Analyzed
about 12 hours
ago.
based on code collected
2 days
ago.
Project Summary
VeraCrypt is a free disk encryption software brought to you by IDRIX (https://www.idrix.fr) and based on TrueCrypt.
It adds enhanced security to the algorithms used for system and partitions encryption and it also solves many vulnerabilities and security issues found in TrueCrypt.
All released are PGP signed with key 0x680D16DE (Fingerprint = 5069 A233 D55A 0EEB 174A 5FC3 821A CD02 680D 16DE), available on key servers and downloadable at https://www.idrix.fr/VeraCrypt/VeraCrypt_PGP_public_key.asc
In a Nutshell, VeraCrypt...
- ...
- ...
-
...
has a well established, mature codebase
maintained by a large development team
with decreasing Y-O-Y commits -
...
took an estimated 75 years of effort (COCOMO model)
starting with its first commit in June, 2013
ending with its most recent commit 2 days ago
Quick Reference
https://git.code.sf.net/p/veracr...
TrueCrypt Collective License
Permitted
Forbidden
Required
These details are provided for information only. No information here is legal advice and should not be used as such.
Project Security
Vulnerabilities per Version ( last 10 releases )
Project Vulnerability Report
Security Confidence Index
Poor security track-record
Favorable security track-record
Vulnerability Exposure Index
Many reported vulnerabilities
Few reported vulnerabilities
Did You Know...
-
...
in 2016, 47% of companies did not have formal process in place to track OS code
-
...
check out hot projects on the Open Hub
-
...
there are over 3,000 projects on the Open Hub with security vulnerabilities reported against them
-
...
by exploring contributors within projects, you can view details on every commit they have made to that project
30 Day SummaryMay 16 2026 — Jun 15 2026
|
12 Month SummaryJun 15 2025 — Jun 15 2026
|
