Skip to content

Visual version

KSM Klinik Sankt Moritz

Start Your Journey

KSM verified clinic, Klinik Sankt Moritz (seal verification page)

Cybersecurity

Online, anyone can copy a name, a website, a qualification.

Four concrete problems. For each, how our safeguard works and where it stops.

From a distance you see the copy, not the original.

Anyone choosing a doctor or a facility from a distance sees a diploma, a website, a name: three things that can be copied. Checking the original is not simple. People who work in the field may, in turn, find their name and website copied.

UNESCO recognizes fake degrees as a problem. The experts it convened in July 2026 report that artificial intelligence has increased fraud involving qualifications.

Ask the body that issued the qualification, not the copy you are shown.

Four problems, four answers

The problem
  • A copied qualification A copy of a diploma can look identical to the original. It does not say whether the qualification was issued.
  • A facility that is not what it claims to be A polished website does not prove that the company exists or that its authorizations are real.
  • A website that imitates yours Visitors may believe they are in the right place.
  • A domain that resembles yours Registering a domain that looks like yours is easy.
Answer and limit
  • Anti-Fraud Credential Authentication A profile that shows, credential by credential, the source and the date, checked against the relevant register and, where possible, with the body that issued the qualification. Available
  • Facility verification A check of the facility's documents. It will be a review of paperwork, not an inspection. In preparation
  • A seal for your website Our server draws it on every page load; on another site it answers “not valid”. It does not stop clones, but anyone who clicks it sees that the site is not the verified one. Yours is ready, for social media too. Available
  • Threat Intelligence It looks for variants of your domain that are registered and in use, and alerts you with a score and the data it collected. Available

The label shows where each answer stands. One seal is already live, ours: further down, you can check it yourself.

What “verified” means

Available

Anti-Fraud Credential Authentication looks at three things. Each profile says what was checked, from which source and when. And what was not.

  1. The document

    That it is legible, and that its data match what you declare.

    The limit A document can be forged: on its own it does not show that the qualification was issued.

  2. The public register

    Where one exists, the registration shows as active, with the date and reference of the lookup.

    The limit It says you are registered, not that the diploma is genuine. We start with the Swiss registers; for other countries, we say case by case what is possible.

  3. The body that issued it

    Where possible, direct confirmation from the institution.

    The limit It is the most reliable check, but the body cannot always be reached. When it cannot, the profile says so.

The seal

A seal can be photographed. That is why you click it.

The seal is not an image you save and paste: our server draws it every time the page loads. It lights up only on the verified site. Pasted elsewhere, it answers “not valid on this site”.

A photograph stays a photograph. That is why a click opens the verification page: status, dates, domain and a signature anyone can check with our public key. Ours is lit; the one for your site is ready, for social media too.

The seal does not stop anyone cloning a site: it only shows that the clone has no valid seal. It depends on which page the request comes from, so a browser that does not send that information shows “not valid” even on the real site. And when a seal is turned off, the change arrives within about a minute and does not affect a page that is already open.

Threat Intelligence, in four steps

We use it on our own domain. The check runs when you request it.

  1. We generate the variants

    Letters swapped, dropped or repeated, a hyphen, a different extension: the most likely variants of your domain.

    Available

  2. We check what exists

    We check which are registered and in use. A purely theoretical variant raises no alarm.

    Available

  3. We alert you

    If a variant is live, you receive a score and the data collected, so you can see what the alert rests on.

    Available

  4. You decide

    What to do about an alert is your choice. We look at domain names, not at the content of websites, social media or your email.

    Available

Threat Intelligence observes and reports. The decision to act is yours.

The other answers, in detail

One already works. We describe the other three as they will work.

  • Consent with proof

    Subscribers to your newsletter confirm twice and can unsubscribe in one click. For each sign-up you download a Consent Certificate: who, when, which text they agreed to, with a fingerprint (sha256) and date. It is not a qualified signature.

    Available

  • Verifying a healthcare facility

    A check of the documents: the company, declared authorizations, premises and the medical director's registration, where public registers exist. It will not be an accreditation or an inspection.

    In preparation

  • Verifying a wellness center

    A check of the company, authorizations, staff qualifications and courses on equipment and protocols. It will never be a health authorization.

    In preparation

  • Website wording review

    A tool that will read your website and flag the phrases that promise too much, with a suggestion for saying them better. It will flag, not rewrite.

    In preparation

Where your data lives

Your health data lives, encrypted, in your phone's archive. What leaves the phone includes, for example, a question to the assistant and an encrypted recovery copy. The full list, and the reason for each item, is on the Digital Twin page.

We use standard, publicly verified encryption (AES-256). Your phone talks to our servers over an encrypted connection.

A seal is one click away from its proof: signature, domain, dates. Anyone can check it.

What we do not do

Does the seal protect me from cloned websites?

No. The seal does not stop anyone cloning a site. On a cloned site, however, it does not light up: anyone who looks for it, or clicks it, will see right away.

Is the check on my domain automatic?

Not yet. The check runs when you request it; we are building automatic re-checking at regular intervals. It covers domain names similar to yours: it does not look at the content of websites, your email, social media or your personal name. It reports; it does not block or remove anything.

What is KSM verification, and what is it not?

KSM verification is not an academic degree, a license to practice or a health authorization, and it is not an official recognition. It is a documented check of the credentials you hold and declare, with the sources consulted and the date.

Who decides when the evidence does not match?

A person on our team. In credential verification, automation prepares the case; it does not decide.

Years of study stand behind your name

You earned your qualifications. Let the people who choose you check them. Professional is the area for practitioners.

Sources

The outside sources for this page. For the seal, the source is the verification page that opens when you click it.