Analyzed
about 9 hours
ago.
based on code collected
about 9 hours
ago.
Project Summary
VeraCrypt is a free disk encryption software brought to you by IDRIX (https://www.idrix.fr) and based on TrueCrypt.
It adds enhanced security to the algorithms used for system and partitions encryption and it also solves many vulnerabilities and security issues found in TrueCrypt.
All released are PGP signed with key 0x680D16DE (Fingerprint = 5069 A233 D55A 0EEB 174A 5FC3 821A CD02 680D 16DE), available on key servers and downloadable at https://www.idrix.fr/VeraCrypt/VeraCrypt_PGP_public_key.asc
In a Nutshell, VeraCrypt...
- ...
- ...
-
...
has a well established, mature codebase
maintained by a large development team
with stable Y-O-Y commits -
...
took an estimated 72 years of effort (COCOMO model)
starting with its first commit in June, 2013
ending with its most recent commit 5 months ago
Quick Reference
https://git.code.sf.net/p/veracr...
TrueCrypt Collective License
Permitted
Forbidden
Required
These details are provided for information only. No information here is legal advice and should not be used as such.
Project Security
Vulnerabilities per Version ( last 10 releases )
Project Vulnerability Report
Security Confidence Index
Poor security track-record
Favorable security track-record
Vulnerability Exposure Index
Many reported vulnerabilities
Few reported vulnerabilities
Did You Know...
-
...
nearly 1 in 3 companies have no process for identifying, tracking, or remediating known open source vulnerabilities
-
...
learn about Open Hub updates and features on the Open Hub blog
-
...
in 2016, 47% of companies did not have formal process in place to track OS code
-
...
anyone with an Open Hub account can update a project's tags
30 Day SummaryJan 25 2026 — Feb 24 2026
|
12 Month SummaryFeb 24 2025 — Feb 24 2026
|
