From Wikipedia, the free encyclopedia

Cure53 is a German cybersecurity firm.[1][2][3][4] The company was founded by Dr. Mario Heiderich, a security researcher.


After a report from Cure53 on the South Korean security app Smart Sheriff, that described the app's security holes as "catastrophic", the South Korean government ordered the Smart Sheriff to be shut down.[1][2]

Software audited by Cure53 includes Mastodon, OnionShare, Bitwarden, Mailvelope, GlobaLeaks, SecureDrop, OpenPGP, Onion Browser, F-Droid, Nitrokey, Peerio, OpenKeychain, cURL, Briar, Mozilla Thunderbird, Threema, MetaMask, Obsidian, Proton Pass, and Passbolt, as well as many VPN and password manager providers.[5]


  1. ^ a b Max Lewontin (2015-11-02). "South Korea pulls plug on child surveillance app after security concerns: Government officials pulled Smart Sheriff, an app that lets parents track how their children use social media, from the Google Play store over the weekend". The Christian Science Monitor. Retrieved 2016-01-09. But researchers from Citizens Lab, a research group based at the University of Toronto, and Cure53, a German software company, released two reports in September finding that Smart Sheriff had a variety of security issues that it made it vulnerable to hackers and put children and parents' personal information at risk.
  2. ^ a b Raphael Satter, Youkyung Lee (2015-11-02). "South Korea shuts down child surveillance app over security concerns: The removal of the state-approved Smart Sheriff is a blow to South Korea's effort to keep closer tabs on the online lives of youth". Toronto Star. Seoul. Retrieved 2016-01-09. Pulling the plug on Smart Sheriff was "long overdue," said independent researcher Collin Anderson, who worked with Internet watchdog group Citizen Lab and German software auditing firm Cure53 to comb through the app's code.
  3. ^ Andy Greenberg (2015-01-14). "The Free Encryption App That Wants to Replace Gmail, Dropbox, and HipChat". Wired. Retrieved 2015-05-19.
  4. ^ Timm Trevor (2014-01-20). "SecureDrop Undergoes Second Security Audit". Freedom of the Press Foundation. Retrieved 2014-07-13. This time, we worked with the German security firm Cure53, who has previously done audits of GlobaLeaks, Mailvelope, and CryptoCat.
  5. ^ "Cure53 – Fine penetration tests for fine websites". Retrieved 2023-08-19.

External links[edit]