4 ms·

Your comment really surprised me as I didn't expect that this was just a pen-test, but after visiting the link, indeed it was! I think it's a bit sneaky as for

Your comment really surprised me as I didn't expect that this was just a pen-test, but after visiting the link, indeed it was! I think it's a bit sneaky as for a product like this, people expect this to be a code and crypto audit. The "network" part should be emphasised and in the title of the page, instead of just the PDF.

user5994461 6y ago
In this business the title "External Penetration Test and Vulnerability Assessment" means the auditing company has run qualys/nessus* against bitwarden.com. * expensive commercial vulnerability scanning tools.
- starfallg 6y ago
  Yes, but the title of the page/blog post is "Security Audit Complete".
  - _jal 6y ago
    A page title fails to correct your misconception about a multiyear project and it is their fault? This is one reason why people don't release this stuff in public.
deleted 6y ago
[deleted]