Security Directory

C

Complemedia AG

comple-media.ch

44

Complemedia AG is a Swiss-based full-service agency specializing in golf-related advertising and solutions, serving golf courses and brands across Switzerland and neighboring countries. The company offers a comprehensive range of services including consulting, marketing, installation, and maintenance, supported by a multinational team. Their market position is solid with partnerships in five countries and a recognized Swiss PGA recommendation. Technically, the website is built on a modern WordPress platform using Elementor and optimized with Autoptimize, featuring Google reCAPTCHA for form security. However, some security best practices like security headers and cookie consent mechanisms are missing. Overall, the site is professional, well-structured, and trustworthy, with clear contact information and good SEO practices. Strategic improvements in privacy compliance and security posture would enhance their digital maturity and trustworthiness.

S

Schulthess Klinik

schulthess-klinik.ch

71

Schulthess Klinik is a leading orthopedic healthcare provider in Switzerland and Europe, specializing in a wide range of orthopedic surgeries and related medical services. The website reflects a mature digital presence with comprehensive content targeting patients, referring physicians, and healthcare professionals. It supports multiple languages and offers clear pathways for appointment scheduling and patient referrals. Technically, the site is built on Drupal 10 with modern front-end technologies and integrates Google Tag Manager for analytics. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and vulnerability disclosures are not publicly detailed. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

S

Swisslos

swisslos.ch

71

Swisslos is a prominent Swiss lottery and betting operator offering a wide range of games including Swiss Lotto, EuroMillions, EuroDreams, and various skill and instant ticket games. The website targets adult players in Switzerland and emphasizes responsible gaming with visible 18+ player protection indicators. Technically, the site employs modern frameworks such as Vue.js, integrates Google Analytics and Tag Manager for analytics, uses Google reCAPTCHA v3 for bot protection, and manages cookie consent via Usercentrics, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and CSRF token usage, though explicit privacy and terms of service pages are not clearly found in the provided content. Overall, the site presents a professional and trustworthy front with good branding and user experience.

V

Verein Mesh Festival

meshfestival.ch

52

Mesh Festival is a Swiss non-profit cultural event focusing on the intersection of art and technology. It is organized by a consortium of educational and cultural institutions including HEK, FHNW, and iart. The festival explores digital spatial utopias and immersive public spaces, targeting artists, technologists, and the general public interested in cultural innovation. The website is professionally designed, mobile-optimized, and provides clear information about the festival, its partners, and contact details. Technically, it uses modern JavaScript libraries such as jQuery and Socket.io, and integrates Mailchimp for newsletter subscriptions. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. Overall, the site is trustworthy and well-maintained, reflecting the festival's reputable institutional backing.

Z

Zug Estates Holding AG

zugestates.ch

59

Zug Estates Holding AG is a Swiss real estate company specializing in sustainable development and management of living spaces primarily in the Zug region. The company emphasizes creating value through sustainable and innovative real estate solutions, targeting investors, tenants, and partners interested in environmentally responsible property management. Their website reflects a professional corporate presence with comprehensive investor relations and sustainability reporting. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and Usercentrics for cookie consent, hosted on DigitalOcean infrastructure. The website is mobile-optimized and well-structured, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though the absence of a publicly available security policy and incident response contact is noted. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

The website winterthur.ch serves as the official portal for the city and region of Winterthur, Switzerland. It provides comprehensive information on tourism, culture, economic development, city administration, and branding initiatives. The site targets residents, tourists, and businesses interested in the Winterthur region, positioning itself as a trusted government information source. The business model is that of a government portal offering public services and regional promotion. Technically, the website employs a modern frontend stack including the Foundation CSS framework and jQuery, with visitor analytics powered by Piwik (Matomo). The site is mobile-optimized with a moderate performance profile and basic accessibility features. It uses HTTPS for secure communication but lacks advanced security headers and explicit privacy or cookie policies. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and no visible sensitive data exposure. However, it lacks documented security policies, incident response contacts, and vulnerability disclosure mechanisms. The absence of security headers and privacy compliance documentation are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website is a professional, trustworthy government portal with good content quality and business credibility. Strategic recommendations include implementing security headers, publishing privacy and cookie policies, adding terms of service, and enhancing accessibility and security transparency to improve compliance and user trust.

S

Switzerland Global Enterprise

s-ge.com

71

Switzerland Global Enterprise (S-GE) is a government-affiliated agency dedicated to supporting Swiss companies in expanding their international business and promoting Switzerland as a prime business location. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to exporters, investors, and business partners. The technical infrastructure leverages modern technologies including Drupal 10 CMS, Auth0 for authentication, and integrates analytics and user experience tools such as Google Analytics and Hotjar. Security posture is strong with HTTPS enforcement, security headers, and anti-bot measures like reCAPTCHA. Privacy compliance is well addressed with clear policies and consent mechanisms. However, WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is consistent with the organization's profile. Overall, the website demonstrates a high level of professionalism and security readiness.

S

Swissnex

swissnex.org

63

Swissnex is a globally recognized non-profit organization connecting Switzerland with the world in the fields of science, education, art, and innovation. With a network of offices and science & technology counselors across multiple continents, Swissnex facilitates international collaboration and knowledge exchange. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content targeting academia, startups, and innovation sectors. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, hosted with Cloudflare DNS and GoDaddy registrar. Security posture is solid with HTTPS and domain protections, though improvements like DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, Swissnex demonstrates high business credibility and trustworthiness.

S

Spheriq

stiftungschweiz.ch

53

Spheriq is a Swiss-based digital platform dedicated to supporting the nonprofit and philanthropic sector by providing tools and insights for fundraising, grant management, networking, and transparency. The platform targets nonprofits, funders, experts, and corporates engaged in philanthropy, offering a comprehensive suite of services to enhance impact and efficiency. The website is professionally designed, multilingual, and optimized for SEO, reflecting a mature digital presence. Technically, it is built on WordPress with modern libraries and plugins, ensuring good performance and mobile responsiveness. Security measures such as HTTPS and security headers are properly implemented, although explicit privacy and terms of service pages are missing. Contact is primarily via forms and an Intercom chat widget, with no direct emails or phone numbers publicly listed. Overall, the platform demonstrates a strong market position in the Swiss nonprofit ecosystem with a trustworthy and secure online presence.

S

Sanitas

sanitas.com

63

Sanitas is a leading Swiss health insurance provider offering a range of basic and supplementary insurance plans tailored for private customers. The website demonstrates a mature digital presence with modern technologies such as Vue.js and comprehensive privacy and cookie management, reflecting compliance with GDPR. The site is well-structured, mobile-optimized, and professionally designed, targeting private customers in Switzerland with clear service offerings and customer support pathways. Security posture is strong with HTTPS enforcement and security headers, though public security policies and incident response details are absent. WHOIS data is unavailable, which slightly impacts trust but does not detract from the overall legitimacy of the business as evidenced by the professional website and comprehensive policies.

R

Reka

reka.ch

70

Reka operates as a Swiss-based company specializing in family-friendly holiday and leisure services, primarily through its Reka-Card discount payment system and holiday offerings in Switzerland and Europe. The website reflects a professional and consistent brand presence targeting families and leisure travelers. Technically, the site employs modern web standards including HTML5, CSS3, and Bootstrap grid, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks visible security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance and security transparency are recommended to enhance trust and compliance.

M

Mobimo Holding AG

mobimo.ch

70

Mobimo Holding AG is a well-established Swiss real estate company specializing in property development, investment, and management. The company targets investors, tenants, and real estate professionals, positioning itself as a leading player in the Swiss real estate market. The website reflects a professional and comprehensive digital presence with clear business information and user-friendly navigation. Technically, the site employs modern technologies such as React, Google Analytics, and Google Maps API, ensuring good performance and mobile optimization. Security measures are robust, with HTTPS enforced and multiple security headers present, although explicit security policies and incident response details are not published. Overall, the site demonstrates a mature digital infrastructure and trustworthy business credibility.

K

Kies + Beton Münchwilen AG

kies-und-beton.ch

72

Kies + Beton Münchwilen AG is a Swiss-based company specializing in the manufacturing and supply of construction materials including sand, gravel, concrete, and recycled building materials. They also provide transport services related to these products. The company operates under the parent group ERNE Gruppe, indicating a solid market presence and backing. Their website is professionally designed using TYPO3 CMS and incorporates modern web technologies and analytics tools with GDPR-compliant consent mechanisms. The site offers clear contact information and detailed product and service descriptions, targeting construction industry professionals and businesses in Switzerland. Security posture is good with HTTPS enforced and cookie consent properly managed, though some security headers could be improved. Overall, the website reflects a trustworthy and credible business with a moderate to good digital maturity level.

H

HRS

hrs.ch

69

HRS is a well-established Swiss real estate company with over 60 years of experience, specializing in development, implementation, and investment across Switzerland. The company operates as the largest owner-managed real estate service provider in the country, emphasizing regional roots, sustainability, and innovation. Their website reflects a professional and comprehensive digital presence, leveraging modern technologies such as Next.js and Storyblok CMS, with strong mobile optimization and SEO practices. Security posture is robust, with HTTPS enforced, security headers present, and a cookie consent mechanism implemented via Cookiebot. However, there is no explicit security policy or incident response information publicly available. Overall, the website and business information align well with the WHOIS data, indicating a legitimate and trustworthy entity.

G

Greater Zurich Area

greaterzuricharea.com

74

Greater Zurich Area is a regional business development agency focused on promoting the Zurich region as a leading hub for innovation, technology, and talent attraction in Switzerland. The website showcases their services to assist international companies in expanding into Switzerland, highlighting sectors such as artificial intelligence, robotics, fintech, and life sciences. The site is professionally designed using Drupal 10, with multimedia content, success stories, and comprehensive business guides. The technical infrastructure includes modern tracking and marketing tools with a strong emphasis on privacy compliance via OneTrust. Security posture is robust with HTTPS and security headers implemented, though explicit security policies and incident response information are not publicly detailed. WHOIS data is unavailable, which is unusual but does not detract from the website's professional appearance and business legitimacy. Overall, the site presents a trustworthy and authoritative resource for business expansion into the Greater Zurich region.

G

graubünden Bike

graubuendenbike.org

47

Graubünden Bike is a regional project initiative focused on advancing bike tourism and sustainable mobility in the Graubünden region of Switzerland. The project is positioned as a pioneer in the bike tourism sector, aiming to enhance the region's attractiveness through development of bike offerings, training, and community engagement. The website serves as an information hub with event calendars, news, and project documentation, targeting cyclists, local stakeholders, and tourists. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Matomo analytics, providing a good user experience with mobile optimization and SEO best practices. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not implement cookie consent mechanisms. The domain registration is recent but consistent with the project timeline and shows no suspicious patterns. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

E

Energie 360° AG

energie360.ch

73

Energie 360° AG is a Swiss energy company specializing in the supply of renewable and sustainable energy solutions, including integrated mobility services. The company positions itself as a key player in Switzerland's energy transition, offering a broad range of environmentally friendly products and services. Their website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to Swiss customers interested in sustainable energy and mobility. Technically, the site employs modern technologies such as Vue.js and integrates consent management and analytics tools to ensure compliance and user tracking. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness.

Electrolux Switzerland operates a professional and well-branded website focused on household appliances, targeting general consumers in Switzerland. The site uses modern web technologies such as React and Next.js, providing a good user experience with multi-language support. However, explicit privacy, cookie, and security policies are not detected in the provided content, which may impact compliance and user trust. The security posture is moderate with no visible security headers or incident response information. Overall, the domain and WHOIS data align well with the Electrolux brand, indicating high legitimacy. Strategic improvements in privacy compliance and security best practices are recommended to enhance trust and regulatory adherence.

R

Reformierte Kirche St. Jakob Zürich

citykirche.ch

50

The Citykirche Offener St. Jakob is a non-profit religious organization based in Zürich, Switzerland, offering a broad range of spiritual, cultural, and community services including church services, pastoral care, meditation, cultural events, and social engagement. The website reflects a well-established local church with a consistent brand and clear communication of its mission and activities. Technically, the site is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and standard security headers, though improvements can be made in cookie consent and vulnerability disclosure. Overall, the site is trustworthy and professionally maintained, serving its community effectively.

B

Burgergemeinde Bern

bgbern.ch

48

Burgergemeinde Bern is a municipal government entity serving the city and canton of Bern, Switzerland. It provides a broad range of community services including social welfare, environmental stewardship, cultural activities, urban development, sports, education, and scientific engagement. The website reflects its role as a public sector organization with clear communication and community outreach. Technically, the site is built on the Plone CMS platform, leveraging modern JavaScript libraries and frameworks to deliver a responsive and user-friendly experience. The presence of Matomo analytics indicates a privacy-conscious approach to user data collection. Security posture is solid with HTTPS enforced and CSRF protections in place, though there is room for improvement in implementing security headers and explicit cookie consent mechanisms. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, the website is professional, trustworthy, and well-aligned with its governmental mission.

B

Bricks AG

bricks.ch

51

Bricks AG is a Swiss real estate development company specializing in innovative property projects across Switzerland. The company targets clients and partners in the real estate sector, project management, architecture, and public authorities. Their website showcases a professional portfolio of projects and emphasizes customer-centric services. Technically, the site is built on WordPress using Elementor and JetEngine plugins, indicating a modern and flexible digital infrastructure. The site is mobile-optimized and uses HTTPS with appropriate security headers, reflecting a good security posture. However, the absence of explicit privacy policies, terms of service, and incident response information indicates areas for compliance improvement. Overall, the website is trustworthy and professional but could enhance transparency and compliance documentation.

V

Vee24

vee24.com

64

Vee24 operates as an enterprise-focused technology company specializing in video chat and virtual consultation platforms designed to enhance digital customer experiences. Their services target luxury retail, beauty, home furnishing, automotive, and financial services sectors, positioning them as a key player in video commerce and virtual appointments. The website reflects a mature digital presence with professional branding, clear messaging, and a focus on increasing sales and customer satisfaction through innovative digital engagement tools. Technically, the website leverages modern web technologies including React, JSON-LD structured data, and custom scripts hosted on dedicated CDNs. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and a clean user interface. Privacy and cookie compliance are well implemented, with clear policies and consent mechanisms in place. From a security perspective, the site uses HTTPS and secure form inputs but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or malicious content were detected, and trust is bolstered by certifications such as AICPA SOC and reputable client logos. The absence of WHOIS data is a minor concern but does not significantly detract from the overall trustworthiness. Overall, Vee24 presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in security transparency and header implementation would further enhance their security posture and trust.

J

👋 Allegra, ich bin Jovìn

jovin.ai

52

Jovìn.ai is a specialized AI chatbot service tailored for the tourism and hospitality sector, providing intelligent answers to questions about leisure activities, accommodations, weather, and events within a destination. The website presents a professional and consistent brand image, targeting tourism stakeholders and travelers. The technical infrastructure is built on the Framer platform and integrates Google Analytics and Tag Manager for user tracking and analytics. While HTTPS is properly configured, the site lacks important security headers and privacy compliance mechanisms such as privacy and cookie policies. The absence of WHOIS data due to privacy protection limits the ability to fully verify domain legitimacy, but the website content and contact information suggest a legitimate small business operation. Overall, the security posture is moderate but could be improved with additional security best practices and compliance documentation.

N

Nachtleben

ritzy.ch

52

Ritzy.ch is a specialized education and training platform serving the hospitality, gastronomy, and tourism sectors in the Wallis region of Switzerland. The company, represented as 'Nachtleben' in structured data, offers a blend of in-person and online courses including webinars, e-learning modules, and quizzes. Their market position is that of a regional leader in continuing education tailored to the local industry needs. Technically, the website is built on WordPress with modern plugins such as Elementor and Slider Revolution, ensuring a responsive and performant user experience. Security-wise, the site enforces HTTPS, employs security headers, and avoids exposing sensitive data, though it lacks explicit published security policies and GDPR cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained but could improve privacy compliance and incident response transparency.

W

Wilken Software Group

wilken.ch

53

Wilken Software Group is a German technology company specializing in software development and technology integration services. Their website presents a professional image with a focus on connecting technology, people, and visions for a sustainable future. The company targets business and technology professionals and operates primarily within the technology sector. The website is built on HubSpot CMS, uses Cloudflare for DNS, and integrates Google Analytics 4 and Cookiebot for analytics and privacy compliance. While the site is well-designed and mobile-optimized, it lacks explicit privacy policies, terms of service, and detailed contact information, which are important for full compliance and trust. Security posture is moderate with HTTPS enforced and cookie consent managed, but missing security headers and vulnerability disclosures reduce the security maturity. Overall, the website is trustworthy and professional but could improve transparency and security practices.

TouristDataShop AG operates as a specialized provider for the distribution, support, and management of Holidu Smart Destination services within Switzerland's tourism sector. The company targets destinations, cities, and accommodation providers, offering a suite of services including booking solutions, shared backoffice services, product data management, and customer support. Their market position is that of a niche player focused on enabling tourism businesses to make their offerings bookable online efficiently. Technically, the website is built on the Contao CMS platform, leveraging modern web technologies such as jQuery, Google Tag Manager, and YouTube APIs for multimedia content. The site is mobile-optimized with good SEO practices and moderate performance. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the website enforces HTTPS and uses trusted third-party analytics and tag management tools. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and cookie consent mechanisms indicates gaps in compliance and security maturity. Overall, TouristDataShop AG presents a professional and trustworthy online presence with solid business credibility. Strategic enhancements in privacy compliance and security posture would further strengthen their risk profile and customer trust.

F

Feratel Medien Technologien AG

feratel.ch

67

Feratel Medien Technologien AG is a Swiss-based technology company specializing in tourism and media solutions. The company offers a range of B2B services including marketing, upselling, service platforms, data strategies, communication, and interface development. Positioned as an established player in the DACH region, Feratel targets tourism industry professionals and media companies with a comprehensive suite of technology-driven services. The website reflects a professional and consistent brand image with clear navigation and good content quality. Technically, the website is built on TYPO3 CMS and integrates modern tools such as Cookiebot for consent management and Google Tag Manager for analytics. The site is mobile optimized and employs standard web technologies including JavaScript and CSS. Performance is moderate with good SEO and basic accessibility features. Security is well addressed with HTTPS enforcement and multiple security headers, though explicit security and incident response policies are not publicly documented. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. The site uses extensive tracking and marketing tools but manages user consent effectively. Overall, the website demonstrates a high level of trustworthiness and professionalism. Strategically, Feratel should consider publishing explicit security and incident response policies to enhance transparency and trust. Accessibility improvements and regular audits of third-party scripts would further strengthen the security and user experience. The domain registration data aligns well with the business claims, supporting legitimacy and credibility.

B

bexio AG

bexio.ch

74

bexio AG is a Swiss-based company founded in 2013, providing comprehensive business software solutions tailored for small businesses, startups, and self-employed individuals. Their SaaS platform offers a wide range of services including contact management, sales process automation, expense and accounting management, payroll, and integrated e-banking. Positioned as a trusted Swiss SME software provider, bexio serves over 90,000 customers and benefits from strong partnerships with reputable organizations such as Mobiliar and UBS. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website employs modern web technologies including Alpine.js, Google Tag Manager, and Usercentrics for consent management, ensuring a fast, mobile-optimized, and SEO-friendly platform. Security best practices are observed with HTTPS enforcement, security headers, and secure form handling. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS domain registration details is a notable concern, slightly impacting business credibility, but the overall digital presence and trust signals mitigate this risk. Overall, bexio demonstrates a mature digital infrastructure and a secure, privacy-conscious environment suitable for its target SME audience. Strategic recommendations include publishing detailed security policies, incident response plans, and vulnerability disclosure information to enhance transparency and trust further.

R

RWO AG

rw-oberwallis.ch

57

RWO AG is a regional competence center for regional development in Oberwallis, Switzerland, owned by local municipalities, the canton, and the economic forum. The organization focuses on bundling regional interests, promoting innovation, cooperation, and knowledge transfer to enhance the economic and living environment of Oberwallis. Their key services include project management, financial aid, procedural consulting, and executive management support. The website is professionally designed, content-rich, and well-structured, targeting regional stakeholders and the public. Technically, the site uses a modern CMS (indual CMS), jQuery, and standard web technologies, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, transparent, and compliant with GDPR, with clear contact information and partner affiliations.

Davos Klosters is a prominent tourism organization promoting holidays and outdoor activities in the Swiss Alps, specifically in the Graubünden region. The website offers comprehensive information and booking options for skiing, hiking, biking, and cultural events, targeting tourists seeking alpine experiences. The company holds a strong market position as a leading alpine destination with a professional online presence and integrated e-commerce capabilities. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, ensuring fast performance, mobile optimization, and good SEO practices. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although dedicated security and incident response policies are not explicitly found on the site. Privacy compliance is addressed with visible privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-aligned with its business goals.

touristika GmbH is a Swiss-based company specializing in digital transformation and IT project management services tailored for the tourism sector. Established in 2013, the company positions itself as a trusted partner for tourism businesses seeking to leverage digital projects to attract more customers. Their service offerings include consulting and project management, focusing on the unique needs of the tourism industry. The website reflects a professional and consistent brand image, targeting tourism businesses primarily in Switzerland. Technically, the site is built on the Weebly platform, utilizing standard web technologies such as jQuery and Google Analytics, with a cookie consent mechanism compliant with GDPR requirements. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements could be made by implementing security headers and updating legacy libraries. Overall, the site is well-structured, user-friendly, and trustworthy, with clear contact information and social media presence limited to LinkedIn.

S

Stammgast GmbH

stammgast.ch

56

Stammgast GmbH is a Swiss-based consultancy specializing in digital transformation, offer development, and interdisciplinary projects within the tourism and hospitality sectors. The company targets independent tourism businesses such as hotels, destination management organizations, mountain railways, and event providers in Switzerland. Their service portfolio includes software consulting, project management, digital marketing, coaching, and training, positioning them as a niche expert in the Swiss tourism digitalization market. Technically, the website is built on a Perch CMS platform, leveraging common web technologies like jQuery, Google Analytics, Google Tag Manager, and Facebook Pixel. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism supporting GDPR compliance. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and explicit security policies. Overall, the website reflects a professional and trustworthy business with clear contact information and certifications. No critical vulnerabilities or suspicious indicators were found.

TSO AG is a Swiss-based company specializing in digital transformation services for the tourism sector, including associations, destinations, transport companies, and hotels. Their business model revolves around providing shared-service digital solutions to automate processes and improve performance. The website reflects a professional and consistent brand image with a clear focus on tourism digitalization. Technically, the site uses Contao CMS, integrates modern analytics and consent management tools like Cookiebot and Google Tag Manager, and employs HTTPS with good security practices. However, explicit contact information and security policies are not prominently available, which could be improved. The security posture is solid with no visible vulnerabilities, but the absence of a security.txt or incident response information is a gap. Overall, the site is trustworthy, compliant with GDPR via Cookiebot, and well-positioned in its niche.

A

Amadeu Antonio Stiftung

amadeu-antonio-stiftung.de

56

The Amadeu Antonio Stiftung is a German non-profit foundation dedicated to strengthening democratic civil society and combating right-wing extremism, racism, and antisemitism. The website presents a professional and content-rich platform offering information about their projects, publications, events, and initiatives. Their target audience includes civil society actors, activists, and supporters of democratic culture. The organization maintains an active presence on major social media platforms and provides a newsletter subscription for ongoing engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It uses Borlabs Cookie for GDPR-compliant cookie consent management and integrates Google Analytics via Google Tag Manager, respecting user consent. The site is hosted on servers indicated by the agenturserver nameservers, suggesting a professional hosting environment. Mobile optimization and SEO practices are good, though accessibility could be improved. Security posture is adequate with HTTPS enforced and cookie consent implemented. However, no explicit security headers were detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found. The WHOIS data is limited but does not raise concerns about legitimacy. Overall, the site is trustworthy and professionally managed. Recommendations include adding a clear privacy policy and terms of service links, publishing a security policy or incident response contact, implementing security headers, and enhancing accessibility features to improve compliance and user experience.

S

Stiftung Mercator

stiftung-mercator.de

53

Stiftung Mercator is a private, independent non-profit foundation based in Germany, dedicated to promoting an open, solidaric society with equal opportunities. The foundation focuses on democratic values, social cohesion, climate protection, and supports various projects and fellowship programs. The website is professionally designed, multilingual, and optimized for SEO and accessibility, reflecting a mature digital presence. Technically, it leverages WordPress CMS with modern libraries such as jQuery and uses Borlabs Cookie for privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

ING-DiBa AG operates as one of Germany's leading digital and universal banks, serving over 9 million customers. The company offers a broad range of financial products including current accounts, loans, investment services, and mortgage financing. The website reflects a strong market position with a focus on customer satisfaction and digital innovation. The target audience includes private customers and business banking clients, emphasizing ease of use and accessibility through digital channels such as the ING app. The business model centers on providing comprehensive banking services with a digital-first approach, supported by a robust online presence and customer engagement.

4

41 Campus gGmbH

forty.one

46

FORTYONE is a niche media platform operated by 41 Campus gGmbH, focusing on the charitable activities and stories related to Dirk Nowitzki and his foundations in Germany and the USA. The website serves as a communication and donation platform, supported by sponsors such as ING. The content is professionally presented with a focus on storytelling and foundation updates, targeting a general audience interested in sports philanthropy and Dirk Nowitzki's legacy. Technically, the site is built on WordPress with modern plugins for donations and GDPR compliance, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS and anti-spam measures, though improvements like DNSSEC and CSP headers are recommended. Privacy compliance is well addressed with clear cookie consent and policies. Overall, the site is trustworthy and professionally maintained, with no signs of malicious or adult content.

I

IcanDo e.V.

icando-verein.de

53

IcanDo e.V. is a small German non-profit organization dedicated to educational and social projects, including school initiatives and volunteer services. The organization has a recognized market position within its community, evidenced by awards such as the 'Großer Stern des Sports 2020 in GOLD'. Their website is built on the Squarespace platform, leveraging standard web technologies and providing a visually consistent and mobile-optimized user experience. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance in the EU. Security posture is basic with HTTPS enabled but missing important security headers and incident response contact information. Overall, the website is safe, professional, and trustworthy for general audiences but could improve in privacy compliance and security best practices.

R

RheinFlanke gGmbH

rheinflanke.de

62

RheinFlanke gGmbH operates as a German non-profit organization specializing in youth work, educational programs, and social integration services. The organization maintains a professional and accessible website built on WordPress, featuring multiple locations and a clear focus on community impact. Their digital presence includes active social media channels and a cookie consent mechanism, reflecting awareness of privacy regulations. Technically, the site employs modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and some best practices, though explicit privacy policies and vulnerability disclosures are missing, representing areas for improvement. Overall, RheinFlanke presents a credible and trustworthy digital footprint aligned with its mission and audience.

M

Musik Basel

musik.bs

56

Musik Basel is a regional media platform focused on providing news, event information, and venue details related to the music scene in Basel, Switzerland. The website targets music enthusiasts and residents interested in cultural events and music news within the Basel region. It operates primarily as a content publishing platform with a focus on local music culture and events. Technically, the website is built using modern web technologies including the Nuxt.js framework and Vue.js, with integrations such as Google Tag Manager and Google Maps API for enhanced user experience and analytics. The site demonstrates good mobile optimization, SEO practices, and a professional design consistent with its regional media focus. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers, indicating a solid security posture. However, it lacks a cookie consent mechanism despite using tracking scripts, and there is no publicly available security policy or incident response information. No vulnerabilities or suspicious content were detected. Overall, Musik Basel presents a trustworthy and professional online presence for its niche audience. Strategic improvements in privacy compliance and transparency around security policies would further enhance its credibility and user trust.

BURGUNDER is a small Swiss-based e-commerce retailer specializing in semi-professional outdoor gear. The website is built on the Shopify platform, leveraging its e-commerce capabilities and integrations. The product catalog includes various outdoor gear items, targeting outdoor enthusiasts seeking quality equipment. The business appears to be relatively young, founded around 2020, consistent with the domain registration date. The website presents a professional design with clear navigation and product presentation, although direct contact details such as emails or phone numbers are not provided, relying instead on a contact form. Privacy and cookie policies are minimal, with only a terms page detected that may contain some privacy information. The site uses common marketing and analytics tools including Meta pixel and Mailchimp, indicating moderate user tracking.

H

HEK (Haus der Elektronischen Künste)

hek.ch

61

HEK (Haus der Elektronischen Künste) is a well-established Swiss cultural institution and museum specializing in digital and electronic arts. It serves as a platform for interdisciplinary projects, exhibitions, and workshops, connecting art, science, and technology. The website reflects a professional and modern digital presence with multilingual support and a rich program offering. Technically, the site is built on modern frameworks such as Nuxt.js and Vue.js, with good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance including cookie consent mechanisms. However, some areas like explicit security policies, incident response contacts, and terms of service are missing or not publicly visible. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy entity.

K

kühne wicki GmbH

kuehnewicki.com

57

kühne wicki GmbH is a Swiss-based interdisciplinary futures research and consulting firm specializing in Futures Research, Development, Implementation, and Futures Literacy. Founded in 2017, the company serves organizations and individuals interested in strategic foresight, scenario planning, and transformative future-oriented processes. Their market position is that of a specialized boutique consultancy with a strong focus on innovation and future competencies, supported by a professional team and reputable clients. The website reflects a high level of professionalism, with detailed project case studies and team profiles, indicating a mature business presence. Technically, the website is built using modern JavaScript frameworks (Nuxt.js/Vue.js) and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by Hostpoint AG, a reputable Swiss hosting provider. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. SEO practices are good with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks important security headers and DNSSEC is not enabled. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No incident response or security contact information is provided. The site does not show signs of vulnerabilities or malicious content but could improve its security posture by implementing recommended headers and policies. Overall, the website is trustworthy and professional with minor gaps in privacy compliance and security hardening. Strategic recommendations include adding privacy and cookie policies, implementing security headers, enabling DNSSEC, and publishing incident response information to enhance trust and compliance.

C

Home – catapult

catapultbasel.ch

56

The website catapultbasel.ch represents a youth-focused funding platform based in Basel, Switzerland. It aims to support young people by providing a platform for project submissions and community engagement. The site is built using modern web technologies including Vue.js and Nuxt.js, with multimedia support via Video.js and audio recording libraries. Google Analytics is used for visitor tracking, though no visible consent mechanism is present. The website content is primarily in German and targets the local youth demographic. Security posture is basic with no advanced headers or policies detected, and privacy compliance is minimal due to the absence of privacy and cookie policies. WHOIS data confirms the domain's legitimacy and local registration, supporting the trustworthiness of the platform.

K

Kunsttage Basel

kunsttagebasel.ch

59

Kunsttage Basel is a well-established cultural event organizer focused on contemporary and modern art in Basel, Switzerland. The website showcases a comprehensive program of exhibitions, workshops, talks, and performances involving over 60 institutions. The event targets art enthusiasts and the local cultural community, providing rich content and multiple engagement channels including social media and newsletters. Technically, the site is built on modern frameworks such as Nuxt.js and integrates Mapbox for location services, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers, though cookie consent and explicit security policies are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve privacy compliance and incident response transparency.

P

Polit-Forum Bern

polit-forum-bern.ch

60

Polit-Forum Bern is a small non-profit organization based in Bern, Switzerland, dedicated to fostering political education and dialogue through events, exhibitions, and educational programs. The website serves as a platform to inform the public about upcoming debates, exhibitions, and offers for schools and youth. It maintains a consistent brand presence and targets a broad audience interested in political discourse and democratic engagement. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and WPML for multilingual support. It integrates Google services including Analytics, Tag Manager, and reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS and includes reCAPTCHA to protect forms, but lacks explicit security policies and a cookie consent mechanism, which are important for GDPR compliance. No critical vulnerabilities or suspicious elements were detected, and the domain registration details align well with the organization's identity, supporting legitimacy. Overall, the website presents a professional and trustworthy image with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

L

LiveSurface

livesurface.com

64

The website 'LiveSurface' presents a professional front focused on product visualization and design tools, as indicated by the page title and styling. However, the absence of WHOIS registration data raises concerns about the domain's legitimacy or recent registration status. The technical infrastructure includes use of Google Tag Manager for analytics, but lacks visible security headers and privacy compliance documentation. No contact information or business details are provided, limiting trust and transparency. Overall, the site appears functional and visually coherent but lacks critical security and compliance elements.

H

Hostpoint AG

hostpoint.ch

72

Hostpoint AG is the largest Swiss web hosting provider, managing over 1.2 million domain names and offering a broad range of services including domain registration, web hosting, managed servers, and email solutions. The company targets businesses and individuals primarily in Switzerland, leveraging a strong local market presence and a reputation for reliability and modern infrastructure. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, indicating a high level of digital maturity. Technically, the site uses modern tools such as Hugo for static site generation, Google Tag Manager, Google Analytics, and Hotjar for analytics and user behavior tracking, all integrated with a cookie consent mechanism to comply with privacy regulations. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. The company holds ISO 27001 certification, reinforcing its commitment to information security. Overall, the website and domain registration details align well, supporting the legitimacy and trustworthiness of the business.