Cure53 vs NCC Group: privacy compared
Cure53 and NCC Group are both rated in security audit firms against the same 4 public criteria. Cure53 does better on no trackers on website. Cure53 is based in Germany (Fourteen Eyes); NCC Group is based in the United Kingdom (Five Eyes).
| Criterion | Cure53 Our pick | NCC Group |
|---|---|---|
| Grade | Grade A A (100/100) | Grade B B (86/100) |
| Jurisdiction | Germany Fourteen Eyes | United Kingdom Five Eyes |
| Publishes full reports Are full audit reports routinely published, with client consent, rather than only summaries or badges? | Yes source | Yes source |
| Audits open-source projects Does the firm regularly audit open-source software and non-profit projects? | Yes source | Yes source |
| Public research Does the firm publish security research, advisories or tools? | Yes source | Yes source |
| No trackers on website Is the firm's website free of third-party trackers? | Yes source | No |
Summaries
Cure53. Cure53 scores 100 out of 100 (grade A) on the security audit firms criteria. It meets 4 of 4 criteria: publishes full reports, audits open-source projects, public research and no trackers on website. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.
NCC Group. NCC Group scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, audits open-source projects and public research. It does not meet no trackers on website. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B-.