5 ms·
Ask HN: Security audit for startup / OSS projects
I run a startup whose code is public and I'd like to have the code audited for vulnerabilities, does anyone know of services that exist to do this that aren't enterprise focused? Even HackerOne has gone full-enterprise in recent years, but it's not only large companies that need these services.
- fsflover 6y agoCheck out a company which audited TrueCrypt.
- throwaway888abc 6y agohttps://cure53.de/ https://cure53.de/ https://www.nccgroup.com/uk/ https://www.nccgroup.com/uk/
- xet7 6y agohttps://news.ycombinator.com/item?id=25381397 https://news.ycombinator.com/item?id=25381397
- Vignesh_Vault 6y agohttps://vaultinfosec.com/contact.php https://vaultinfosec.com/contact.php We are young energetic team, who had already done secure Code review to many startup's.
- deleted 6y ago[deleted]
- reedloden 6y agohttps://www.hackerone.com/company/open-source-community https://www.hackerone.com/company/open-source-community HackerOne has a free offering for open source projects. ^^ Let me know if you have any questions (I manage it). :-)
- tommoor 6y agoThanks, unfortunately we're using BSL in order to monetize, it's not an OSI license
- ianpurton 6y agoYou can find indy security people on Upwork. But really if you have a ci cd pipeline you should look at automating a lot of this. Devsecops. If you post a link and I get time I can take a look.
- tubularhells 6y agoAsk on the infosec.exchange mastodon. There are plenty folks there contracting.