Security audit firms
7ASecurity privacy rating
Security firm specialising in mobile, web and cloud penetration tests and code audits, with many published audits of open-source and digital-rights projects funded by OSTIF and the Open Technology Fund.
Summary
7ASecurity scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, audits open-source projects and public research. It does not meet no trackers on website. It is based in Ireland: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: Mozilla HTTP Observatory grade D-.
Score 86 out of 100. How scoring works
Criteria
-
Yes
Publishes full reports Weight 3 of 3
Are full audit reports routinely published, with client consent, rather than only summaries or badges?
The publications page links dozens of full public audit reports.
-
Yes
Audits open-source projects Weight 2 of 3
Does the firm regularly audit open-source software and non-profit projects?
Public reports cover many open-source projects, such as Tor, SecureDrop, K-9 Mail, zlib, Linkerd and conda-forge.
-
Yes
Public research Weight 1 of 3
Does the firm publish security research, advisories or tools?
Publishes a regular blog, free training material and talks.
-
No
No trackers on website Weight 1 of 3
Is the firm's website free of third-party trackers?
The home page loads Google Analytics, Google Tag Manager and Yandex Metrica.