Verify a report
Check whether a Resync penetration test report (PDF) is genuine and has not been altered since delivery. An auditor, regulator or other third party can establish a report's authenticity here on their own, without involving Resync. The check runs entirely in your browser using a digital signature; the file stays on your device and is never uploaded or stored.
How does this work?
Every Resync report is signed on delivery with a digital signature (Ed25519) that only Resync can create. This page checks that signature against the matching public key, entirely in your own browser, without sending the file anywhere.
If the signature is valid and the content matches exactly what was signed, the report is genuine and unaltered. Any change to the document, or a report that did not come from Resync, shows up here.