Hi all, Sending this first to the dev list, and might send to the general list depending on responses. Has anyone in the Koha community commissioned an external independent security audit of Koha? I know people do their own pen testing and security audits, but has anyone paid for an external independent firm to certify Koha? Apologies for the vagueness. I'm asking this question on behalf of someone else. I don't think it's a source code audit (like has been done for open source encryption software like TrueCrypt). Rather, I think it's an audit of an implemented Koha. Of course, any audit of an implementation would be implementation specific, so I'm not quite sure of the intentions behind the original question, but there you have it. David Cook Systems Librarian Prosentient Systems 72/330 Wattle St Ultimo, NSW 2007 Australia Office: 02 9212 0899 Direct: 02 8005 0595