Medium-risk security reports

Maison de la Tourbière is a small Swiss ecotourism establishment focused on scientific, cultural, and hospitality services dedicated to the study, promotion, and protection of peatlands. The website is professionally designed using the Wix platform, providing a good user experience with clear content relevant to its target audience interested in environmental conservation and ecotourism. The technical infrastructure is modern and leverages Wix's Thunderbolt framework, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, though explicit security headers and privacy policies are missing, representing areas for improvement. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

sa_partners GmbH is a specialized consulting firm based in Zurich, Switzerland, focusing on urban design and territorial planning. Their core activities include project development, process design, and spatial strategies for urban and regional development. The company targets municipalities, developers, and planners seeking innovative and sustainable urban solutions. The website reflects a professional and consistent brand image with detailed project showcases and a clear business focus. Technically, the site uses modern web technologies such as Tailwind CSS, jQuery, and Google Tag Manager, providing a responsive and SEO-optimized experience. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and privacy compliance mechanisms could be improved. Overall, the site is trustworthy and well-positioned in its niche market.

Bureau d'étude Relief is a small Swiss company specializing in geo-tourism projects, natural heritage valorization, and cartography services. The website presents a professional and focused business offering, targeting clients interested in environmental and landscape interpretation services. The company maintains a consistent brand presence with active social media links on Facebook and LinkedIn, and the website is built on a modern WordPress platform using the Divi theme and Yoast SEO for optimization. Technically, the site is well-structured with HTTPS enabled and appropriate security headers, indicating a good security posture. However, the absence of explicit privacy policies, terms of service, and contact information limits the site's privacy compliance and user trust. Overall, the website is functional and professional but would benefit from enhanced privacy and security disclosures to improve compliance and credibility.

Wolzenalp is a small regional tourism business located in Switzerland, offering family-friendly hiking, biking, winter sports, and mountain railway services. The website presents a professional and consistent brand image with clear navigation and relevant content tailored to tourists and families. Technically, the site uses the Contao CMS, integrates Google Tag Manager, Cookiebot for consent management, and Outdooractive API for outdoor activity information. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced headers like Content-Security-Policy could be added. Privacy compliance is well addressed with a comprehensive cookie policy and GDPR-aligned consent. However, no explicit terms of service, security policy, or incident response contacts are published, which could be improved. Overall, the website is trustworthy, secure, and well-suited for its business purpose.

Energiefranken is a Swiss online platform operated by EKZ that provides a comprehensive database of funding programs related to energy and mobility. It serves Swiss companies and private individuals seeking financial support for energy efficiency and mobility projects, supporting the national Energy Strategy 2050. The platform is supported by reputable partners including Faktor Journalisten AG, EnergieSchweiz, and Energie-Experten, enhancing its credibility and data accuracy. Technically, the website uses modern JavaScript and privacy-focused analytics (Plausible), with good mobile optimization and accessibility features. Security posture is solid with HTTPS and CSRF protections, though additional security headers and explicit security policies could improve it. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-positioned in its niche market.

The website local-energy.swiss represents EnergieSchweiz, a Swiss federal government program aimed at promoting energy efficiency and renewable energy through voluntary measures targeted at cities, municipalities, and regions. The site provides information on various programs such as project funding, energy regions, smart city initiatives, and mobility solutions. The content is professionally presented, consistent with Swiss government branding, and designed to serve a public sector audience. Technically, the website employs modern web standards with responsive design and uses MailerLite for email marketing. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance mechanisms such as cookie consent and privacy policies. WHOIS data is privacy protected, which is typical for government-related domains, and the domain appears legitimate and consistent with its stated purpose. Overall, the site is trustworthy and serves as an authoritative resource for energy-related programs in Switzerland.

The website www.onlinetool-klimaanpassung.ch is an official Swiss government platform operated by the Bundesamt für Umwelt (BAFU) under the Eidgenössisches Departement für Umwelt, Verkehr, Energie und Kommunikation (UVEK). It provides an online tool aimed at Swiss municipalities to help them understand and adapt to local climate change risks. The platform offers localized hazard information and practical measures based on experiences from comparable communities, positioning itself as a trusted resource for public sector climate adaptation efforts. Technically, the site is built using modern web technologies including Angular 17.3.8 and Kendo UI components, ensuring a contemporary user experience. The site is multilingual (German, French, Italian) and includes video content to engage users. While the site is moderately optimized for performance and mobile use, there is room for improvement in accessibility and SEO. No major technical issues or vulnerabilities were detected in the provided HTML content. From a security perspective, the site uses HTTPS and employs some best practices such as disabling video downloads. However, explicit security headers are not visible in the HTML content, and no vulnerability disclosure or incident response information is provided. Privacy compliance is partially addressed with a privacy and contact page, but no cookie consent mechanism is evident. Overall, the security posture is adequate but could be enhanced with additional headers and transparency. The overall risk assessment is low given the official nature of the site, absence of suspicious content, and consistent WHOIS data confirming legitimacy. Strategic recommendations include implementing security headers, adding cookie consent, improving accessibility, and publishing a vulnerability disclosure policy to strengthen trust and compliance.

Kompass21 is a Swiss-based sustainability project evaluation tool supported by regional government entities. It provides a structured approach to assess projects against 20 sustainability criteria, offering clear results and team collaboration features. The website is professionally designed with a focus on usability and accessibility, leveraging modern web technologies such as Bootstrap and jQuery. Security posture is moderate with HTTPS enforced but lacks advanced security headers and published policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and legitimate with no blocking or suspicious indicators.

The Toolbox Agenda 2030 website serves as a digital platform aggregating best practices for sustainable development implementation targeted at Swiss cantons, municipalities, and businesses. It offers two main toolboxes tailored for government entities and companies, supporting the Agenda 2030 sustainability goals. The site is multilingual (German, French, Italian) and presents a professional, consistent brand image aligned with its government-related mission. Technically, the website is built on WordPress using the Oxygen builder framework, enhanced with jQuery and Matomo analytics for user tracking. Cookie consent is implemented with granular categories, reflecting a moderate level of privacy compliance. The site loads with moderate performance and is mobile-optimized with basic accessibility features. From a security perspective, HTTPS is enforced with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and published security policies limits the security posture. No privacy policy or terms of service pages were found, which impacts compliance and user trust. The domain uses privacy protection in WHOIS, which is common and justified for this type of project. Overall, the website is functional, professional, and moderately secure but would benefit from enhanced privacy disclosures, security policies, and contact information to improve trust and compliance.

The website digital.swiss is the official platform for the Swiss Federal Administration's Digital Switzerland Strategy, outlining the country's digital transformation guidelines. It targets government entities, cantons, communes, businesses, science, and civil society, providing strategic documents, monitoring, and news updates. The site is professionally designed with consistent branding and clear navigation, reflecting its authoritative government role. Technically, it uses standard web technologies including jQuery, Bootstrap, and Google Tag Manager with IP anonymization, hosted by Hostpoint. Security posture is good with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. WHOIS data confirms the domain's legitimacy and government ownership, with no signs of blocking or WAF interference. Overall, the site is trustworthy and serves as a key information hub for Switzerland's digital strategy.

Das Gebäudeprogramm is a Swiss government-supported initiative focused on promoting energy efficiency in buildings through subsidies and consulting. The website serves as an information hub for private homeowners and builders in Switzerland, providing detailed guidance on energy-saving measures, subsidy applications, and success stories. The program is positioned as a key pillar in Swiss energy and climate policy, backed by federal and cantonal authorities. Technically, the website employs modern web standards with HTTPS, security headers, and Matomo analytics, reflecting a mature digital infrastructure. The security posture is strong with no evident vulnerabilities, though privacy compliance could be enhanced by adding cookie consent mechanisms and explicit data retention policies. Overall, the site is professional, trustworthy, and well-aligned with its governmental mission.

Jugend im Berggebiet is a Swiss non-profit initiative under the Schweizerische Arbeitsgemeinschaft für die Berggebiete (SAB) focused on promoting youth-friendly mountain villages. The website serves as an informational and community platform to support youth engagement and counteract depopulation in mountain regions. It offers a label program, organizes youth forums, and provides media and agenda information relevant to its target audience of youth and municipalities in Swiss mountain areas. Technically, the site is built on WordPress with a professional theme and multilingual support, integrating common social media and analytics tools. Security posture is adequate with HTTPS and no visible vulnerabilities, though it lacks some security headers and formal security policies. Privacy compliance is partial, with a privacy policy linked via the SAB parent site but no cookie consent mechanism. Overall, the site is trustworthy, well-branded, and professionally maintained, serving a niche non-profit community purpose.

UNICEF Schweiz und Liechtenstein operates as a reputable non-profit organization dedicated to the welfare and survival of children globally, with a strong local presence in Switzerland and Liechtenstein. The website reflects a professional and well-branded digital presence, offering comprehensive information about their humanitarian efforts, donation opportunities, and advocacy work. The organization maintains a clear market position as part of the global UNICEF network, supported by transparent financial reporting and trust indicators such as ISO 9001 certification. Technically, the site is built on Drupal 10 with modern libraries and frameworks, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response disclosures. Overall, the site demonstrates high business credibility and privacy compliance, making it a trustworthy platform for donors and stakeholders.

euforia is a Switzerland-based innovative, youth-driven non-profit organization focused on empowering changemakers and organizations through transformative trainings in leadership, teambuilding, and change management. The organization has a recognized presence with awards from Ashoka, UNESCO, and the World Economic Forum, positioning it as a reputable entity in the non-profit educational sector. Their business model centers on non-formal education and creating safe spaces for transformational leadership development across multiple continents. Technically, the website is built on Squarespace, leveraging modern web technologies and third-party marketing and analytics tools such as HubSpot, Google Analytics, and Facebook Pixel. The site is well-optimized for mobile and SEO, with good performance and accessibility standards. Security posture is strong with HTTPS and HSTS enabled, though additional security headers could enhance protection. Privacy compliance is robust with clear cookie and privacy policies aligned with GDPR. Overall, the website demonstrates a professional, trustworthy, and secure digital presence suitable for its mission and audience.

Step into action is a small non-profit organization based in Switzerland focused on education for sustainable development. Their website promotes experiential events and creative methods to inspire organizations, schools, teams, and individuals to actively shape their future. The organization targets educational institutions and community groups with facilitation services and events designed to foster engagement in sustainability. Technically, the website is built on Squarespace, leveraging modern web technologies including Google Tag Manager and Weglot for multilingual support. The site is well-designed, mobile-optimized, and includes cookie consent mechanisms, though it lacks explicit privacy and terms of service pages. Security posture is strong with HTTPS and HSTS enabled, and use of Google reCAPTCHA for form protection. However, additional security headers and formal policies would enhance compliance and trust. Overall, the site presents a professional and trustworthy digital presence appropriate for its educational mission.

Kommune 360° is a German non-profit initiative focused on fostering cooperative and integrated planning and management to support successful child development within municipalities. The organization operates a professional website offering resources such as a Change-Guide, a Fellow-Program, podcasts, festivals, and newsletters targeted at municipal employees and stakeholders involved in child and youth welfare planning. The website is well-branded, consistent, and supported by partner organizations including Auridis Stiftung, DKJS, and PHINEO. Technically, the site is built on WordPress with modern plugins and frameworks, including Bootstrap and Mai Engine, and employs both Google Analytics and Matomo for analytics. The site is GDPR compliant with a comprehensive privacy policy and a cookie consent mechanism with opt-in functionality. Security posture is good with HTTPS enforced, though security headers are not detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site demonstrates a mature digital presence suitable for its non-profit mission.

engage.ch is an online platform dedicated to enabling youth participation in political and social issues within Switzerland. It offers a user-friendly interface for young people to submit their concerns and ideas, facilitating engagement at municipal, cantonal, and national levels. The platform is closely affiliated with the Dachverband Schweizer Jugendparlamente (DSJ), which supports its credibility and mission. The website is multilingual, primarily in German, and provides news, campaigns, and contact options to its users. Technically, the site is built on Drupal 8 CMS, leveraging modern web technologies such as Google Fonts, Plausible Analytics for privacy-focused tracking, and EU Cookie Compliance modules. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security is well-handled with HTTPS enforced and spam traps in forms, although explicit security policies and incident response contacts are not published. Overall, engage.ch presents a trustworthy and professional digital presence with strong privacy compliance and user engagement features. It serves a niche audience effectively, with clear business and social objectives aligned with youth civic participation in Switzerland.

Gemeinde Wauwil is the official municipal government website serving the community of Wauwil in Switzerland. It provides comprehensive information about local administration, community services, events, infrastructure projects, and environmental initiatives. The site targets residents and visitors, offering online services such as contact forms and an online counter. The website is well-branded, consistent, and reflects the identity of a small government entity with a focus on transparency and community engagement. Technically, the site uses modern web technologies including jQuery, Font Awesome, and Swiper.js, and is built on the GOViS eGovernment CMS platform. It is hosted by backslash AG and employs HTTPS with a cookie consent mechanism, ensuring privacy compliance. Security posture is good with no critical vulnerabilities detected, although formal security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and serves its purpose effectively.

Campus Demokratie is a Swiss non-profit organization dedicated to promoting political education and participation nationwide to strengthen democracy. The website serves as a national platform offering resources, events, and projects focused on democratic engagement. It targets politically interested citizens and educational institutions within Switzerland. The organization appears well-established since 2017 with a clear mission and active social media presence. Technically, the website is built on WordPress using modern libraries such as jQuery and Foundation, optimized for mobile devices and SEO with Yoast plugin. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is partially met with a comprehensive privacy policy but no explicit cookie banner. Overall, the site is professional, trustworthy, and content-rich, supporting its role as a key educational resource in Swiss democracy.

Dachverband Kinder- und Jugendförderung Graubünden operates as a regional non-profit organization dedicated to child and youth promotion within the canton of Graubünden, Switzerland. The organization provides advisory services, educational inputs, project coordination, and networking opportunities aimed at supporting children, youth, social workers, and community stakeholders. The website reflects a clear focus on these services with professional design and consistent branding. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and Cookie Notice, ensuring basic functionality and GDPR compliance. The site is mobile-optimized and uses HTTPS with email obfuscation to protect contact details. However, there is room for improvement in security headers and published security policies. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms but lacks explicit security or incident response policies. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong with clear privacy and cookie policies. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular plugin audits to ensure ongoing security and compliance.

Gemeinde Hasliberg is the official municipal government website serving the Hasliberg region in Switzerland. It provides local administrative information, community services, tourism details, event announcements, and educational resources. The site targets residents and visitors, offering comprehensive local content in German. The business model is that of a government entity focused on public service and community engagement. Technically, the website is built on the concrete5 CMS platform, utilizing common JavaScript libraries and Google services such as Analytics and reCAPTCHA to enhance functionality and security. The site is mobile optimized and presents a professional design with clear navigation. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy, legitimate, and well-maintained, reflecting its role as a government portal.

Cluster e.V. is a small, non-profit organization based in Hildesheim, Germany, focused on youth support, culture, and community projects. The organization operates various innovative projects aimed at youth empowerment and social engagement, often collaborating with local municipalities and other stakeholders. Their website reflects a professional and consistent brand presence with clear messaging and community testimonials that enhance trustworthiness. Technically, the website is built on WordPress with a modern plugin stack including Yoast SEO, Contact Form 7, and cookie consent tools. Hosting is provided by Contabo, and the site uses HTTPS with good SSL configuration. The site is moderately performant and mobile-optimized, though some improvements in accessibility and security headers could be made. From a security perspective, the site employs HTTPS and hCaptcha for form protection, but lacks explicit security headers and a published security policy or incident response contacts. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism, indicating GDPR awareness. Overall, the website presents a trustworthy and professional image suitable for its non-profit mission. Strategic improvements in security headers, incident response transparency, and contact information visibility would further enhance its security posture and user trust.

Werkstatt F is a community development project operated by the Gemeinde Fischenthal, focusing on local initiatives such as biodiversity, community engagement, and educational projects. The website serves as an informational platform for residents and stakeholders, providing updates on projects, events, and results. The site is hosted on Squarespace, leveraging modern web technologies and providing a responsive user experience. While the site is well-structured and visually consistent, it lacks formal privacy and cookie policies, which are important for compliance with data protection regulations. Security posture is adequate with HTTPS enabled, but could be improved by adding security headers and incident response information. Overall, the website is trustworthy and serves its community purpose effectively.

Ticino Turismo operates the official regional tourism website for Ticino, Switzerland, providing comprehensive travel and holiday information including accommodations, events, excursions, and cultural highlights. The website targets tourists and travelers seeking to explore the Mediterranean soul of Switzerland, positioning itself as a trusted and authoritative source in the hospitality and government tourism sector. Technically, the site employs a modern technology stack including Google Tag Manager, Facebook and Pinterest SDKs, and Leaflet.js for interactive maps, likely built on Adobe Experience Manager CMS. The website is well-optimized for mobile devices and SEO, with good performance and accessibility features. Security posture is strong with HTTPS enforced, appropriate security headers, and a robust cookie consent mechanism via iubenda, although no explicit security policy or vulnerability disclosure page was found. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable resource for visitors.

The website digital.swiss is the official platform for the Swiss Federal Government's Digital Switzerland Strategy, providing guidelines and updates on Switzerland's digital transformation. It targets government entities, cantons, businesses, science, and civil society, aiming to promote digital innovation and governance. The site offers strategic documents, monitoring reports, and news on focus areas such as artificial intelligence, cybersecurity, and open source software. Technically, the site uses a modern but simple tech stack including jQuery, Bootstrap, and Google Tag Manager, hosted by Hostpoint. The site is mobile optimized and professionally designed, though some accessibility and SEO aspects could be improved. Security posture is good with HTTPS and anonymized analytics, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent with the Swiss Federal Chancellery, enhancing trust. Recommendations include publishing privacy and cookie policies, enabling DNSSEC, and adding security headers to improve compliance and security.

ARI-SO is a Swiss non-profit association dedicated to fostering innovation in Western Switzerland by supporting SMEs and startups through its network members. The website presents a professional and regionally focused platform with clear messaging about its mission and services. Technically, the site is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies and privacy-friendly analytics via Plausible. Security posture is strong with HTTPS enforced and appropriate security headers, although explicit privacy and terms policies are missing. No blocking or WAF challenges were detected, allowing full content access. Overall, the site demonstrates a moderate to good level of digital maturity and security readiness.

Fondazione AGIRE is a Swiss regional innovation agency dedicated to supporting startups and SMEs in the Ticino region and the Italian-speaking Grisons. The organization provides a comprehensive range of services including startup support, SME assistance, coworking spaces at Tecnopolo, and coordination of the regional innovation system. The website reflects a professional and well-established entity with a clear focus on fostering technological development and economic competitiveness in its territory. Technically, the site is built on Drupal 10, employs modern web technologies such as Font Awesome and Google Tag Manager, and implements a robust cookie consent mechanism via Iubenda, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through comprehensive policies and consent management. Overall, the website presents a trustworthy and credible digital presence aligned with its business mission.

The Schweizerische Arbeitsgemeinschaft für die Berggebiete (SAB) is a Swiss non-profit association dedicated to advocating for the interests and sustainable development of mountain and rural regions in Switzerland. The organization operates with a strong political engagement and participates in various projects and initiatives to support these regions. Their website reflects a mature digital presence with multilingual support and active social media integration, primarily on Facebook and YouTube. The content is well-structured, informative, and targeted at stakeholders in mountain regions, policymakers, and the general public interested in regional development. Technically, the website is built on WordPress using the Enfold theme and includes plugins for social media feeds and multilingual content management. The site is served over HTTPS with a good SSL configuration and moderate performance. Mobile optimization and SEO practices are adequately implemented, though accessibility features could be improved. The site uses modern web technologies and maintains a consistent brand identity. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the organization's claims, showing a legitimate and transparent registration aligned with the Swiss non-profit status. Overall, the website presents a trustworthy and professional image with good content quality and technical implementation. However, it would benefit from publishing comprehensive privacy and security policies to enhance compliance and user trust. Strategic recommendations include adding explicit security headers, establishing a vulnerability disclosure process, and improving accessibility compliance.

Oslo Architecture Triennale is a cultural institution organizing architecture-related exhibitions, journals, films, and urban labs primarily targeting architects, urban planners, cultural institutions, and the general public interested in architecture and urbanism. The website presents a professional and consistent brand image with rich content and partnerships with reputable organizations. Technically, the site uses modern web technologies including Google Analytics and Imgix for image optimization, though it still relies partially on deprecated Universal Analytics. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy and cookie policies. No WHOIS data is publicly available due to privacy protection, which is common for Norwegian domains and does not raise immediate concerns. Overall, the website is trustworthy and professionally maintained but would benefit from improved privacy compliance and security best practices.

The Architectural Association, Inc. operates a well-established educational website serving as the primary online portal for its architecture school based in London. The site provides comprehensive information about academic programmes ranging from foundation courses to PhD levels, public lectures, events, and publications. It targets students, architects, researchers, and the general public interested in architecture education and cultural programming. The institution holds a reputable market position as an independent and historic architecture school with a global reach. Technically, the website employs a modern technology stack including React, Google Analytics, Hotjar, and Bootstrap, ensuring a responsive and user-friendly experience. The site is served over HTTPS with asynchronous loading of scripts, contributing to moderate performance and good mobile optimization. However, some accessibility features could be enhanced, and security headers are not explicitly present. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible exposure of sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, though no explicit security or incident response policies are published. The absence of WHOIS data is attributed to privacy protection, which is reasonable for this type of institution. Overall, the site maintains a high trust level with clear contact information and charity registration disclosures. The overall risk profile is low, with recommendations focusing on improving security headers, publishing incident response contacts, and enhancing accessibility compliance. These steps would further strengthen the site's security posture and user trust.

ARCH+ Verlag GmbH operates a well-established German architecture and urbanism magazine with a strong digital presence. The website serves as a platform for magazine sales, event promotion, and architectural discourse, targeting professionals, students, and enthusiasts in the architecture sector. The business model centers on publishing quarterly issues in print and digital formats, supplemented by events and advertising. The company holds a leading position in its niche market in Germany with international outreach through English content and social media engagement. Technically, the website employs modern web standards, including HTML5, CSS3, and JavaScript, with embedded video content and Google Tag Manager for analytics and marketing. The site is hosted on Namespace4You infrastructure and shows moderate performance with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligns well with the company's business objectives.

MētisPresses is a Swiss-based publishing company specializing in academic and cultural publications, offering both printed and digital books. The website targets French-speaking academics, researchers, and cultural enthusiasts, positioning itself as a niche publisher with a focus on sociological and historical content. The business model revolves around online sales of books and collections, supported by a professional and consistent brand presence. Technically, the website employs modern web technologies including Bootstrap, jQuery, and integrates payment solutions like Stripe and PayPal, indicating a mature digital infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and some basic security headers but lacks comprehensive policies such as privacy and cookie policies, and does not provide a vulnerability disclosure or security contact. Analytics usage is moderate with Google Analytics and Tag Manager implemented, but privacy compliance is weak due to missing policies. Overall, the website is trustworthy and professional but could improve its compliance and security posture.

Canal9 is a regional public service media broadcaster serving the Valais canton in Switzerland, offering bilingual French and German programming. The website provides news, magazine shows, live streaming, and replay services, supported by advertising and sponsorship. The company maintains a clear contact presence and social media engagement, positioning itself as a trusted regional media outlet. Technically, the site is built on WordPress with common plugins for ads, forms, and social integration, hosted by Infomaniak, a reputable Swiss provider. Security measures include HTTPS, Google reCAPTCHA, and GDPR cookie consent, though formal security and incident response policies are not published. Overall, the site is professional, content-rich, and trustworthy with moderate technical maturity and good privacy compliance.

Kontextur is a niche digital magazine specializing in architecture, providing curated content for architecture enthusiasts and professionals. The website demonstrates a consistent brand identity and a focused business model centered on digital publishing. The presence of social media links and embedded content enhances user engagement and outreach. Technically, the site is built on WordPress with modern SEO and cookie consent plugins, ensuring good digital maturity and compliance with privacy regulations. The site is mobile optimized and offers a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks visible security headers and explicit incident response information. Overall, Kontextur presents a trustworthy and professional online presence with moderate technical sophistication and good privacy compliance.

New Generations is a European media and cultural platform focused on emerging architectural practices since 2013. It provides a space for knowledge exchange, events, publications, and networking for architects across Europe. The website is built on SilverStripe CMS, uses modern web technologies including Bootstrap and jQuery, and integrates Google Analytics and reCAPTCHA for user interaction and spam protection. The security posture is moderate with HTTPS enabled and reCAPTCHA implemented, but lacks some security headers and DNSSEC. Privacy and cookie policies are absent, which impacts compliance. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

The Ernst Schindler Stiftung is a Swiss non-profit foundation dedicated to supporting architecture graduates from ETH Zürich by providing travel scholarships to explore architectural themes across Europe and Mediterranean countries. The foundation has a long history dating back to 1926 and maintains a focused niche in architectural education and cultural enrichment. The website is professionally designed using WordPress with Gravity Forms and Yoast SEO, providing clear information about the foundation's purpose, history, organizational structure, and scholarship application process. Contact information is readily available, enhancing business credibility. Technically, the website employs modern web technologies and is well-optimized for mobile and accessibility standards. Security posture is solid with HTTPS enforced and secure form handling, though it lacks published security policies and headers that could further enhance protection. Privacy compliance is a notable gap, with no privacy or cookie policies found, which should be addressed to meet GDPR and other regulations. Overall, the website presents a trustworthy and professional image with no signs of malicious activity or suspicious content. Strategic improvements in privacy and security documentation would strengthen compliance and user trust.

Stellare Agency is a small technology-focused digital agency based in St. Moritz, Switzerland, specializing in web development, SEO, and Webflow solutions. The website presents a professional but minimal online presence targeting local businesses or individuals seeking digital services in the Engadin region. The technical infrastructure is built on the Webflow platform with jQuery, indicating a modern but straightforward tech stack. Performance and mobile optimization are adequate, though accessibility and SEO optimizations are basic. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and no privacy or cookie policies are present, which may impact compliance. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional but lacks comprehensive security and privacy features, limiting its credibility and compliance standing.

Mesh Festival is a Swiss non-profit cultural event focusing on the intersection of art and technology. It is organized by a consortium of educational and cultural institutions including HEK, FHNW, and iart. The festival explores digital spatial utopias and immersive public spaces, targeting artists, technologists, and the general public interested in cultural innovation. The website is professionally designed, mobile-optimized, and provides clear information about the festival, its partners, and contact details. Technically, it uses modern JavaScript libraries such as jQuery and Socket.io, and integrates Mailchimp for newsletter subscriptions. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Overall, the site is trustworthy and well-maintained, reflecting the festival's reputable institutional backing.

Zug Estates Holding AG is a Swiss real estate company specializing in sustainable development and management of living spaces primarily in the Zug region. The company emphasizes creating value through sustainable and innovative real estate solutions, targeting investors, tenants, and partners interested in environmentally responsible property management. Their website reflects a professional corporate presence with comprehensive investor relations and sustainability reporting. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for cookie consent, hosted on DigitalOcean infrastructure. The website is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of a publicly available security policy and incident response contact is noted. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website winterthur.ch serves as the official portal for the city and region of Winterthur, Switzerland. It provides comprehensive information on tourism, culture, economic development, city administration, and branding initiatives. The site targets residents, tourists, and businesses interested in the Winterthur region, positioning itself as a trusted government information source. The business model is that of a government portal offering public services and regional promotion. Technically, the website employs a modern frontend stack including the Foundation CSS framework and jQuery, with visitor analytics powered by Piwik (Matomo). The site is mobile-optimized with a moderate performance profile and basic accessibility features. It uses HTTPS for secure communication but lacks advanced security headers and explicit privacy or cookie policies. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and no visible sensitive data exposure. However, it lacks documented security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of security headers and privacy compliance documentation are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website is a professional, trustworthy government portal with good content quality and business credibility. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, adding terms of service, and enhancing accessibility and security transparency to improve compliance and user trust.

Switzerland Global Enterprise (S-GE) is a government-affiliated agency dedicated to supporting Swiss companies in expanding their international business and promoting Switzerland as a prime business location. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to exporters, investors, and business partners. The technical infrastructure leverages modern technologies including Drupal 10 CMS, Auth0 for authentication, and integrates analytics and user experience tools such as Google Analytics and Hotjar. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA. Privacy compliance is well addressed with clear policies and consent mechanisms. However, WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is consistent with the organization's profile. Overall, the website demonstrates a high level of professionalism and security readiness.

Swissnex is a globally recognized non-profit organization connecting Switzerland with the world in the fields of science, education, art, and innovation. With a network of offices and science & technology counselors across multiple continents, Swissnex facilitates international collaboration and knowledge exchange. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting academia, startups, and innovation sectors. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, hosted with Cloudflare DNS and GoDaddy registrar. Security posture is solid with HTTPS and domain protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, Swissnex demonstrates high business credibility and trustworthiness.

Spheriq is a Swiss-based digital platform dedicated to supporting the nonprofit and philanthropic sector by providing tools and insights for fundraising, grant management, networking, and transparency. The platform targets nonprofits, funders, experts, and corporates engaged in philanthropy, offering a comprehensive suite of services to enhance impact and efficiency. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, it is built on WordPress with modern libraries and plugins, ensuring good performance and mobile responsiveness. Security measures such as HTTPS and security headers are properly implemented, although explicit privacy and terms of service pages are missing. Contact is primarily via forms and an Intercom chat widget, with no direct emails or phone numbers publicly listed. Overall, the platform demonstrates a strong market position in the Swiss nonprofit ecosystem with a trustworthy and secure online presence.

Sanitas is a leading Swiss health insurance provider offering a range of basic and supplementary insurance plans tailored for private customers. The website demonstrates a mature digital presence with modern technologies such as Vue.js and comprehensive privacy and cookie management, reflecting compliance with GDPR. The site is well-structured, mobile-optimized, and professionally designed, targeting private customers in Switzerland with clear service offerings and customer support pathways. Security posture is strong with HTTPS enforcement and security headers, though public security policies and incident response details are absent. WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall legitimacy of the business as evidenced by the professional website and comprehensive policies.

Mobimo Holding AG is a well-established Swiss real estate company specializing in property development, investment, and management. The company targets investors, tenants, and real estate professionals, positioning itself as a leading player in the Swiss real estate market. The website reflects a professional and comprehensive digital presence with clear business information and user-friendly navigation. Technically, the site employs modern technologies such as React, Google Analytics, and Google Maps API, ensuring good performance and mobile optimization. Security measures are robust, with HTTPS enforced and multiple security headers present, although explicit security policies and incident response details are not published. Overall, the site demonstrates a mature digital infrastructure and trustworthy business credibility.

HRS is a well-established Swiss real estate company with over 60 years of experience, specializing in development, implementation, and investment across Switzerland. The company operates as the largest owner-managed real estate service provider in the country, emphasizing regional roots, sustainability, and innovation. Their website reflects a professional and comprehensive digital presence, leveraging modern technologies such as Next.js and Storyblok CMS, with strong mobile optimization and SEO practices. Security posture is robust, with HTTPS enforced, security headers present, and a cookie consent mechanism implemented via Cookiebot. However, there is no explicit security policy or incident response information publicly available. Overall, the website and business information align well with the WHOIS data, indicating a legitimate and trustworthy entity.

Electrolux Switzerland operates a professional and well-branded website focused on household appliances, targeting general consumers in Switzerland. The site uses modern web technologies such as React and Next.js, providing a good user experience with multi-language support. However, explicit privacy, cookie, and security policies are not detected in the provided content, which may impact compliance and user trust. The security posture is moderate with no visible security headers or incident response information. Overall, the domain and WHOIS data align well with the Electrolux brand, indicating high legitimacy. Strategic improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of community services including social welfare, environmental stewardship, cultural activities, urban development, sports, education, and scientific engagement. The website reflects its role as a public sector organization with clear communication and community outreach. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and frameworks to deliver a responsive and user-friendly experience. The presence of Matomo analytics indicates a privacy-conscious approach to user data collection. Security posture is solid with HTTPS enforced and CSRF protections in place, though there is room for improvement in implementing security headers and explicit cookie consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the website is professional, trustworthy, and well-aligned with its governmental mission.

Vee24 operates as an enterprise-focused technology company specializing in video chat and virtual consultation platforms designed to enhance digital customer experiences. Their services target luxury retail, beauty, home furnishing, automotive, and financial services sectors, positioning them as a key player in video commerce and virtual appointments. The website reflects a mature digital presence with professional branding, clear messaging, and a focus on increasing sales and customer satisfaction through innovative digital engagement tools. Technically, the website leverages modern web technologies including React, JSON-LD structured data, and custom scripts hosted on dedicated CDNs. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and a clean user interface. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms in place. From a security perspective, the site uses HTTPS and secure form inputs but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or malicious content were detected, and trust is bolstered by certifications such as AICPA SOC and reputable client logos. The absence of WHOIS data is a minor concern but does not significantly detract from the overall trustworthiness. Overall, Vee24 presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security transparency and header implementation would further enhance their security posture and trust.