[Shank]

> If you’re building an app dealing with highly sensitive data, we definitely recommend you check out ZeroKit and give it a try!

ZeroKit's website says they offer "hack proof encryption" and a $50k prize with a quote from The Next Web about "1,000 hackers" failing to break it.

If I'm handling highly sensitive data, I'd prefer any service I'm using to do that have multiple third party security audits on a source code level. Look at TrueCrypt's audit -- which gets into actual lines of code and details potential attack vectors -- as an example. Without any kind of auditing, it's a very tough claim to be hack proof.

Not to mention the fact that $50k might just not be enough to entice reporting. It's a good bounty for sure, but if you can compromise highly sensitive data sources, it stands to reason that the value on breaking that crypto is much, much higher than $50k.

[IncRnd]

Good catches. ZeroKit seems too much marketing vs. too little security.

[porcellus]

Hi, a ZeroKit developer here. We agree, third-party audits are crucial. We’re working on this, so stay tuned.