Security audit firms
X41 D-Sec privacy rating
German security firm in Aachen that performs source code audits, penetration tests, fuzzing and red teaming, with many published audits of open-source projects.
Summary
X41 D-Sec scores 100 out of 100 (grade A) on the security audit firms criteria. It meets 4 of 4 criteria: publishes full reports, audits open-source projects, public research and no trackers on website. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.
Score 100 out of 100. How scoring works
Criteria
-
Yes
Publishes full reports Weight 3 of 3
Are full audit reports routinely published, with client consent, rather than only summaries or badges?
The references page links around thirty full public audit reports.
-
Yes
Audits open-source projects Weight 2 of 3
Does the firm regularly audit open-source software and non-profit projects?
Regularly audits open-source projects, many for OSTIF, including Git, Envoy, CRI-O, Hickory DNS and BIND 9.
-
Yes
Public research Weight 1 of 3
Does the firm publish security research, advisories or tools?
Publishes security advisories and research through its lab and blog.
-
Yes
No trackers on website Weight 1 of 3
Is the firm's website free of third-party trackers?
The home page loads no third-party scripts, and the privacy policy describes only server log files, with no analytics services.