CertiK
CertiK provides formal verification, smart contract audits, AI-powered vulnerability detection, and real-time blockchain monitoring (Skynet) to over 5,000 enterprise clients and Web3 projects globally, including exchanges, custodians, and protocols.
- Company typePrivate
- Founded2017
- HeadquartersNew York, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What CertiK does
CertiK is a New York-headquartered Web3 security company founded in 2017 by professors from Yale and Columbia universities. It combines formal verification (mathematical proof-based code analysis) with AI-powered auditing and real-time blockchain monitoring to provide end-to-end security and compliance coverage for blockchain protocols, exchanges, custodians, and institutional clients. The company's core products include Smart Contract Audits, Penetration Testing, Formal Verification engagements, and the Skynet real-time monitoring and rating platform, supplemented by SkyInsights for AML/compliance, SkyNode for validator infrastructure, Proof of Reserves audits, KYC verification, VARA/MiCA/DORA compliance advisory, and AI-driven offerings (AI Auditor and CertiK Skill Scanner).
The platform architecture spans pre-deployment (audits, formal verification, AI Auditor in dev workflows), post-deployment (Skynet continuous monitoring across 20,000+ projects and 100+ ecosystems, Hunt bug bounty), and compliance (SkyInsights, KYC, regulatory advisory). CertiK reports securing over $300 billion in crypto assets for 5,000+ enterprise clients as of 2026, with named customers across exchanges (Binance, OKX, Crypto.com), stablecoins (Tether), hardware wallets (Ledger), infrastructure providers (Fireblocks), major L1/L2 protocols (Ethereum, Polygon, Cardano, Aptos, TON, Sui, Ripple), and even traditional technology firms (Apple, Samsung).
Revenue is generated through a hybrid model: professional services engagements for audits and penetration testing (top-tier engagements reportedly priced at approximately $25,000 per engineer-week), recurring subscriptions for Skynet monitoring and SkyInsights compliance tooling, and enterprise security solutions including validator services. Distribution is sales-led via direct enterprise outreach with quote-based pricing, augmented by community channels (Skynet reports, Consensus conferences, bug bounty programs), thought leadership through media (Bloomberg, Reuters, WSJ, Forbes), and an emerging API/partner channel (e.g., FinChip.AI integration). The company has raised approximately $310M in venture funding across multiple 2021-2022 rounds, reaching a $2 billion valuation in April 2022 led by Insight Partners, Tiger Global, and Advent International.
CertiK firmographics
Firmographics- Name
- CertiK
- Legal name
- CertiK Inc.
- Website
- https://certik.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- CertiK provides formal verification, smart contract audits, AI-powered vulnerability detection, and real-time blockchain monitoring (Skynet) to over 5,000 enterprise clients and Web3 projects globally, including exchanges, custodians, and protocols.
- Ownership category
- akta.pro rank
CertiK industry classification
Industry- Product category
- Blockchain Security & Web3 Auditing
- NAICS
- Other Scientific and Technical Consulting Services (54169), Offices of Certified Public Accountants (541211), Investigation and Personal Background Check Services (561611)
- akta.pro primary industry
- Smart Contract Auditing & Formal Verification (FSAPAJAA)
- akta.pro secondary industries
- Risk Scoring, Credit & Fraud Analytics (counterparty/wallet risk) (FSAPAJAF), AML/KYC, KYB & Identity Verification (VASP/Travel Rule) (FSAPAJAC), Regulatory Reporting, Tax & Audit Trails (reconciliation, provenance) (FSAPAJAI), Proof of Reserves, Attestations & On-Chain Audit/Assurance (FSADALAK), Bug Bounty, Vulnerability Disclosure & Security Services (FSAPAJAL), Governance, Controls & Policy Automation (GRC for Web3) (FSAPAJAG)
Keywords
Where CertiK is headquartered
LocationHeadquarters
- HQ city
- New York
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
CertiK business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- Smart Contract Security Audits: Comprehensive security assessments of smart contract and blockchain code to identify vulnerabilities. Revenue is generated through professional audit services charged per engagement, with top-tier engagements reportedly charging approximately $25,000 per engineer-week.
- Continuous Monitoring & Skynet Subscriptions: Real-time security monitoring services through the Skynet platform providing ongoing vulnerability detection and threat intelligence
- Enterprise Security Solutions: DLT security solutions, penetration testing, compliance solutions (SkyInsights), proof of reserves audits, and VARA/MiCA compliance services for institutional clients
- Bug Bounty Programs: Vulnerability discovery and responsible disclosure programs including Skynet and Hunt platforms
Go-to-market motion1 record
Distribution channels1 record
Marketing channels7 records
CertiK product offering
Product offeringCore offering
CertiK provides end-to-end Web3 and blockchain security services, combining formal verification-based smart contract audits, AI-powered vulnerability detection, real-time on-chain monitoring via the Skynet platform, and compliance/AML solutions (SkyInsights) for enterprises, exchanges, custodians, and Web3 projects. The company also operates a bug bounty platform (Hunt) and a suite of compliance offerings for VARA, MiCA, and DORA regulations.
Product overview
CertiK offers a comprehensive security and compliance platform for Web3, combining formal verification, smart contract audits, real-time monitoring, and AI-powered vulnerability detection. The core offerings include Smart Contract Audits and Penetration Testing for security assessment, supported by the Skynet monitoring platform (which includes Skynet Score for project ratings and SkyNode for validator services), SkyInsights for compliance/AML, and specialized products like AI Auditor and Skill Scanner for AI-specific security. Additional modules cover Proof of Reserves Audits, KYC Verification, Formal Verification, VARA/MiCA compliance, DLT Security Solutions, and tools like Hunt (bug bounty) and Skylens (dashboard). The platform serves enterprises, Web3 projects, exchanges/custodians, regulators, and security researchers across 100+ blockchain ecosystems.
Differentiator
Problem solved
Functional benefit
Brands
- Skynet: Real-time Web3 evaluation and monitoring platform providing security ratings for blockchain projects
- SkyInsights
- Skynode
- AI Auditor
- CertiK Skill Scanner
- Hunt
Products and services
- Smart Contract Audit Comprehensive security assessment of smart contract and blockchain code to identify vulnerabilities and recommend fixes; serves Web3 projects, DeFi protocols, exchanges, and enterprises.
- Penetration Testing In-depth attack simulation across off-chain components and Web3 applications, leveraging Web2 and Web3 expertise to strengthen project defenses.
- Skynet Platform Real-time monitoring and security intelligence platform providing ongoing security assessments for 20,000+ projects across 100+ blockchain ecosystems.
- Skynet Score Real-time evaluation system providing independent and objective assessment of status and performance of Web3 projects, exchanges, and wallets.
- SkyInsights Compliance, AML, and risk management solution providing real-time transaction monitoring, AML/CTF compliance, and risk analytics for VASPs and regulated institutions.
- DLT Security Solutions Strategy, architecture design, and security assessments for institutions building distributed ledger technologies, covering on-chain systems, off-chain infrastructure, and regulatory readiness.
- SkyNode Enterprise node solution for institutional masternode validation and network security across blockchain networks.
- AI Auditor (Public Beta) AI-powered tool that detects smart contract vulnerabilities directly within development workflows, achieving 88.6% accuracy against real security incidents.
- CertiK Skill Scanner Security product that evaluates third-party AI Skills before execution, identifying risks such as credential harvesting, data exfiltration, and fund-transfer manipulation with up to 90.5% precision.
- Proof of Reserves Audit Independent reserves verification for exchanges and custodians to prove asset backing and transparency.
- KYC Verification Know Your Customer verification service for blockchain projects to meet regulatory compliance requirements.
- Formal Verification Mathematical proof-based verification of smart contract correctness and blockchain protocol properties.
- Hunt Bug Bounty Platform Bug bounty and vulnerability discovery platform connecting projects with security researchers.
- VARA Compliance Solutions Dubai VASP licensing advisory and compliance solutions for operating in the UAE market.
- DORA & MiCA Compliance EU CASP regulatory advisory covering Digital Operational Resilience Act and Markets in Crypto-Assets Regulation compliance.
- Grey Box Chain Audit Security assessment using fault injection and live network testing to surface chain-critical failures that static analysis alone cannot detect.
Quantifiable outcome
- Detected 115,000+ vulnerabilities across audited projects
- +4 more outcomes
Companies that use CertiK
Customer profileNamed customers20 records
Segments5 records
Ideal customer profiles4 records
CertiK technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration2 records
AI capability7 records
Feature9 records
CertiK partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered core and minor.
- OKXcoreOKX partnered with CertiK to enhance security across OKX's ecosystem, boosting trust and setting new security standards. CertiK provides comprehensive security framework including audits and monitoring for the exchange.
- XDC NetworkcoreCertiK joined XDC Network as an institutional masternode validator under a memorandum of understanding, deploying its enterprise node solution Skynode to secure the network's infrastructure for trade finance and real-world asset tokenization. The partnership aims to provide automated threat mitigation, continuous vulnerability scanning, and multi-region node architecture with redundant failover protection.
- FinChip.AIcoreFinChip.AI announced strategic partnership with CertiK to integrate AI Skill security scanning capabilities into FinChip's platform. CertiK's security scanning API will be embedded into FinChip's skill publication and audit workflows, with joint security certification badges displayed on the platform. Collaboration aims to create a trustworthy, compliant, and secure AI Skill trading ecosystem.
- ForcertaminorCertiK and Forcerta co-host institutional digital asset security and compliance workshop in Istanbul on June 5, 2026. Event titled 'The Institutional Stakes: Security and Compliance in Digital Assets' brings together traditional financial institutions and family offices to discuss Turkey's evolving CASP regulatory framework, Web3 threat landscape, and stablecoin security.
- Lambda256coreLambda256, an affiliate of South Korean fintech company Dunamu, signed strategic MOU with CertiK to deliver integrated security and compliance solution for South Korean financial institutions and VASPs. Partnership combines Lambda256's blockchain infrastructure expertise with CertiK's smart contract auditing, penetration testing, and security monitoring capabilities to help VASPs meet South Korea's strict regulatory requirements.
- 8Blocksminor8Blocks, a token economy design and Web3 launch strategy firm, formed strategic partnership with CertiK to provide pre-TGE projects with comprehensive launch preparation combining token economy structuring, smart contract audits, risk assessment, and go-to-market advisory services. Collaboration addresses both economic design and security concerns under a single preparation track.
- RootDataminorRootData and CertiK launched dual scoring system for evaluating trust in Web3 projects. Partnership involves CertiK supporting RootData's data infrastructure with security ratings while RootData integrates CertiK's security evaluations into its transparency score. Initiative aims to enhance security and transparency for Web3 users globally.
- OKXcoreCertiK and OKX partner to enhance security across OKX's ecosystem, boosting trust and setting new security standards. Partnership includes comprehensive security framework development.
- LINE BlockchaincoreCertiK completed security audit of LINE Blockchain and joined the network as governance member and node validator. Partnership combines audit services with ongoing network security participation.
- Delphinus LabminorCertiK partnered with Delphinus Lab to enhance zkWasm security, completing the first formal proof of a zero-knowledge proof VM circuit. Strategic partnership in zk technology verification.
- Ant GroupcoreCertiK completed formal verification of HyperEnclave's core components under Ethereum Foundation grant. CertiK delivered Better Rocq tactics for modular arithmetic and packed integer handling for zkVMs. Deep technical collaboration in zero-knowledge proof technology.
- Ethereum FoundationcoreCertiK received Ethereum Foundation grant to develop Better Rocq tactics that streamline modular arithmetic and packed integer handling for zkVMs. Technical contribution to Ethereum ecosystem.
Scale indicators10 records
Recent moves6 records
Expansion highlights6 records
CertiK competitors and assessment
Company assessmentDirect peers
- Halborn: Halborn is a leading blockchain security firm offering smart contract audits, penetration testing, and incident response. It is one of CertiK's closest direct competitors and is also referenced in CertiK's data (e.g., Autheo was audited by both CertiK and Halborn).
- Quantstamp: Quantstamp provides smart contract security audits and a continuous security monitoring platform (Quantstamp Security Network) for Web3 protocols, directly competing with CertiK's audit and Skynet offerings.
- OpenZeppelin: OpenZeppelin offers smart contract security audits, security tooling, and secure contract libraries, and is a primary direct competitor in the Ethereum/Web3 security audit market alongside CertiK.
- Trail of Bits: Trail of Bits is a security research and consulting firm with deep expertise in formal verification, smart contract audits, and applied cryptography—overlapping directly with CertiK's formal verification and audit services.
- SlowMist: SlowMist is a blockchain security firm focused on smart contract audits, threat intelligence, and the MistTrack anti-money-laundering platform, competing with CertiK across audit and AML/compliance services.
- PeckShield: PeckShield is a blockchain security company providing smart contract auditing, on-chain analytics, and incident response, with comparable offerings to CertiK across auditing and monitoring.
- Hacken: Hacken provides Web3 security audits, bug bounty platforms, and a tokenized security rating service (HackenAI), competing with CertiK in smart contract audits and Skynet-style project scoring.
Emerging players
- Zellic: Zellic is an emerging audit firm founded by top-tier CTF security researchers that focuses on smart contract audits and formal verification for cutting-edge protocols, increasingly competing with CertiK in advanced audit work.
- Runtime Verification: Runtime Verification specializes in formal verification and runtime monitoring for smart contracts and blockchain protocols, positioning it as a niche but technically credible competitor to CertiK's formal verification stack.
Broad incumbents
- Consensys Diligence: Consensys Diligence is the audit arm of Consensys, offering smart contract security services for the Ethereum ecosystem. As part of the broader Consensys product suite, it competes with CertiK in Web3 audits while leveraging a wider portfolio.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks7 records
Key highlights7 records
Customer concentration
CertiK social profiles
Digital presenceCertiK compliance and trust
Trust signalCompliance2 records
CertiK financial estimates
Financial estimateRevenue estimate
Valuation estimate
CertiK leadership team
Management profileNumber of profiles
Profiles9 records
CertiK funding detail
Funding detailFunding overview
Funding rounds8 records
Investors24 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CertiK M&A and investment
M&A and investmentM&A
Investments7 records
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CertiK
What does CertiK do?
CertiK provides end-to-end Web3 and blockchain security services, combining formal verification-based smart contract audits, AI-powered vulnerability detection, real-time on-chain monitoring via the Skynet platform, and compliance/AML solutions (SkyInsights) for enterprises, exchanges, custodians, and Web3 projects. The company also operates a bug bounty platform (Hunt) and a suite of compliance offerings for VARA, MiCA, and DORA regulations.
Is CertiK a public or private company?
CertiK is a private company. It is classified as venture growth investor backed and is currently operating.
When was CertiK founded?
CertiK was founded in 2017. It employs 101 to 250 people.
Where is CertiK based?
CertiK is headquartered in New York, United States, in the North America region.
How does CertiK make money?
Four revenue lines are on record. Smart Contract Security Audits are the primary driver. The others are continuous Monitoring & Skynet Subscriptions, enterprise Security Solutions and bug Bounty Programs.
Who are CertiK's main competitors?
Direct peers on record are Halborn, Quantstamp, OpenZeppelin, Trail of Bits, SlowMist, PeckShield and Hacken. Emerging players are Zellic and Runtime Verification. Consensys Diligence is listed as a broad incumbent.
Does CertiK have an API?
Yes. CertiK offers a security scanning API that is embedded into partner platforms for security scanning and audit workflows. FinChip.AI integrates CertiK's AI Skill Security Scan API into its skill publication and operational review workflows. The API supports integration for AI Skill security scanning capabilities.
What industry is CertiK in?
CertiK's product category is Blockchain Security & Web3 Auditing. Its primary akta.pro industry code is FSAPAJAA, Smart Contract Auditing & Formal Verification, with a secondary code of FSAPAJAF, Risk Scoring, Credit & Fraud Analytics (counterparty/wallet risk). Its NAICS code is 54169.