Programme

Abacus Research AG

Abacus is an owner-managed Swiss software company. The company has been successfully developing business management ERP software for over 35 years - in the areas of finance, human resources, administration and sales, and production and services, among others. Abacus is now the largest and most successful independent Swiss provider of business software for SMEs. The primary goal of the software company is still to develop relevant solutions for its customers.

BDO

BDO Ltd is one of the leading audit, business services and advisory firms in Switzerland. We offer services in our core areas of expertise: audit, financial services, business services and outsourcing, tax and legal advisory, and management consulting. With 35 offices in Switzerland, BDO’s network offers the most extensive coverage in the industry. For BDO’s people – around 1,600 professionals – close links and expertise are the key to successful and lasting relationships with our clients. BDO Ltd audits and advises industrial and service sector companies, including SMEs, listed companies, public authorities and non-profit organisations.

Fachhochschule Nordwestschweiz

Fachhochschule Nordwestschweiz

The University of Applied Sciences and Arts Northwestern Switzerland FHNW is one of Switzerland’s leading universities of applied sciences and arts, actively involved in teaching, research, continuing education and service provision – both innovative and practice-oriented. The FHNW comprises nine schools specialising in applied psychology, architecture, construction and geomatics, design and art, life sciences, music, education, social work, technology and business. The campuses are located in the four sponsoring cantons of Aargau, Basel-Landschaft, Basel-Stadt and Solothurn. Over 14 000 students are registered at the FHNW and around 1,300 lecturers convey practical and market-oriented knowledge in 34 Bachelor's and 20 Master's degree programmes as well as in numerous continuing education courses. The FHNW has a national and international network of 400 partners and its graduates are sought-after specialists on the labour market. **Note:** This is an EDU Bug Bounty program for students and staff of FHNW. Access for Friendly Hackers with an @fhnw.ch email address only.

EDU Program: For FHNW Students / Employe
Fernfachhochschule Schweiz

The Swiss Distance University of Applied Sciences (Fernfachhochschule Schweiz – FFHS)  is a nationally recognized university. Since 1998, it has been offering part-time Bachelor and Master’s degrees and continuing education programs. With more than 25 years of experience in distance learning, it is the leading e-learning university in Switzerland and is an alternative for students looking to combine work, family and study. FFHS has four locations in Zurich, Basel, Bern and Brig. It employs about 160 members of staff and more than 500 lecturers who communicate their specialist knowledge to the round 3,200 students (status: 2024) in a practice-oriented manner. In its four research institutes, FFHS performs application-oriented research in the areas of web science, management & innovation, health and e-learning under a performance mandate from the federal government. Since 2004, FFHS has been affiliated to the University of Applied Sciences and Arts of Southern Switzerland (Scuola Universitaria Professionale della Svizzera Italiana - SUPSI) and incorporated into its overall strategy. **Note**: This is an EDU Bug Bounty program **for students and staff of FFHS**. Access for Friendly Hackers with an @ffhs.ch email address only.

EDU Program: FFHS Students / Employees O
Fidentity

fidentity helps you to digitize the identification of customers either on site or on line. Without the hassle of an app or additional hardware, ID documents can be scanned with a mobile phone. Liveness verified selfies and digital signatures are available. Artificial intelligence prevents fraud and ensures compliance. An automatic decision is available in real time to control the next step in the onboarding process.

GObugfree

We get hackers working for you! Find vulnerabilities earlier, more reliably, and more cost-effectively with the Swiss Bug Bounty platform. As we get friendly hackers working for our customers - we certainly have our platform hacked as well. Happy hunting!

Liechtensteinische Landesbank AG

The Liechtensteinische Landesbank AG (LLB), founded in 1861, is the oldest financial institution in the Principality of Liechtenstein. It offers a wide range of financial services, including private banking, asset management, and investment advisory services. We welcome your vulnerability report of our online banking service and we will pay fair rewards for confirmed vulnerabilities.

LLV

The Liechtenstein National Administration (LLV) provides all public services for the citizens, businesses, and financial sector of the Principality of Liechtenstein. As one of the most digitally advanced nations in Europe, the LLV operates a diverse portfolio of applications, ranging from national eID infrastructure and e-health services to complex platforms for international data exchange. We are committed to innovation and the highest security standards to ensure Liechtenstein's digital sovereignty and to protect the data of our citizens and corporate entities.

netplus.ch SA

netplus.ch SA is a service company specialising in the field of telecommunications. The 100% French-speaking area multimedia operator provides more than 220,000 users with high-quality local Internet, telephony, and television services both in towns and rural areas. The company incorporates eleven networks marketing more than 460,000 multimedia services intended for both private and professional customers under the BLI BLA BLO and net+ brand names. The bug bounty program netplus.ch SA is part of the higher-level bug bounty program of SUISSEDIGITAL association. SUISSEDIGITAL is the trade association of Swiss communication networks. Bringing together some 200 commercial and public sector companies from all over Switzerland and the Principality of Liechtenstein, the association's high-performance networks allow each of its members to act as a one-stop shop offering their customers leading-edge communication services. These services include broadband internet, landline and to some extent mobile telephony as well as radio and television, with all the advantages of digital technology.

Raiffeisen Schweiz

Raiffeisen

Raiffeisen is the second-largest Swiss bank and is governed by its cooperative members. We are committed to ensuring the security of customers, partners and members alike by protecting their information from unwarranted disclosure. As part of this overall effort, we have implemented a Bug Bounty Program. We want security researchers to feel comfortable reporting vulnerabilities they’ve discovered - as described in this policy - so we can fix them and keep our users safe. This policy has been developed to reflect our values and uphold our sense of responsibility to security researchers who share their expertise with us in good faith.

RaiseNow

RaiseNow

All-in-one integrated fundraising platform for nonprofits RaiseNow makes fundraising solutions your supporters will love, so you can focus on making a difference.

Suva

SUVA

As Switzerland's largest accident insurance provider, Suva is a key player in the areas of prevention, occupational safety, and health protection. This makes it an important part of the Swiss social insurance system.

Swiss Bankers

Swiss Bankers is an internationally oriented financial-services provider. Our company is a leader in development, distribution and processing of prepaid credit cards and offers innovative solutions in cashless and secure payment transactions. With our mobile app, our customers are able to order, load and manage their credit cards. They’re also able to send and receive money globally within the MasterCard send network. **The goal of this program is to find vulnerabilities in our system that leads to unauthorised account takeover, anomalies during the “add funds” process and irregular “send” transactions.**

Threema

Threema is a Swiss instant messenger that was built from the ground up with security and data privacy in mind. For one thing, state-of-the-art end-to-end encryption prevents anyone other than the intended recipient (including the service provider) from reading the messages users exchange. For another thing, it is not required to provide any personal information (such as a phone number or email address) to use Threema. In other words, the service can be used completely anonymously. Finally, Threema adheres to the Privacy by Design principles, which is to say that only as little metadata as possible is generated, and it is only stored for the shortest amount of time possible. The service provider hosts its own servers in Switzerland.

Additional Scope
Thurgauer Kantonalbank

Thurgauer Kantonalbank

The Thurgauer Kantonalbank (TKB) is a Swiss cantonal bank based in Thurgau, providing comprehensive financial services to individuals, businesses, and the public sector. We are committed to ensuring the security of our customers, partners and employees alike by protecting our infrastructure and their information from unwarranted disclosure and tampering.​

Unique AG

Unique AI

Unique AI is a tailored solution for the financial industry that aims to increase productivity by automating manual workload through AI solutions. Gain more time for more clients.

Increased Bounties
Aequivalent SA

Aequivalent is committed to ensuring the security of their users by protecting their information. This policy is intended to give security researchers clear guidelines for conducting vulnerability discovery activities and to convey our preferences in how to submit discovered vulnerabilities. Aequivalent is Switzerland’s leading digital platform for employment screening (background checks). Through our secure online solution, our team verifies and delivers relevant information to help employers reduce the risk of inappropriate employment.

Vulnerability Disclosure Program
Banque Cantonale Neuchâtel

The Banque Cantonale Neuchâteloise (BCN) As the only financial institution in Neuchâtel (Switzerland) to have all the banking activities in the canton, the BCN develops a universal banking activity and is a market leader. Its ambition is to be the banking partner of reference and to support its clients, its employees and the general public at all stages of their development. Putting the people of Neuchâtel and the businesses of the canton at the centre of its business policy, it offers a full range of banking services and benefits. As a bank, the trust our customers place in us is essential. We therefore make the security of our information systems a top priority. Our Bug Bounty Program is designed to strengthen the security of our systems by collaborating with the security community to identify and resolve vulnerabilities before they can be exploited. By encouraging responsible disclosure, we aim to create a safer digital environment for our customers while fostering transparency and collaboration. Your expertise helps us protect our clients and the assets they entrust to us, and together we can make security stronger for everyone.

Vulnerability Disclosure Program
Calenso AG

In today's digital world, business process efficiency is critical to a company's success. One area where this efficiency is particularly important is appointment scheduling. Online appointment booking with Calenso is the innovative solution for this and allows you to optimize appointment management and thus provide a seamless and customer-oriented service.

Vulnerability Disclosure Program
cyberunity AG

Cyber-security-career-community. KNOW YOUR TALENTS. Vital Candidate relations for sustainable company growth.

Vulnerability Disclosure Program
Fachhochschule Nordwestschweiz

The University of Applied Sciences and Arts Northwestern Switzerland (FHNW) is a university of applied sciences in Switzerland and is active in teaching, research, further education, and services. It is an intercantonal public-law institution with its own legal personality. The sponsoring cantons are Aargau, Basel-Landschaft, Basel-Stadt, and Solothurn. FHNW comprises the following nine schools, which are concentrated in the locations of Basel, Brugg-Windisch, Muttenz, and Olten: Applied Psychology, Architecture, Civil Engineering and Geomatics, Design and Art, Life Sciences, Music, Teacher Education, Social Work, Engineering, and Business. The headquarters is in Windisch AG.

Vulnerability Disclosure Program
FortIT

fortControl is a Swiss cloud platform that enables SMEs in particular to set up and operate an efficient information security management system (ISMS)

Vulnerability Disclosure Program
GObugfree

We get hackers working for you! Find vulnerabilities earlier, more reliably, and more cost-effectively with the Swiss Bug Bounty platform. As we get friendly hackers working for our customers - we certainly have our platform hacked as well. Happy hunting!

Vulnerability Disclosure Program
Health Info Net AG

For healthcare professionals in Switzerland, HIN is the standard for secure communication. HIN brings together all relevant players in the Swiss healthcare system. Membership of the HIN community is a prerequisite for access to the HIN trust space, in which healthcare professionals, organizations and applications interact with each other.

Vulnerability Disclosure Program
HYPOTHEKE.ch

HYPOTHEKE.ch stands for comparability, simplicity, and transparency. Our business model is designed to make finding the best mortgage for you simple.

Vulnerability Disclosure Program
Liechtensteinische Landesbank AG

Liechtensteinische Landesbank AG (LLB), founded in 1861, is the oldest and one of the largest full-service banks in Liechtenstein, headquartered in Vaduz. Majority-owned by the State of Liechtenstein, it serves retail, corporate, and private banking clients across Liechtenstein, Switzerland, Austria, and Germany.

LLV

The Liechtenstein National Administration (LLV) provides all public services for the citizens, businesses, and financial sector of the Principality of Liechtenstein. As one of the most digitally advanced nations in Europe, the LLV operates a diverse portfolio of applications, ranging from national eID infrastructure and e-health services to complex platforms for international data exchange. We are committed to innovation and the highest security standards to ensure Liechtenstein's digital sovereignty and to protect the data of our citizens and corporate entities.

PlaceB AG

placeB AG is committed to ensuring the security of their users by protecting their information. This policy is intended to give security researchers clear guidelines for conducting vulnerability discovery activities and to convey our preferences in how to submit discovered vulnerabilities. placeB provides self-storage facilities at over 25 locations in Switzerland. The process from booking to physical access to the storage room is fully digitalised: the customer books his storage box online, downloads an app on his smartphone and uses it to open all the doors to his personal storage box. placeB's IT infrastructure includes an IoT solution which manages all remote self-storage centres and controls access to the storage units.

Vulnerability Disclosure Program
Raiffeisen Schweiz

Raiffeisen is the second-largest Swiss bank and is governed by its cooperative members. We are committed to ensuring the security of customers, partners and members alike by protecting their information from unwarranted disclosure. **Please note:** This is a Vulnerability Disclosure Program, no bug bounties are paid out.

Vulnerability Disclosure Program
RaiseNow

All-in-one integrated fundraising platform for nonprofits RaiseNow makes fundraising solutions your supporters will love, so you can focus on making a difference.

Vulnerability Disclosure Program
Rieter AG

Rieter is the world’s leading supplier of systems for manufacturing yarn from staple fibers in spinning mills. Based in Winterthur (Switzerland), the company develops and manufactures machinery, systems and components used to convert natural and man-made fibers and their blends into yarns in the most cost-efficient manner.

Vulnerability Disclosure Program
synedra information technologies GmbH

synedra information technologies GmbH was founded in Innsbruck (Austria) in the year 2005. Its foundation was based on the idea to launch a platform solution for the archiving of all medical data, thereby covering the requirements of all specialties of a healthcare facility in a hospital-wide system. The result was synedra AIM—our Health Content Management Platform that is continuously being developed and provides our customers with up-to-date solutions with regard to the acquisition, storage, archiving, visualization and distribution of data.

Vulnerability Disclosure Program
Threema

Threema is a Swiss instant messenger that was built from the ground up with security and data privacy in mind. For one thing, state-of-the-art end-to-end encryption prevents anyone other than the intended recipient (including the service provider) from reading the messages users exchange. For another thing, it is not required to provide any personal information (such as a phone number or email address) to use Threema. In other words, the service can be used completely anonymously. Finally, Threema adheres to the Privacy by Design principles, which is to say that only as little metadata as possible is generated, and it is only stored for the shortest amount of time possible. The service provider hosts its own servers in Switzerland.

Vulnerability Disclosure Program
Thurgauer Kantonalbank

The Thurgauer Kantonalbank (TKB) is a Swiss cantonal bank based in Thurgau, providing comprehensive financial services to individuals, businesses, and the public sector. We are committed to ensuring the security of our customers, partners and employees alike by protecting our infrastructure and their information from unwarranted disclosure and tampering.

univote.ch

Vulnerability Disclosure Program
ylah

ylah® is a Swissmedic registered software for blended psychotherapy (SaMD) that guides patients and therapists to successful outcomes in psychotherapeutic treatment. The digital platform integrates internet- and mobile-based interventions (IMIs) with face-to-face contact with practitioners in both outpatient and inpatient psychotherapy settings.

Vulnerability Disclosure Program
Health Info Net AG

Health Info Net

For healthcare professionals in Switzerland, HIN is the standard for secure communication. HIN brings together all relevant players in the Swiss healthcare system. Membership in the HIN community is a prerequisite for access to the HIN trust space, where healthcare professionals, organizations, and applications interact with each other.

Paused
Swiss National Science Foundation (SNSF)

Swiss National Science Foundation

The Swiss National Science Foundation (SNSF) funds excellent research at universities – from physics to medicine to sociology. Thousands of teams are generating knowledge for a better future for all. Together with our partners, we play a key role in shaping research in Switzerland.

Increased Bounties
VIACAR

VIACAR

Viacar AG is the owner and operator of the Viacar system. This primarily includes specialist applications, Internet services and mobile apps as well as other components. Thanks to this overall software solution - which is developed by us, continuously developed and operated as a software as a service solution - all tasks required by the road traffic authorities can be carried out reliably and efficiently.