A security audit is a structured review of systems, code, configuration or processes against a defined standard. It produces findings showing where security falls short and how to fix it.
Penetration testing is an authorised, simulated attack on a system to find exploitable weaknesses before real attackers do. Testers work within an agreed scope and report what they reached and how to fix it.
SOC 2 is an independent audit report on how a service organisation controls security and related risks, based on the AICPA Trust Services Criteria. Business customers often request it from software vendors.
Formal verification uses mathematical proof to show that a program meets stated properties for every possible input. It goes beyond testing, which only covers the cases someone tried, and is increasingly used on high-value contracts.
ISO 27001 is an international standard for building and running an information security management system (ISMS). Organisations can be formally certified against it by accredited bodies.
Reentrancy is a smart contract vulnerability where an external call lets another contract call back in before the first call finishes. Attackers use it to act on stale state, often withdrawing funds repeatedly.
A smart contract is a program deployed on a blockchain that runs exactly as written whenever it is called. It can hold and move digital assets according to its own rules, without an intermediary.
A clear proven process, that delivers
You've seen our ideas - now go deeper.
Discover more insights, guides, and engineering practice.