{
  "slug": "radically-open-security",
  "category": "security-audit-firms",
  "name": "Radically Open Security",
  "description": "Dutch not-for-profit security firm that performs penetration tests and code audits, including for open-source and public-interest projects, and sends most of its profits to the NLnet Foundation.",
  "website": "https://www.radicallyopensecurity.com",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "NL",
    "name": "Netherlands",
    "eyes": "Nine Eyes",
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "A",
  "score": 93,
  "coverage": 100,
  "summary": "Radically Open Security scores 93 out of 100 (grade A) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, audits open-source projects and no trackers on website. It partly meets public research. It is based in the Netherlands: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/security-audit-firms/radically-open-security/",
  "markdown": "https://privacyratings.com/security-audit-firms/radically-open-security/index.md",
  "answers": {
    "public_reports": {
      "title": "Publishes full reports",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://www.radicallyopensecurity.com/our-portfolio/",
      "note": "The portfolio links a collection of full public reports hosted on GitHub."
    },
    "open_source_work": {
      "title": "Audits open-source projects",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.radicallyopensecurity.com/our-portfolio/",
      "note": "Public reports include audits of GlobaLeaks, Ushahidi, F-Droid, Tauri and other open-source projects, some funded by the Open Technology Fund."
    },
    "public_research": {
      "title": "Public research",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://github.com/radicallyopensecurity/pentext",
      "note": "Publishes open-source tooling such as the PenText report system and gives occasional talks."
    },
    "no_trackers": {
      "title": "No trackers on website",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://raw.githubusercontent.com/radicallyopensecurity/ros-website/main/ROS_Privacy_Policy__-_V1.0_-_2022.pdf",
      "note": "The privacy policy states the website uses no cookies and does not track or analyze visitors, and the tracker test found none."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T07:07:14.371Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}