OtterSec Get in touch

PENTESTING

Not your average pentesters

Our research looks at the large, underexplored Web2 attack surfaces that remain in many Web3 applications, with white-box or black-box testing based on what you need.

$36.82B+On-chain TVL secured
$1.00B+Vulnerabilities patched
120+Projects audited
Public audits Get an audit

Trusted by teams building the next generation of crypto

Public audit reportsSeal 911 membersSolana · EVM · Sui · Aptos · Cosmos · NEAR

HOW WE AUDIT

The engagement

  1. 01

    Initial discussion

    We discuss your goals, timeline and security needs to see whether we’re a fit.

  2. 02

    Info gathering

    We send an MNDA and look at the repositories in scope to understand the details of your project.

  3. 03

    Quote

    We deliver a quote based on expected duration, potential vulnerabilities and the overall complexity of your project.

  4. 04

    Kickoff

    The audit begins. We share findings as they emerge and ask questions as needed.

  5. 05

    Report delivery

    At completion you get a report with our findings and suggestions for fixes.

Get an audit

CLIENTS

Teams we’ve tested

“Their website says protecting Blockchain ideas, but their command of JavaScript is impressive. If you've got something that you think would be "too hard for pentesters to understand" - these folks will surprise you. They're not your average pentester.”
Zbigniew Tenerowicz Zbigniew TenerowiczMetaMask
“Having OtterSec as a security partner has been a fantastic experience for us. They are diligent, fast, creative and very responsive. Basically everything one could ask from a security audit firm.”
Stepan Simkin Stepan SimkinSquads
“Strong security builds trust across the Sui network. That’s why we partnered with OtterSec, a reputable, fast, and community-oriented company that ensures trust by engaging with both our online and live events.”
Brian H. Brian H.Sui Foundation

WHY OTTERSEC

What you get

  • Coverage across Solidity, Vyper, Solana Rust, CosmWasm, Go, Move, JavaScript, Circom and Halo 2.
  • A final report with every finding and suggestions for fixes.
  • The mix of manual review, fuzzing and formal verification your system calls for.
  • An MNDA in place before we look at any repository in scope.

    • PENTEST

    Find the Web2 holes before an attacker does

    Tell us your stack and your timeline. We’ll scope white-box or black-box testing to fit.

    Get an audit