diff --git a/README.md b/README.md
index cc9678595..f85268d85 100644
--- a/README.md
+++ b/README.md
@@ -25,7 +25,7 @@ The account and plugins conform to these ERC versions:
 - `validation` and `validationFunction` are used to replace `validator`.
 - `associated` and `associatedFunction` are used to represents `validationFunction` and `hook`
 
-### Building and Testing
+### Building and testing
 
 ```bash
 # Build options
@@ -49,9 +49,9 @@ A deployment script can be found in the `scripts/` folder
 forge script script/Deploy.s.sol --rpc-url $RPC_URL --broadcast
 ```
 
-## Security and Audits
+## Security and audits
 
-We have done 2 audits from Spearbit and Quantstamp and will upload the reports shortly. Note that these audit reports may contain references to "MSCA". This was the name we used for Modular Account previously.
+Our audit reports from Spearbit and Quantstamp can be found in [audits](/audits). Note that the reports may contain references to the term MSCA, which stands for modular smart contract account, as defined in the [terms for ERC-6900](https://eips.ethereum.org/EIPS/eip-6900#terms). This is synonymous with modular account.
 
 ## License