ous fixes
and recommendations, and our plan of action for continuous security evaluation
and improvement of the Istio project. You can download and read the
unabridged version of the
<a href=/v1.26/blog/2021/ncc-security-assessment/NCC_Group_Google_GOIST2005_Report_2020-08-06_v1.1.pdf>security assessment report</a>.</p><h2 id=scope-and-key-findings>Scope and Key Findings</h2><p>The assessment evaluated Istio’s architecture as a whole for security related
issues with focus on key components like istiod (Pi