Re: Kleopatra Security review

Hi,

the KDE community is a community of volunteers. We cannot provide the 
information you need.

But there is the company g10 Code GmbH [1] which offers Kleopatra as part of 
their commercial offering "GnuPG VS-Desktop" (which is certified by the German 
BSI). There may be other companies. You may want to contact them.

Disclaimer: I'm working for g10 Code GmbH as freelancer.

Regards,
Ingo

[1] https://www.gnupg.com

On Mittwoch, 21. Juni 2023 20:58:00 CEST Anjan Kopparati wrote:
> Hello,
> 
> Our IT team wants to use Kleopatra opensource project to generate PGP keys.
> Before we approve the usage of this tool, we have to perform a vendor
> security review to approve it for usage.
> 
> Do you have any security audit reports that we could use to better
> understand that security controls you've implemented for Kleopatra?
> 
> Thank you
> 
> [Logo]<https://www.flexiti.com/>
> Anjan Kopparati
> Security Engineer
> E: [email protected]<mailto:[email protected]>
> 250 University Ave, Suite 600
> Toronto ON, M5H 3E5
> www.flexiti.com<https://www.flexiti.com>
> [https://flx-public-files.s3.amazonaws.com/Flexiti+Signature/image002.png]

-----BEGIN PGP SIGNATURE-----

iHUEABYKAB0WIQTbjgIOMowwlCBgvyGxb1mVFkdKugUCZJNhxwAKCRCxb1mVFkdK
ugQVAP9axeJeuw+Mlk7tBYm28DlZkgb8jCq0k4r1y/Y5QycRDQD8CNZFiQH2MDW/
ZwPTwciD8zLE2kN2Z8FxLtbMYVvj+A8=
=1gHl
-----END PGP SIGNATURE-----