# Include Security privacy rating

US application security consultancy based in Brooklyn, New York, that performs penetration tests and source code reviews of web, mobile, cloud and embedded software.

## Summary

Include Security scores 14 out of 100 (grade F) on the security audit firms criteria. It meets 1 of 4 criteria: public research. It does not meet publishes full reports, audits open-source projects and no trackers on website. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade C-.

- Website: https://includesecurity.com
- Jurisdiction: United States. Five Eyes member. Subject to the US CLOUD Act.
- Home page trackers: WordPress.com Stats
- Category: [Security audit firms](https://privacyratings.com/security-audit-firms/)
- Grade: F (14/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Publishes full reports | No | The firm does not publish client audit reports. |  |
| Audits open-source projects | No | No public audits of open-source projects are published. |  |
| Public research | Yes | Publishes a regular research blog on application, mobile and cloud security. | https://blog.includesecurity.com/ |
| No trackers on website | No | The home page loads WordPress.com Stats. |  |

Source: https://privacyratings.com/security-audit-firms/include-security/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/security-audit-firms/include-security.md