Verified by Resync
Organisations that had their application tested by Resync can display a Resync badge on their website. Every badge links to a verification page on this domain, where you can see for yourself what was tested, when, and whether the badge is still valid. The confidential report stays confidential.
Two kinds of badge
Pentested
The application was manually tested and the report delivered. Says nothing about whether findings have been fixed yet.
Pentested & retested
All critical and high findings were fixed, and Resync confirmed that in a retest.
What to look for
- Click the badge. A genuine badge opens a page on re-sync.nl/…/verified/, nowhere else.
- Check that the domain on that page matches the website where you saw the badge.
- A badge is normally valid for 12 months after the last test. After that it is marked as expired.
Organisations
| Organisation | Application | Badge |
|---|---|---|
| Transvitas | Transvitas | Pentested · Oct 2026 |
Launching an app yourself?
Resync tests it before your users (or attackers) do. Fixed price, retest included, and your own badge afterwards.