Security Directory

H

HELI-ALPS

helialps.ch

45

HELI-ALPS is a specialized helicopter service provider based in Valais, Switzerland, offering a range of aerial services including panoramic flights, heliski, aerial work, VIP flights, and flight school training. The company targets tourists, adventure enthusiasts, and business clients seeking efficient and scenic air travel in the Swiss Alps region. Their market position is that of a regional expert with a professional and modern digital presence. Technically, the website is built on WordPress using Elementor and integrates modern web technologies and marketing tools such as Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements several security headers, but lacks visible privacy and cookie policies, which is a compliance gap. No critical vulnerabilities or WAF blocking were detected, indicating a stable security posture. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and explicit contact information.

H

Helialpin AG

helialpin.ch

56

Helialpin AG is a Swiss helicopter service provider established in 1993, offering helicopter flight training, sightseeing, and work flights primarily in the Altenrhein, Sitterdorf, and Zürich regions. The company recently announced cessation of operations as of July 13, 2025, and has partnered with Glarnair GmbH to continue providing helicopter services and honor existing vouchers. The website is built on the Contao CMS platform, leveraging modern JavaScript libraries and Google Analytics for tracking. It features a cookie consent mechanism and basic GDPR compliance. Security posture is solid with HTTPS and CSRF protections, though formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-structured, with clear contact information and social media presence.

H

Héli Air Monaco

heliairmonaco.com

46

Héli Air Monaco is a specialized luxury helicopter flight service provider operating primarily in Monaco and surrounding regions including France, Italy, and Switzerland. The company offers a range of services such as panoramic sightseeing flights, private charters, transfers, and tailored heli-packages targeting affluent tourists and private clients seeking exclusive aerial experiences. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its niche market. Technically, the website employs a modern JavaScript stack including jQuery, Google Analytics, Mailchimp, and Smartlook for analytics and marketing purposes. The site is mobile-optimized and uses standard web technologies, though no CMS or hosting provider details are evident. Performance is moderate with good SEO and basic accessibility features. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism, but lacks visible security headers and explicit security or incident response policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration status, which impacts overall trust. No critical vulnerabilities or malicious content were detected. Overall, the website presents a solid business front with room for improvement in security posture and transparency regarding domain registration and security policies. Strategic enhancements in these areas would strengthen trust and compliance.

W

www.gillaviation.be

gillaviation.be

43

Gillaviation.be is an official dealer for Diamond Wings aircraft, operating primarily in the transportation sector with a focus on aviation sales and services. The website presents basic content describing its role as a dealer but lacks detailed business or contact information in the accessible HTML content. The technical infrastructure is based on WordPress with the Divi theme and uses standard web technologies such as JavaScript and jQuery. SEO is supported by the All in One SEO plugin, but overall content and navigation are basic. Security posture is limited with no detected security headers or explicit SSL configuration details, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain is well-established since 2001, registered with Nomeo, and consistent with the business claims, supporting legitimacy. However, the website would benefit from enhanced security practices, privacy compliance, and clearer contact information to improve trust and user confidence.

F

Fuchs Helikopter

fuchshelikopter.ch

48

Fuchs Helikopter is a Swiss-based helicopter service provider offering a range of services including sightseeing flights, transport, and flight school training. The company targets both private individuals and business clients, positioning itself as a local expert in aerial services. The website is professionally designed using WordPress with Elementor and WooCommerce, indicating a moderate level of digital maturity. The technical infrastructure includes modern web technologies and analytics tools such as Google Analytics and Tag Manager, supporting business insights and marketing efforts. Security posture is adequate with HTTPS enforced and some security plugins in use, but lacks published security policies and explicit security headers. Privacy compliance is basic, with no visible privacy or cookie policies, though a cookie consent mechanism is present. Overall, the website is trustworthy and functional, but could improve transparency and compliance documentation.

A

Alpinlift Helikopter AG

alpinlift.ch

52

Alpinlift Helikopter AG is a Swiss-based helicopter service provider specializing in sightseeing flights, VIP and taxi flights, gourmet restaurant flights, heliskiing, and ski flights. The company also supports complex transport and construction operations using helicopters. Their market position is that of a niche operator serving tourists, adventure seekers, and businesses requiring specialized helicopter transport within Switzerland. The website is professionally designed using the Contao CMS and modern JavaScript libraries, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms indicates room for improvement. Contact information is clearly presented, and the company maintains an active social media presence. WHOIS data confirms legitimacy and consistency with the business claims. Overall, the website reflects a trustworthy and professional business with moderate technical maturity and some compliance gaps.

A

Air Zermatt AG

air-zermatt.ch

50

Air Zermatt AG is a well-established Swiss helicopter company specializing in rescue, transport, sightseeing flights, and professional training. With over five decades of experience, it holds a strong market position in the Upper Valais region and beyond, offering comprehensive services to tourists, emergency responders, and industry clients. The website reflects a mature digital presence with multilingual support and a professional design that enhances user experience and trust. Technically, the site employs modern web technologies, including a proprietary CMS, analytics, and marketing tools, ensuring good performance and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high business credibility and professionalism, supporting Air Zermatt's reputation as a trusted helicopter service provider.

A

Airport Helicopter AHB AG

airportheli.ch

56

Airport Helicopter AHB AG is a well-established Swiss company specializing in helicopter flights and pilot training since 1993. The company operates multiple locations across Switzerland including Luzern-Beromünster, Basel, Grenchen, and Zürich, offering a wide range of services such as sightseeing flights, VIP and taxi flights, glacier flights, romantic and wedding flights, events, heli-skiing, and comprehensive pilot training programs. Their website reflects a professional and consistent brand image with clear navigation and relevant content targeting aviation enthusiasts and potential pilot trainees. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Owl Carousel. It is mobile-optimized and integrates Google Analytics and Tag Manager for user tracking. The site uses HTTPS with a good SSL configuration and implements GDPR-compliant cookie consent mechanisms. However, there is room for improvement in security headers and publishing explicit security policies. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection, and cookie consent. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing a consistent and legitimate registration since 1993. Overall, the site presents a low risk profile with a solid security posture and compliance with privacy regulations. Strategically, the company should consider enhancing its security posture by adding security headers, publishing a security policy, and possibly a vulnerability disclosure policy. Improving accessibility features and expanding transparency around data retention would further strengthen trust and compliance.

A

Air-Glaciers SA

air-glaciers.ch

53

Air-Glaciers SA is a well-established Swiss aerial transport and mountain rescue company operating since 1965. The company offers a broad range of services including mountain rescue, helicopter transport, heliski, pleasure flights, agricultural aerial treatments, and flight training. It holds a strong market position as a leader in alpine aerial services in Switzerland, supported by multiple bases across key Swiss alpine regions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Joomla CMS with modern JavaScript libraries and integrates common marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is good with HTTPS and CSRF protections, but lacks some advanced security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the website is trustworthy and serves its target audience effectively, though improvements in privacy compliance and security disclosures are recommended.

I

Invoiceberry Limited

invoiceberry.com

64

InvoiceBerry is a UK-based small business SaaS company specializing in online invoicing software tailored for freelancers and small businesses. The platform offers invoice creation, expense tracking, payment management, and integrates with popular payment gateways. The website is professionally designed, mobile-optimized, and provides clear business and contact information, including customer testimonials that reinforce trust. Technically, the site uses modern web technologies such as Bootstrap, jQuery, and Cloudfront CDN, with analytics tools like Plausible and Facebook Pixel for user tracking. Security posture is good with HTTPS enforced and secure forms, though no explicit security headers or incident response contacts are published. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. WHOIS data is unavailable, which slightly reduces trust but the overall business presence and content quality support legitimacy.

C

Controller Akademie AG

controller-akademie.ch

49

Controller Akademie AG is a leading Swiss educational institution specializing in continuing education for controlling, accounting, and management professionals. Founded by reputable organizations Kaufmännischer Verband Zürich and SwissAccounting, it offers a broad range of courses including preparation for federal diplomas, CAS programs, and seminars focused on digitalization and practical finance skills. The website reflects a strong market position with comprehensive, professionally presented content targeting finance professionals seeking career advancement. Technically, the site is built on WordPress with modern libraries and is well-optimized for mobile and SEO, though some improvements in security headers and cookie consent are recommended. Security posture is solid with HTTPS and obfuscated emails, but lacks explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and well-aligned with its business goals.

Buchknacker is an online library platform operated by the SBS Schweizerische Bibliothek für Blinde, Seh- und Lesebehinderte, targeting children and youth with dyslexia, AD(H)S, and other reading impairments. It offers free access to audiobooks, e-books, and text-audio books, focusing on accessibility and educational support. The platform is positioned as a niche service within the education and non-profit sectors in Switzerland, providing specialized content and services for its audience. Technically, the website employs a moderate technology stack including Dojo Toolkit, jQuery, and Google Tag Manager, running on the Iguana CMS platform. The site is moderately optimized for performance and mobile use, with good accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts. The absence of a cookie consent mechanism despite using tracking scripts indicates partial privacy compliance. Overall, the security posture is adequate but could be improved with better transparency and controls. The website is trustworthy and professional, with consistent branding and clear business information. No adult or unsafe content is present, making it safe for its intended audience. The domain registration aligns well with the organization, supporting legitimacy. Strategic improvements in privacy compliance and security transparency would enhance the platform's trust and compliance standing.

U

United Western Denver

unitedwesterndenver.com

56

United Western Denver operates as a leading distributor of sandblasting supplies and industrial finishing products in the Mountain West region of the United States. Established in 2004, the company has positioned itself as a key supplier for metal finishing needs, offering a broad range of products including blast media, sandblasting equipment, and industrial sands. Their website reflects a medium-sized business with a focus on industrial and manufacturing sectors, targeting businesses requiring finishing and sandblasting solutions. The site is professionally designed with clear navigation and relevant content tailored to their audience.

A

AHB Tooling & Machinery LLC

ahbinc.com

59

AHB Tooling & Machinery LLC is a well-established company specializing in the sales and maintenance of tools and machinery, primarily serving the manufacturing sector. With a domain age dating back to 2000 and a founding year of 1994, the company demonstrates a mature market presence. Their business model focuses on B2B sales, machine repair, and vending solutions, targeting industrial clients requiring metalworking consumables and machinery. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, and appears to be built on the Bagisto e-commerce platform. Hosting is provided by GoDaddy, and the site integrates marketing and analytics tools such as Google Tag Manager, Hotjar, and LiveChat. Performance and mobile optimization are good, though accessibility and SEO could be improved. Security practices include HTTPS but lack DNSSEC and explicit security headers, indicating room for enhancement. From a security perspective, the site maintains a basic but adequate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and security policy documentation suggests compliance gaps, particularly regarding GDPR. The WHOIS data supports the legitimacy of the domain and business, with consistent registration details and no privacy protection masking ownership. Overall, the website is trustworthy and professionally maintained, with moderate technical sophistication and a solid business foundation. Strategic improvements in security headers, privacy compliance, and accessibility would further strengthen their digital maturity and risk posture.

R

RockRidge Abrasives

rockridgeabrasives.com

71

RockRidge Abrasives is a specialized supplier of premium coated and non-woven abrasives, garnet for blasting and waterjet cutting, and related industrial products. The company positions itself as a trusted abrasive specialist with hand-selected and tested materials, targeting industrial and manufacturing sectors. The website is built on WordPress with WooCommerce and the Avada theme, indicating a mature digital infrastructure with e-commerce capabilities. The technical setup includes Cloudflare DNS and Google Analytics for performance and marketing insights. Security posture is adequate with HTTPS and domain locks, but lacks DNSSEC and security headers, and no visible privacy or cookie policies, which are areas for improvement. Overall, the site is professional, content-rich, and safe for general audiences, with moderate tracking and marketing tools in use.

F

flake GmbH

flake.ch

54

flake GmbH is a Swiss-based WordPress agency specializing in web design, development, hosting, security, SEO, and WooCommerce services. The company targets businesses and organizations seeking professional WordPress solutions, positioning itself as a niche provider with a focus on quality and customer support. The website reflects a professional and consistent brand image with comprehensive service descriptions and contact information. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, jQuery, Google Maps API, and Matomo analytics. The site demonstrates good SEO practices, mobile optimization, and moderate performance. However, some accessibility features could be improved. From a security perspective, the site uses HTTPS and some best practices such as honeypot protection on forms and privacy-focused analytics. Nonetheless, it lacks several important security headers and explicit cookie consent mechanisms, which are recommended for enhanced security and compliance. Overall, the website is trustworthy and professionally maintained, with no signs of malicious activity or suspicious content. Strategic improvements in security headers, privacy consent, and incident response transparency would further strengthen its security posture and compliance.

I

In The Pocket

inthepocket.mobi

71

In The Pocket is a well-established European digital product studio headquartered in Belgium, specializing in strategy, design, and technology services. With over 200 in-house experts and a client base exceeding 400, the company offers a broad range of services including AI development, platform engineering, mobile and web development, and strategic consulting. Their market position is strong within the technology sector, supported by notable client partnerships and case studies. Technically, the website is built on modern frameworks such as Webflow, integrates advanced animation libraries like GSAP, and uses marketing and analytics tools including HubSpot and Google Tag Manager. The site is performant, mobile-optimized, and SEO-friendly. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and incident response information, which are areas for improvement. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency, though the professional quality of the website mitigates concerns. Overall, the website demonstrates a mature digital presence with room to enhance security and compliance disclosures.

I

Inventaire

inventaire.ch

54

Inventaire is a communication agency based in Suisse romande, Switzerland, specializing in branding, visual identity, graphic design, website creation, motion design, video production, and social media management. The company targets businesses and organizations seeking professional communication and branding services within the regional market. The website is built on WordPress using the Divi theme, incorporating modern web technologies and marketing tools such as Facebook Pixel and LinkedIn Insight Tag. Cookie consent is managed via CookieYes, demonstrating some privacy compliance efforts. Security posture is solid with HTTPS enabled and standard security headers present, though explicit security policies and contact information are lacking. Overall, the website presents a professional image but would benefit from enhanced privacy and security disclosures to improve compliance and trust.

S

SCIV - Syndicats chrétiens du Valais

scivlesyndicat.ch

46

SCIV - Syndicats chrétiens du Valais is a regional Christian trade union organization based in Switzerland's Valais region. The website primarily serves as a portal for membership contract submissions, targeting workers and professionals seeking union representation. It offers detailed membership forms collecting personal and professional data, with integrated digital signature capture and anti-bot protections via Google reCAPTCHA v3. The organization is linked to larger federations such as SYNA and Travail.Suisse, indicating established union affiliations. The website content is professional and relevant to its audience, with clear references to union statutes and regulations via linked PDFs. Technically, the site is built on Joomla CMS using the Helix Ultimate framework and RSForm! Pro for form management, with standard libraries like jQuery and Bootstrap for UI. Google Analytics and Tag Manager are used for visitor tracking, but no explicit privacy or cookie policies are present, representing a compliance gap. Security posture is moderate with HTTPS enforced and reCAPTCHA integration, but lacks visible security headers and formal incident response or vulnerability disclosure policies. WHOIS data aligns well with the website's regional and organizational claims, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security best practices.

M

MEDIPACK AG

medipack.ch

49

MEDIPACK AG is a Swiss-based medium-sized company specializing in comprehensive packaging solutions for the medical industry. Their offerings span from product development, cleanroom blister production, sealing technology, to packaging services and machinery tailored for medical applications. The company positions itself as a system supplier with a strong emphasis on quality, evidenced by ISO 13485:2016 certification and industry awards such as the Swiss Packaging Award 2025. The website is professionally designed, multilingual, and provides clear contact and product information targeting medical industry clients and partners. Technically, the website is built on the webEdition CMS platform, utilizing jQuery and custom plugins for interactive UI elements. It demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is strong with HTTPS enforced and a comprehensive cookie consent mechanism offering granular user control. However, there is room for improvement in implementing additional security headers and publishing incident response or vulnerability disclosure information. Overall, the website reflects a mature digital presence with a solid security foundation and compliance with privacy regulations. The absence of social media links and analytics tools suggests a focus on direct B2B engagement rather than broad marketing. The domain registration data aligns well with the business claims, reinforcing trustworthiness. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, improving accessibility, and maintaining regular audits of third-party libraries to sustain security and compliance standards.

Z

Zürcher Arbeitsgemeinschaft Lehrpersonenweiterbildung

zal.ch

52

ZAL (Zürcher Arbeitsgemeinschaft Lehrpersonenweiterbildung) is a Swiss educational organization focused on providing continuing education and professional development courses for teachers, school assistants, school leadership, and childcare staff in the Canton of Zürich. The website offers a broad range of services including in-person and online courses, seminars, coaching, and administrative support for school-related training. The organization positions itself as a regional leader in teacher training with a strong emphasis on practical, affordable, and accessible learning opportunities. Technically, the website is built on WordPress with a modern tech stack including React, Backbone.js, and jQuery. It integrates several plugins for SEO (Yoast), consent management (Ownbit Consent Manager), social media feeds (Instagram via Spotlight), and email marketing (Mailchimp). The site is mobile-optimized, SEO-friendly, and employs HTTPS with strong security headers, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, cookie consent management, and spam protection via Google reCAPTCHA. However, explicit security policies and incident response information are not published, representing an area for improvement. No vulnerabilities or suspicious activities were detected. Overall, ZAL's website is professional, trustworthy, and compliant with GDPR requirements. It effectively serves its target audience with clear contact information, comprehensive content, and transparent privacy practices. The domain registration data aligns well with the business claims, supporting its legitimacy and credibility.

E

ERNE AG Bauunternehmung

erne.ch

71

ERNE AG Bauunternehmung is a well-established Swiss construction company with over 110 years of experience, specializing in high-quality services across Hochbau, Tiefbau, Umbau, and general contracting. The company targets construction clients in Switzerland, including public and private sectors, and emphasizes innovation and sustainability. The website is built on TYPO3 CMS with a modern tech stack, optimized for mobile and SEO, and includes comprehensive privacy and cookie policies compliant with GDPR. Security posture is strong with HTTPS, security headers, and secure form handling. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and trustworthy digital presence.

S

sasag Kabelkommunikation AG

sasag.ch

62

sasag Kabelkommunikation AG is a regional telecommunications provider based in Switzerland offering high-quality internet, mobile, TV, and telephony services tailored for both private and business customers. The company emphasizes bundled service offerings with competitive pricing and local customer support. Their market position is that of a trusted regional player with a focus on customer-centric solutions and modern technology adoption. The website reflects a mature digital presence with comprehensive service information and promotional offers.

M

Malix.Studio

malix.studio

57

Malix.Studio is a specialized media production company based in the Jura region of Switzerland, offering professional video production services including studio rental, live streaming, webinars, and virtual studio capabilities. Their business model focuses on providing high-quality, customizable video production environments tailored to the needs of SMEs in the Swiss market. The website demonstrates a solid digital presence with professional design and clear service offerings. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and performance optimization, though minor backend errors and lack of explicit privacy policies indicate areas for improvement. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit policies. Overall, the site is trustworthy and professional, with moderate risk due to minor technical and compliance gaps.

A

Artionet

eseances.ch

51

eSéances is a Swiss-based digital governance software solution developed by Artionet.Group, targeting public and private organizations requiring efficient session and meeting management. The platform offers a comprehensive suite of tools including agenda preparation, document consultation, decision tracking, and automated minutes generation, emphasizing security and collaboration. The website reflects a mature digital presence with integration of modern web technologies and marketing tools, supporting a medium-sized business with a strong foothold in the Swiss market. Security posture is solid with HTTPS and encryption practices, though lacks publicly accessible privacy and cookie policies, which are critical for compliance. Overall, the site is professional, trustworthy, and well-structured, serving its target audience effectively.

A

Artionet

egov4.ch

58

egov4.ch is a Swiss-based digital governance solutions provider developed by Artionet, offering a comprehensive suite of e-government products tailored for public institutions and private enterprises. The company has a strong market position in Switzerland with over 1,500 clients and emphasizes secure, compliant, and paperless digital transformation. Their key services include digital forms, secure data sharing, digital signatures, meeting management, and virtual service desks, all hosted and developed in Switzerland to ensure data sovereignty and security. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and AutopilotHQ for marketing automation. The site is well-designed with good navigation and mobile optimization, though some accessibility features could be improved. Hosting appears to be Swiss-based, aligning with the company's data residency claims. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS and integrates SuisseID for legally valid digital signatures, indicating a strong security posture. However, the absence of explicit security headers and published security policies represents an area for improvement. Privacy compliance is limited due to the lack of visible privacy and cookie policies, which could pose regulatory risks. Overall, egov4.ch presents a professional and trustworthy digital presence with solid business credibility and technical implementation. Strategic enhancements in privacy compliance and security transparency would further strengthen their position and reduce potential risks.

I

Imagine Canada

imaginecanada.ca

56

Imagine Canada is a well-established Canadian nonprofit organization founded in 2004, dedicated to supporting the charitable sector through advocacy, research, capacity-building, and membership services. The organization positions itself as a leader in the nonprofit space, offering key services such as charity accreditation, social investment networks, funding research platforms, and HR resources. Their target audience includes nonprofit organizations, charities, sector leaders, and supporters across Canada. The website reflects a professional and consistent brand image with comprehensive content tailored to its audience. Technically, the website is built on Drupal 10 with modern web technologies including jQuery and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, and Clearbit. The site is mobile-optimized, accessible, and performs moderately well. Privacy and cookie policies are present with consent mechanisms, indicating good compliance with data protection regulations. From a security perspective, the site uses HTTPS and has domain registration protections in place but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious patterns were detected. The domain registration data is consistent with the organization's identity and history, supporting high legitimacy. Overall, Imagine Canada’s website demonstrates a mature digital presence with strong business credibility, good privacy compliance, and a solid security posture, though improvements could be made in security policy transparency and DNS security enhancements.

R

ReviewForest

reviewforest.org

61

ReviewForest is a technology-driven platform that enables businesses to increase customer reviews by planting trees for their customers, thereby combining marketing with environmental sustainability. The company positions itself as a niche leader in eco-friendly review generation and climate positive branding, targeting businesses that want to grow their online reputation while contributing to climate action. The platform offers tools such as marketing templates, review widgets, and integration with major review platforms like Google and Amazon. Technically, the website is built on Webflow with integrations including PostHog for analytics and Cloudflare for hosting and CDN services, delivering good performance and mobile optimization. Security posture is solid with HTTPS and domain transfer protections, though improvements like DNSSEC and explicit security policies are recommended. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business mission.

B

bedpage.com

bedpage.com

65

Bedpage.com operates as an online classified ads platform primarily targeting adult and escort services, positioning itself as an alternative to the now-defunct Backpage. The website offers city-based listings across the United States and Canada, focusing on adult personals, erotic massage, and related services. The platform's market position is niche, catering to an adults-only audience with explicit content and service categories. Technically, the site employs standard web technologies including jQuery and Google Analytics, with assets delivered via BunnyCDN, ensuring moderate performance and good mobile responsiveness. However, the site lacks advanced security headers and cookie consent mechanisms, which are important for modern compliance and security standards. The absence of WHOIS data raises concerns about domain legitimacy and ownership transparency, impacting trustworthiness. Privacy policies exist but are basic and do not demonstrate full GDPR compliance. Overall, the site functions adequately but has notable gaps in security and privacy practices.

C

CSFO

csfo.ch

48

CSFO is a Swiss public institution agency specializing in vocational training and professional, university, and career orientation services. It operates under the Swiss Conference of Cantonal Ministers of Education (CDIP) and is supported by the Swiss Confederation. The website provides comprehensive information and services targeted at education specialists and partners across Swiss cantons. The agency offers coordination of qualification procedures, information media, online platforms, and continuing education programs. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and is well-optimized for mobile and accessibility. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security policies and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and well-aligned with its public service mission.

D

Der Bundesrat

admin.ch

66

The website www.admin.ch/gov/de/start.html is the official portal of the Swiss Federal Council (Der Bundesrat), providing authoritative information on government decisions, media conferences, legal documents, and federal departments. It serves a broad audience including citizens, media, and political stakeholders, positioning itself as a trusted source of Swiss federal government information. The site offers comprehensive content about government members, their roles, and legislative processes, supported by official branding and consistent updates. Technically, the website is built on Adobe Experience Manager (AEM) with a modern tech stack including jQuery and Matomo analytics. It employs HTTPS with strong SSL configuration and anti-clickjacking measures, ensuring secure user interactions. The site is mobile-optimized and accessible, with good SEO practices and clear navigation, reflecting a mature digital infrastructure. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF protection, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit published security policies, incident response contacts, and a cookie consent mechanism, which are areas for improvement to enhance compliance and user trust. Overall, the website is highly credible and trustworthy, reflecting its status as a government portal. It maintains a high standard of content quality and technical implementation, with minor gaps in privacy compliance and security transparency. Strategic recommendations include implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen its security posture and regulatory adherence.

S

SDBB | CSFO

berufsberatung.ch

69

The website www.berufsberatung.ch serves as the official Swiss information portal for career, study, and professional guidance. It provides comprehensive resources including job and apprenticeship searches, educational pathways, and career planning tools targeted at students, professionals, educators, and foreigners in Switzerland. The portal is well-positioned as a trusted national resource with multilingual support and extensive content coverage. Technically, the site employs modern JavaScript libraries and analytics tools, with a custom CMS backend. The site is mobile-optimized and accessible, offering a professional user experience. Security-wise, HTTPS is enforced and forms use anti-forgery tokens, but additional security headers and explicit privacy disclosures are recommended. Overall, the site demonstrates a strong business credibility and technical maturity with room for enhanced privacy compliance and security transparency.

T

Terminal8 GmbH

terminal8.ch

52

Terminal8 GmbH is a small, professional web design and development agency based in Bern, Switzerland, specializing in TYPO3 CMS-based responsive websites, branding, and print design. The company positions itself as a creative and experienced partner for businesses seeking distinctive digital and print presence. Their website reflects a high level of professionalism with comprehensive service descriptions and a strong focus on user experience and accessibility. Technically, the site leverages modern JavaScript libraries and frameworks, including TYPO3 CMS, jQuery, Plyr, and Mapbox GL JS, ensuring a responsive and engaging user interface. Privacy is respected through a detailed cookie consent mechanism and the use of Matomo analytics, which is privacy-friendly. Security posture is good with HTTPS enforced and CAPTCHA protection on forms, though formal security policies and vulnerability disclosures are not published. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

J

Job Board Doctor

jobboarddoctor.com

57

Job Board Doctor is a specialized consulting and advisory service focused on improving job boards and talent acquisition technology. The website offers expert guidance on revenue generation, strategy, analysis, and start-up support for job boards and recruiting sites. The business targets job board owners, recruiters, and talent acquisition professionals globally. The site is built on WordPress with a modern tech stack including Google Analytics and AdSense for monetization and tracking. The content is professional, well-structured, and optimized for SEO and mobile devices. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. WHOIS data is missing, raising concerns about domain registration legitimacy despite the site's professional appearance and long-standing content history. Overall, the site is credible but would benefit from improved transparency on domain registration and enhanced security practices.

W

Weischer.Cinema Schweiz GmbH

weischer-cinema.ch

55

Weischer.Cinema Schweiz GmbH is a well-established owner-managed company specializing in cinema advertising services across Switzerland, boasting over 60 years of industry experience. The company offers a broad portfolio of advertising options including national and local cinema screens, DOOH cinema advertising, below the line advertising, spot creation, and spot delivery services. Their target audience primarily consists of advertisers and marketing professionals seeking impactful cinema advertising solutions. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for GDPR-compliant cookie management. It employs Google Tag Manager for analytics and tracking, and uses jQuery and Tiny Slider for interactive elements. The site is mobile optimized and demonstrates good SEO and accessibility practices, though hosting details are not explicitly identified. From a security perspective, the site enforces HTTPS with excellent SSL configuration and integrates cookie consent mechanisms. While explicit security headers like Content-Security-Policy are not detected, the site shows no exposed sensitive data or vulnerable libraries. There is no visible security policy or incident response information published, which could be improved. Overall, the security posture is strong with room for enhancement in formal security disclosures. The domain registration data is consistent with the business claims, showing no suspicious patterns and supporting the legitimacy of the website. The site is free from adult or questionable content, targeting a general audience with professional media services. Strategic recommendations include adding a security.txt file, publishing a security policy, and enhancing security headers to further strengthen trust and compliance.

N

NZZone

nzzone.ch

54

NZZone is a Swiss media advertising platform specializing in premium brand advertising across print, digital, events, and sponsoring formats. The company targets advertisers seeking high-quality, targeted advertising opportunities within Switzerland. The website demonstrates a professional and consistent brand presence with multi-language support and a comprehensive offering of premium media brands. Technically, the site is built on WordPress with modern plugins and tracking tools, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, implementing security headers, and providing clearer contact and incident response information.

L

Livesystems AG

livesystems.ch

54

Livesystems AG is a prominent Swiss company specializing in digital out-of-home and online advertising, operating across multiple locations with a medium-sized workforce. The company benefits from being part of Swiss Post, enhancing its market credibility and reach. The website reflects a professional digital presence with multilingual support, modern design, and clear marketing messaging targeting advertisers in Switzerland. Technically, the site is built on WordPress with a robust tech stack including SEO and cookie compliance plugins, ensuring good performance and user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure and compliance with GDPR, supporting its business credibility and trustworthiness.

G

Goldbach

goldbach.com

65

Goldbach is a well-established Swiss media and advertising company founded in 1998, offering a broad range of advertising solutions across TV, online, audio, and outdoor channels. The company leverages data-driven approaches and programmatic platforms to deliver targeted advertising campaigns. The website is professionally designed, mobile-optimized, and provides comprehensive information about their services and client success stories. Technically, the site uses modern JavaScript frameworks (Nuxt.js) and integrates third-party marketing and tracking tools such as Google Tag Manager and Adform. Security posture is good with HTTPS enforced and domain status protections, but lacks DNSSEC and explicit security headers. Privacy compliance is limited by the absence of visible privacy and cookie policies, though a cookie consent mechanism is present. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

A

APG|SGA

apgsga.ch

75

APG|SGA is a leading Swiss outdoor advertising company offering a comprehensive portfolio of analogue and digital out of home advertising spaces across Switzerland. Established in 1900, it holds a strong market position with over 150,000 advertising spaces and a broad target audience including advertisers, agencies, and property owners. The website reflects a mature digital infrastructure with modern technologies such as Django backend, Google Tag Manager, and responsive design, ensuring excellent user experience and performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website demonstrates high professionalism, trustworthiness, and business credibility.

D

Doofinder SL

doofinder.com

54

Doofinder SL operates a professional website offering AI-powered search and discovery solutions tailored for eCommerce platforms. The company positions itself as a leader in the eCommerce search market with over 10,000 customers and a comprehensive suite of services including AI visual tagging, personalized recommendations, and advanced analytics. The website is built on WordPress with modern technologies and integrates multiple marketing and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and security headers implemented, though explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data limits domain registration trust verification, but the website content and business information strongly indicate a legitimate and professional operation.

E

Entrepreneurship Training

entrepreneurship-training.ch

45

Entrepreneurship Training is a consortium-led educational platform commissioned by Innosuisse, providing free entrepreneurship training modules (Module 1, 2, and 2+) targeted at aspiring entrepreneurs in the central region of Switzerland. The website is professionally designed using WordPress with modern plugins and themes, offering a good user experience and clear navigation. The technical infrastructure includes Google reCAPTCHA for form security and a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced, though some security headers could be improved. Contact information is transparent and linked to reputable academic institutions, enhancing trust. Overall, the website is a credible and well-maintained resource for entrepreneurship education.

T

TUAG Triebwerk Unterhalt AG

tuag.ch

52

TUAG Triebwerk Unterhalt AG is a specialized helicopter engine maintenance and repair company based in Geneva, Switzerland. It operates as an official Safran Helicopter Engines approved center, servicing key engine models such as Arriel, Arrius, and Makila. The company is part of the Europavia Group, which provides a broader ecosystem of helicopter sales, maintenance, and spare parts services. TUAG's market position is solid within the European helicopter maintenance sector, serving clients in Switzerland, France, Belgium, and globally. The website reflects a professional business with clear service offerings and certifications, targeting helicopter operators and aviation maintenance providers. Technically, the website is built on Joomla CMS with common web technologies like jQuery and Bootstrap. It features a responsive design with moderate performance and basic SEO and accessibility features. The site uses HTTPS but lacks advanced security headers, which is a notable area for improvement. The contact mechanisms include multiple emails, phone numbers, and a contact form with a simple CAPTCHA, indicating basic data collection practices. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data but misses several security best practices such as security headers and robust CAPTCHA solutions. There is no visible privacy or cookie consent mechanism, which may impact GDPR compliance. The WHOIS data is consistent with the business claims, showing a legitimate and established domain registration. Overall, TUAG's website presents a trustworthy and professional image with room for enhancement in privacy compliance and security hardening. Strategic improvements in these areas would strengthen the company's digital trust and regulatory adherence.

S

Swiss Helicopter Maintenance AG

shm-ag.ch

50

Swiss Helicopter Maintenance AG is a specialized service provider in the helicopter maintenance sector, holding key certifications such as EASA Part-145 and CAMO approvals. The company operates multiple service centers in Switzerland and Liechtenstein, offering maintenance, avionics, continuing airworthiness management, and logistics services. Their market position is strong within the aviation maintenance niche, supported by authorized partnerships with major helicopter manufacturers and avionics dealers. The website reflects a professional and consistent brand image with clear service offerings targeted at helicopter operators and aviation clients. Technically, the website is built on Joomla CMS using the Astroid framework and SP Page Builder, incorporating modern web technologies such as jQuery and FontAwesome. It is mobile-optimized with good SEO practices and uses Matomo for analytics, indicating a moderate level of digital maturity. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the business claims, enhancing trustworthiness. Overall, the security posture is solid but could be improved by adding security headers and formal policies. The overall risk assessment is low, with the website presenting a trustworthy and professional front for its business operations. Strategic recommendations include enhancing security transparency, adding incident response contacts, and continuous monitoring of third-party components to maintain security and compliance.

B

BST Software

bst.software

50

BST Software is a small, established German technology company specializing in custom software development, web development, and web design services primarily serving the Mittelhessen and Rhein Main regions. The company offers a broad range of services including Microsoft .NET software development, modern web technologies such as Laravel, Vue, Angular, and Node.js, as well as CMS-based web design and web hosting. Their market position is supported by longstanding client relationships and certifications such as Microsoft Partner Network membership. Technically, the website is built on WordPress with modern frameworks and libraries, demonstrating good digital maturity. The site is mobile optimized, SEO friendly, and uses SSL encryption, although some security headers are not explicitly detected. No analytics or tracking scripts were found, aligning with their cookiefree zone policy. Security posture is solid with SSL and no visible vulnerabilities, but the absence of explicit security policies and incident response information suggests room for improvement. WHOIS data is unavailable due to TLD restrictions, but the website content and trust indicators support legitimacy. Overall, the site is professional, secure, and compliant with GDPR, though cookie consent mechanisms are not implemented due to their cookiefree stance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and considering a cookie consent mechanism to improve compliance and user trust.

I

Idea Creation GmbH

e-guma.ch

71

Idea Creation GmbH operates the e-guma platform, a comprehensive voucher and ticketing system targeted at businesses in Switzerland and surrounding regions. The company provides SaaS solutions enabling clients to sell, manage, and market vouchers, tickets, and related products through customizable online shops integrated directly into their websites. The platform supports both online and on-site sales with real-time redemption and administrative tools. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a well-established market position. Technical infrastructure is based on WordPress with modern plugins and libraries, ensuring good performance and SEO optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though a dedicated security policy and incident response information are absent. Overall, the site demonstrates high business credibility and compliance with GDPR, supported by visible contact information and trust signals such as client testimonials and social media presence.

G

Government of Ontario

ontario.ca

76

The Government of Ontario's official website serves as a comprehensive portal for residents and businesses to access information on government programs and services. It holds a strong market position as the authoritative source for provincial government information in Ontario, Canada. The website targets a broad audience including citizens, businesses, and stakeholders seeking government resources and contact avenues. Technically, the site is built on Drupal 10, leveraging modern web technologies and integrating Google Tag Manager for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS and employs secure form practices, though it lacks some advanced security headers and explicit security policies. The absence of WHOIS data is due to privacy protection by the Canadian Internet Registration Authority, which is justified for a government domain. Overall, the site is trustworthy, professional, and well-maintained, with minor recommendations to enhance security transparency and cookie consent mechanisms.

F

Fliegerschule Birrfeld

birrfeld.ch

54

Fliegerschule Birrfeld AG operates the Flugplatz Birrfeld, the leading aviation and flight training center in the canton of Aargau, Switzerland. Established in 1937, it serves as a hub for pilots, flight students, and aviation enthusiasts offering motor and glider flight training, maintenance services, and recreational flights. The website reflects a mature business with a strong local market position and a comprehensive range of aviation-related services. Technically, the site is built on WordPress with modern plugins and SEO optimizations, providing a good user experience across devices. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site is trustworthy, professional, and well-aligned with its business objectives.

S

stiftung-ap3.li

stiftung-ap3.li

56

The website stiftung-ap3.li appears to represent a small foundation or organization based in Liechtenstein, as indicated by the domain and language. The site is built on WordPress using the Brizy page builder, with minimal content and no visible business descriptions, contact information, or legal policies. Technically, the site uses standard WordPress technologies but lacks advanced security headers and privacy compliance features. The security posture is basic, with no detected vulnerabilities but also no strong security practices. Overall, the site presents low business credibility due to the absence of contact and policy information. Strategic recommendations include adding comprehensive privacy and cookie policies, contact details, and implementing security best practices to improve trust and compliance.

C

Centaurium Aviation Ltd.

centaurium-aviation.com

48

Centaurium Aviation Ltd. is a Swiss-based company specializing in helicopter sales and brokerage services, acting as an official sales agent for Bell Helicopter in Switzerland and Guimbal Cabri G2 internationally. The company targets aviation professionals and helicopter buyers and sellers, providing expert assistance throughout the purchase and sales process. The website reflects a professional and consistent brand image with clear business information and contact details. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and reCAPTCHA usage, though lacking some security headers and cookie consent mechanisms. The domain registration is consistent with the business claims, showing no suspicious patterns and a legitimate presence since 2019.

J

Jet Aviation

jetaviation.com

63

Jet Aviation operates as a global business aviation services provider offering a comprehensive range of services including aircraft management, sales, charter, completions, FBO, government programs, maintenance, and staffing. The company targets business and private aviation clients worldwide, positioning itself as a trusted and established player in the transportation sector. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website is built on WordPress using the GeneratePress theme, integrating modern technologies such as Gravity Forms, Yoast SEO, and analytics tools like HubSpot and Google Tag Manager. The site is mobile optimized and performs moderately well, though some accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some advanced security headers and explicit security policies. The absence of WHOIS data limits domain trust assessment, but the website's professional presentation and contact information support legitimacy. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy or terms of service pages detected. Overall, the site is secure and professional but could improve transparency and security documentation. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and security policies, implementing vulnerability disclosure mechanisms, and improving accessibility and privacy compliance to strengthen trust and regulatory adherence.