Security audit firms
Doyensec privacy rating
Application security firm with offices in San Francisco and San Marino that tests web, mobile, desktop, cloud and Electron applications and spends part of its time on public security research.
Summary
Doyensec scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, public research and no trackers on website. It partly meets audits open-source projects. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.
Score 86 out of 100. How scoring works
Criteria
-
Yes
Publishes full reports Weight 3 of 3
Are full audit reports routinely published, with client consent, rather than only summaries or badges?
The research page links more than a dozen full client reports, such as Teleport, Brave Wallet and Apollo Router.
-
Partial
Audits open-source projects Weight 2 of 3
Does the firm regularly audit open-source software and non-profit projects?
Published reports include open-source products such as Teleport, Canary Tokens and SoloKeys firmware, commissioned by their vendors.
-
Yes
Public research Weight 1 of 3
Does the firm publish security research, advisories or tools?
Publishes a regular research blog, security advisories and open-source tools.
-
Yes
No trackers on website Weight 1 of 3
Is the firm's website free of third-party trackers?
The tracker test found no trackers or analytics on the home page; it loads only Google Fonts and a public script CDN.