Every month we review Illumentis again and publish the result. Here you will find all reports, including the earlier ones.
A single report tells you how things look today. The history shows whether we keep at it: which findings we made, how we fixed and re-measured them, and what remained open. Archived reports are not rewritten retroactively.
All reports are a self-disclosure, not an external certification and not an independent penetration test.
Over 4,400 automated tests · mutation testing 81 % (previous month 77 %) · 710 access attempts to other users’ data without unauthorized access · 3 findings fixed (login response time re-measured in three steps, profile pages of deleted and blocking users, fresh installation) · open: requests without login, TLS hardening, delivery hardening. To the report →
3,896 automated tests · 14 attack scenarios (13 backed by tests, 1 open) · mutation testing 596 of 773 mutants (77 %) · first external scan of the beta instance with several findings, which were fixed · first full version of the security overview. To the archived version →