SecureSlateSecureSlate
Log inGet started for free
← Back
Roo Code

Roo Code

High risk
Claim this page

High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.

Grade: D

Dimensions
4
Scored across governance, coverage, security, and transparency.
Flagged signals
5
42% of all recorded signals are negative.
Observation period
June 10, 2025 - September 10, 2025
2 audit reports referenced.
Trust score
34
Grade D • High risk
34%
Primary concern
Audit database match
Strongest signal
Web presence
Signal composition
Flags
5
Neutral
4
Positive
3
Analysis

Weighted score breakdown

Contribution shows approximate points each dimension adds to the overall score.

Analysis
Audit Integrity
Impact:HighWeight 35%
1 / 100
0.4 pts contribution
Compliance Coverage
Impact:MediumWeight 25%
35 / 100
8.8 pts contribution
Infrastructure & Security
Impact:MediumWeight 20%
75 / 100
15 pts contribution
Transparency & Governance
Impact:MediumWeight 20%
50 / 100
10 pts contribution

Signal distribution by dimension

Shows where risk evidence is concentrated across the audit dimensions.

Audit Integrity
4 signals
Flags 4
Neutral 0
Positive 0
Compliance Coverage
2 signals
Flags 0
Neutral 2
Positive 0
Infrastructure & Security
3 signals
Flags 0
Neutral 1
Positive 2
Transparency & Governance
3 signals
Flags 1
Neutral 1
Positive 1
Highlights

Top risks

Audit database match
Company found in leaked database of template-based audit reports
Audit Integrity
Multiple flagged reports
2 separate reports found, suggesting repeated engagement with flagged auditor
Audit Integrity
Type 2 report flagged
Type 2 reports require observation period testing - template usage is more concerning here
Audit Integrity

Positive indicators

Web presence
Company maintains a public website
Infrastructure & Security
Transport encryption
Website configured with HTTPS
Infrastructure & Security
Legal entity identified
Registered as "Roo Code, Inc."
Transparency & Governance
Details

Company details

Website
roocode.com
Legal name
Roo Code, Inc.
Observation period
June 10, 2025 - September 10, 2025
Report types
SOC 2 Type 2
Infrastructure
Vercel

Assessment notes

Public footprint
Public website and branded presence are available for validation.
Coverage view
4 scored dimensions with 12 supporting signals were analyzed.
Analyst takeaway
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
Evidence

Dimension evidence

Detailed evidence behind each dimension score and its underlying signals.

Audit Integrity
Impact: HighScore: CriticalWeight: 35% • Signals: 4
1 / 100
Signals (4)
  • Flag
    Audit database match
    Company found in leaked database of template-based audit reports
  • Flag
    Multiple flagged reports
    2 separate reports found, suggesting repeated engagement with flagged auditor
  • Flag
    Type 2 report flagged
    Type 2 reports require observation period testing - template usage is more concerning here
  • Flag
    Auditor credibility
    Audit performed by firm flagged for systematic template reuse
Compliance Coverage
Impact: MediumScore: HighWeight: 25% • Signals: 2
35 / 100
Signals (2)
  • Info
    Single framework
    SOC 2 report found, from a flagged source
  • Info
    Report recency
    Reports dated within Jan-Dec 2025 observation window
Infrastructure & Security
Impact: MediumScore: MediumWeight: 20% • Signals: 3
75 / 100
Signals (3)
  • Good
    Web presence
    Company maintains a public website
  • Good
    Transport encryption
    Website configured with HTTPS
  • Info
    Cloud infrastructure
    Hosted on Vercel
Transparency & Governance
Impact: MediumScore: HighWeight: 20% • Signals: 3
50 / 100
Signals (3)
  • Good
    Legal entity identified
    Registered as "Roo Code, Inc."
  • Info
    Service description available
    System description found in audit reports
  • Flag
    Exception reporting
    Zero exceptions reported across all audit periods - statistically improbable, suggests inadequate testing
Explore

Related vendor checks

More vendors in this directory to help you compare trust signals.

1C
13139026 Canada Inc.
33
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
a37 Inc.
a37 Inc.
33
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
Accumatic, Inc
Accumatic, Inc
33
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
AchillesHR, Inc.
AchillesHR, Inc.
33
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
AI
acme inc
35
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
Actava AI, Inc
Actava AI, Inc
33
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
ADVERSA AI LTD
ADVERSA AI LTD
33
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
Roo Code, Inc.
Roo Code, Inc.
33
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
River Software, LLC
River Software, LLC
28
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
S2
S2
40
High risk. Significant audit integrity concerns detected. Recommend obtaining an independent compliance assessment before vendor engagement.
Browse more in this category →