Security Directory

G

GANGL Dienstleistungen

gangl.de

42

Gangl.de is a specialized software developer focused on Microsoft Outlook and Exchange add-ins, serving a broad user base with over 600,000 active users. Established in 1999, the company holds a market-leading position in the D-A-CH region, offering productivity-enhancing tools tailored for business and individual users. Their product portfolio includes email management, calendar optimization, and collaboration features, supported by a dedicated development team and comprehensive customer support. The website reflects a professional and well-structured digital presence, with strong branding and clear communication of services.

E

Eventfrog

eventfrog.ch

76

Eventfrog is a Switzerland-based event calendar and ticket sales platform, positioning itself as the largest event calendar in the country with over 25,000 published events. The platform enables users to discover events and sell tickets easily and free of charge, targeting a broad general audience interested in events and parties. The website is professionally designed with consistent branding and clear business contact information, enhancing its credibility and trustworthiness. Technically, the website employs standard web technologies including JavaScript and CSS, with moderate performance and good mobile optimization. SEO practices are well implemented with comprehensive meta tags and Open Graph data, although accessibility features are basic. The site uses tracking pixels from Meta and Google Tag Manager for marketing and analytics purposes but lacks a visible cookie consent mechanism, which may impact privacy compliance. From a security perspective, the site enforces HTTPS and includes domain verification meta tags for Google, Facebook, and Microsoft, indicating some level of security awareness. However, no explicit security headers or vulnerability disclosure information are present, and privacy and cookie policies are not found in the provided content. The WHOIS data is consistent with the website's claims, showing legitimate registration and no privacy protection, which supports the domain's trustworthiness. Overall, Eventfrog presents a solid business and technical foundation with room for improvement in privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, implementing security headers, and providing vulnerability disclosure and incident response information to enhance user trust and regulatory compliance.

B

Berner Fachhochschule

digisus-lab.ch

61

Berner Fachhochschule's Digital Sustainability Lab is a research and development unit focused on enhancing digital and innovative capabilities within the public sector. The lab offers software development, UI/UX design, data visualization, and consulting services related to digital transformation, open source, and AI. The website reflects a well-established academic institution with a clear mission to foster sustainable digital solutions for public administration. Technically, the site uses modern web technologies including Google Tag Manager and OneTrust for cookie consent, ensuring good performance and compliance with basic privacy standards. Security posture is solid with HTTPS and obfuscated emails, though explicit security policies and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and serves its target audience effectively.

L

Loterie Romande

loro.ch

70

Loterie Romande operates as the legal and responsible lottery and sports betting provider in the Suisse romande region of Switzerland. The organization offers multiple lottery games including EuroDreams, Euromillions, Swiss Loto, and sports betting services through PMU and other platforms. The website is professionally designed with a focus on responsible gaming and public utility benefit distribution. Technically, the site is built on Drupal CMS with modern front-end technologies and video content hosted on Infomaniak. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response contacts. Privacy compliance is partially met with a comprehensive privacy policy but no visible cookie consent mechanism. Overall, the site is trustworthy and well-positioned in its market segment.

P

pretalx

pretalx.com

68

pretalx is a specialized conference management software platform that facilitates the entire event planning process from Call for Papers to scheduling and publishing. It is positioned as an open source, customizable, and extendable solution trusted by a variety of conferences including PyCon and JuliaCon. The platform targets conference organizers seeking a flexible and transparent tool to manage submissions, reviews, communications, and scheduling. Technically, the website is well-structured with modern HTML, CSS, and JavaScript, optimized for mobile and SEO, and hosted under a reputable German registrar. Security posture is solid with HTTPS enabled and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is mostly addressed with clear privacy and terms of service pages, but lacks a cookie consent mechanism. Overall, pretalx demonstrates a mature digital presence with strong business credibility and trust signals.

P

Pictet

group.pictet

70

Pictet is a well-established independent investment partnership specializing in wealth management, asset management, and asset servicing with over 200 years of global investment leadership. The website reflects a mature and professional financial services firm targeting high-net-worth individuals and institutional clients. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and consent management tools to ensure compliance and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

A

Anouk Foundation

anouk.org

69

Anouk Foundation is a small non-profit organization based in Geneva, Switzerland, focused on enhancing healthcare environments through art. Their mission is to create positive, healing spaces by designing murals that improve the well-being of patients and residents in social and medical institutions. The website reflects a professional and consistent brand image, targeting healthcare providers and institutions seeking to improve patient experience through art. Technically, the website is built on a modern platform with JavaScript, CSS, and HTML5 technologies, including service workers for progressive web app capabilities and Cookiebot for GDPR-compliant cookie management. The site is mobile-optimized, accessible, and performs moderately well, hosted likely on a CDN associated with multiscreensite.com. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident and could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for non-profits, and no suspicious patterns were found. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response policies, and adding a terms of service page to improve transparency and trust.

Bosco Gurin is a regional tourism and hospitality website focused on promoting outdoor activities, events, and accommodations in the Bosco Gurin area of Switzerland. The site targets tourists interested in winter and summer sports, nature, and local culture, providing live webcams, event news, and ticketing links. The business model centers on tourism promotion and facilitating visitor engagement through digital content and external ticket sales. Technically, the website uses a traditional tech stack including jQuery 1.11.1, Google Analytics, and Google Tag Manager. The site is well-structured with good mobile optimization and moderate performance. However, some technical debt is evident with the use of an outdated jQuery version and lack of modern security headers. SEO and accessibility are basic but functional. From a security perspective, the site benefits from HTTPS and no visible sensitive data exposure. However, it lacks security headers and a formal security or incident response policy. Privacy compliance is addressed through a comprehensive Iubenda privacy policy, but no cookie consent mechanism is implemented, which is a compliance gap. Contact information is clearly provided, enhancing trust. Overall, the website is professional, trustworthy, and suitable for its purpose but would benefit from technical and security improvements to enhance compliance and resilience. The risk level is moderate with no critical vulnerabilities detected.

H

Hotel Schweizerhof Bern & Spa

schweizerhof-bern.ch

50

Hotel Schweizerhof Bern & Spa is a premium 5-star luxury hotel located centrally in Bern, Switzerland. The hotel offers upscale accommodation, gourmet dining options, a spa and wellness center, and facilities for meetings and events. It targets luxury travelers, business guests, and event organizers, positioning itself as a leading hospitality provider in the Swiss capital. The website reflects a high level of professionalism with rich content, clear navigation, and strong branding consistent with a luxury hospitality business. Technically, the site uses modern web technologies including Vue.js, Google Tag Manager, and Matomo Analytics, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and domain transfer protections, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is basic with cookie consent implemented but no explicit privacy or terms of service pages detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Medeco Cleantec

chemiefrei.com

70

Medeco Cleantec operates a German-language e-commerce website specializing in chemical-free, sustainable cleaning products under the green cleaning concept. The company targets environmentally conscious consumers seeking effective hygiene solutions without harmful chemicals. The website is built on the Shopify platform using the Debut theme, integrating multiple marketing and review tools to enhance customer engagement and trust. The business appears to be a small-sized retailer founded in 2018, with a consistent domain registration history and a clear focus on green cleaning innovation. Technically, the site is well-structured, mobile-optimized, and employs secure payment methods including Apple Pay and Shop Pay. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. However, explicit security policies and incident response information are not published, representing an area for improvement. Overall, the site demonstrates a good security posture with HTTPS enforcement and domain transfer lock, though enabling DNSSEC would further enhance DNS security. The website content is safe for general audiences, with no adult or questionable material detected.

P

profil Redaktion GmbH

profil.at

67

profil.at is the digital presence of profil Redaktion GmbH, an established Austrian independent news magazine founded in 1970. The website offers a broad range of news, opinion articles, podcasts, and subscription services targeting politically and socially engaged Austrian readers. The business model combines advertising revenue with a subscription offering that includes an ad-free experience. Technically, the site uses modern JavaScript libraries, consent management tools like Didomi, and paywall/identity management via Piano.io, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience. Security posture is good with HTTPS enforced and consent mechanisms in place, though explicit security headers should be verified. The absence of WHOIS data reduces domain registration trust but does not detract from the site's evident legitimacy and professionalism. Overall, profil.at represents a reputable media outlet with strong privacy compliance and a solid digital presence.

B

blue Cinema

bluecinema.ch

64

blue Cinema is a regional cinema chain operating in Switzerland, offering movie screenings, events, and ticket booking services. The website targets general moviegoers and provides up-to-date movie listings and showtimes. The business model focuses on entertainment and leisure through cinema experiences, with additional offerings such as games and special events. The company maintains a consistent brand presence and a professional online interface.

S

Stadt Zürich

stadt-zuerich.ch

65

The website www.stadt-zuerich.ch serves as the official digital portal for the city of Zurich, Switzerland. It provides comprehensive information about city administration, public services, and online resources for residents and businesses. The site is well-positioned as a trusted government resource, offering current news, event information, and service highlights tailored to its local audience. The business model is centered on public service delivery and transparent communication with the community. Technically, the site is built on Adobe Experience Manager (AEM) and employs modern web components, ensuring a responsive and accessible user experience. The infrastructure supports good performance and SEO optimization, with clear navigation and mobile-friendly design. Analytics are implemented via Adobe Analytics, though a visible cookie consent mechanism is absent. From a security perspective, the site enforces HTTPS and includes key security headers, reflecting a strong security posture. However, it lacks publicly visible security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and compliance. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a high level of professionalism and trustworthiness appropriate for a government entity. Strategic improvements in privacy compliance and security transparency would further strengthen its position and user confidence.

P

Presseportal.ch

presseportal.ch

61

Presseportal.ch is a comprehensive Swiss media and press information platform operated by news aktuell schweiz, a subsidiary of the Nachrichtenagentur sda. It serves as a leading database and distribution service for press releases, media content, and newsroom hosting primarily targeting media professionals, journalists, and PR agencies within Switzerland. The platform offers a wide range of services including press release distribution, media monitoring, and access to a rich media database. The website is professionally designed with consistent branding and good content quality, supporting multiple languages and providing a user-friendly experience.

Sky Switzerland appears to be a company specializing in customs clearance services within Switzerland, targeting businesses and individuals requiring such services. The website content is currently inaccessible due to an HTTP 403 error page that blocks access when VPN or proxy services are detected, indicating a security access control mechanism. The visible content is minimal and limited to an error message with contact information including a phone number and a link to a support contact form. The technical infrastructure appears basic, with static HTML and CSS and hosting of assets on Amazon S3. No advanced frameworks, CMS, or analytics tools are detected. Security posture is weak due to lack of security headers, absence of privacy and cookie policies, and no visible incident response or vulnerability disclosure information. Overall, the website is poorly accessible and lacks comprehensive content and security best practices.

B

BEGASOFT AG

begasoft.ch

58

BEGASOFT AG is a Swiss IT company based in Bern, specializing in sustainable and innovative digital solutions. With 25 years of experience, it offers managed cloud infrastructure, IT operations and security, custom software development, SaaS products, and AI services. The company operates its own data center infrastructure hosted in a Tier IV, ISO 27001 certified Swisscom facility, ensuring high availability and security. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive service descriptions. Security posture is strong with HTTPS and certified data center usage, though some advanced security headers and incident response disclosures could be improved. Overall, BEGASOFT AG presents a trustworthy and credible business profile with a focus on Swiss market sectors including government, healthcare, finance, and non-profits.

M

MrRENT Service GmbH

mrrent.com

55

MrRENT Service GmbH is a German company specializing in the rental of furniture, cooling cells, and accessories for events such as parties, weddings, and corporate functions. Established in 2005, the company positions itself as a reliable partner for event organizers seeking mobile and customizable event equipment. Their website reflects a professional and consistent brand image, targeting a broad audience within the hospitality and event planning sectors. The business model focuses on rental services, supported by a downloadable catalog and active social media presence.

K

Kreuzer International

kreuzer-gmbh.com

71

Kreuzer International is a German-based company specializing in hotel furniture and equipment, including energy-saving minibars and design safes, serving hotels across Europe. The company has an established market presence since 2001, positioning itself as a reliable supplier in the hospitality sector. The website reflects a professional and consistent brand image with a focus on B2B customers in the hotel industry. Technically, the site uses modern web technologies such as Bootstrap and JavaScript, with a custom or unknown CMS. The site is mobile-optimized and provides a good user experience with clear navigation and search functionality. Security-wise, the website enforces HTTPS with good SSL configuration and employs Cookiebot for GDPR-compliant cookie consent management. Minor security improvements are recommended, such as enabling DNSSEC and publishing a security.txt file. Overall, the site demonstrates a solid security posture and privacy compliance, though explicit contact information and terms of service are not readily found on the homepage. Strategic recommendations include enhancing security headers, improving transparency with a security policy, and adding clear contact channels for incident response.

K

Kurier

kurier.at

68

Kurier.at is a leading Austrian news media website providing current news, analyses, and independent reporting across politics, economy, culture, sports, and society. The site targets a general audience in Austria and operates a business model primarily funded by advertising with an option for users to subscribe for an ad-free experience. The website demonstrates a high level of professionalism with excellent content quality and consistent branding. Technically, it leverages modern web technologies including Cloudflare for DNS and CDN, Google Analytics for tracking, and Didomi for consent management, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with clear privacy and cookie policies and user consent mechanisms. Overall, the domain registration data aligns well with the website's business claims, indicating high legitimacy and trustworthiness.

N

n-tv NACHRICHTEN

ntv.de

65

n-tv.de is a prominent German news website providing a wide range of news articles, videos, live TV streaming, and specialized content in politics, economy, sports, technology, and more. The site targets a general audience interested in timely and reliable news coverage. It holds a strong market position as an established media outlet in Germany with a large user base and comprehensive content offerings. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, Google Analytics, and Kameleoon for personalization and A/B testing. It uses adaptive and responsive design techniques ensuring excellent mobile optimization and good accessibility. Hosting is managed via EuroDNS nameservers, and the site enforces HTTPS with a Content Security Policy. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSP header, and GDPR-compliant consent management via Sourcepoint. However, additional security headers could enhance protection. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is good with cookie consent mechanisms in place, though explicit privacy policy and terms of service links were not found in the provided content. Overall, n-tv.de presents a professional, trustworthy, and secure online news platform with extensive content and strong technical infrastructure. Strategic recommendations include enhancing security headers, publishing clear privacy and terms policies, and maintaining regular security audits to uphold compliance and trust.

Swiss Deluxe Hotels operates as a luxury hotel association and marketing platform specializing in exclusive 5-star hotels in Switzerland. The website positions itself as a premier source for discerning travelers seeking high-end hospitality experiences. The business model focuses on promoting member hotels and facilitating bookings, targeting affluent clientele interested in luxury accommodations. The market position is strong within the Swiss luxury hospitality sector, emphasizing service quality and tradition. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as Swiper.js, and integrates analytics and tracking tools like Google Analytics, Hotjar, Microsoft Application Insights, and Cookiebot for cookie consent management. Hosting appears to be on Microsoft Azure, indicating a robust cloud infrastructure. The site is mobile optimized with good SEO practices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and published privacy or security policies. No direct contact information or incident response channels are provided, which limits transparency. The absence of WHOIS data for the domain raises concerns about domain legitimacy, though the professional site and use of reputable third-party services mitigate some risk. Overall, the website presents a professional and trustworthy front for a luxury hospitality business but would benefit from enhanced transparency through published privacy policies, contact details, and security best practices. Verification of domain registration and addition of security headers are recommended to strengthen trust and compliance.

A

Amauri Champeaux

tarteaucitron.io

56

tarteaucitron.io is a specialized GDPR-compliant cookie consent management platform founded in 2020 by Amauri Champeaux in France. The company offers a SaaS solution with an online dashboard, automatic service detection, and integration with Google Consent Mode v2. The platform is open source, enhancing transparency and trust. The target audience includes website owners and developers seeking to comply with privacy regulations. The website is built on WordPress with a modern theme, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and anti-spam measures, though explicit security policies and headers could be improved. Privacy compliance is strong, with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche.

S

SAM Center

samcenter.ch

56

SAM Center is a small business entity based in Switzerland, represented by a website built on the Wix platform. The site presents a professional design with moderate branding consistency but lacks detailed business descriptions and explicit contact information. The technical infrastructure relies on Wix's Thunderbolt framework and standard web technologies, offering moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but missing critical security headers and policies. Privacy compliance is minimal due to the absence of privacy and cookie policies. Overall, the website is functional but would benefit from enhanced security practices and compliance documentation.

R

Rose Helicopter AG

roseheli.ch

61

Rose Helicopter AG is a Swiss-based small transportation business specializing in helicopter sightseeing flights, events such as weddings and corporate outings, flight school training, and heliport services. The company targets a general audience interested in unique aerial experiences and flight education. The website is professionally designed with clear navigation and good mobile optimization, reflecting a solid digital presence for a local service provider. Technically, the site uses modern web technologies including service workers for PWA support and Cookiebot for cookie consent management, though the CMS and hosting details are not explicitly identified. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, explicit security headers and formal security policies are absent, representing areas for improvement. The WHOIS data aligns well with the business claims, showing consistent registrant information and no privacy protection, supporting legitimacy. Overall, the website is safe, trustworthy, and provides relevant content for its audience, but lacks some compliance and security documentation.

L

Linth Air Service AG

linthairservice.com

65

Linth Air Service AG is a small Swiss company specializing in aircraft services including hangarage, maintenance, CAMO, flight training, and helicopter tours. The company operates from Mollis Airport and targets aircraft owners, operators, and aviation enthusiasts. The website is professionally designed using the Wix platform, featuring clear navigation and relevant business information. Technical infrastructure relies on Wix's hosting and JavaScript frameworks, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and cookie consent mechanisms, but lacks explicit security headers and published privacy policies. The absence of WHOIS data raises some trust concerns, though the professional web presence and business details mitigate these. Overall, the website is functional and trustworthy but would benefit from enhanced security and compliance documentation.

H

Heli Rezia SA

helirezia.ch

59

Heli Rezia SA is a Swiss-based company specializing in helicopter services, likely catering to regional transportation and aerial operations. The website is built on the Wix platform, utilizing Wix Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The site demonstrates basic mobile optimization and SEO metadata but lacks comprehensive privacy and cookie policies, as well as explicit contact information. Security posture is minimal with no advanced headers or incident response contacts visible. Overall, the website presents a small business with a consistent brand but requires improvements in privacy compliance and security best practices.

S

Stiftung Helimission

helimission.org

59

Helimission is a Swiss non-profit foundation specializing in helicopter rescue and emergency medical services. The organization operates primarily in the transportation sector, providing critical air ambulance and rescue services. The website presents a professional and consistent brand image, targeting the general public and potential donors. The business model is based on non-profit funding and service contracts, positioning Helimission as a key regional player in emergency air rescue within Switzerland. Technically, the website is built on the Wix platform, leveraging standard web technologies such as JavaScript, CSS, and HTML5. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is moderate; HTTPS is presumably enabled (though not explicitly confirmed in the data), but no security headers or policies are evident. Privacy and cookie policies are missing, which impacts compliance and user trust. WHOIS data is unavailable or malformed, limiting domain registration transparency, but the website content and structured data support legitimacy. Overall, the site is functional and professional but would benefit from enhanced security, privacy compliance, and transparency measures.

E

Eliticino-Tarmac SA

eliticinotarmac.ch

62

The website represents a small business likely operating in Switzerland, built using the Wix platform. The site content is minimal and primarily in Italian, with no explicit privacy, cookie, or terms of service policies found. The technical infrastructure relies on Wix's Thunderbolt framework and standard web technologies, with moderate performance and basic mobile optimization. Security posture is good with HTTPS and security headers properly configured, but lacks advanced security disclosures or incident response information. Overall, the site provides a basic online presence without extensive business or compliance details.

The website bbheli.ch is currently a parked domain with a placeholder page indicating the domain may be for sale. There is no active business presence, no privacy or cookie policies, no contact information, and no meaningful content describing any products or services. The site primarily serves as a domain sale landing page with embedded advertising scripts and an iframe redirecting to an external URL. The technical infrastructure is minimal, relying on basic HTML, CSS, and JavaScript, with content delivery via AWS Cloudfront. Mobile optimization and accessibility are basic, and SEO is poor due to lack of content and metadata. Security posture is weak, with no visible HTTPS enforcement or security headers, and no forms or inputs to assess for secure handling. The domain WHOIS is privacy protected, consistent with a domain held for resale, but this reduces trust and legitimacy. Overall, the site has low business credibility and poor content quality, with moderate technical implementation but weak security and privacy compliance.

AXSPON's website is a minimalistic landing page primarily featuring a background video related to an event, with a single external link to a YouTube channel. The site lacks detailed business descriptions, contact information, or policy documents, indicating a low level of content maturity and business transparency. The domain is well-established, registered since 2013, and hosted on a reputable French hosting provider, suggesting legitimacy despite the sparse content. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and Font Awesome icons, but lacks advanced frameworks or CMS integration. Security posture is basic with HTTPS enabled but missing DNSSEC and security headers, and no privacy or cookie policies are present, which may pose compliance risks. Overall, the site is safe for general audiences but requires significant improvements in content, security, and compliance to enhance trust and professionalism.

A

Air Zermatt AG

air-zermatt.ch

50

Air Zermatt AG is a well-established Swiss helicopter company specializing in rescue, transport, sightseeing flights, and professional training. With over five decades of experience, it holds a strong market position in the Upper Valais region and beyond, offering comprehensive services to tourists, emergency responders, and industry clients. The website reflects a mature digital presence with multilingual support and a professional design that enhances user experience and trust. Technically, the site employs modern web technologies, including a proprietary CMS, analytics, and marketing tools, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high business credibility and professionalism, supporting Air Zermatt's reputation as a trusted helicopter service provider.

D

Dunkel

dunkel.cc

51

Dunkel is a Swiss-based creative agency specializing in branding, web development, UI/UX design, and motion design. Founded in 2010 and located in Bern, the company serves a discerning clientele including government entities and corporate clients. Their business model focuses on delivering purpose-driven, user-friendly digital and communication solutions, positioning themselves as a niche provider with a strong emphasis on quality and creativity. The website reflects a professional and consistent brand image with clear navigation and comprehensive service descriptions. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript with jQuery. It uses Matomo analytics configured to disable cookies, demonstrating a privacy-conscious approach. The site is mobile optimized and SEO friendly, though it lacks some advanced security headers. Performance is moderate, with room for optimization. Hosting details are not explicitly disclosed. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and public security policies suggests opportunities for strengthening the security posture. No incident response or vulnerability disclosure information is publicly available. Overall, Dunkel's website presents a trustworthy and professional front with strong business credibility and privacy compliance. The risk profile is low, but security enhancements and transparency improvements are recommended to further solidify trust and resilience.

B

bedpage.com

bedpage.com

65

Bedpage.com operates as an online classified ads platform primarily targeting adult and escort services, positioning itself as an alternative to the now-defunct Backpage. The website offers city-based listings across the United States and Canada, focusing on adult personals, erotic massage, and related services. The platform's market position is niche, catering to an adults-only audience with explicit content and service categories. Technically, the site employs standard web technologies including jQuery and Google Analytics, with assets delivered via BunnyCDN, ensuring moderate performance and good mobile responsiveness. However, the site lacks advanced security headers and cookie consent mechanisms, which are important for modern compliance and security standards. The absence of WHOIS data raises concerns about domain legitimacy and ownership transparency, impacting trustworthiness. Privacy policies exist but are basic and do not demonstrate full GDPR compliance. Overall, the site functions adequately but has notable gaps in security and privacy practices.

The website e-raumwerk.email presents a minimal login interface with no visible branding, business description, or contact information. It appears to be a portal for user authentication, possibly related to email or service access. The lack of content and metadata limits the ability to assess the business model or market position. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS. Security posture is weak due to absence of security headers and no visible advanced protections. The WHOIS data is unavailable due to unsupported TLD WHOIS queries, which reduces trust and transparency. Overall, the site is functional but lacks professionalism and compliance indicators.

RangeTouch is a small-scale open source project focused on providing a lightweight JavaScript library that improves the usability of HTML range sliders on touch devices. The website serves primarily as a documentation and download portal, linking to its GitHub repository where the code is hosted and maintained. The target audience is developers and designers seeking to enhance user interface components for touch-enabled devices. The business model is based on open source distribution without direct monetization. The market position is niche, catering to a specific UI enhancement need within the web development community. Technically, the website is simple and performant, built with standard HTML, CSS, and JavaScript, and hosted with Cloudflare DNS services. The site is mobile optimized and provides a clean user experience with clear navigation and relevant content. However, it lacks advanced SEO and accessibility features. There are no CMS or complex frameworks detected, reflecting the site's minimalistic approach. From a security perspective, the domain is registered with a reputable registrar and has clientTransferProhibited status, indicating some protection against unauthorized transfers. However, DNSSEC is not enabled, and no security headers are evident in the HTML content. The site does not provide privacy or cookie policies, nor does it offer contact information or incident response details, which limits its compliance posture. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. Overall, the website is low risk with a moderate security posture suitable for its purpose as an informational and download site for an open source library. Strategic improvements include adding privacy and cookie policies, enabling DNSSEC, implementing security headers, and providing contact or security incident channels to enhance trust and compliance.

U

Universität Bern

unibe.ch

68

Universität Bern is a well-established public university in Switzerland, founded in 1834, offering a broad range of academic programs and research opportunities. The website serves as a comprehensive portal for students, researchers, and staff, providing detailed information on studies, research, innovation, and lifelong learning. The institution holds a strong market position as a leading Swiss university with extensive academic and organizational resources. Technically, the website is built on the ZMS CMS platform, employs modern web standards, and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, includes essential security headers, and uses etracker for analytics with cookie consent, though explicit security policies and incident response information are not prominently published. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting the university's credibility and commitment to privacy.

Box, Inc. is a leading enterprise cloud content management and file sharing service provider, founded in 2005 and headquartered in Redwood City, California. The company offers a subscription-based SaaS platform that enables businesses to securely store, share, and collaborate on content with robust workflow automation and compliance features. Box holds a strong market position as a trusted provider in the technology sector, serving a broad range of enterprise customers worldwide. Their website reflects a mature digital presence with comprehensive business and security information, targeting business users and IT professionals.

T

Transmedia Kabelverbindungen GmbH

transmedia-germany.com

57

Transmedia Kabelverbindungen GmbH operates an e-commerce platform specializing in the retail of cables, connectors, mounts, and related electronic accessories primarily targeting German customers. The website presents a broad product catalog with clear navigation and a professional design, supporting multiple languages and currencies. The technical infrastructure leverages modern JavaScript libraries and includes a cookie consent mechanism aligned with GDPR requirements. Security posture is adequate with HTTPS and CSRF protections, though explicit security headers are not detected, suggesting room for improvement. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, though the website content and structure indicate a legitimate business. Contact information is primarily via a web form, with no direct emails or phone numbers found. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security hardening.

INTERPRET is a Swiss non-profit organization specializing in intercultural interpreting and mediation services. It provides certification, training, and organizes annual conferences to support communication in multilingual and intercultural contexts. The website is professionally designed, multilingual, and targets professionals and institutions requiring interpreting services and qualifications. Technically, the site uses a proprietary CMS (fuman), modern JavaScript, and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no exposed sensitive data, but lacks some security headers and a cookie consent mechanism. Overall, the site is trustworthy and well-maintained, though improvements in privacy compliance and security policies are recommended.

A

Artionet.Group

artionet.group

66

Artionet.Group is a Swiss-based digital transformation company established in 2001, offering agile methodology-driven services combining strategy, design, and technology. The company operates multiple brands targeting diverse sectors including SMEs, public administrations, large groups, associations, and sports events. Their services range from custom website and e-commerce development to digital governance and video production. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information. Technically, the site uses modern web technologies and a proprietary CMS (IceCube2.Net), hosted on a reliable infrastructure with HTTPS enforced. Security posture is good but could be improved by adding security headers and updating analytics tools. Privacy compliance is basic with a cookie consent mechanism but no explicit privacy or terms pages detected. WHOIS data is unavailable, limiting domain trust verification, but the website content and branding indicate a legitimate and established business.

S

SNELLO

snello.eu

52

SNELLO is a German-based technology company offering a headless enterprise email marketing solution designed to empower decentralized teams, dealers, and partners to enhance customer engagement through personalized and regionally relevant campaigns. The platform emphasizes brand consistency, GDPR compliance, and international deployment capabilities, targeting enterprises seeking advanced email marketing tools integrated with CRM and SSO authentication. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and video backgrounds, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and formal privacy or cookie policies. Tracking is limited to WebTouchPoint scripts, indicating moderate user tracking. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation.

B

bedpage.com

yourdomain.com

65

Bedpage.com operates as an online classified ads platform primarily targeting adult and escort services, positioning itself as an alternative to the now-defunct Backpage. The website offers a wide range of city-specific listings and adult service categories, catering exclusively to an adult audience. Technically, the site employs standard web technologies including jQuery and AJAX, hosted via a CDN for performance optimization. The site is mobile responsive and includes basic SEO and accessibility features. Security-wise, the site enforces HTTPS but lacks advanced security headers and cookie consent mechanisms, which are important for compliance and protection. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness, impacting the overall risk profile.

The website hittail.com is currently a parked domain with minimal content indicating it is for sale. There is no active business presence, no contact information, and no privacy or cookie policies. The domain is registered since 2006 with NameSilo, LLC and is not privacy protected. Technically, the site uses basic HTML, CSS, and JavaScript with external ad and tracking scripts but lacks HTTPS and security headers. The overall security posture is weak with no evident compliance or incident response policies. The site is accessible without WAF or security challenges but provides no meaningful content or business value.

M

MD Systems GmbH

digital-storytelling.ch

62

MD Systems GmbH operates the website digital-storytelling.ch, promoting Primer, a Drupal 10-based content management system tailored for organizations, products, and campaigns. The company positions itself as a provider of cost-effective, easy-to-use CMS solutions with a focus on online marketing. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including a contact form, email, phone, and physical address in Switzerland. The presence of partner logos and client references such as Paul Scherrer Institut and UNICEF enhances credibility. Technically, the site is built on Drupal 10, leveraging modern web technologies including JavaScript and CSS. It employs cookie compliance mechanisms with opt-in consent and integrates Google Analytics for user tracking. Security posture is solid with HTTPS enforced and anti-bot protections on forms, though it lacks explicit security headers and published security policies. No vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital infrastructure suitable for its business goals. The domain registration data aligns well with the business identity, supporting legitimacy. Privacy compliance is well addressed with GDPR-aligned cookie consent and a comprehensive privacy policy. However, the absence of terms of service and incident response information suggests areas for improvement. The risk profile is low with no critical security issues found. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

C

CIPA IGAB CIFC

cipa-igab.ch

44

CIPA IGAB CIFC is a Swiss non-profit community focused on supporting caregivers (Proches aidants). The website serves as an informational platform with content primarily in French, targeting individuals involved in caregiving. The site uses WordPress with the Divi theme, indicating a moderate level of digital maturity but lacks advanced technical or security features. The absence of privacy, cookie, and terms of service policies suggests limited compliance with data protection regulations. Security posture is minimal, with no evident security headers or incident response information. Overall, the site is accessible and safe but would benefit from enhanced security and compliance measures.

B

Brücke Le Pont

bruecke-lepont.ch

51

Brücke Le Pont is a Swiss non-profit organization dedicated to promoting fair work and improving labor and living conditions for disadvantaged populations in West Africa and Latin America. The organization operates through its flagship program 'Arbeit in Würde' and relies on donations, volunteer engagement, and partnerships to achieve its mission. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistency. It effectively communicates its mission, projects, and opportunities for involvement to its target audience of donors, volunteers, and supporters. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Swiper.js for interactive elements. It is mobile-optimized and includes SEO best practices such as structured data (JSON-LD) and meta tags. Performance is moderate with room for improvement in accessibility features. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the website demonstrates a high level of professionalism and trustworthiness, supported by certifications like ZEWO and transparent contact information. No critical security vulnerabilities or suspicious content were detected. Strategic recommendations include publishing a formal security policy, adding incident response information, and enhancing accessibility and security headers to further strengthen the security posture.

H

Hinto

hinto.ch

61

Hinto is a Swiss-based event listing platform providing multilingual information about local events and activities, primarily focused on Switzerland. The website uses a custom CMS called fuman and integrates Google Maps API for enhanced location-based services. The platform targets general users interested in discovering events in various Swiss cities and towns. Technically, the site is moderately performant, mobile-optimized, and implements essential security headers with HTTPS enforced. However, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Security posture is solid with no evident vulnerabilities, but incident response and vulnerability disclosure mechanisms are absent. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and transparency.

M

Microsoft

appnexus.com

78

Microsoft Advertising is a division of Microsoft Corporation offering a comprehensive digital marketing platform that enables advertisers and publishers to reach billions of users across search, display, video, retail, and gaming environments. Leveraging Microsoft's extensive network and partnerships with platforms like Netflix, Ecosia, DuckDuckGo, and Yahoo, the service empowers businesses to optimize campaigns using AI-driven tools such as Copilot and Performance Max. The website demonstrates a high level of professionalism, technical sophistication, and compliance with privacy regulations, reflecting Microsoft's market leadership in technology and advertising solutions. The technical infrastructure is robust, utilizing Adobe Experience Manager as the CMS, hosted on Microsoft Azure, and employing modern analytics and monitoring tools including oneDS Application Insights and Microsoft Clarity. The site is well-optimized for performance, mobile responsiveness, and accessibility, with strong SEO practices and comprehensive metadata. Security measures include HTTPS enforcement, security headers, and cookie consent mechanisms, contributing to a strong security posture. While WHOIS data for the subdomain is unavailable, this is consistent with large enterprises managing internal subdomains. The overall risk is low, with no detected vulnerabilities or suspicious content. Strategic recommendations include enhancing incident response visibility and publishing a vulnerability disclosure policy to further strengthen trust and security culture.

Я

Яндекс

yandex.by

77

Yandex.by is the Belarusian localized version of Yandex, a leading Russian internet company specializing in search engine and various internet services. The website offers fast internet search capabilities including text, voice, and image search, targeting a broad general audience primarily in Russian and Belarusian languages. The business operates at an enterprise scale with a strong market position in Russia and CIS countries. Technically, the website is well-implemented with modern JavaScript technologies, advanced performance monitoring via Yandex's own Ya.Rum system, and a responsive design optimized for desktop and mobile platforms. Security posture is strong with HTTPS enforced and error monitoring in place, though explicit privacy and cookie policies are not detected in the provided content. Overall, the site is professional, trustworthy, and safe for general audiences.

E

e-raumwerk GmbH

e-raumwerk.de

59

e-raumwerk GmbH is a specialized German company focused on strategy-driven marketing automation and lead management solutions based on the premium Evalanche technology platform. With over 10 years of experience, they serve mid-sized businesses aiming to optimize their marketing automation capabilities. The website reflects a professional and consistent brand image, showcasing case studies and certifications that reinforce their market position as a trusted partner. Technically, the site employs modern web standards, integrates a robust cookie consent mechanism via Cookiebot, and demonstrates good mobile and accessibility support. Security posture is solid with HTTPS and consent management, though security headers and explicit policies could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and well-structured for its target audience.