# 7ASecurity privacy rating

Security firm specialising in mobile, web and cloud penetration tests and code audits, with many published audits of open-source and digital-rights projects funded by OSTIF and the Open Technology Fund.

## Summary

7ASecurity scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, audits open-source projects and public research. It does not meet no trackers on website. It is based in Ireland: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade D-.

- Website: https://7asecurity.com
- Jurisdiction: Ireland. Not in the Five, Nine or Fourteen Eyes. EU member (GDPR).
- Home page trackers: Google Fonts (not scored), Google Tag Manager, Yandex Metrica
- Category: [Security audit firms](https://privacyratings.com/security-audit-firms/)
- Grade: B (86/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Publishes full reports | Yes | The publications page links dozens of full public audit reports. | https://7asecurity.com/publications |
| Audits open-source projects | Yes | Public reports cover many open-source projects, such as Tor, SecureDrop, K-9 Mail, zlib, Linkerd and conda-forge. | https://7asecurity.com/reports/pentest-report-tor2-RC1.2.pdf |
| Public research | Yes | Publishes a regular blog, free training material and talks. | https://7asecurity.com/blog/ |
| No trackers on website | No | The home page loads Google Analytics, Google Tag Manager and Yandex Metrica. |  |

Source: https://privacyratings.com/security-audit-firms/7asecurity/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/security-audit-firms/7asecurity.md