Cure53 vs Trail of Bits: privacy compared
Cure53 and Trail of Bits are both rated in security audit firms against the same 4 public criteria. Cure53 is based in Germany (Fourteen Eyes); Trail of Bits is based in the United States (Five Eyes).
| Criterion | Cure53 Our pick | Trail of Bits |
|---|---|---|
| Grade | Grade A A (100/100) | Grade B B (86/100) |
| Jurisdiction | Germany Fourteen Eyes | United States Five Eyes |
| Publishes full reports Are full audit reports routinely published, with client consent, rather than only summaries or badges? | Yes source | Yes source |
| Audits open-source projects Does the firm regularly audit open-source software and non-profit projects? | Yes source | Yes source |
| Public research Does the firm publish security research, advisories or tools? | Yes source | Yes source |
| No trackers on website Is the firm's website free of third-party trackers? | Yes source | No |
Which is more private, Cure53 or Trail of Bits?
Cure53 scores higher on the public criteria: 100 out of 100, against 86 for Trail of Bits. Cure53 does better on no trackers on website. How scoring works
Summaries
Cure53. Cure53 scores 100 out of 100 (grade A) on the security audit firms criteria. It meets 4 of 4 criteria: publishes full reports, audits open-source projects, public research and no trackers on website. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+, Mozilla HTTP Observatory grade B and Internet.nl website score 62%.
Trail of Bits. Trail of Bits scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, audits open-source projects and public research. It does not meet no trackers on website. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B, Mozilla HTTP Observatory grade D and Internet.nl website score 73%.
Compare all 16 security audit firms