Audit of a public GitHub repository

Audit

490 EUR

For one public GitHub repository. The report is delivered privately, because it describes weaknesses, some of them exploitable. It holds:

• every finding with its location, cause and class: tool-detectable, found by review or check gap,
• recommendations in priority order,
• the metrics of the review: the grade of each of the six axes and the score out of 100 with the rule that produced it,
• the method label of the review.

The price includes one follow-up verification of the same repository, at a later commit you choose, requested within 90 days of the report's delivery. It marks every finding of the report, tool-detectable findings as fixed or still present, the others as still present or not found again, and lists the new findings.

The verification reports what it finds: it does not certify that no defect remains, and it shows the new score without a numeric change against the first review. One verification, not ongoing monitoring.

The same review also produces the public evaluation of the repository, published by default. You can ask for its removal through the contact form.