Past the horizon: one world per service.

Choose a planet.

• Smart-contract and protocol security

  Line-by-line review, invariant fuzzing, runnable PoCs and fix review.

  Bounded reviews scoped to a fixed commit. Every in-scope line is read against the threat model, and you keep the invariant harness.

  Read the section on Smart-contract and protocol securityRequest a scope for Smart-contract and protocol security

• Blockchain infrastructure

  A scoped review of the named systems around your contracts.

  The systems around your contracts, named in the scope and reviewed the same way.

  Read the section on Blockchain infrastructureRequest a scope for Blockchain infrastructure

• Web and API applications

  A named application or API, against the environment you authorize.

  Live-system work starts only after a signed Testing Authorization and Rules of Engagement.

  Read the section on Web and API applicationsRequest a scope for Web and API applications

• Cloud and infrastructure

  Named cloud accounts or hosts, within agreed testing windows.

  Testing happens only on the accounts and hosts named in writing, inside the agreed windows.

  Read the section on Cloud and infrastructureRequest a scope for Cloud and infrastructure

• Advisory

  Describe the question. We scope it, then say whether it fits.

  Scoped first, like everything else. If it does not fit, we say so.

  Read the section on AdvisoryRequest a scope for Advisory