OtterSec Get in touch

ZK AND BEYOND

Audits for Circom, Halo 2 and the code nobody else reads

We’ve audited code in Solidity, Vyper, Solana Rust, CosmWasm, Go, Aptos Move, Sui Move, JavaScript, Circom, Halo 2 and more.

$1.00B+Vulnerabilities patched
120+Projects audited
Public audits Get an audit

Trusted by teams building the next generation of crypto

Public audit reportsFormally verified the Aptos stdlibSolana · EVM · Sui · Aptos · Cosmos · NEAR

HOW WE AUDIT

How it works

  1. 01

    A scoping call

    Tell us your goals, timeline and security needs, and we work out together whether we’re the right fit.

  2. 02

    MNDA and repositories

    Under an MNDA, we review the repositories in scope to understand your project and what you’re asking for.

  3. 03

    A clear quote

    Pricing follows the expected duration, the potential vulnerabilities and how complex the system is.

  4. 04

    The audit

    Researchers start work, raise findings as they appear and come to you with questions along the way.

  5. 05

    Your report

    You receive the written findings with suggested fixes, and we stay close after it ships.

Start the conversation

CLIENTS

Clients on the depth

“Their website says protecting Blockchain ideas, but their command of JavaScript is impressive. If you've got something that you think would be "too hard for pentesters to understand" - these folks will surprise you. They're not your average pentester.”
Zbigniew Tenerowicz Zbigniew TenerowiczMetaMask
“As a blockchain, speed, scalability, and security are critical to our everyday operations. OtterSec's responsiveness, attentiveness, and talent are second-to-none when it comes to securing Solana's core code.”
Dominic Tsang Dominic TsangSolana Foundation
“OtterSec is one of the strongest auditors on Solana. Fast, thorough, and a joy to work with. They are the best in the business and I can’t recommend them enough.”
Armani Ferrante Armani FerranteBackpack

GET IN TOUCH

Bring us your hardest code

Tell us what you’ve built. We’ll look at the repositories in scope and come back with a quote.

Start the conversation