Your file never leaves your device. The signature is checked in your browser using QuantSec's public signing key.
How it works
01
Add the report
Drop the signed PDF or JSON file into the box above, or click it to choose the file. It stays on your device.
02
We check the signature
Your browser checks the report’s signature against its content, using QuantSec’s public signing key.
03
Read the result
If the signature matches, QuantSec issued the report and it has not been altered. If it does not, do not trust its contents.
What a valid signature tells you
A valid signature means the report was issued by QuantSec and nothing in it has changed since it was signed, including:
The scope that was reviewed.
The tagged release it covers.
What was found.
When it was issued.
A valid signature authenticates the report. It does not certify that the assessed systems are secure.
If the signature does not match
Do not trust the contents of the report. It may have been altered after it was signed, or it may not have been issued by QuantSec. Ask the sender for the original file and check it again, or let us know. See our security page for how we sign reports and how to report a security issue.
Get in touch
For anything else, use our contact form or email [email protected].