Security Directory

S

Settelen AG

settelen.ch

53

Settelen AG is a well-established Swiss mobility service provider based in Basel, with a history dating back to 1883. The company offers a comprehensive range of services including new and used car sales, garage and repair services, car rental, moving services, and group travel by bus. It holds a strong regional market position and is recognized as a leading Toyota center in Switzerland. The website is professionally designed, content-rich, and targets both private and corporate customers in the Basel region. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes Google Analytics for visitor tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a credible and trustworthy business with strong branding and user experience.

B

Bäckerei Kult

baeckereikult.ch

48

Bäckerei Kult is a small local bakery business based in Basel, Switzerland, operating multiple physical locations and offering bakery products, ordering services, and event hosting. The website is professionally designed using WordPress and integrates social media channels such as Facebook and Instagram to engage with its local audience. The business targets local customers and partners within the Basel region, maintaining a consistent brand presence and providing clear information about opening hours and locations. Technically, the website uses a modern CMS with SEO optimization and basic accessibility features, though there is room for improvement in security headers and incident response transparency. Security posture is solid with HTTPS enabled and cookie consent implemented, but lacks advanced security policies or vulnerability disclosure mechanisms. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements, reflecting a legitimate and established local business.

H

Helvetiarockt

helvetiarockt.ch

48

Helvetiarockt is a Swiss non-profit organization dedicated to empowering girls, women, intersex, non-binary, trans, and agender individuals through music workshops, sensitization events, and networking platforms. The organization positions itself as a niche player in the Swiss cultural and social empowerment sector, leveraging partnerships such as musicdirectory.ch and diversityroadmap.org to extend its reach and impact. The website is multilingual, supporting German, French, Italian, Romansh, and English, reflecting its inclusive and broad audience approach. Technically, the website is built on WordPress with modern integrations including Google Analytics, Google Tag Manager, and Elfsight widgets. It uses jQuery and GSAP for animations and interactive elements. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, with deferred script loading to improve user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is basic, with privacy and cookie policies present but no active consent mechanism. The site collects user data via newsletter subscription forms and uses tracking scripts moderately. Overall, Helvetiarockt presents a trustworthy and professional online presence with a clear mission and audience. Security and privacy practices are adequate but could be improved to meet higher compliance standards. The domain registration data aligns well with the organization's profile, supporting legitimacy. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing explicit security policies to strengthen trust and compliance.

P

Paprec Schweiz

paprec.ch

53

Paprec Schweiz is a well-established Swiss company specializing in sustainable recycling, waste management, and secure data destruction services. With over 125 years of experience and multiple subsidiaries across key Swiss regions such as Aargau, Basel, Geneva, Lucerne, and Zurich, the company offers comprehensive solutions for both corporate and private clients. Their business model focuses on environmental sustainability and resource recovery, leveraging modern technologies and eco-friendly processes. The website reflects a professional and consistent brand image, supported by structured data and active social media presence. Technically, the website is built on WordPress with popular plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The site is mobile-optimized and uses interactive mapping tools to showcase locations. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Analytics usage is minimal and privacy-conscious, with Google Analytics disabled by default. No critical vulnerabilities or security issues were detected. However, the absence of a visible privacy policy and terms of service pages is a compliance gap. Contact information is clearly presented with multiple phone numbers and physical addresses for subsidiaries. Overall, the site demonstrates a mature digital presence aligned with the company's market position. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, and improving accessibility features to further strengthen trust and compliance.

O

Opferhilfe beider Basel

opferhilfe-beiderbasel.ch

56

Opferhilfe beider Basel is a regional non-profit organization dedicated to supporting victims of violence in the Basel area of Switzerland. The website serves as an informational and advisory platform, offering guidance, support, and resources for victims of various forms of violence including sexualized violence, domestic violence, hate crimes, and more. The organization targets victims and their close relatives, providing free consultation services as mandated by the Swiss Victim Support Act. The site is multilingual, enhancing accessibility for diverse audiences. Technically, the website is built on a modern WordPress infrastructure using Elementor for design and layout, WPML for multilingual support, and WP Rocket for performance optimization. The site demonstrates good mobile optimization, fast loading times, and solid SEO practices through Yoast SEO integration. However, there is room for improvement in accessibility and explicit security headers. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. There is no evidence of security policy documentation or incident response contacts, which are recommended for enhanced trust and compliance. Privacy and cookie policies are absent, which impacts GDPR compliance and user trust. Overall, Opferhilfe beider Basel presents a trustworthy and professional online presence for a non-profit victim support entity. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, adding security headers, and providing incident response information to strengthen security posture and compliance.

S.E.A. AG operates the website Kulturservice.ch, providing a range of advertising and marketing services across Switzerland, including social media management, poster and flyer advertising, event staffing, and guerilla marketing. The company targets businesses and organizations seeking comprehensive promotional solutions. The website is professionally designed with clear navigation and consistent branding, reflecting a small but established regional player in the media sector. Technically, the site uses Bootstrap and jQuery frameworks, integrates Google Analytics for visitor tracking, and employs a cookie consent mechanism to comply with privacy regulations. Mobile optimization and SEO practices are adequately implemented, ensuring a good user experience. Security posture is moderate; HTTPS is used, but security headers and incident response policies are lacking, representing an area for improvement. Overall, the site is trustworthy and compliant with basic GDPR requirements, though it could benefit from enhanced security and transparency measures.

R

Region Leimental Plus

regionleimentalplus.com

58

Region Leimental Plus is a regional governmental association in Switzerland representing a cluster of municipalities in the Basel-Landschaft canton. The website provides information about the association's formation, member municipalities, and regional projects. The site is hosted on WordPress.com and uses standard WordPress technologies and plugins. The technical infrastructure is modern and adequate for the site's purpose, with good mobile optimization and moderate performance. Security posture is acceptable with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and professional but could improve compliance and security practices.

A

Atelier Spolia GmbH

spolia.ch

50

Atelier Spolia GmbH is a small architectural and design atelier based in Bern, Switzerland. The company focuses on exploring architecture and design through a process of learning and rethinking, offering bespoke projects that encourage freedom of use and appropriation. Their market position is niche, targeting clients interested in innovative and open architectural solutions. The website is built on WordPress using the Lay Theme, incorporating modern JavaScript libraries such as jQuery and Swiper.js, indicating a moderate level of technical maturity. Mobile optimization is good, and the site uses HTTPS with valid SSL certificates, ensuring secure communication. However, the absence of privacy and cookie policies, security headers, and analytics tools suggests room for improvement in compliance and marketing sophistication. Security posture is adequate but could be enhanced by implementing standard security headers and formal incident response mechanisms. Overall, the website presents a professional image with clear contact information but lacks comprehensive privacy and security disclosures.

A

Amnesty International Deutschland e.V.

amnesty-international.de

41

Amnesty International Deutschland e.V. operates this website as a portal for local groups and districts within the German section of Amnesty International. The site serves as an informational hub linking to the main Amnesty International Germany website and providing resources for groups interested in establishing their own web presence. The organization is a well-established non-profit focused on human rights advocacy with a medium-sized presence in Germany. Technically, the website is built on WordPress with a moderate tech stack including jQuery and several plugins for enhanced user experience. The site is mobile-optimized and accessible, though content quality is basic and primarily informational. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and explicit incident response or vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is trustworthy and legitimate, but could benefit from enhanced security and privacy features.

À

À la lyonnaise

alalyonnaise.fr

61

À la lyonnaise is a French lifestyle media company focusing on the city of Lyon, offering content related to food, shopping, cultural discoveries, and leisure activities. The website serves as a digital platform complementing their print magazine editions, targeting residents and visitors interested in Lyon's local culture and lifestyle. Their market position is that of a niche local media outlet with a consistent brand presence and active social media engagement. Technically, the website employs modern JavaScript libraries, Matomo and Google Analytics for tracking, and uses HTTPS with cookie consent mechanisms, indicating a moderate level of digital maturity. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and cookie consent but lacks explicit security headers and public security policies, suggesting room for improvement in security posture. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could enhance transparency around terms of service and incident response. Strategic recommendations include implementing security headers, publishing security policies, and improving SEO and accessibility compliance.

Z

Zammad

zammad.org

69

Zammad.org is the community website for Zammad, an open source web-based help desk and ticketing system. The site provides downloads for multiple operating systems and promotes free self-hosted installation. The business model centers on open source community engagement with a sister commercial site (zammad.com) for extended offerings. The website is well-structured, with clear navigation and professional design, targeting organizations seeking open source support solutions. Technically, the site uses modern JavaScript libraries such as jQuery and Prism.js, and employs Matomo for privacy-focused analytics. The site is hosted under a reputable registrar and uses HTTPS with a clientTransferProhibited domain status, indicating good domain security practices. However, the site lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced security and compliance. No contact emails or phone numbers are listed on the homepage, which may impact user trust and support accessibility.

N

NETHINKS GmbH

nethinks.com

56

NETHINKS GmbH is a well-established German IT and telecommunications service provider founded in 2004. The company specializes in network solutions, VoIP, web and mail hosting, and professional IT infrastructure consulting. Positioned as a manufacturer-neutral partner, NETHINKS serves business clients with tailored, future-proof communication and IT infrastructure solutions. Their market presence is reinforced by partnerships with major technology vendors and an ISO 27001 certification, underscoring their commitment to security and quality. Technically, the website is built on WordPress using WPBakery Page Builder and integrates Borlabs Cookie for GDPR-compliant cookie management. The site employs modern web technologies including jQuery and Google Tag Manager for analytics and marketing. Hosting and domain registration are managed by Vautron Rechenzentrum AG, a reputable provider. The website demonstrates good mobile optimization, SEO practices, and accessibility features, though some security headers are missing. From a security perspective, NETHINKS shows a mature posture with HTTPS enforced, cookie consent mechanisms, and ISO 27001 certification. However, there is room for improvement in publishing explicit incident response contacts and security.txt files. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear policies and consent management in place. Overall, NETHINKS GmbH presents a trustworthy and professional online presence with solid business credibility and technical implementation. The risk profile is low, but enhancing security headers and incident response transparency would further strengthen their security posture.

J

JAXForms AG

jaxforms.com

70

JAXForms AG is a Swiss technology company specializing in digital form and workflow solutions, offering a range of services from simple forms to tailored complete solutions. The company positions itself as a competent partner for digital transformation projects, serving a business audience primarily in Switzerland. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content including success stories and job postings, indicating active operations and growth. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics for user tracking. Security posture is strong with HTTPS enforced and security headers present, though the absence of a dedicated security policy and incident response information suggests room for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for its business clientele.

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of social, cultural, environmental, educational, and scientific services aimed at improving the quality of life for its residents. The website reflects a well-established public institution with clear communication of its mission and services, supported by active social media channels and event listings. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and a responsive design that supports good user experience across devices. Security posture is solid with HTTPS enforced and CSRF protections in place, though some improvements in security headers and incident response transparency are recommended. Privacy compliance is good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and aligned with the expectations for a government organization.

H

Holzbau-Offensive Baden-Württemberg

holzbauoffensivebw.de

56

The Holzbau-Offensive Baden-Württemberg website is a well-established government initiative promoting sustainable and climate-friendly construction using wood. It serves as an information hub offering details on funding, practical support, education, research, and events related to wood construction in the Baden-Württemberg region. The site targets architects, engineers, planners, and public sector stakeholders, positioning Baden-Württemberg as a leader in sustainable building practices. Technically, the site employs modern web technologies including Yii Framework, Bootstrap, jQuery, and Slick Carousel, ensuring a responsive and accessible user experience. Security measures such as HTTPS and CSRF tokens are implemented, though some HTTP security headers could be improved. Privacy compliance is strong with a clear cookie consent mechanism and a comprehensive privacy policy. No critical vulnerabilities or suspicious elements were detected, and the domain registration data aligns well with the website's governmental purpose, supporting high legitimacy and trustworthiness.

V

Valaisdigital

valais-economy.ch

52

Economic Promotion Valais is a regional government-affiliated entity focused on supporting entrepreneurs, startups, investors, and companies in the Canton of Valais, Switzerland. The website serves as a strategic platform offering services such as assistance to enterprises, innovation support, financial aid, and land or facility search to foster regional economic development. The site is professionally designed with consistent branding and clear navigation, targeting a broad audience of business stakeholders interested in the Valais economy. Technically, the website is built on WordPress using Elementor and Yoast SEO plugins, leveraging modern web technologies like jQuery and Swiper.js for interactive elements. The site is mobile-optimized and implements SEO best practices, including structured data for enhanced search visibility. Performance is moderate with good mobile responsiveness. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. Cookie consent is implemented via the Complianz GDPR plugin, indicating some level of privacy compliance. Overall, the website presents a low-risk profile with a strong business credibility and technical foundation. Strategic improvements include publishing comprehensive privacy and security policies, adding direct contact information, and implementing a vulnerability disclosure mechanism to enhance transparency and trust.

V

Valaisdigital

valais-economie.ch

69

Promotion économique Valais is a regional government economic promotion entity serving entrepreneurs and businesses in the Valais region of Switzerland. The website provides information and services to support innovation, business development, and investment in the local economy. It targets SMEs, startups, investors, and external companies interested in establishing themselves in Valais. The site is professionally designed using WordPress and Elementor, with good SEO practices implemented via Yoast SEO. Multilingual support is provided for French, German, and English audiences. Technically, the site uses modern web technologies and enforces HTTPS, ensuring secure communications. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security headers are not detected, indicating room for improvement in security hardening. The site uses Google Analytics with a cookie consent mechanism, reflecting basic GDPR compliance. Overall, the website is credible and trustworthy, aligned with its governmental role, but could enhance privacy and security policies to strengthen compliance and user confidence.

Seelsorge Polizei und Rettungskräfte Zürich SPuR is a specialized non-profit organization providing confidential and free counseling services to police and emergency personnel in Zurich. The website serves as an informational and contact platform, offering support for stressful work or personal situations and special life events. The organization maintains a local presence with clear contact details and event announcements, positioning itself as a trusted support resource within its niche. Technically, the website is built on WordPress using common plugins and frameworks, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is professional, trustworthy, and serves its target audience effectively, though it would benefit from enhanced compliance and security measures.

B

Bahnhofkirche Zürich

bahnhofkirche.ch

52

Bahnhofkirche Zürich is a small non-profit organization providing a spiritual and contemplative space in Zurich. The website offers information about the chapel, pastoral care, community groups, and daily reflections called Weg-Wort. It targets the general public and spiritual seekers in the local community. The business model is focused on community service and donations, positioning itself as a trusted local spiritual resource. Technically, the website is built on WordPress using common plugins such as WPForms and MailPoet for forms and newsletters. The site is served over HTTPS, has a moderate performance profile, and is mobile optimized. However, it lacks advanced security headers and a cookie consent mechanism, which are areas for improvement. From a security perspective, the site shows good basic practices with HTTPS and secure form handling but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic with a privacy policy present but no cookie policy or terms of service. The domain uses privacy protection, which is justified for this type of non-profit entity. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, adding cookie consent, publishing security policies, and maintaining plugin updates to improve security posture and compliance.

E

Evang.-ref. Kirchgemeinde Zürich

migrationskirchen.ch

44

The Zentrum für Migrationskirchen (ZMK) is a non-profit church-affiliated organization under the Evangelisch-reformierte Kirchgemeinde Zürich, focused on supporting migration churches and fostering intercultural Christian dialogue in Zurich. The website provides comprehensive information about their services, including room rental for worship, support and mediation between migration churches and local reform churches, and current news. The organization is well-positioned regionally with clear contact details and a professional online presence. Technically, the site uses a CMS likely based on DynPG, with Bootstrap and Matomo analytics, delivering a mobile-optimized and user-friendly experience. Security posture is adequate with HTTPS and secure form handling, though security headers and explicit policies are not evident. Privacy compliance is strong with a clear cookie consent mechanism and a detailed privacy policy in German. Overall, the site is trustworthy, professional, and serves its community well.

S

Streetchurch

streetchurch.ch

48

Streetchurch is a small non-profit organization based in Zurich, Switzerland, dedicated to supporting young people through work integration, housing, and social enterprise services. The organization focuses on providing holistic and low-threshold assistance to help individuals develop new life perspectives. Their website is professionally designed using WordPress with the Salient theme and includes clear navigation and relevant content tailored to their target audience. The site is accessible, mobile-optimized, and includes social media integration to enhance community engagement. Technically, the website uses modern web technologies and plugins, though some performance and security enhancements could be made. Security posture is adequate with HTTPS enforced, but lacks security headers and a formal security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a credible and trustworthy non-profit entity with room for improvement in security and privacy practices.

Z

Zytlos

zyt-los.com

46

Zytlos is a small non-profit community organization affiliated with the reformed church of Zurich, providing a welcoming space near Bahnhof Enge that includes a café and diverse event offerings such as concerts, coworking, meditation, and yoga. The website is professionally designed using WordPress and Elementor, featuring modern web technologies and responsive design. Security posture is adequate with HTTPS and reCAPTCHA integration, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Contact information is clearly presented, enhancing business credibility. Overall, the website is trustworthy and serves its community-focused mission effectively.

K

Kirchgemeinde Zürich

kirche-zh.ch

50

The kirche-zh.ch website functions as a portal for the Kirchgemeinde Zürich, serving as a gateway to various church communities in Zurich. It provides basic information and links to affiliated church websites, targeting local residents and church members. The site is modest in content and design, reflecting its non-profit and community-oriented nature. Technically, the site uses a variety of JavaScript libraries including jQuery, Bootstrap, and Piwik/Matomo for analytics, but lacks modern CMS identification and advanced SEO or accessibility features. Security posture is basic with no visible security headers or privacy policies, and no forms or user input mechanisms are present. The domain uses privacy protection in WHOIS, which is justified for this type of organization. Overall, the site is functional but could benefit from improved privacy compliance, security hardening, and richer content to enhance user trust and engagement.

ISNI International Agency (ISNI-IA) operates the ISO certified global standard for uniquely identifying contributors to creative works, serving a critical role in the media and creative industries. The organization maintains a large database of over 16 million identities, including individuals and organizations, facilitating accurate attribution and interoperability across multiple domains. Their business model centers on providing persistent identifiers to resolve name ambiguity and support linked data applications, positioning ISNI as a global authority in this niche. The website reflects a professional and consistent brand presence, targeting researchers, creators, publishers, and distributors worldwide.

P

Preiss Werbe- und Internetagentur

contao-themes-shop.de

44

The website www.contao-themes-shop.de represents Preiss Werbe- und Internetagentur, a small German company specializing in providing professional Contao CMS themes, templates, and extensions. Their business model focuses on e-commerce sales of digital products tailored for Contao CMS users, alongside offering custom theme development and support services primarily targeting agencies and businesses seeking customizable web solutions. The site is well-structured, with clear navigation and comprehensive legal and privacy documentation, reflecting a professional and trustworthy online presence. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery, AOS, and mmenu for enhanced user experience and mobile responsiveness. Hosting is provided via kasserver.com, consistent with the domain's nameservers. Performance is moderate with good mobile optimization and basic accessibility features. The site employs secure form handling with CSRF tokens but lacks explicit HTTP security headers. From a security perspective, the site uses HTTPS and secure form tokens, indicating a baseline security posture. However, the absence of security headers and a formal security policy or incident response contact reduces the overall security maturity. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy, though no cookie consent mechanism is detected. Business credibility is high due to clear contact information, official Contao partner certifications, and consistent branding. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic improvements in security headers, cookie consent, and incident response documentation would enhance the security posture and compliance further.

Heitech Service GmbH is a small German web agency specializing in web design, hosting, and consulting services primarily for regional clients. Their website is professionally designed using the Contao CMS and offers hosting under the Lausitz-Hosting brand. The technical infrastructure includes modern JavaScript libraries and a cookie consent mechanism, indicating GDPR awareness. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enabled but lacking security headers and explicit incident response information. Overall, the website is functional and trustworthy in appearance but requires verification of domain registration and enhanced security practices.

H

Human Rockstars

human-rockstars.com

47

Human Rockstars is a small coaching business based in Germany, specializing in systemic coaching, microdosing, and psychedelic integration. The website presents a professional and consistent brand with a strong focus on personal development and educational content, including a podcast featuring expert guests. The business targets individuals interested in microdosing and psychedelic experiences, offering personal and group coaching programs. Technically, the site is built on WordPress using Elementor and several plugins for SEO, cookie management, and podcasting. Security measures include HTTPS, reCAPTCHA on forms, and cookie consent mechanisms, though some security headers could be improved. Privacy policies are comprehensive and GDPR compliant. No direct contact emails or phone numbers are publicly listed, with contact primarily via a secured form. The domain registration is consistent with the business age and claims, enhancing trustworthiness.

K

Krüger + Co. AG

krueger.ch

58

Krüger + Co. AG is a Swiss medium-sized company specializing in heating, cooling, humidification, dehumidification, and water damage drying solutions, serving both industrial and residential markets across 21 locations. The company offers a broad range of products and services including emergency heating, climate systems, and consulting, positioning itself as a reliable regional player in the energy sector. Technically, the website is built on WordPress with WooCommerce, enhanced by modern plugins for SEO, multilingual support, and GDPR compliance. Analytics tools like Microsoft Clarity, Google Tag Manager, and Hotjar are used for user behavior insights. Security posture is solid with HTTPS and consent mechanisms, though security headers and explicit policies could be improved. Overall, the website is professional, user-friendly, and trustworthy, with transparent contact information and compliance with privacy regulations.

S

Schulthess Maschinen AG

schulthess.ch

59

Schulthess Maschinen AG is a well-established Swiss manufacturer and retailer specializing in washing machines, dryers, and dishwashers. The company emphasizes innovation rooted in tradition, targeting both homecare and professional customers primarily in Switzerland and German-speaking regions. Their business model combines product sales, service contracts, and an online shop for wash cards, positioning them as a trusted brand in the household appliance sector. The website reflects a mature digital presence with multilingual support and comprehensive customer engagement tools. Technically, the site is built on WordPress with Elementor and integrates modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook Pixel. Security posture is strong with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, secure, and compliant, supporting the company's market position effectively.

S

Swiss Olympic Association

swissolympicteam.ch

62

Swiss Olympic Association is the official national Olympic organization representing Swiss athletes and promoting Olympic values such as Excellence, Respect, and Friendship. The website highlights their involvement in Olympic missions, including the upcoming Milano Cortina 2026 Winter Games, and showcases athlete stories and official partners. The organization operates as a non-profit entity focused on supporting athletes and the Olympic movement within Switzerland. Technically, the website employs a modern tech stack including jQuery, Google Tag Manager, JWPlayer, and Slick Carousel. The site appears to be built on a CMS platform with structured content and good mobile optimization. SEO and accessibility are adequately addressed, though some improvements in accessibility could be made. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. However, security headers are not explicitly detected and incident response contact details are absent, which could be improved. The domain WHOIS data aligns well with the organization's identity, reinforcing legitimacy. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission. It provides clear contact information, partner listings, and social media integration, supporting a positive user experience and business credibility.

T

Toyota Schweiz

toyota.ch

71

Toyota Schweiz operates as the official Swiss website for Toyota, providing comprehensive information about Toyota vehicles, especially hybrid models, targeting German-speaking customers in Switzerland. The site reflects a strong market position as part of the global Toyota brand, offering key services such as vehicle sales information, dealer location, and customer support. The technical infrastructure is modern and robust, leveraging Adobe Experience Manager as CMS, advanced analytics via Datadog and Google Tag Manager, and a compliant cookie consent mechanism through OneTrust. The website is well-optimized for performance, mobile responsiveness, and accessibility, ensuring a high-quality user experience. Security posture is strong with HTTPS enforcement, bot protection via hCaptcha, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, professional, and aligned with corporate standards, supporting Toyota's brand integrity in Switzerland.

F

Fondation Etoile filante

etoilefilante.ch

51

Fondation Etoile filante is a Swiss non-profit organization dedicated to improving the lives of children living with illness or disabilities by fulfilling their dreams and providing leisure and support projects. Established in 1993, it holds a strong market position as a recognized public utility foundation with tax-exempt status and annual audits by Swiss authorities. The website reflects a professional and trustworthy presence with clear donation mechanisms and active social media engagement. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS and reCAPTCHA implemented, though lacking some advanced security headers and explicit privacy documentation. Overall, the site is safe, well-branded, and credible, serving its target audience effectively.

E

EWS Wirtschaftsprüfung AG

ews.li

43

EWS Wirtschaftsprüfung AG is a small, independent auditing firm based in Liechtenstein, specializing in statutory and voluntary audits, financial statement reviews, and compliance with Liechtenstein and European auditing standards. The company serves businesses and organizations requiring professional auditing and financial consulting services, leveraging a team with strong professional credentials and partnerships in Switzerland. The website is built on WordPress with a custom theme, employing standard web technologies such as jQuery and CSS3. The site is accessible, mobile-optimized, and professionally designed, though it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enforced, but missing security headers and absence of a vulnerability disclosure policy indicate areas for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

V

Verein Hilfe für Bangladesch

bangladesch.li

47

Verein Hilfe für Bangladesch is a small non-profit organization dedicated to supporting educational and social development projects in Bangladesh. Their website provides information about ongoing and archived projects, encouraging donations and sponsorships. The organization targets donors and supporters interested in charitable aid for Bangladesh. The site is primarily in German and uses WordPress with WooCommerce for donation processing. Technically, the website is built on a modern WordPress platform with common plugins such as WooCommerce, Contact Form 7, and Yoast SEO. It uses HTTPS and external CDNs for performance. The site is moderately optimized for mobile and SEO, with good navigation and content quality. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site enforces HTTPS and restricts ad and personalization tracking in Google Analytics, indicating some privacy awareness. However, it lacks important security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent banner. Overall, the website is legitimate and trustworthy for a small non-profit, with room for improvement in security posture and privacy compliance. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing security policies, and maintaining up-to-date software to enhance trust and compliance.

W

Wasch- & Küchentechnik Urs Ruoss | Altendorf, March Höfe

wakutech.ch

45

Wasch- & Küchentechnik Urs Ruoss is a small, established retail business based in Switzerland specializing in household and kitchen appliances, including washing machines, kitchen technology, and coffee machines. The company operates a physical showroom in Altendorf SZ and offers repair services, home delivery, and disposal of old appliances. Their market position is that of a trusted local specialist with over 20 years of experience, supported by partnerships with well-known appliance brands and an online webshop. Technically, the website is built on WordPress using modern plugins such as Yoast SEO, WPBakery Page Builder, and Slider Revolution, with Google reCAPTCHA implemented for form security. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is good with HTTPS enforced and reCAPTCHA in place, but lacks advanced security headers and a formal security policy. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with the business's local retail focus.

Joe Pfister is a small boutique wine producer and retailer based in Castelrotto, Tessin, Switzerland. The company offers exclusive wines primarily through an online shop, targeting adult wine consumers interested in high-quality boutique wines. The website reflects a focused e-commerce business model with event hosting and direct sales. Technically, the site is built on WordPress with WooCommerce, enhanced by plugins for SEO, cookie consent, age verification, and photo galleries. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security-wise, the site enforces HTTPS and includes cookie consent and age verification mechanisms, but lacks visible security headers and explicit privacy or security policies. The Google Analytics plugin is present but not configured, indicating limited user tracking. Overall, the website is professional and trustworthy but could improve in privacy transparency and security hardening.

B

Beratung und Unterstützung Aktiengesellschaft

buag.li

46

BUAG is a specialized consulting firm based in Liechtenstein, focusing on financial regulatory compliance and support services for banks, securities firms, and financial intermediaries. The company offers services including regulatory analysis, implementation support, compliance control, and assistance with obtaining financial licenses. The website reflects a niche market position with a professional and consistent brand presence, targeting German-speaking financial institutions. Technically, the site is built on WordPress with common plugins and uses HTTPS and Google Analytics for tracking. While the site is mobile-optimized and SEO-friendly, it lacks some security headers and explicit cookie consent mechanisms, indicating room for improvement in privacy compliance. Security posture is moderate with secure forms and no visible vulnerabilities, but incident response and security policies are not publicly disclosed. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

AC Alpina Consult GmbH

ac-alpina.ch

49

AC Alpina Consult GmbH is a small Swiss consulting firm specializing in fiduciary and financial advisory services tailored to SMEs and private clients. The company emphasizes a personalized, trust-based coaching approach, positioning itself as a generalist guiding clients through complex financial and entrepreneurial challenges. The website reflects this with professional content, clear contact information, and trust signals such as membership in Treuhand Suisse. Technically, the site is built on WordPress with modern frontend libraries like jQuery and Slick Slider, and it is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enforced and secure forms, though it lacks advanced security headers and explicit security policies. Privacy compliance is well addressed with a cookie consent mechanism and a privacy policy. Overall, the site is trustworthy and professionally maintained, supporting the company's market position as a reliable small consulting firm.

P

Pensionskasse der Bank J. Safra Sarasin

pkbjss.ch

46

The website www.pkbjss.ch represents the pension fund of Bank J. Safra Sarasin, providing information primarily to its members. The site is multilingual (German, English, French) and offers a secure member login portal hosted externally. The business is a niche financial entity focused on pension fund management for bank employees in Switzerland. The website content is basic but consistent with the business purpose, with limited direct contact information and no visible advanced security or privacy features beyond HTTPS. Technically, the site is built on WordPress with common libraries such as jQuery and Owl Carousel. It is moderately optimized for mobile and SEO but lacks advanced accessibility and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach but also a lack of marketing or user behavior insights. Security posture is adequate with HTTPS enforced and external secure login, but the absence of security headers and cookie consent mechanisms are notable gaps. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user trust and regulatory adherence.

Schaffer-office is a small Swiss-based service provider specializing in accounting, tax declarations, real estate sales and rentals, administrative support, and payroll services primarily targeting small and medium enterprises (KMU) and private customers in the Wollerau region. The website presents a professional business offering with clear service descriptions and a focus on local clientele including EU citizens relocating to Switzerland. The business appears to be established since 2015, consistent with domain registration data. Technically, the website is built on WordPress using common plugins such as Yoast SEO and Contact Form 7, with a moderate performance and good mobile optimization. However, some technical debt is evident from outdated jQuery usage and visible PHP warnings, which could pose security risks. SEO is adequately addressed with proper meta tags and structured data. From a security perspective, HTTPS is enforced, but there is a lack of security headers and visible privacy or cookie policies, indicating compliance gaps. No incident response or vulnerability disclosure information is provided. The site does not employ tracking or advertising scripts, which reduces privacy concerns but also limits marketing insights. Overall, the website is functional and professional but would benefit from improved security practices, updated technical components, and enhanced privacy compliance to strengthen trust and reduce risk.

The eMuseum website serves as the digital archive platform for the Museum für Gestaltung Zürich and the Archive of the Zurich University of the Arts (ZHdK). It provides extensive access to a large collection of design and art objects, positioning itself as the largest Swiss online database in this domain. The platform targets researchers, curators, designers, collectors, and the general public interested in design and art history. The business model is non-profit, focusing on cultural preservation and digital access rather than commercial activities. Technically, the website is built on a custom CMS leveraging the Apache Tapestry framework, with frontend technologies including Bootstrap, jQuery, OpenLayers, and Font Awesome. It employs Matomo for analytics and AddToAny for social sharing. The site is mobile-optimized with moderate performance and basic accessibility features. SEO optimization is basic, with room for improvement in structured data and meta tags. From a security perspective, the site enforces HTTPS and uses secure form tokens, but lacks several security headers and published policies such as privacy, cookie, and incident response. No vulnerabilities or malicious content were detected. The WHOIS data aligns well with the institutional identity, confirming legitimacy and trustworthiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance, improved security headers, and more transparent contact and incident response information to strengthen user trust and regulatory adherence.

H

Start - Hannover sauber! Gemeinsam für eine schöne Stadt.

hannover-sauber.de

46

The website www.hannover-sauber.de represents a community-driven initiative focused on promoting cleanliness and beautification in the city of Hannover, Germany. The site serves as a platform for residents and community members to engage in activities aimed at maintaining a clean urban environment. The business model is non-commercial and primarily community-oriented, with a small scale and local focus. The website was first published in 2021 and uses WordPress CMS with the Divi theme, supplemented by various plugins for enhanced functionality such as event management, testimonials, and social media feeds. From a technical perspective, the site employs modern web technologies including HTTPS, Google Fonts, Cookiebot for cookie consent, and Google Analytics for visitor tracking with IP anonymization. The site is mobile-optimized and demonstrates good SEO practices. However, there is room for improvement in accessibility and performance optimization. The technical stack is typical for small to medium WordPress sites, leveraging popular plugins and themes. Security posture is moderate with HTTPS enabled and bot protection via Google reCAPTCHA. Cookie consent is actively managed through Cookiebot, indicating awareness of privacy regulations. However, the absence of security headers and lack of explicit privacy and security policies reduce the overall security maturity. No vulnerability disclosure or incident response information is provided, which could be a concern for transparency and trust. Overall, the website is safe for general audiences, with no adult or questionable content detected. The lack of detailed contact information and formal policies slightly impacts business credibility and privacy compliance scores. Strategic recommendations include adding privacy and security policies, implementing security headers, and providing clear contact channels for incident response. These steps would enhance trustworthiness and compliance with data protection regulations.

S

STATION UG (haftungsbeschränkt)

station-frankfurt.de

56

STATION UG (haftungsbeschränkt) operates a regional digital platform serving the FrankfurtRheinMain startup and innovation ecosystem. The website provides news, event information, programs, awards, and networking opportunities targeting startups, innovators, and ecosystem participants in the region. The business positions itself as a central hub for regional startup support and information dissemination. Technically, the site is built on WordPress with modern plugins such as Yoast SEO, Revolution Slider, and WP Jobsearch, hosted by Raidboxes. It employs Google Analytics for visitor tracking and Mailchimp for newsletter management. The site is mobile-optimized and SEO-friendly, with a consistent brand presence and active social media channels. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit terms of service and a security policy page.

S

Sparkassen-Finanzgruppe Hessen-Thüringen

sfg-ht.de

66

The Sparkassen-Finanzgruppe Hessen-Thüringen website represents a large regional financial services group operating in Germany's Hessen and Thüringen regions. The group offers a broad range of financial products and services including banking, insurance, building finance, and asset accumulation, supported by a workforce of over 19,900 employees. The website is professionally designed, consistent in branding, and targets a general audience including customers and potential employees. Technically, the site is built on Concrete CMS and leverages modern JavaScript libraries such as jQuery and Swiper.js, with media assets hosted on Cloudinary. It integrates Matomo for analytics and cookiefirst.com for GDPR-compliant cookie consent management, along with accessibility enhancements via eyeAble.js. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are absent. No privacy policy or terms of service pages were detected in the provided content, which is a compliance gap. Overall, the site is trustworthy, safe, and well-positioned in its market segment.

B

Bürgschaftsbank Hessen GmbH

bb-h.de

52

Bürgschaftsbank Hessen GmbH operates as a regional financial guarantor in Hessen, Germany, providing guarantees and financing support to businesses, founders, and successors in cooperation with banks and Sparkassen. The website presents a professional and consistent brand image, targeting business clients in the finance sector. The company offers a range of guarantee products including classical guarantees, express guarantees, leasing guarantees, and specialized funds like Hessenfonds and Agrarbürgschaft. Technically, the website is built on WordPress with the Enfold theme, enhanced by Yoast SEO and Borlabs Cookie for privacy compliance. Hosting and DNS services are provided via Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit privacy policies are lacking. Analytics are conducted via eTracker, indicating moderate user tracking. Overall, the site is well-structured, mobile-optimized, and trustworthy, though improvements in privacy transparency and security headers are recommended.

V

Verband der Metall- und Elektro-Unternehmen Hessen (HESSENMETALL)

hessenmetall.de

51

HESSENMETALL is a prominent industry association representing employers in the metal, electrical, and IT sectors in Hessen, Germany. The organization provides comprehensive services including labor relations, legal advice, workforce development, digital transformation support, and innovation facilitation. It holds a strong market position as a leading regional network for over 200,000 employment relationships in the region's M+E industry. The website reflects a professional and well-structured digital presence with member portals and extensive content tailored to its audience of employers and industry stakeholders. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Swiper.js, and integrates analytics tools like Matomo and Google Tag Manager. Accessibility features are enhanced by the inclusion of eyeAble tools. The site is mobile-optimized and demonstrates good SEO practices with proper metadata and structured navigation. From a security perspective, the website enforces HTTPS and employs secure login forms with CSRF tokens. While explicit security headers are not fully visible in the HTML, the overall SSL configuration is good. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place, aligning with GDPR requirements. Overall, the website presents a low-risk profile with a high degree of professionalism and trustworthiness. Strategic recommendations include enhancing security headers, increasing transparency around incident response contacts, and maintaining up-to-date CMS and third-party components to mitigate potential vulnerabilities.

B

Benner Holding

benner-holding.com

61

Benner Holding is a well-established German family-owned holding company founded in 1882, with diversified business interests spanning real estate, trade, agriculture, energy, and hospitality sectors. The company emphasizes long-term investments and diversification to maintain stability even during economic downturns. The website reflects a professional corporate presence with clear business sector segmentation and leadership visibility, notably CEO Dr. Dominik Benner. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

I

iocto GmbH

iocto.com

72

iocto GmbH is a German company specializing in industrial measurement technology and automation, established since 1984. The company positions itself as an expert in its field, targeting industrial clients requiring precise measurement and automation solutions. The website reflects a mature digital presence built on WordPress with modern SEO and analytics integrations, indicating a moderate to high level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements such as enabling DNSSEC and publishing a security.txt file could enhance trust and compliance. Overall, the website is professional, compliant with GDPR, and trustworthy, supporting iocto's market position as a reliable industrial technology provider.

P

Pflegezentrum Rotacher

pz-rotacher.ch

56

Pflegezentrum Rotacher is a Swiss healthcare provider specializing in elderly care services including long-term, short-term, dementia, psychiatric, and transitional care. The organization serves residents primarily in the Dietlikon, Wallisellen, and Wangen-Brüttisellen communities. Their website reflects a regional healthcare provider with a clear focus on quality care and community integration. The business model centers on providing comprehensive care services recognized by local health authorities and insurers. Technically, the website is built on TYPO3 CMS with modern frontend libraries such as jQuery and Owl Carousel. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with privacy regulations including GDPR. No critical security issues or blocking mechanisms were detected. The domain WHOIS data aligns well with the business, supporting legitimacy. Recommendations include enhancing security headers, publishing security and incident response policies, and adding vulnerability disclosure information to improve trust and security maturity.

A

AZ Hofwiesen

az-hofwiesen.ch

51

AZ Hofwiesen is a Swiss healthcare provider operating a multilingual website primarily in German and Italian. The site serves patients and healthcare consumers, offering medical services and information. The business appears to be a medium-sized regional healthcare facility with a professional online presence. Technically, the website is built on WordPress using the Divi theme and incorporates modern SEO practices via the Yoast SEO plugin. It employs Google Analytics and Google Tag Manager for user tracking and has implemented a cookie consent mechanism to comply with GDPR requirements. Security-wise, the site uses HTTPS with a good SSL configuration but lacks some advanced security headers and explicit security policies. No privacy policy or terms of service pages were detected, which are recommended for compliance and trust. Overall, the website is accessible without WAF or blocking mechanisms, indicating good availability and user experience.