CertiK

What CertiK does

CertiK is a New York-headquartered Web3 security company founded in 2017 by professors from Yale and Columbia universities. It combines formal verification (mathematical proof-based code analysis) with AI-powered auditing and real-time blockchain monitoring to provide end-to-end security and compliance coverage for blockchain protocols, exchanges, custodians, and institutional clients. The company's core products include Smart Contract Audits, Penetration Testing, Formal Verification engagements, and the Skynet real-time monitoring and rating platform, supplemented by SkyInsights for AML/compliance, SkyNode for validator infrastructure, Proof of Reserves audits, KYC verification, VARA/MiCA/DORA compliance advisory, and AI-driven offerings (AI Auditor and CertiK Skill Scanner).

The platform architecture spans pre-deployment (audits, formal verification, AI Auditor in dev workflows), post-deployment (Skynet continuous monitoring across 20,000+ projects and 100+ ecosystems, Hunt bug bounty), and compliance (SkyInsights, KYC, regulatory advisory). CertiK reports securing over $300 billion in crypto assets for 5,000+ enterprise clients as of 2026, with named customers across exchanges (Binance, OKX, Crypto.com), stablecoins (Tether), hardware wallets (Ledger), infrastructure providers (Fireblocks), major L1/L2 protocols (Ethereum, Polygon, Cardano, Aptos, TON, Sui, Ripple), and even traditional technology firms (Apple, Samsung).

Revenue is generated through a hybrid model: professional services engagements for audits and penetration testing (top-tier engagements reportedly priced at approximately $25,000 per engineer-week), recurring subscriptions for Skynet monitoring and SkyInsights compliance tooling, and enterprise security solutions including validator services. Distribution is sales-led via direct enterprise outreach with quote-based pricing, augmented by community channels (Skynet reports, Consensus conferences, bug bounty programs), thought leadership through media (Bloomberg, Reuters, WSJ, Forbes), and an emerging API/partner channel (e.g., FinChip.AI integration). The company has raised approximately $310M in venture funding across multiple 2021-2022 rounds, reaching a $2 billion valuation in April 2022 led by Insight Partners, Tiger Global, and Advent International.

Name

CertiK

Legal name

CertiK Inc.

Website

https://certik.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

101–250 employees

Short description

CertiK provides formal verification, smart contract audits, AI-powered vulnerability detection, and real-time blockchain monitoring (Skynet) to over 5,000 enterprise clients and Web3 projects globally, including exchanges, custodians, and protocols.

Ownership category

akta.pro rank

Product category

Blockchain Security & Web3 Auditing

NAICS

Other Scientific and Technical Consulting Services (54169), Offices of Certified Public Accountants (541211), Investigation and Personal Background Check Services (561611)

akta.pro primary industry

Smart Contract Auditing & Formal Verification (FSAPAJAA)

akta.pro secondary industries

Risk Scoring, Credit & Fraud Analytics (counterparty/wallet risk) (FSAPAJAF), AML/KYC, KYB & Identity Verification (VASP/Travel Rule) (FSAPAJAC), Regulatory Reporting, Tax & Audit Trails (reconciliation, provenance) (FSAPAJAI), Proof of Reserves, Attestations & On-Chain Audit/Assurance (FSADALAK), Bug Bounty, Vulnerability Disclosure & Security Services (FSAPAJAL), Governance, Controls & Policy Automation (GRC for Web3) (FSAPAJAG)

Keywords

• Blockchain security audits
• Smart contract auditing
• Formal verification services
• Web3 security platform
• Penetration testing services

Headquarters

HQ city

New York

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Smart Contract Security Audits: Comprehensive security assessments of smart contract and blockchain code to identify vulnerabilities. Revenue is generated through professional audit services charged per engagement, with top-tier engagements reportedly charging approximately $25,000 per engineer-week.
2. Continuous Monitoring & Skynet Subscriptions: Real-time security monitoring services through the Skynet platform providing ongoing vulnerability detection and threat intelligence
3. Enterprise Security Solutions: DLT security solutions, penetration testing, compliance solutions (SkyInsights), proof of reserves audits, and VARA/MiCA compliance services for institutional clients
4. Bug Bounty Programs: Vulnerability discovery and responsible disclosure programs including Skynet and Hunt platforms

Go-to-market motion1 record

Distribution channels1 record

Marketing channels7 records

Core offering

CertiK provides end-to-end Web3 and blockchain security services, combining formal verification-based smart contract audits, AI-powered vulnerability detection, real-time on-chain monitoring via the Skynet platform, and compliance/AML solutions (SkyInsights) for enterprises, exchanges, custodians, and Web3 projects. The company also operates a bug bounty platform (Hunt) and a suite of compliance offerings for VARA, MiCA, and DORA regulations.

Product overview

CertiK offers a comprehensive security and compliance platform for Web3, combining formal verification, smart contract audits, real-time monitoring, and AI-powered vulnerability detection. The core offerings include Smart Contract Audits and Penetration Testing for security assessment, supported by the Skynet monitoring platform (which includes Skynet Score for project ratings and SkyNode for validator services), SkyInsights for compliance/AML, and specialized products like AI Auditor and Skill Scanner for AI-specific security. Additional modules cover Proof of Reserves Audits, KYC Verification, Formal Verification, VARA/MiCA compliance, DLT Security Solutions, and tools like Hunt (bug bounty) and Skylens (dashboard). The platform serves enterprises, Web3 projects, exchanges/custodians, regulators, and security researchers across 100+ blockchain ecosystems.

Differentiator

Problem solved

Functional benefit

Brands

• Skynet: Real-time Web3 evaluation and monitoring platform providing security ratings for blockchain projects
• SkyInsights
• Skynode
• AI Auditor
• CertiK Skill Scanner
• Hunt

Products and services

• Smart Contract Audit Comprehensive security assessment of smart contract and blockchain code to identify vulnerabilities and recommend fixes; serves Web3 projects, DeFi protocols, exchanges, and enterprises.
• Penetration Testing In-depth attack simulation across off-chain components and Web3 applications, leveraging Web2 and Web3 expertise to strengthen project defenses.
• Skynet Platform Real-time monitoring and security intelligence platform providing ongoing security assessments for 20,000+ projects across 100+ blockchain ecosystems.
• Skynet Score Real-time evaluation system providing independent and objective assessment of status and performance of Web3 projects, exchanges, and wallets.
• SkyInsights Compliance, AML, and risk management solution providing real-time transaction monitoring, AML/CTF compliance, and risk analytics for VASPs and regulated institutions.
• DLT Security Solutions Strategy, architecture design, and security assessments for institutions building distributed ledger technologies, covering on-chain systems, off-chain infrastructure, and regulatory readiness.
• SkyNode Enterprise node solution for institutional masternode validation and network security across blockchain networks.
• AI Auditor (Public Beta) AI-powered tool that detects smart contract vulnerabilities directly within development workflows, achieving 88.6% accuracy against real security incidents.
• CertiK Skill Scanner Security product that evaluates third-party AI Skills before execution, identifying risks such as credential harvesting, data exfiltration, and fund-transfer manipulation with up to 90.5% precision.
• Proof of Reserves Audit Independent reserves verification for exchanges and custodians to prove asset backing and transparency.
• KYC Verification Know Your Customer verification service for blockchain projects to meet regulatory compliance requirements.
• Formal Verification Mathematical proof-based verification of smart contract correctness and blockchain protocol properties.
• Hunt Bug Bounty Platform Bug bounty and vulnerability discovery platform connecting projects with security researchers.
• VARA Compliance Solutions Dubai VASP licensing advisory and compliance solutions for operating in the UAE market.
• DORA & MiCA Compliance EU CASP regulatory advisory covering Digital Operational Resilience Act and Markets in Crypto-Assets Regulation compliance.
• Grey Box Chain Audit Security assessment using fault injection and live network testing to surface chain-critical failures that static analysis alone cannot detect.

Quantifiable outcome

• Detected 115,000+ vulnerabilities across audited projects
• +4 more outcomes

Named customers20 records

Segments5 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration2 records

AI capability7 records

Feature9 records

Partnerships

Twelve partnerships are on record, tiered core and minor.

• OKXcoreTechnology or Integration · 30 June 2026OKX partnered with CertiK to enhance security across OKX's ecosystem, boosting trust and setting new security standards. CertiK provides comprehensive security framework including audits and monitoring for the exchange.
• XDC NetworkcoreTechnology or Integration · 28 June 2026CertiK joined XDC Network as an institutional masternode validator under a memorandum of understanding, deploying its enterprise node solution Skynode to secure the network's infrastructure for trade finance and real-world asset tokenization. The partnership aims to provide automated threat mitigation, continuous vulnerability scanning, and multi-region node architecture with redundant failover protection.
• FinChip.AIcoreStrategic or Co-development Partner · 12 June 2026FinChip.AI announced strategic partnership with CertiK to integrate AI Skill security scanning capabilities into FinChip's platform. CertiK's security scanning API will be embedded into FinChip's skill publication and audit workflows, with joint security certification badges displayed on the platform. Collaboration aims to create a trustworthy, compliant, and secure AI Skill trading ecosystem.
• ForcertaminorStrategic or Co-development Partner · 30 May 2026CertiK and Forcerta co-host institutional digital asset security and compliance workshop in Istanbul on June 5, 2026. Event titled 'The Institutional Stakes: Security and Compliance in Digital Assets' brings together traditional financial institutions and family offices to discuss Turkey's evolving CASP regulatory framework, Web3 threat landscape, and stablecoin security.
• Lambda256coreStrategic or Co-development Partner · 28 May 2026Lambda256, an affiliate of South Korean fintech company Dunamu, signed strategic MOU with CertiK to deliver integrated security and compliance solution for South Korean financial institutions and VASPs. Partnership combines Lambda256's blockchain infrastructure expertise with CertiK's smart contract auditing, penetration testing, and security monitoring capabilities to help VASPs meet South Korea's strict regulatory requirements.
• 8BlocksminorGTM or Marketing Partner · 26 May 20268Blocks, a token economy design and Web3 launch strategy firm, formed strategic partnership with CertiK to provide pre-TGE projects with comprehensive launch preparation combining token economy structuring, smart contract audits, risk assessment, and go-to-market advisory services. Collaboration addresses both economic design and security concerns under a single preparation track.
• RootDataminorStrategic or Co-development Partner · 1 May 2026RootData and CertiK launched dual scoring system for evaluating trust in Web3 projects. Partnership involves CertiK supporting RootData's data infrastructure with security ratings while RootData integrates CertiK's security evaluations into its transparency score. Initiative aims to enhance security and transparency for Web3 users globally.
• OKXcoreStrategic or Co-development Partner · 22 April 2024CertiK and OKX partner to enhance security across OKX's ecosystem, boosting trust and setting new security standards. Partnership includes comprehensive security framework development.
• LINE BlockchaincoreTechnology or Integration · 5 September 2023CertiK completed security audit of LINE Blockchain and joined the network as governance member and node validator. Partnership combines audit services with ongoing network security participation.
• Delphinus LabminorStrategic or Co-development Partner · 5 September 2023CertiK partnered with Delphinus Lab to enhance zkWasm security, completing the first formal proof of a zero-knowledge proof VM circuit. Strategic partnership in zk technology verification.
• Ant GroupcoreStrategic or Co-development PartnerCertiK completed formal verification of HyperEnclave's core components under Ethereum Foundation grant. CertiK delivered Better Rocq tactics for modular arithmetic and packed integer handling for zkVMs. Deep technical collaboration in zero-knowledge proof technology.
• Ethereum FoundationcoreStrategic or Co-development PartnerCertiK received Ethereum Foundation grant to develop Better Rocq tactics that streamline modular arithmetic and packed integer handling for zkVMs. Technical contribution to Ethereum ecosystem.

Scale indicators10 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Halborn: Halborn is a leading blockchain security firm offering smart contract audits, penetration testing, and incident response. It is one of CertiK's closest direct competitors and is also referenced in CertiK's data (e.g., Autheo was audited by both CertiK and Halborn).
• Quantstamp: Quantstamp provides smart contract security audits and a continuous security monitoring platform (Quantstamp Security Network) for Web3 protocols, directly competing with CertiK's audit and Skynet offerings.
• OpenZeppelin: OpenZeppelin offers smart contract security audits, security tooling, and secure contract libraries, and is a primary direct competitor in the Ethereum/Web3 security audit market alongside CertiK.
• Trail of Bits: Trail of Bits is a security research and consulting firm with deep expertise in formal verification, smart contract audits, and applied cryptography—overlapping directly with CertiK's formal verification and audit services.
• SlowMist: SlowMist is a blockchain security firm focused on smart contract audits, threat intelligence, and the MistTrack anti-money-laundering platform, competing with CertiK across audit and AML/compliance services.
• PeckShield: PeckShield is a blockchain security company providing smart contract auditing, on-chain analytics, and incident response, with comparable offerings to CertiK across auditing and monitoring.
• Hacken: Hacken provides Web3 security audits, bug bounty platforms, and a tokenized security rating service (HackenAI), competing with CertiK in smart contract audits and Skynet-style project scoring.

Emerging players

• Zellic: Zellic is an emerging audit firm founded by top-tier CTF security researchers that focuses on smart contract audits and formal verification for cutting-edge protocols, increasingly competing with CertiK in advanced audit work.
• Runtime Verification: Runtime Verification specializes in formal verification and runtime monitoring for smart contracts and blockchain protocols, positioning it as a niche but technically credible competitor to CertiK's formal verification stack.

Broad incumbents

• Consensys Diligence: Consensys Diligence is the audit arm of Consensys, offering smart contract security services for the Ethereum ecosystem. As part of the broader Consensys product suite, it competes with CertiK in Web3 audits while leveraging a wider portfolio.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat6 records

Key risks7 records

Key highlights7 records

Customer concentration

• Xx.com/CertiKTech
• YouTubeyoutube.com/@CertiKCommunity
• LinkedInlinkedin.com/company/certik
• Facebookfacebook.com/CertikOfficial

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles9 records

Funding overview

Funding rounds8 records

Investors24 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments7 records

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about CertiK