# Doyensec privacy rating

Application security firm with offices in San Francisco and San Marino that tests web, mobile, desktop, cloud and Electron applications and spends part of its time on public security research.

## Summary

Doyensec scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, public research and no trackers on website. It partly meets audits open-source projects. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

- Website: https://doyensec.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: Google Fonts (not scored)
- Category: [Security audit firms](https://privacyratings.com/security-audit-firms/)
- Grade: B (86/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Publishes full reports | Yes | The research page links more than a dozen full client reports, such as Teleport, Brave Wallet and Apollo Router. | https://doyensec.com/research.html |
| Audits open-source projects | Partial | Published reports include open-source products such as Teleport, Canary Tokens and SoloKeys firmware, commissioned by their vendors. | https://doyensec.com/resources/Doyensec_ThinkstCanaryTokensOSS_Report_Q22024_WithRetesting.pdf |
| Public research | Yes | Publishes a regular research blog, security advisories and open-source tools. | https://blog.doyensec.com/ |
| No trackers on website | Yes | The tracker test found no trackers or analytics on the home page; it loads only Google Fonts and a public script CDN. | https://doyensec.com/ |

Source: https://privacyratings.com/security-audit-firms/doyensec/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/security-audit-firms/doyensec.md