Cyber ITL.

The Cyber Independent Testing Lab (CITL) was organized exclusively for scientific and educational purposes, with the mission of advising software consumers through expert scientific inquiry into software safety. We are an organization that produces an independent comparative measure of the risk of ownership of computer software and systems. Our mission is to work for a fair, just, and safe software marketplace for all consumers and to empower consumers to protect themselves. We engage in scientific research to test software and computing products, and then we will publish the results of that research in a way that will best empower and educate software consumers. 

Read more.

And The Intercept_ article –

Mudge and his wife, Sarah, a former NSA mathematician, have developed a first-of-its-kind method for testing and scoring the security of software — a method inspired partly by Underwriters Laboratories, that century-old entity responsible for the familiar circled UL seal that tells you your toaster and hair dryer have been tested for safety and won’t burst into flames. Called the Cyber Independent Testing Lab, the Zatkos’ operation won’t tell you if your software is literally incendiary, but it will give you a way to comparison-shop browsers, applications, and antivirus products according to how hardened they are against attack. It may also push software makers to improve their code to avoid a low score and remain competitive.

Read more.

We talked to Sarah and Mudge a month ago but this was not public yet, now it is! This is an interesting idea and business, a consumer-reports style ranking and eval of software safety. Which commercial companies will be the Volvo (safe) for the software they create.