[Foobar8568]

So a company called Securitum did a security assessment limited to pentest according to the pdf.

More over "Tests have been carried out in September 2021 in accordance with generally accepted methodologies, including OWASP Top 10 and SANS Top Issues".

It's hard to believe that one can call apps being secured after pen testing especially when the two highlights are such low hang fruits that are OWASP top 10 and SANS top issues..

It doesn't really give any confidences into Proton, but then again, I am not an expert, and have seen such useless reports at different clients.