The engagement provided Cure53 with full access to IDZ’s source code, binaries, and documentation to test the integrity of its encrypted storage and private communication tools. The auditors focused on seven distinct work packages, including the firm's custom Dart and C++ cryptographic libraries and the implementation of the Botan library within its backend architecture.
IDZ Validates Privacy Infrastructure With Cure53 Audit
Berlin-based security firm Cure53 spent three weeks in September 2025 conducting a white-box audit of IDZ’s core cryptographic libraries and application stack. The assessment, which scrutinized everything from backend key management to mobile interfaces, resulted in twenty findings that the company has since moved to remediate.
While the review uncovered twenty issues ranging from critical vulnerabilities to general hardening recommendations, the IDZ engineering team confirmed that all identified security flaws have been patched. Remaining items are categorized as low-priority defense-in-depth improvements, which are currently being tracked for future updates. Joseph Bara, founder and CEO of IDZ, framed the audit as a necessary step for maintaining user trust in a privacy-first platform that manages sensitive data through its MetaCortex AI and ZChat messaging services.
Comments (0)
No comments yet. Be the first!