# Audits, pentests and external security reviews

Independent audits help to discover potential security vulnerabilities and fix them, all resulting
in an even better service. It also gives you the opportunity to judge whether or not we are
technically competent enough to provide a service in which security is paramount.

We perform these external security audits every two years. Here are all the audits we have
performed on this app so far:

* [2018-09-24 - Assured and Cure53](./2018-09-24-assured-cure53.md)
* [2020-06-12 - Cure53](./2020-06-12-cure53.md)
* [2022-10-14 - Atredis](./2022-10-14-atredis.md)
* [2024-12-10 - X41 D-Sec](./2024-12-10-X41-D-Sec.md)

## Additional audits and certifications

Apart from the biannual audits mentioned above, we've also conducted the following:

* [2025-02-24 - NCC Group Mobile Application Security Assessment (MASA) of the Android app](./2025-02-24-nccgroup-android-masa.md)
* [2025-03-20 - Audit of the installer downloader by Assured](./2025-03-20-assured-installer-downloader.md)