Code Audit

The NTP Codebase undergoes security and defect audits from a number of sources, including:

Area	By	Dates
Protocol and core code	David L. Mills	1985 - present
codebase	https://www.coverity.com	Mar 2006 - present
codebase	Calysto	Jun 2007 - Sep 2008
codebase	https://www.veracode.com/	Feb 2009 - present

Additionally, a number of project developers and interested parties in the Internet Community routinely scan the code looking for problems.