Security audit firms
NCC Group privacy rating
UK cyber security company that provides penetration testing, cryptography reviews, incident response and managed security services.
Summary
NCC Group scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, audits open-source projects and public research. It does not meet no trackers on website. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B-.
Score 86 out of 100. How scoring works
Criteria
-
Yes
Publishes full reports Weight 3 of 3
Are full audit reports routinely published, with client consent, rather than only summaries or badges?
The research section publishes dozens of full public reports, for clients such as WhatsApp, Google, AWS and Zcash.
-
Yes
Audits open-source projects Weight 2 of 3
Does the firm regularly audit open-source software and non-profit projects?
Public reports cover open-source projects such as the eBPF verifier for the eBPF Foundation, RustCrypto, Ricochet and Zcash Zebra.
-
Yes
Public research Weight 1 of 3
Does the firm publish security research, advisories or tools?
Publishes regular research articles, advisories and open-source tools.
-
No
No trackers on website Weight 1 of 3
Is the firm's website free of third-party trackers?
The home page loads Google Analytics and Google Tag Manager.