Example. Voorbeeld BV is a fictitious organisation. This is what the verification page behind a Resync badge looks like.
Valid

Voorbeeld App was tested and retested by Resync

Voorbeeld App by Voorbeeld BV was manually tested for security issues by Resync. All critical and high-risk findings were subsequently fixed, and Resync confirmed they were resolved in a retest on 4 May 2026.

Issued for
app.voorbeeld.nl

Did you arrive here from a website not listed above? Then this badge does not apply there.

Organisation
Voorbeeld BV
Application
Voorbeeld App
Test type
Web application and API pentest
Test period
7 to 11 April 2026
Retest
4 May 2026
Outcome
Critical and high findings resolved, confirmed in retest
Report ID
RSY-2026-0421-VBBV
Valid until
4 May 2027
Performed by
Sofyan Aarrass (OSCP, eWPTxv2)

Notes

Scope: the web application and its REST API. The mobile app was out of scope for this test.

What does this badge mean?

A pentest is a point-in-time assessment. Resync confirms what was tested during the test period, not that the application is flawless now or in the future: new code and new attack techniques can introduce new risks. That is why a badge has a limited validity.

The report itself stays confidential. Did you receive the report or retest declaration from Voorbeeld BV, for example as a customer or auditor? Check at re-sync.nl/verify that the document is genuine and unaltered.

This page lives on Resync's domain and cannot be edited by the organisation shown. Doubt a badge? Email info@re-sync.nl.

Launching an app yourself?

Resync tests it before your users (or attackers) do. Fixed price, retest included, and your own badge afterwards.