# Cure53 vs NCC Group: privacy compared

| Criterion | Cure53 | NCC Group |
| --- | --- | --- |
| Grade | A (100/100) | B (86/100) |
| Jurisdiction | Germany (Fourteen Eyes) | United Kingdom (Five Eyes) |
| Publishes full reports | Yes | Yes |
| Audits open-source projects | Yes | Yes |
| Public research | Yes | Yes |
| No trackers on website | Yes | No |

**Cure53.** Cure53 scores 100 out of 100 (grade A) on the security audit firms criteria. It meets 4 of 4 criteria: publishes full reports, audits open-source projects, public research and no trackers on website. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.

**NCC Group.** NCC Group scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, audits open-source projects and public research. It does not meet no trackers on website. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B-.

Source: https://privacyratings.com/compare/security-audit-firms/cure53-vs-ncc-group/