Services

Start with what you need to secure.

We review what you have built, advise before you build or buy, and train the teams who run it.

Discuss your scope See published reports

Security assessments

Security work for a defined system or attack surface.

Choose the closest target. If the scope crosses categories, we combine the right specialists into one engagement.

01 / SMART CONTRACTS

Smart Contract Security Reviews

Find flaws in contract logic, permissions, accounting, and upgrades before they put funds at risk.

ContractsProtocol logicIntegrations
Explore service →02 / PROTOCOL & INFRASTRUCTURE

Blockchain Protocol & Infrastructure Reviews

Review custom chains, runtimes, nodes, consensus, and bridges beneath the application layer.

Custom chainsRuntimes & VMsNodesConsensus
Explore service →03 / OFFENSIVE SECURITY

Penetration Testing

Test the attack paths that connect web, mobile, APIs, cloud, identity, and infrastructure.

Web & mobileAPI & backendCloudInfrastructure
Explore service →04 / SIGNING & CUSTODY

Signing & Custody Security Reviews

Review how keys are generated, approved, used, and recovered across MPC, HSM, multisig, and custody platforms.

MPCHSMMultisigOperations
Explore service →

Also in reviews & testing

Cryptography Reviews

Review ZK circuits, custom primitives, signature schemes, privacy protocols, and post-quantum designs before the rest of the system treats them as settled.

Explore service →

Secure Code Reviews

Find security flaws in critical code where automated scanners and checklist reviews stop.

Explore service →

AI & Agent Security

Review models, data, tools, memory, identity, permissions, approval gates, and high-impact actions.

Explore service →
Explore all security reviews

What these reviews find

65+ critical and high findings across our reviews.

Highlighted findings from published reports, not the reports themselves. Each card opens the full report it came from, where every finding and its severity is listed.

All reports →

Design & advisory

Get security input before you build, buy, or launch.

A build-and-launch timeline showing where each advisory engagement sits: program advisory before architecture and vendor choices, technical due diligence before buying or acquiring, secure architecture and process design before building, and risk assessment once work is already in flight
Before you choose architecture or vendors Digital Asset Program Advisory Make security, custody, vendor, and operating-model decisions across a broader digital asset program. View service → Before you choose a custody model Signing & Custody Security Reviews The design path of the custody review: vendor selection, workflow and role design, integration, and go-live readiness. View service → Before you buy or acquire Technical Due Diligence Evaluate the security and technical risks behind an investment, acquisition, partnership, grant, or vendor decision. View service → Before you build Secure Architecture & Process Design Design or challenge critical systems, workflows, integrations, and operating controls before implementation or major change. View service → When you need to know what to fix first Risk Assessment Give leadership a prioritized view of where security risk concentrates and what to address first. View service →

Capability building

Technical Training & Security Exercises

Ready modules on Rust, Substrate, and NEAR, or workshops, tabletops, and key-ceremony rehearsals built around your own systems.

Explore training and exercises →

Public training material

Rust security essentials An example of the practical, issue-driven training material we develop for engineering and security teams. Watch on the training page → NEAR smart contract security A focused module for teams working with Rust-based protocols and blockchain systems. Watch on the training page →

Not sure which engagement fits?

Send the repo or the architecture. We will tell you what is worth reviewing.

Discuss your scope