What Sec3 does

Sec3 is a Web3 security research firm focused on the Solana blockchain, operating under the legal entity Coderrect Inc. (Texas, USA). It delivers manual security audits, formal verification, and a suite of proprietary and open-source tools — X-Ray (static vulnerability scanner covering 50+ Solana-specific vulnerability types), WatchTower (real-time threat monitoring with anomaly detection for flash loans, rug pulls, and cross-chain bridge attacks), IDL Guesser (instruction-layout recovery from sBPF bytecode), and OwLLM v1 (an open-source chain-agnostic LLM trained on millions of Web3 transactions). Audit work is led by an 8x DEF CON CTF finalist, while formal verification is led by PhDs in program analysis and formal methods, producing high-assurance mathematical proofs of protocol invariants.

The firm's business model combines professional services (per-project audits, formal verification, and SecLaunch end-to-end launch engagements) with recurring subscription revenue (WatchTower monitoring, sec3 Pro automated auditing, with a freemium tier that includes X-Ray and nonce/multisig monitoring to drive top-of-funnel conversion). Go-to-market is multi-channel: enterprise field sales targeting protocol teams across DeFi, infrastructure, DAOs, and DePIN; product-led growth via self-serve tools; and community-driven thought leadership through 40+ research articles, the 2025 Solana Security Ecosystem Review, and CTF competition participation.

Sec3 reports 200+ protocols secured and is trusted by category-leading Solana teams including Jupiter, Wormhole, Raydium, Kamino, Orca, Metaplex, Helium, and Bonk, alongside core ecosystem partners Solana Foundation, Solana Labs, and Solana Mobile. The company has raised roughly $20M across disclosed funding events, including a $10M round led by Multicoin Capital in January 2023, and operates with 11–50 employees.

Name

Sec3

Legal name

Coderrect Inc.

Website

https://sec3.dev

Company type

Private

Founded year

2021

Operating status

Operating

Headcount range

11–50 employees

Short description

Sec3 is a Solana-focused Web3 security firm providing manual audits, formal verification, and proprietary tools (X-Ray, WatchTower, IDL Guesser, OwLLM) to DeFi, infrastructure, DAO, and DePIN protocol teams. It has secured 200+ protocols including Jupiter, Wormhole, and Raydium, combining PhD-led academic rigor with elite adversarial expertise.

Ownership category

akta.pro rank

Product category

Blockchain Security Services

NAICS

Computer Systems Design and Related Services (5415)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Smart Contract Auditing & Formal Verification (FSAPAJAA)

akta.pro secondary industries

Smart Contract Security Tooling (static/dynamic analysis, formal verification) (FSAPABAI), On-Chain Monitoring, Threat Detection & Incident Response (FSAPAJAB), Security Testing Tooling (SAST/DAST for smart contracts, fuzzing) (FSAPAJAK)

Keywords

• Solana smart contract audits
• Blockchain security research
• Smart contract formal verification
• On-chain threat monitoring
• Web3 vulnerability scanning

Headquarters

HQ city

College Station

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Security Audits: Manual code review performed by 8x DEF CON CTF finalists, covering program logic, dependency risk, upgrade authority, operational security, and post-deployment monitoring. Priced as a professional services engagement, likely per-project with re-audit support.
2. Formal Verification: Mathematical proof of protocol invariants led by PhD specialists, for high-TVL protocols requiring maximum assurance. Sold as a premium professional services engagement.
3. SecLaunch: Comprehensive end-to-end services from initial design and development through to post-deployment monitoring and operational security for institutional protocol launches on Solana.
4. sec3 Pro (Premium Auto Auditor): Premium tier of automated security analysis service with comprehensive vulnerability detection, positioned as a paid subscription or per-scan offering above the free X-Ray tool.
5. sec3 WatchTower (Post-Deployment Monitoring): Real-time on-chain threat monitoring service for Solana smart contracts with built-in attack pattern detection (flash loans, rug pulls, fake accounts, etc.).
6. Free Tools (Freemium): Free tier includes X-Ray static analyzer, IDL Guesser, and free nonce & multisig monitoring. These tools attract developers and protocol teams, driving conversion to paid services.

Go-to-market motion3 records

Distribution channels4 records

Marketing channels6 records

Core offering

Sec3 performs manual security audits and formal verification for Solana smart contracts, conducted by PhD-level researchers and an 8x DEF CON CTF finalist team. The firm complements these professional services with proprietary automated tools — X-Ray static analyzer (50+ vulnerability detectors), sec3 WatchTower real-time threat monitoring, and IDL Guesser for closed-source program recovery — plus the open-source OwLLM v1 Web3 language model. Customers are Solana protocol teams (DeFi, NFTs, DePIN, infrastructure) seeking to eliminate program-logic vulnerabilities, prove protocol invariants mathematically, and monitor post-deployment attack patterns.

Product overview

Sec3 is a Solana-focused security firm offering a comprehensive suite of security products and services. The core offerings include Security Audits (manual code reviews by elite security researchers) and Formal Verification (mathematical proofs of protocol invariants). These are complemented by specialized tools: sec3 X-Ray (automated vulnerability scanner), sec3 WatchTower (real-time threat monitoring), and Free Nonce & Multisig Monitoring. Sec3 also provides Owl LM (web3-native language model), IDL Guesser (instruction recovery tool), and SecLaunch (protocol launch services). The 2025 Solana Security Ecosystem Review serves as an annual research report. The company combines PhD-level academic rigor with competitive security expertise (8x DEF CON CTF finalist) to protect Solana protocols.

Differentiator

Problem solved

Functional benefit

Brands

• SecLaunch: Comprehensive launch services from initial design and development through to post-deployment monitoring and operational security for institutional protocols on Solana.
• sec3 Pro
• sec3 WatchTower
• X-Ray

Products and services

• Security Audits Manual code review service for Solana smart contracts performed by an 8x DEF CON CTF finalist team to identify deep-seated risks in program logic and infrastructure, followed by post-deployment monitoring support for long-term stability. Targeted at Solana protocol teams requiring rigorous security audits before launch or major upgrades.
• Formal Verification PhD-led mathematical proof of security invariants for Solana protocol logic, providing high-assurance verification for high-TVL protocols that require maximum confidence in security properties beyond what manual audits can establish.
• SecLaunch Comprehensive end-to-end launch services for Solana protocols, covering initial design and development through to post-deployment monitoring and operational security. Targeted at institutional teams launching new protocols on Solana needing a dedicated end-to-end security partner.
• Free Nonce & Multisig Monitoring Free on-chain monitoring service for Solana that detects durable nonce staging (creation and authority changes) and Squads v4 multisig configuration modifications (member additions, removals, threshold changes) to alert teams to potential attack staging before execution. Targeted at DeFi protocols, DAOs, infrastructure teams, and security operations.
• sec3 WatchTower Premium real-time on-chain threat monitoring service for Solana smart contracts that detects, prevents, and stops security attacks through proactive monitoring, customized policy monitoring, and anomaly detection with continuously-learned invariants. Targeted at protocols requiring post-deployment security coverage beyond the audit phase.
• sec3 Pro (Auto Auditor) Premium tier automated security analysis service for Solana smart contracts that detects 50+ types of Solana-specific vulnerabilities 24/7, including bidirectional rounding issues, powered by GreenCore technology and the X-Ray inference engine. Targeted at protocol teams needing continuous automated auditing.
• sec3 X-Ray (Open-Source Static Analyzer) Open-source static analysis tool for Solana programs that detects over 50 types of security vulnerabilities and integrates with GitHub CI workflows to shift security left during development. Powered by GreenCore technology with an inference engine that infers account relationships and flags missing account validations.
• IDL Guesser Open-source tool that automatically recovers instruction definitions, required accounts (including signer/writable flags), and parameter information from closed-source Solana program binaries compiled to sBPF bytecode. Useful for security researchers analyzing deployed but unverified programs.
• Owl LM (OwLLM v1) The first open-source Web3-native Large Language Model, trained on millions of blockchain transactions with more than 100 million parameters. Designed to be chain-agnostic and process code and transaction data for security analysis across multiple blockchain networks.

Quantifiable outcome

• 163 security reviews analyzed in 2025 ecosystem report; 1,669 vulnerabilities recorded across reviews; 99.4% of audits identified at least one vulnerability
• +4 more outcomes

Named customers17 records

Segments5 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

AI capability5 records

Feature7 records

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Neodyme: Solana-focused security firm known for vulnerability research on the Solana program runtime and Solana smart contract audits. Direct competitor serving the same customer base with overlapping audit offerings.
• Zellic: Web3 security research firm founded by top CTF competitors, offering smart contract audits across Solana, Ethereum, Move, and other ecosystems. Competes directly for elite researcher talent and audit mandates.
• Spearbit: Distributed collective of elite security researchers offering smart contract audits across Web3 ecosystems. Competes for top-tier audit talent and high-assurance protocol engagements, leveraging a lean distributed model.
• OtterSec: Solana-specialized smart contract security firm that also audits Solana programs. Most direct competitor to Sec3 in the Solana audit market, offering similar manual audit and vulnerability research services.

Broad incumbents

• Trail of Bits: Established Web3/crypto security firm offering smart contract audits, formal verification, and security tooling across multiple chains. Competes with Sec3 for high-TVL protocol engagements and has much broader multi-chain coverage.
• OpenZeppelin: Largest Web3 security and smart contract development firm, primarily EVM-focused. Provides audits, security tooling, and Defender monitoring — overlapping with Sec3's WatchTower and audit offerings, though not Solana-specialized.
• Certik: Large, well-capitalized Web3 security firm offering audits, formal verification, and on-chain monitoring (Skynet) across multiple chains. Competes in formal verification and post-deployment monitoring categories.
• Quantstamp: Established Web3 security firm offering audits, formal verification, and security tooling. Has expanded into Solana audits and competes with Sec3 for protocol-level audit engagements.
• Halborn: Web3 security firm offering audits, penetration testing, and advisory services across multiple blockchain ecosystems. Multi-chain competitor with overlapping service offerings and similar premium positioning.
• SlowMist: Long-running blockchain security firm offering audits, on-chain monitoring (MistTrack), and threat intelligence across multiple chains. Competes with Sec3's monitoring and audit offerings in the broader Web3 security market.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• GitHubgithub.com/sec3-service/IDLGuesser
• Xx.com/Sec3dev

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds2 records

Investors3 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Sec3