cybersecdirectory

Sherlock provides security audits and bug bounties for onchain systems and Web3 protocols.

Categories
Bug bounty and crowdsourced testing, Penetration testing, Security consulting and vCISO
Based in
Panama City, Panama
Founded
2021
Ownership
Private

About Sherlock

Sherlock is a security company for onchain systems. It works with protocols, financial institutions, infrastructure providers, asset managers, L1s and L2s, bridges and vaults, helping them protect critical code from development through launch and live operation. Its services cover security reviews and audits, audit contests, bug bounty programmes, AI-assisted review, vulnerability analysis and security research. Sherlock sets itself apart by joining several security approaches into one lifecycle model. Elite researchers, AI-native auditing, competitive review and post-launch protection can be used separately or combined. Its Audit Engine coordinates frontier language models, purpose-built AI auditors and AI-native researchers against the same codebase, then validates and deduplicates the findings into one audit result. Collaborative audits are private engagements staffed by selected researchers, while contests and bounties bring wider adversarial pressure to bear. Sherlock reports more than 1,500 audits and security reviews, over 2,000 criticals uncovered, and more than $250B in TVL secured. It states that it consistently finds more severe issues than other auditors on the same codebase.

Products

Other bug bounty platforms

See all bug bounty platforms

Sources

  1. sherlock.xyz
  2. sherlock.xyz/about
  3. sherlock.xyz/contact
  4. sherlock.xyz/privacy-policy
  5. sherlock.xyz
  6. sherlock.xyz/terms-of-service
  7. sherlock.xyz/solutions/audit-engine
  8. sherlock.xyz/trust