# NCC Group privacy rating

UK cyber security company that provides penetration testing, cryptography reviews, incident response and managed security services.

## Summary

NCC Group scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, audits open-source projects and public research. It does not meet no trackers on website. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US. Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade B-.

- Website: https://www.nccgroup.com
- Jurisdiction: United Kingdom. Five Eyes member. GDPR-style data protection law. CLOUD Act data access agreement with the US.
- Home page trackers: Google Analytics, Google Tag Manager
- Category: [Security audit firms](https://privacyratings.com/security-audit-firms/)
- Grade: B (86/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Publishes full reports | Yes | The research section publishes dozens of full public reports, for clients such as WhatsApp, Google, AWS and Zcash. | https://www.nccgroup.com/research/ |
| Audits open-source projects | Yes | Public reports cover open-source projects such as the eBPF verifier for the eBPF Foundation, RustCrypto, Ricochet and Zcash Zebra. | https://www.nccgroup.com/research/public-report-ebpf-verifier-code-review/ |
| Public research | Yes | Publishes regular research articles, advisories and open-source tools. | https://www.nccgroup.com/research/ |
| No trackers on website | No | The home page loads Google Analytics and Google Tag Manager. |  |

Source: https://privacyratings.com/security-audit-firms/ncc-group/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/security-audit-firms/ncc-group.md