Cure53 vs NCC Group: privacy compared
Cure53 and NCC Group are both rated in security audit firms against the same 4 public criteria. Cure53 is based in Germany (Fourteen Eyes); NCC Group is based in the United Kingdom (Five Eyes).
| Criterion | Cure53 Our pick | NCC Group |
|---|---|---|
| Grade | Grade A A (100/100) | Grade B B (86/100) |
| Jurisdiction | Germany Fourteen Eyes | United Kingdom Five Eyes |
| Publishes full reports Are full audit reports routinely published, with client consent, rather than only summaries or badges? | Yes source | Yes source |
| Audits open-source projects Does the firm regularly audit open-source software and non-profit projects? | Yes source | Yes source |
| Public research Does the firm publish security research, advisories or tools? | Yes source | Yes source |
| No trackers on website Is the firm's website free of third-party trackers? | Yes source | No |
Which is more private, Cure53 or NCC Group?
Cure53 scores higher on the public criteria: 100 out of 100, against 86 for NCC Group. Cure53 does better on no trackers on website. How scoring works
Summaries
Cure53. Cure53 scores 100 out of 100 (grade A) on the security audit firms criteria. It meets 4 of 4 criteria: publishes full reports, audits open-source projects, public research and no trackers on website. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+, Mozilla HTTP Observatory grade B and Internet.nl website score 62%.
NCC Group. NCC Group scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, audits open-source projects and public research. It does not meet no trackers on website. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US. Automated tests: SSL Labs grade A, Mozilla HTTP Observatory grade B- and Internet.nl website score 78%.
Compare all 16 security audit firms