diff --git a/content/en/docs/security/audits.md b/content/en/docs/security/audits.md
index 693f962..44a5621 100644
--- a/content/en/docs/security/audits.md
+++ b/content/en/docs/security/audits.md
@@ -11,7 +11,7 @@ Selected publicly available audit reports:
 - [September 9, 2022 by X41](/audits/x41-python-tuf-audit-2022-09-09.pdf)
 - [August 7, 2018 by Cure53](https://github.com/theupdateframework/notary/blob/master/docs/resources/cure53_tuf_notary_audit_2018_08_07.pdf)
   covering TUF and Notary
-- [October 18, 2017 by NCC](https://www.nccgroup.trust/globalassets/our-research/us/public-reports/2017/ncc-group-kolide-the-update-framework-security-assessment.pdf)
+- [October 18, 2017 by NCC](/audits/ncc-group-kolide-the-update-framework-security-assessment.pdf)
   security assessment of TUF / Kolide.
 - [July 31, 2015 by NCC](https://github.com/theupdateframework/notary/blob/master/docs/resources/ncc_docker_notary_audit_2015_07_31.pdf)
   covering TUF and Notary.
diff --git a/lychee.toml b/lychee.toml
index 33088b9..25b9983 100644
--- a/lychee.toml
+++ b/lychee.toml
@@ -33,7 +33,6 @@ exclude = [
   '^https://www\.linuxfoundation\.org/cloud-containers-virtualization/',   # 404
   '^https://www\.ustream\.tv/recorded/64499822',                           # 404
   '^https://www\.airbiquity\.com',                                         # 503
-  '^https://www\.nccgroup\.trust/',                                        # timeout
   '^http://www\.enterprisecloudnews\.com/author\.asp',                     # timeout
   '^http://wiki\.laptop\.org/go/Canonical_JSON',                           # 401 bot-wall
   '^https://lcccna2016\.sched\.org/event/7JWU/',                           # 403 bot-wall
diff --git a/static/audits/ncc-group-kolide-the-update-framework-security-assessment.pdf b/static/audits/ncc-group-kolide-the-update-framework-security-assessment.pdf
new file mode 100644
index 0000000..0e05230
Binary files /dev/null and b/static/audits/ncc-group-kolide-the-update-framework-security-assessment.pdf differ