labs@atheron:~/services/security$ audit --code --infra

Security and audits

Coming soon.

We are preparing a security practice: reviews of your code and infrastructure, penetration tests, smart contract reviews, and a team on call when something goes wrong. It is not open yet.

Coming soon

// what is coming

What it will cover.

Code reviews

Your code read for security weaknesses, with each finding explained and ranked.

Infrastructure reviews

Servers, networks, access and secrets checked against how they should be set up.

Penetration tests

Your product tested the way an attacker would try it, within limits agreed in writing.

Smart contract reviews

Contracts reviewed by people who did not write them, before real money depends on them.

Incident response retainers

A team ready to help contain and recover from an incident, on terms agreed in advance.

// how it will work

Findings you can act on.

Every review will end in a written report: what we found, how serious it is, and how to fix it.
Testing will happen only within a scope you agree to in writing.
Findings will go to you alone, and stay confidential.
Until it opens, our compliance engineering builds the controls into your product, and we help you choose an independent reviewer.

// scope

What it will look at.

code: Web, mobile and API code, and its dependencies
infrastructure: Cloud accounts, servers, networks and secrets
contracts: Smart contracts on EVM chains
response: Containment, recovery and a written account of what happened

// for now

Not open yet.

This service is coming soon. If you need security work built into your product today, our compliance engineering page shows what we do now.

// questions

Questions about security work.

When does it open?

We have not set a date. This page will change when it does.

What can you do for security today?

We build security into everything we make, and our compliance engineering builds products to the controls auditors ask for.

Do you audit your own clients' contracts?

Your audit should come from someone who did not write the code. When this service opens, we will review contracts we did not build.

// related

Often built together.

~/compliance

Compliance and security engineering

Your app built to the controls of SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS and more, with support through your audit.

~/cloud

Cloud, DevOps and operations

Cloud moves, smaller cloud bills, CI/CD, infrastructure as code, monitoring, backups and failover, and a team on call to run it all.

~/web3

Web3 and smart contracts

Smart contracts, dapps and wallet sign-in, written for an auditor to read and tested hard before one ever looks.

// where we work

Find your market.

See this work from your city: what changes there, the questions buyers ask, and prices in your currency.

Every market

// start

Not sure which you need?

Tell us the problem, not the solution. We will tell you what we would build, and what we would not.

Start a project Book a call