in digital strategy, consulting, web development, and hosting services primarily for SMEs and large enterprises. Their website, Zweiblog, serves as a knowledge hub offering expert insights on CMS, e-commerce, AI, and web technologies tailored for the Swiss market. The company demonstrates a mature digital infrastructure using TYPO3 CMS and integrates modern analytics and marketing tools with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and reCAPTCHA usage, though explicit security headers and privacy policy pages could be improved. The absence of public WHOIS data slightly reduces domain transparency but does not detract significantly from the company's legitimacy. Overall, the website is professional, well-branded, and trustworthy, serving its target audience effectively.

I

If International Foundation

if-foundation.ch

50

If International Foundation is a Swiss independent non-profit organization dedicated to improving living conditions and life prospects for vulnerable populations worldwide. The foundation focuses on supporting education, integration, social entrepreneurship, health, and research in technological, medical, ethical, environmental, and cultural domains. The website reflects a professional and consistent brand image with clear mission and vision statements, targeting partners and beneficiaries in the social and health sectors globally. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Owl Carousel, with Google Analytics for visitor tracking. The site is mobile optimized and provides a good user experience with clear navigation. However, it lacks visible privacy and cookie policies, security headers, and explicit contact information, which are areas for improvement. Security posture is moderate with HTTPS usage but missing advanced headers and incident response contacts. Overall, the domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

Chablais Heli Club is a small Swiss helicopter flight school and service provider based at the Bex aerodrome near the Swiss Alps. The company offers a range of helicopter pilot training licenses, including private, professional, and instructor certifications, as well as helicopter rental services. Their market position is regional, targeting individuals interested in helicopter flight training and recreational flying. The website is built on WordPress with a modern tech stack including Visual Composer, Bootstrap, and various JavaScript libraries. It features multimedia content and social media integration, providing a good user experience and mobile optimization. Security posture is moderate with HTTPS enabled and CAPTCHA on forms, but lacks important security headers and explicit privacy and cookie policies, indicating compliance gaps. No WAF or blocking mechanisms were detected, and the site content is safe for general audiences. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security hardening.

E

ERNE Gruppe

erne-gruppe.ch

70

ERNE Gruppe is a Swiss construction and real estate group offering innovative building solutions and comprehensive services in construction, wood construction, system construction, and real estate management. The company targets both B2B and B2C audiences within Switzerland, positioning itself as an established medium-sized player in the Swiss construction sector. The website is built on TYPO3 CMS and integrates modern technologies including Google Tag Manager, Google Analytics, reCAPTCHA, and various marketing pixels, all managed with a GDPR-compliant consent mechanism. The site is multilingual, supporting German and French, and demonstrates good design quality and user experience. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, though some security headers could be improved. Overall, the website reflects a professional and trustworthy business presence with good privacy compliance and marketing transparency.

C

CS2 AG

cs2.ch

78

CS2 AG is a well-established Swiss digital and web agency founded in 1997, specializing in full-service digital solutions including corporate websites, e-commerce platforms, and custom applications primarily based on open-source technologies such as TYPO3, Magento, and Laravel. The company targets small to medium enterprises and large corporations within Switzerland, positioning itself as a trusted partner with over 800 successful projects. The website reflects a mature digital infrastructure with modern technologies, comprehensive GDPR compliance, and a strong focus on user experience and accessibility. Security posture is solid with HTTPS enforcement and consent management, though there is room for improvement in explicit security headers and incident response transparency. Overall, CS2 AG demonstrates a high level of professionalism, trustworthiness, and technical competence, making it a credible and reliable digital agency in its market.

W

Wanda Multimedia Schaffhausen

wanda-multimedia.ch

49

Wanda Multimedia Schaffhausen is a small, professional full-service internet, design, and advertising agency based in Schaffhausen, Switzerland. The company offers a comprehensive range of services including website development, online marketing, SEO, logo and corporate design, print media, and technical support. Their market position is focused on local businesses and organizations seeking integrated digital and offline media solutions. The website is built on WordPress with modern plugins and tools, reflecting a good level of digital maturity and SEO optimization. The presence of cookie consent and privacy policies indicates attention to privacy compliance. Security posture is adequate with HTTPS enforced, though security headers could be enhanced. No critical vulnerabilities or suspicious content were detected, and the WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence.

P

Parlamentarische Gruppe Digitale Nachhaltigkeit

digitale-nachhaltigkeit.ch

65

Parldigi is a Swiss parliamentary group dedicated to promoting digital sustainability and responsible digital transformation. The organization focuses on advocacy, education, and information dissemination related to digital sovereignty, data protection, and inclusion. Their website serves as a hub for news, events, and resources targeted primarily at Swiss policymakers and the interested public. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and social media integration widgets. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the website uses HTTPS and standard secure libraries but lacks visible security headers and formal security policies. Privacy compliance is partial, with no explicit cookie consent mechanism or detailed privacy policy page, which could be improved to meet GDPR standards. Overall, the domain registration and WHOIS data align well with the website's governmental and non-profit nature, indicating legitimacy and trustworthiness.

Rotorplace operates as a specialized e-commerce platform dedicated to helicopter and aerospace parts, offering a comprehensive catalog of engines, transmissions, avionics, electrical systems, fuel and hydraulic components, airframe parts, and safety accessories. The platform targets aerospace professionals and MRO providers, positioning itself as a niche supplier within the transportation sector. The website demonstrates a professional design with clear navigation and multi-language and currency support, indicating a medium-sized business with a focus on the French market. Technically, Rotorplace leverages modern technologies including the Sylius e-commerce platform, Bootstrap framework, and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience, although accessibility features are basic and SEO optimization is moderate. Security posture is adequate with HTTPS usage implied, but lacks explicit security headers and formal privacy or cookie policies, which are critical for compliance and trust. The absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency, warranting further investigation. Overall, Rotorplace presents a functional and professional online presence with room for improvement in privacy compliance and security best practices.

K

Kreuzer International

kreuzer-gmbh.com

71

Kreuzer International is a German-based company specializing in hotel furniture and equipment, including energy-saving minibars and design safes, serving hotels across Europe. The company has an established market presence since 2001, positioning itself as a reliable supplier in the hospitality sector. The website reflects a professional and consistent brand image with a focus on B2B customers in the hotel industry. Technically, the site uses modern web technologies such as Bootstrap and JavaScript, with a custom or unknown CMS. The site is mobile-optimized and provides a good user experience with clear navigation and search functionality. Security-wise, the website enforces HTTPS with good SSL configuration and employs Cookiebot for GDPR-compliant cookie consent management. Minor security improvements are recommended, such as enabling DNSSEC and publishing a security.txt file. Overall, the site demonstrates a solid security posture and privacy compliance, though explicit contact information and terms of service are not readily found on the homepage. Strategic recommendations include enhancing security headers, improving transparency with a security policy, and adding clear contact channels for incident response.

Hornstein-Ranking is a well-established guide and ranking system for top gastronomy and luxury hotels in the German-speaking DACH region, founded in 1981. The website serves gourmets and hospitality professionals by aggregating and objectively analyzing ratings from multiple renowned restaurant guides. It offers downloadable and printed ranking editions and hosts prestigious events in partnership with luxury brands such as Champagne Laurent-Perrier and Hugo Boss. Technically, the site uses common web technologies like jQuery and Bootstrap, with Google Analytics and Cookiebot for tracking and consent management. The security posture is moderate, with HTTPS and IP anonymization in analytics, but lacks explicit security headers and formal privacy policies on the site. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, content-rich, and trustworthy, but could improve privacy disclosures and security hardening.

H

HeliBernina AG

helibernina.ch

50

HeliBernina AG is a well-established Swiss helicopter service provider founded in 1985, offering a wide range of helicopter operations including passenger transport, work flights for alpine, construction, and forestry sectors, public safety missions, and rescue operations. The company targets regional customers requiring specialized helicopter services and maintains a professional online presence with clear business information and contact details. The website is built on TYPO3 CMS with modern frontend technologies and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Overall, the site reflects a trustworthy and credible business with good technical implementation and user experience.

A

Airport Helicopter AHB AG

airportheli.ch

56

Airport Helicopter AHB AG is a well-established Swiss company specializing in helicopter flights and pilot training since 1993. The company operates multiple locations across Switzerland including Luzern-Beromünster, Basel, Grenchen, and Zürich, offering a wide range of services such as sightseeing flights, VIP and taxi flights, glacier flights, romantic and wedding flights, events, heli-skiing, and comprehensive pilot training programs. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeting aviation enthusiasts and potential pilot trainees. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Owl Carousel. It is mobile-optimized and integrates Google Analytics and Tag Manager for user tracking. The site uses HTTPS with a good SSL configuration and implements GDPR-compliant cookie consent mechanisms. However, there is room for improvement in security headers and publishing explicit security policies. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection, and cookie consent. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration since 1993. Overall, the site presents a low risk profile with a solid security posture and compliance with privacy regulations. Strategically, the company should consider enhancing its security posture by adding security headers, publishing a security policy, and possibly a vulnerability disclosure policy. Improving accessibility features and expanding transparency around data retention would further strengthen trust and compliance.

I

Invoiceberry Limited

invoiceberry.com

64

InvoiceBerry is a UK-based small business SaaS company specializing in online invoicing software tailored for freelancers and small businesses. The platform offers invoice creation, expense tracking, payment management, and integrates with popular payment gateways. The website is professionally designed, mobile-optimized, and provides clear business and contact information, including customer testimonials that reinforce trust. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Cloudfront CDN, with analytics tools like Plausible and Facebook Pixel for user tracking. Security posture is good with HTTPS enforced and secure forms, though no explicit security headers or incident response contacts are published. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. WHOIS data is unavailable, which slightly reduces trust but the overall business presence and content quality support legitimacy.

A

AHB Tooling & Machinery LLC

ahbinc.com

59

AHB Tooling & Machinery LLC is a well-established company specializing in the sales and maintenance of tools and machinery, primarily serving the manufacturing sector. With a domain age dating back to 2000 and a founding year of 1994, the company demonstrates a mature market presence. Their business model focuses on B2B sales, machine repair, and vending solutions, targeting industrial clients requiring metalworking consumables and machinery. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, and appears to be built on the Bagisto e-commerce platform. Hosting is provided by GoDaddy, and the site integrates marketing and analytics tools such as Google Tag Manager, Hotjar, and LiveChat. Performance and mobile optimization are good, though accessibility and SEO could be improved. Security practices include HTTPS but lack DNSSEC and explicit security headers, indicating room for enhancement. From a security perspective, the site maintains a basic but adequate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and security policy documentation suggests compliance gaps, particularly regarding GDPR. The WHOIS data supports the legitimacy of the domain and business, with consistent registration details and no privacy protection masking ownership. Overall, the website is trustworthy and professionally maintained, with moderate technical sophistication and a solid business foundation. Strategic improvements in security headers, privacy compliance, and accessibility would further strengthen their digital maturity and risk posture.

P

Parlamentarische Gruppe Digitale Nachhaltigkeit

parldigi.ch

65

Parldigi is a Swiss parliamentary group dedicated to promoting digital sustainability and responsible digital transformation within the public sector. The organization advocates for digital sovereignty, open source adoption, and sustainable digital policies, targeting Swiss parliamentarians, government bodies, and related stakeholders. Their activities include policy advocacy, organizing hearings, publishing news, and educational MasterClass programs. The website is professionally designed using WordPress and integrates modern web technologies, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration aligns well with the organization's identity, indicating legitimacy and trustworthiness.

A

Aimigo

aimigo.coach

66

Aimigo is an AI-powered language learning platform offering personalized coaching and conversation practice to learners worldwide. The company leverages adaptive learning technologies and large language models to tailor content to individual needs. The website is professionally designed, mobile-optimized, and integrates modern analytics and marketing tools. Security posture is good with HTTPS and secure forms, though explicit security headers are missing. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. WHOIS data is unavailable due to privacy protection, which is justified for this business type. Overall, Aimigo presents a credible and mature digital presence in the education technology sector.

S

SCIV - Syndicats chrétiens du Valais

scivlesyndicat.ch

46

SCIV - Syndicats chrétiens du Valais is a regional Christian trade union organization based in Switzerland's Valais region. The website primarily serves as a portal for membership contract submissions, targeting workers and professionals seeking union representation. It offers detailed membership forms collecting personal and professional data, with integrated digital signature capture and anti-bot protections via Google reCAPTCHA v3. The organization is linked to larger federations such as SYNA and Travail.Suisse, indicating established union affiliations. The website content is professional and relevant to its audience, with clear references to union statutes and regulations via linked PDFs. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and RSForm! Pro for form management, with standard libraries like jQuery and Bootstrap for UI. Google Analytics and Tag Manager are used for visitor tracking, but no explicit privacy or cookie policies are present, representing a compliance gap. Security posture is moderate with HTTPS enforced and reCAPTCHA integration, but lacks visible security headers and formal incident response or vulnerability disclosure policies. WHOIS data aligns well with the website's regional and organizational claims, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

E

ERNE AG Bauunternehmung

erne.ch

71

ERNE AG Bauunternehmung is a well-established Swiss construction company with over 110 years of experience, specializing in high-quality services across Hochbau, Tiefbau, Umbau, and general contracting. The company targets construction clients in Switzerland, including public and private sectors, and emphasizes innovation and sustainability. The website is built on TYPO3 CMS with a modern tech stack, optimized for mobile and SEO, and includes comprehensive privacy and cookie policies compliant with GDPR. Security posture is strong with HTTPS, security headers, and secure form handling. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy digital presence.

A

Artionet

eseances.ch

51

eSéances is a Swiss-based digital governance software solution developed by Artionet.Group, targeting public and private organizations requiring efficient session and meeting management. The platform offers a comprehensive suite of tools including agenda preparation, document consultation, decision tracking, and automated minutes generation, emphasizing security and collaboration. The website reflects a mature digital presence with integration of modern web technologies and marketing tools, supporting a medium-sized business with a strong foothold in the Swiss market. Security posture is solid with HTTPS and encryption practices, though lacks publicly accessible privacy and cookie policies, which are critical for compliance. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

M

Mediapulse AG

mediapulse.ch

58

Mediapulse AG is an independent Swiss media research organization specializing in the collection and provision of data related to radio, TV, and online media usage. The company positions itself as transparent, neutral, and independent, serving media industry professionals, broadcasters, advertisers, and researchers. Their product offerings include various data services such as TV Data, Radio Data, Online Audience Data, and specialized surveys. The website is built on WordPress with Bootstrap, offering a multilingual experience and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site reflects a professional and credible organization with good technical implementation and user experience.

H

Health Info Net AG (HIN)

hin.ch

67

Health Info Net AG (HIN) is a Swiss company specializing in secure communication services tailored for healthcare professionals. Established in 2003, it has positioned itself as the standard provider for secure email, identity management, electronic signatures, messaging, and document sharing within the Swiss healthcare sector. The company operates multiple offices in Switzerland and offers membership-based access to its trusted communication network, the HIN Community. The website reflects a professional and comprehensive digital presence with multi-language support and clear service offerings.

D

Doofinder SL

doofinder.com

54

Doofinder SL operates a professional website offering AI-powered search and discovery solutions tailored for eCommerce platforms. The company positions itself as a leader in the eCommerce search market with over 10,000 customers and a comprehensive suite of services including AI visual tagging, personalized recommendations, and advanced analytics. The website is built on WordPress with modern technologies and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data limits domain registration trust verification, but the website content and business information strongly indicate a legitimate and professional operation.

T

TUAG Triebwerk Unterhalt AG

tuag.ch

52

TUAG Triebwerk Unterhalt AG is a specialized helicopter engine maintenance and repair company based in Geneva, Switzerland. It operates as an official Safran Helicopter Engines approved center, servicing key engine models such as Arriel, Arrius, and Makila. The company is part of the Europavia Group, which provides a broader ecosystem of helicopter sales, maintenance, and spare parts services. TUAG's market position is solid within the European helicopter maintenance sector, serving clients in Switzerland, France, Belgium, and globally. The website reflects a professional business with clear service offerings and certifications, targeting helicopter operators and aviation maintenance providers. Technically, the website is built on Joomla CMS with common web technologies like jQuery and Bootstrap. It features a responsive design with moderate performance and basic SEO and accessibility features. The site uses HTTPS but lacks advanced security headers, which is a notable area for improvement. The contact mechanisms include multiple emails, phone numbers, and a contact form with a simple CAPTCHA, indicating basic data collection practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data but misses several security best practices such as security headers and robust CAPTCHA solutions. There is no visible privacy or cookie consent mechanism, which may impact GDPR compliance. The WHOIS data is consistent with the business claims, showing a legitimate and established domain registration. Overall, TUAG's website presents a trustworthy and professional image with room for enhancement in privacy compliance and security hardening. Strategic improvements in these areas would strengthen the company's digital trust and regulatory adherence.

C

CO-OPERAID

co-operaid.ch

55

CO-OPERAID is a Swiss non-profit humanitarian organization dedicated since 1981 to providing educational opportunities for children and youth in underprivileged regions of Africa and Asia. The organization focuses on primary and vocational education projects in countries including Uganda, Kenya, Bangladesh, Cambodia, and Laos. Their business model relies on donations, sponsorships, and partnerships, supported by a strong reputation evidenced by ZEWO certification and transparent communication. The website is professionally designed, mobile-optimized, and provides clear navigation and calls to action for donors and supporters. Technically, the website is built on Drupal 10 with modern web technologies and demonstrates good performance and accessibility standards. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data, though some security headers could be improved. Privacy compliance is good with a comprehensive privacy policy and cookie policy present, but lacks an active cookie consent mechanism. Contact information is clearly provided, though no direct contact email was found in the HTML content. Overall, the website and organization present a trustworthy and credible profile with a high level of professionalism and transparency. There are no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, implementing a cookie consent banner, and publishing explicit security and incident response policies to further strengthen trust and compliance.

V

Verein ARC, Bildungsinstitut für Arbeitnehmende

formation-arc.ch

63

Verein ARC is a Swiss non-profit educational institute focused on providing continuing education and training for employees, particularly those affiliated with labor unions such as Travail.Suisse, Syna, transfair, SCIV, and swissPersona. The organization operates under the umbrella of Travail.Suisse and offers courses aimed at enhancing skills in customer handling, member engagement, and organizational effectiveness. The website reflects a professional and consistent brand identity with clear messaging targeted at employees and union members in Switzerland. Technically, the website is built on Drupal 10 with Bootstrap and FontAwesome, ensuring a modern and responsive user experience. The site is well-optimized for mobile devices and accessibility, with good SEO practices and social media integration. Performance is moderate, with no significant technical debt or errors observed. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, it lacks explicit security headers and a published incident response or vulnerability disclosure policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's organizational claims, indicating legitimacy and transparency. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

B

BIS Safety Software

bistrainer.com

67

BIS Safety Software is a Canadian-based company providing comprehensive learning and compliance software solutions tailored for the safety industry. Their platform offers a wide range of services including learning management, incident management, training record keeping, and equipment management, targeting organizations aiming to maintain workforce safety and regulatory compliance. The website serves primarily as a login portal for existing users, with clear links to privacy and terms of service documents, indicating a professional and business-focused approach. Technically, the site employs modern web technologies such as ReactJS, Bootstrap, and jQuery, and leverages Amazon S3 for hosting branding assets, reflecting a moderate level of digital maturity. Security measures include HTTPS usage and Google reCAPTCHA integration; however, explicit security headers and cookie consent mechanisms are absent, suggesting room for improvement in security posture and privacy compliance. Overall, the domain registration data aligns well with the company's profile, supporting its legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing detailed security and incident response policies to strengthen trust and compliance.

W

WorkSafeBC

worksafebc.com

70

WorkSafeBC is a government agency dedicated to workplace health and safety, insurance coverage, and claims management in British Columbia, Canada. The website serves as a comprehensive portal for workers, employers, and health care providers, offering resources, regulatory information, and online services. The agency holds a strong market position as the primary provincial authority in its sector, providing essential government services with a focus on safety and compliance. Technically, the website is built on the Sitecore CMS platform, utilizing modern web technologies such as jQuery and Bootstrap. It integrates multiple analytics and marketing tools including Google Tag Manager, Facebook Pixel, and DoubleClick, indicating a mature digital infrastructure. The site is mobile-optimized and demonstrates good performance and accessibility standards. From a security perspective, the site enforces HTTPS and employs secure login portals for online services. However, it lacks visible security headers in the HTML source, which could be improved to enhance protection against common web vulnerabilities. The absence of WHOIS data is unusual but does not detract significantly from the site's legitimacy given its government affiliation and professional presentation. Overall, WorkSafeBC's website is a well-designed, trustworthy government resource with strong content quality and business credibility. Strategic improvements in security headers and privacy compliance mechanisms would further strengthen its security posture and user trust.

A

Aimigo

gymglish.com

66

Gymglish, part of Aimigo, is an established online language learning platform founded in 2004, offering AI-powered adaptive courses in multiple languages. The company targets a broad audience from beginners to proficient learners, including private individuals, educational institutions, and businesses. Their market position is strong, supported by over 8 million users worldwide and recognition by Time magazine as a top EdTech leader in 2024. The platform emphasizes short, engaging daily lessons infused with humor and cultural insights, accessible via web and mobile apps. Technically, the website is modern, fast, and mobile-optimized, leveraging technologies like Google Tag Manager and Plausible Analytics, with a CDN provider Fastly ensuring performance. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and a public security policy are absent. The lack of WHOIS domain registration data is a concern but does not outweigh the strong business and technical indicators of legitimacy. Overall, Gymglish presents a professional, trustworthy, and user-friendly online education service.

A

Aimigo

frantastique.com

67

Gymglish is an established online language learning platform founded in 2004, offering AI-powered adaptive courses in multiple languages including French, English, Spanish, German, and Italian. The company targets learners from beginners to advanced levels with engaging, culturally rich content delivered in short daily episodes. The platform serves over 8 million users worldwide, including private individuals, educational institutions, and businesses, positioning itself as a leader in the EdTech sector with recognition from Time magazine in 2024. Technically, the website uses modern web technologies, is mobile-optimized, and leverages a CDN for fast performance. Privacy and cookie policies are comprehensive and GDPR-compliant, with a clear consent mechanism. However, the absence of WHOIS data for the domain www.gymglish.com raises concerns about domain transparency and trustworthiness. No direct company contact emails or phone numbers are found on the site, which could impact user trust and support accessibility. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, but incident response and security policy information are not published. Overall, the website is professional, secure, and user-friendly, but domain registration opacity and limited contact info slightly reduce business credibility.

Northern Safety Network Yukon is a specialized organization focused on occupational health and safety training and certification primarily serving Yukon-based organizations and residents. Their offerings include COR® and SECOR® certification programs, asbestos training, and a variety of online and community safety courses. The organization is positioned as a regional leader with recognized certifications endorsed by national safety federations, targeting employers and safety professionals in the construction and industrial sectors. Technically, the website employs modern web technologies such as Bootstrap and jQuery, with hosting of static assets on Amazon S3, providing a mobile-optimized and user-friendly experience. However, some technical improvements are recommended, including enhanced security headers and privacy compliance mechanisms. Security posture is moderate with use of HTTPS implied but lacking visible security headers and cookie consent. The WHOIS data is missing or unavailable, which reduces trustworthiness but the website content and contact information appear professional and legitimate. Overall, the site scores well on business credibility and content quality but has room for improvement in security and privacy compliance.

P

Pro Infirmis

kulturinklusiv.ch

49

Pro Infirmis operates the Fachstelle Kultur inklusiv, a Swiss non-profit organization dedicated to promoting cultural inclusion nationwide. The website serves as a competence center offering services such as consultation, networking, and communication to foster visibility and recognition of inclusive culture. The organization holds a strong market position within the cultural inclusion sector in Switzerland, supported by its network and charter for cultural inclusion. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates multiple third-party marketing and tracking tools, including Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag. Accessibility is a key focus, evidenced by WCAG 2 AA certification and ReadSpeaker integration. Security posture is solid with HTTPS enforcement and reCAPTCHA usage, though improvements are recommended in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, with clear contact information and privacy mechanisms.

N

NTN Innovation Booster - User-Centred HealthTech

ucht.ch

46

The NTN Innovation Booster - User-Centred HealthTech is a Swiss-based innovation support program focused on the healthcare technology sector. It aims to assist partners by connecting them with experts to address business challenges in health technology. The website indicates that the program has concluded its activities, providing informational content and contact details primarily for legacy or reference purposes. The business model centers on innovation facilitation within a niche market, targeting healthcare and technology partners. The organization maintains a modest online presence with social media links and affiliation to the Innosuisse innovation booster programs. Technically, the website is built on WordPress using common plugins such as Modern Events Calendar Lite and Sassy Social Share. The site is moderately optimized for mobile devices and SEO, with a basic but consistent design. HTTPS is enforced, ensuring secure communications. However, the site lacks advanced security headers and does not provide privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows a basic security posture with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure mechanisms. No forms are present on the homepage, reducing attack surface, but the absence of privacy and cookie policies indicates compliance gaps. The domain registration is privacy protected but consistent with the business age and type, indicating legitimacy. Overall, the website is safe and professional but minimalistic, reflecting a concluded program rather than an active service. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and providing incident response contacts to enhance compliance and security posture.

The Ernst Göhner Stiftung is a Swiss foundation holding participations in various companies and significant real estate assets. It focuses on philanthropic activities supporting culture, social causes, environmental projects, education, and science. The foundation operates with a clear market position as a medium-sized non-profit entity with subsidiaries such as Seewarte Holding AG and EGS Beteiligungen AG. The website is professionally designed, multilingual, and provides clear navigation and relevant content for its target audience of non-profit organizations and project applicants. Technically, the site uses Concrete CMS with modern libraries like jQuery and Bootstrap, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy and well-maintained, reflecting the foundation's reputable status.

O

OWEXX - Web Development Company

domains33.com

41

The website domains33.com is a Lithuanian-based domain registration service provider offering a wide range of domain extensions for registration, including country-specific, new, and generic domains. The site is professionally designed with clear navigation and multilingual support, targeting businesses and individuals seeking domain registration services. The business appears to be operated or developed by OWEXX, a web development company with presence in London, Berlin, and Vilnius. Technically, the site uses modern JavaScript libraries such as jQuery, Bootstrap, and integrates Google Analytics and reCAPTCHA for user interaction and security. Security posture is moderate with HTTPS enabled and basic security practices like CAPTCHA and cookie consent implemented. However, the absence of explicit privacy policy, terms of service, and direct contact information reduces trust and compliance levels. The WHOIS data for the domain is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy and business credibility. Overall, the site is functional and professional but would benefit from enhanced transparency and security disclosures.