Galois
Galois is a private R&D firm founded in 1999 that applies formal mathematical methods to verify the correctness, security, and compliance of critical software systems for U.S. government agencies (DARPA, DoD, NASA) and select commercial customers (Apple, AWS, Ethereum Foundation).
- Company typePrivate
- Founded1999
- HeadquartersPortland, United States
- Headcount101–250
- GTM typeB2B
- OfferingServices
What Galois does
Galois, Inc. is a private research and engineering firm founded in 1999 that applies formal mathematical methods to build trustworthy, reliable, secure, explainable, and compliant critical systems. Headquartered in Portland, Oregon with offices in Arlington, Minneapolis, and Dayton, the firm serves U.S. government agencies — including DARPA, ARPA-H, IARPA, the Department of Defense (Army, Navy, Air Force, AFRL), NASA, and NIST — alongside commercial customers such as Apple and Amazon Web Services, and grant-funded partners like the Ethereum Foundation.
Galois's core technology is interactive theorem proving and symbolic execution applied to software verification, augmented by AI/ML-assisted tooling. The company maintains a suite of proprietary and open-source tools: SAW (Software Analysis Workbench) for verifying C and Java code against formal specifications, Cryptol (a domain-specific language and registered Galois trademark) for cryptographic algorithm specification and verification, CAMET for AADL-based model-based systems engineering, C2Rust for automated C-to-Rust transpilation, zkLean for zero-knowledge statement verification, Dioptra for Fully Homomorphic Encryption program analysis, LAGOON for open-source community vulnerability analysis, DLKoopman for cyber-physical system surrogate modeling, and Cheesecloth for zero-knowledge vulnerability disclosure. Notable technical milestones include verifying Apple's ML-KEM and ML-DSA post-quantum cryptography implementations with over 50,000 proof steps (protecting 2.5 billion+ active devices) and applying AI-enabled SMT solver tactics to automate thousands of lines of Lean proof code.
Galois generates revenue primarily through competitively awarded U.S. government R&D contracts (DARPA, ARPA-H, IARPA, DoD branches) with defined deliverables and timelines, complemented by custom commercial R&D engagements in aerospace, automotive, healthcare, fintech, and semiconductors, and by research grants from non-governmental organizations such as the Ethereum Foundation. The firm operates as a custom research and engineering organization rather than a packaged-software vendor: pricing is not publicly disclosed, there are no marketed product tiers, and customer engagement begins with direct email outreach to [email protected], which the company commits to respond to within one business day. Galois's leadership consists of CEO Rob Wiltbank and CFO Daniel Boyer.
Galois firmographics
Firmographics- Name
- Galois
- Legal name
- Galois, Inc.
- Website
- https://galois.com
- Company type
- Private
- Founded year
- 1999
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Galois is a private R&D firm founded in 1999 that applies formal mathematical methods to verify the correctness, security, and compliance of critical software systems for U.S. government agencies (DARPA, DoD, NASA) and select commercial customers (Apple, AWS, Ethereum Foundation).
- Ownership category
- akta.pro rank
Galois industry classification
Industry- Product category
- Formal Verification and High-Assurance Software Engineering
- NAICS
- Custom Computer Programming Services (541511)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro primary industry
- Smart Contract Auditing & Formal Verification (FSAPAJAA)
- akta.pro secondary industries
- Smart Contract Security Tooling (static/dynamic analysis, formal verification) (FSAPABAI), Security Testing Tooling (SAST/DAST for smart contracts, fuzzing) (FSAPAJAK)
Keywords
Where Galois is headquartered
LocationHeadquarters
- HQ city
- Portland
- HQ country
- United States
- HQ region
- North America
Offices4 records
Markets served
Galois business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales
Revenue model
- Government R&D Contracts: Galois primarily generates revenue through competitively awarded research contracts from U.S. government agencies including DARPA, ARPA-H, IARPA, and the Department of Defense (including Army, Navy, and Air Force research labs). These contracts fund specific research programs with defined deliverables, publication goals, and timelines.
- Commercial and Industrial R&D Partnerships: Galois conducts custom research and engineering engagements for commercial partners in aerospace, automotive, healthcare, fintech, and semiconductor sectors, delivering high-assurance solutions and tools.
- Grant Funding: Galois receives grant funding from non-governmental organizations such as the Ethereum Foundation, which provides financial support for specific research projects like the Jolt zkVM verification effort.
Go-to-market motion1 record
Distribution channels2 records
Marketing channels8 records
Galois product offering
Product offeringCore offering
Galois performs custom research and engineering that applies formal methods, mathematical verification, and advanced cryptography to build trustworthy critical software systems for government agencies and commercial enterprises. The company also develops and maintains a suite of proprietary and open-source verification tools (SAW, Cryptol, C2Rust, CAMET, zkLean, Dioptra, Cheesecloth, DLKoopman, LAGOON) that mathematically prove software correctness, verify cryptographic implementations, transpile legacy C to memory-safe Rust, and analyze cyber-physical and zero-knowledge systems.
Product overview
Galois delivers a suite of formal verification tools and cryptographic solutions for building trustworthy critical systems. The core products include SAW (Software Analysis Workbench) for formal verification of C/Java code, Cryptol for cryptographic specification and verification, and C2Rust for transpiling C to Rust. Additional tools include CAMET for AADL modeling, Dioptra for FHE program analysis, and zkLean for zero-knowledge statement verification in Lean. Galois also develops specialized projects like LAGOON (open-source community analysis), ESSENCE (AI-driven CPS design), and SIEVE (zero-knowledge proofs for defense applications), all leveraging formal methods to guarantee correctness in security-critical systems.
Differentiator
Problem solved
Functional benefit
Quantifiable outcome
- Formal verification identified and fixed a missing-step flaw in an early ML-DSA implementation that could have silently corrupted cryptographic output — a flaw conventional testing would not have detected.
- +6 more outcomes
Companies that use Galois
Customer profileNamed customers9 records
Segments7 records
Ideal customer profiles3 records
Galois technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability14 records
Feature12 records
Galois partnerships and signals
Strategic signalPartnerships
Nine partnerships are on record, tiered core and minor.
- ApplecoreGalois collaborated with Apple to develop a custom formal verification pipeline using Isabelle, SAW, and Cryptol that formally verified Apple's post-quantum cryptography implementations (ML-KEM and ML-DSA) in the corecrypto library. Over 50,000 proof steps were used to verify portable C and ARM64 assembly code against NIST specifications. The collaboration identified a missing-step flaw in an early ML-DSA implementation that conventional testing would have missed, protecting over 2.5 billion active devices.
- Rutgers UniversityminorPartnered with Galois on the ESSENCE project (Exploration Service for Synthesis and Evaluation of Novel CPS Emergent designs), part of DARPA's Symbiotic Design of Cyber-physical Systems program, developing AI/ML-driven methods for rapid UAV design iteration.
- Purdue UniversityminorAcademic partner in the ESSENCE project for AI-assisted cyber-physical system design alongside Galois and Rutgers University.
- Charles River AssociatesminorPartner in the ESSENCE project contributing economic and analytical expertise to the AI-assisted CPS design research.
- University of VermontminorPartnered with Galois on the LAGOON tool development under the DARPA Social Cyber program, creating machine learning analysis tools for open-source software ecosystem vulnerability assessment.
- General Electric (GE)minorCollaborated with Galois under the SIEVE program to demonstrate using zero-knowledge proofs to verify hardware design properties without revealing proprietary design details to untrusted foundries.
- CyberneticaminorPartnered with Galois to develop a privacy-preserving technology using ZKPs for Estonia's Environmental Investment Centre EV subsidy program, allowing Estonian citizens to verify subsidy eligibility without disclosing detailed travel data via a simple web browser interface.
- Lindy LabsminorCollaborating with Galois and the University of Cambridge on the Ethereum Foundation-funded Jolt zkVM verification project.
- NISTcoreNIST is listed as a trusted partner of Galois, with the company involved in standards-aligned work on post-quantum cryptography verification against NIST FIPS 203 and FIPS 204 specifications.
Scale indicators7 records
Recent moves6 records
Expansion highlights6 records
Galois competitors and assessment
Company assessmentDirect peers
- AbsInt: Formal verification and static analysis company providing tools (Astrée, CodeHawk) for embedded, safety-critical, and aerospace software verification. Direct peer for Galois's critical systems and formal methods work.
- CertiK: Leading smart contract security and formal verification firm serving Web3 protocols with auditing, formal verification, and Skynet monitoring services. Direct peer for Galois's blockchain/ZK verification work including zkLean and Jolt zkVM.
- Veridise: Formal methods company providing auditing and security analysis for smart contracts and ZK circuits. Comparable to Galois's zkLean, SIEVE, and Cheesecloth capabilities with overlapping Web3 formal verification focus.
- Kestrel Institute: Non-profit computer science research institute specializing in formal methods, automated reasoning, and verified software synthesis. Closely comparable to Galois on formal methods R&D approach, though smaller and grant-funded rather than commercial.
- Runtime Verification: Formal verification company applying runtime verification and interactive theorem proving to smart contracts, aerospace, and autonomous systems. Direct overlap with Galois on smart contract auditing (matching FSAPAJAA focus) and aerospace/formal methods R&D.
- Trail of Bits: Security engineering and research firm specializing in formal verification, cryptography, and software assurance for blockchain, defense, and enterprise clients. Closely comparable to Galois on methodology, customer profile, and toolchain philosophy.
- Certora: Smart contract formal verification company providing automated prover-based auditing for DeFi protocols. Closely comparable to Galois's formal verification tooling approach in the Web3 segment.
Broad incumbents
- MITRE Corporation: Federally funded R&D center operating multiple FFRDCs with deep formal methods and cybersecurity expertise. Comparable to Galois in government-funded systems engineering and verification research, though at substantially greater scale and not-for-profit.
- NCC Group: Global cybersecurity and software assurance firm offering security consulting, testing, and formal verification services. Broader incumbent overlap with Galois's verification services across enterprise and government clients.
- Kudelski Security: Cryptographic and cybersecurity services firm serving enterprise and government clients with security assessments and cryptographic engineering. Broad incumbent overlap with Galois's cryptography and security verification offerings.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Galois social profiles
Digital presenceGalois financial estimates
Financial estimateRevenue estimate
Valuation estimate
Galois leadership team
Management profileNumber of profiles
Profiles8 records
Galois funding detail
Funding detailFunding overview
Funding rounds1 record
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Galois M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Galois
What does Galois do?
Galois performs custom research and engineering that applies formal methods, mathematical verification, and advanced cryptography to build trustworthy critical software systems for government agencies and commercial enterprises. The company also develops and maintains a suite of proprietary and open-source verification tools (SAW, Cryptol, C2Rust, CAMET, zkLean, Dioptra, Cheesecloth, DLKoopman, LAGOON) that mathematically prove software correctness, verify cryptographic implementations, transpile legacy C to memory-safe Rust, and analyze cyber-physical and zero-knowledge systems.
Is Galois a public or private company?
Galois is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Galois founded?
Galois was founded in 1999. It employs 101 to 250 people.
Where is Galois based?
Galois is headquartered in Portland, United States, in the North America region.
How does Galois make money?
Three revenue lines are on record. Government R&D Contracts are the primary driver. The others are commercial and Industrial R&D Partnerships and grant Funding.
Who are Galois's main competitors?
Direct peers on record are AbsInt, CertiK, Veridise, Kestrel Institute, Runtime Verification, Trail of Bits and Certora. Broad incumbents are MITRE Corporation, NCC Group and Kudelski Security.
Does Galois have an API?
No public API is recorded for Galois.
What industry is Galois in?
Galois's product category is Formal Verification and High-Assurance Software Engineering. Its primary akta.pro industry code is FSAPAJAA, Smart Contract Auditing & Formal Verification, with a secondary code of FSAPABAI, Smart Contract Security Tooling (static/dynamic analysis, formal verification). Its NAICS code is 541511 and its SIC code is 7371.