# Securitum privacy rating

Polish penetration testing company in Kraków that tests web, mobile and infrastructure systems and runs the Sekurak security publication and training.

## Summary

Securitum scores 86 out of 100 (grade B) on the security audit firms criteria. It meets 3 of 4 criteria: publishes full reports, public research and no trackers on website. It partly meets audits open-source projects. It is based in Poland: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade B.

- Website: https://securitum.com
- Jurisdiction: Poland. Not in the Five, Nine or Fourteen Eyes. EU member (GDPR).
- Home page trackers: Google Fonts (not scored)
- Category: [Security audit firms](https://privacyratings.com/security-audit-firms/)
- Grade: B (86/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Publishes full reports | Yes | The public reports page links dozens of full client reports, including Proton VPN, DuckDuckGo VPN and Internxt. | https://securitum.com/public-reports.html |
| Audits open-source projects | Partial | Public reports include audits of open-source products such as addy.io, SimpleLogin and Internxt, commissioned by their vendors; no foundation-funded open-source audit programme is listed. | https://securitum.com/public-reports/addy-io-security-audit.pdf |
| Public research | Yes | Publishes regular vulnerability write-ups and CVEs, and runs the Sekurak security publication. | https://securitum.com/pentest-chronicles.html |
| No trackers on website | Yes | The tracker test found no trackers or analytics on the home page; it loads only Google Fonts and a public script CDN. | https://securitum.com/ |

Source: https://privacyratings.com/security-audit-firms/securitum/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/security-audit-firms/securitum.md