SecureDrop has completed its sixth security audit, conducted by 7ASecurity and sponsored by the Open Technology Fund. The audit identified three vulnerabilities—one medium-severity and two low-severity—all of which were fixed in the SecureDrop 2.10.0 release. In their report, the auditors praised SecureDrop's robust defense against a broad range of attack vectors, noting that only a few issues were uncovered despite the large scope of the assessment.
This audit is part of SecureDrop's ongoing commitment to security testing and platform hardening. To learn more about the findings and our plans for future improvements, check out the full post on the SecureDrop blog.
