softstack
Softstack is a German Web3 service provider offering smart contract auditing, custom blockchain development, and Web3 consulting across multiple ecosystems. The firm serves enterprise clients including Ripple, BitGo, Siemens, Polygon, and Tezos, and has completed over 1,200 audits since 2017.
- Company typePrivate
- Founded2017
- HeadquartersFlensburg, Germany
- Headcount11–50
- GTM typeB2B
- OfferingServices
What softstack does
Softstack GmbH is a German Web3 service provider headquartered in Flensburg, founded in 2017 (originally under the name Chainsulting) and led by Managing Directors Yannik Heinze (CEO) and Florian Protschka. The firm operates across three core service pillars: Web3 Software Development (custom software, mobile apps, dApps, smart contracts), Web3 Security (smart contract auditing, digital asset risk assessment, penetration testing), and Web3 Consulting (regulatory advisory including MiCAR, DORA, and ISO 27001 compliance). Softstack supports multiple blockchain ecosystems including EVM, SVM, Cosmos SDK, Substrate, and Layer 2 stacks, and has completed over 1,200 smart contract audits since inception with zero post-audit exploits. The company holds ISO/IEC 27001:2017 certification issued by TÜV SÜD.
Revenue is generated primarily through project-based professional services engagements, with pricing customized to codebase complexity, lines of code, and project scope. Go-to-market combines direct enterprise sales targeting Web3 protocols, DeFi projects, and financial institutions with an event-driven motion (Proof of Talk at the Louvre Palace, Paris) and a channel-based Service Partner Program that enables VCs and accelerators to refer portfolio companies for commissions up to 20%. Notable enterprise clients include Ripple, BitGo, Siemens, Polygon, Tezos, Fetch.ai, Anchorage Digital, and 21shares, alongside a long tail of DeFi startups. Beyond services, Softstack operates subsidiaries TixLabs (Web3 product development) and Tixbase.com (digital asset storage), and has developed BioHash (Project BEKI), an AI-driven biometric authentication product combining facial recognition with cryptographic primitives for privacy-preserving identity verification.
The company is privately held and founder-owned with no disclosed external institutional investors. It is co-financed by the European Union, German federal government, and Land Schleswig-Holstein under the GRW regional development program. Operating geographies span EMEA and global Web3 hubs, with sales reaching enterprise clients across multiple continents.
softstack firmographics
Firmographics- Name
- softstack
- Legal name
- Softstack GmbH
- Website
- https://softstack.io
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Softstack is a German Web3 service provider offering smart contract auditing, custom blockchain development, and Web3 consulting across multiple ecosystems. The firm serves enterprise clients including Ripple, BitGo, Siemens, Polygon, and Tezos, and has completed over 1,200 audits since 2017.
- Ownership category
- akta.pro rank
softstack industry classification
Industry- Product category
- Web3 Security & Software Development Services
- NAICS
- Computer Systems Design and Related Services (54151)
- SIC
- Services-Computer Programming Services (7371)
- akta.pro primary industry
- Governance, Controls & Policy Automation (GRC for Web3) (FSAPAJAG)
- akta.pro secondary industry
- Compliance, Risk & RegTech for Tokenized Assets (KYC/AML, sanctions, travel rule, reporting) (FSAPAIAH)
Keywords
Where softstack is headquartered
LocationHeadquarters
- HQ city
- Flensburg
- HQ country
- Germany
- HQ region
- Europe
Offices1 record
Markets served
softstack business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Smart Contract Auditing: Security audits of smart contracts and blockchain protocols. Revenue is project-based, varying by codebase complexity and lines of code. Follow-up re-checks and remediation validation are included in the service.
- Web3 Software Development: Custom software development, mobile applications, dApps, and smart contracts. Project-based professional services with customized quotes based on scope and requirements.
- Web3 Consulting: Consulting services including project management, software development consulting, Web3 regulations (MiCAR), Web3 transition/integration, and ISMS consulting (ISO27001). Billed as professional services.
- Digital Asset Assessment: Risk assessments aligned with MiCA, DORA, and Clarity Act standards. Includes technology analysis, governance review, blockchain infrastructure assessment, AML/CFT analysis, and reputational risk evaluation.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Custom project-based pricing |
Go-to-market motion3 records
Distribution channels2 records
Marketing channels6 records
softstack product offering
Product offeringCore offering
Softstack is a German Web3 service company that delivers custom blockchain software development (dApps, smart contracts, mobile apps), cybersecurity services (smart contract auditing, penetration testing, digital asset risk assessment), and Web3 consulting (regulatory compliance with MiCAR/eWpG/DORA and ISO 27001 ISMS). It serves Web3 protocols, DeFi projects, financial institutions, and traditional enterprises globally, and also offers BioHash, a packaged biometric authentication product.
Product overview
Softstack is a German Web3 service company offering three core service pillars: Web3 Development (custom software, mobile apps, dApps, smart contracts), Web3 Security (smart contract auditing, digital asset assessment, penetration testing, dApp audits), and Web3 Consulting (project management, regulatory compliance, ISMS consulting). Additionally, the company offers specialized products including BioHash, an AI-powered biometric authentication solution using facial recognition with cryptographic verification (ZKPs, MPC) for privacy-first digital identity verification. The company also provides Digital Asset Risk Assessment services aligned with MiCA, DORA, and Clarity Act standards, and operates a Service Partner Program (SPP) for VCs and accelerators to refer portfolio companies at preferential rates. The product portfolio is structured as professional services with specialized product offerings.
Differentiator
Problem solved
Functional benefit
Brands
- BioHash: Biometric authentication product using AI-driven facial recognition combined with blockchain technology, featuring cryptographic hash functions, Multi-Party Computation (MPC), and Zero-Knowledge Proofs (ZKPs) for privacy-first digital verification.
Products and services
- Web3 Software Development Custom blockchain development service encompassing custom software, mobile applications, decentralized applications (dApps), and smart contract development for Web3 protocols and enterprises.
- Web3 Cybersecurity Comprehensive Web3 cybersecurity service including smart contract auditing, penetration testing, dApp audits, and digital asset assessment to secure decentralized applications and protocols.
- Web3 Consulting Advisory service guiding clients through Web3 transition, regulatory compliance (MiCAR, eWpG, DORA), software development consulting, and ISO 27001 ISMS implementation.
- Digital Asset Risk Assessment Comprehensive digital asset valuation and risk analysis covering technology, governance, blockchain infrastructure, AML/CFT compliance, reputational/legal risks, and market integrity aligned with MiCA, DORA, and Clarity Act standards.
- BioHash (BEKI) AI-driven biometric authentication product that validates user identity through facial recognition combined with cryptographic hash functions, Multi-Party Computation (MPC), and Zero-Knowledge Proofs (ZKPs), without storing biometric images or personal data.
Quantifiable outcome
- Zero post-audit exploits across 1,200+ smart contract audits since 2017
- +3 more outcomes
Companies that use softstack
Customer profileNamed customers18 records
Segments4 records
Ideal customer profiles4 records
softstack technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature1 record
softstack partnerships and signals
Strategic signalPartnerships
Four partnerships are on record, tiered core and minor.
- XVenturescorePartnership with Germany's leading Web3 venture fund to support Proof of Talk growth platform. XVentures portfolio companies and growth program participants gain preferred access to Softstack's Web3 software development, technical advisory, and security expertise. Softstack participates in Proof of Talk events at the Louvre Palace, Paris, providing mentorship, development, and security support for founders.
- Proof of TalkcoreFlagship leadership summit for digital assets and Web3 held at the Louvre Palace in Paris. Softstack provides technical and security support for founders participating in Proof of Talk growth and pitch programs. The partnership enables Softstack to reach serious Web3 builders and connect with institutional investors and C-level leaders.
- CoinIX Capital GmbHminorVC service partnership where CoinIX refers portfolio companies to Softstack for investment due diligence and valuable services. Softstack enhances the value of CoinIX's portfolio by providing security audits and development services to portfolio companies.
- Proof of PitchminorSoftstack partnered with XVentures and Proof of Talk to support Web3 founders at the Proof of Pitch event held at the Louvre Palace, Paris in June 2026. Softstack provided security expertise and services to participating startups.
Scale indicators4 records
Recent moves5 records
Expansion highlights6 records
softstack competitors and assessment
Company assessmentEmerging players
- Spearbit: Spearbit operates a curated network of independent senior security researchers for high-end Web3 audits. It is an emerging alternative to traditional audit firms like Softstack, particularly for protocols seeking top-tier individual researchers rather than firm-led teams.
- Zellic: Zellic is a venture-backed smart contract audit firm founded by top CTF security researchers. It directly competes with Softstack for high-complexity protocol audits and represents the emerging wave of well-capitalized, research-led audit shops.
Broad incumbents
- Consensys Diligence: Consensys Diligence is the audit arm of Consensys, one of the largest Web3 infrastructure companies. It audits smart contracts for protocols and enterprises and competes with Softstack for institutional and DeFi engagements, with the backing of a much larger parent.
- OpenZeppelin: OpenZeppelin is a broader Web3 security platform offering open-source contract libraries, audit services, and security monitoring (Forta). It overlaps with Softstack on audit services but also competes on developer tooling, giving it a wider product surface and stronger ecosystem footprint.
Direct peers
- SlowMist: SlowMist is a China-rooted Web3 security firm offering smart contract audits, threat intelligence, and incident response. It is a direct competitor to Softstack across audits and penetration testing, with strong brand recognition across Asian Web3 ecosystems.
- CertiK: Founded in 2018 by Yale professors, CertiK is the largest and best-capitalized Web3 security audit firm. It competes head-to-head with Softstack on smart contract auditing, formal verification, and penetration testing for protocols and exchanges globally.
- Quantstamp: Quantstamp is a leading smart contract audit and security firm that has audited hundreds of protocols across EVM and non-EVM chains. It overlaps directly with Softstack's core auditing business and is regularly co-listed with it in industry rankings.
- Trail of Bits: Trail of Bits is a US-based security research and audit firm with deep smart contract and applied cryptography expertise. It competes for the same institutional and high-end audit engagements as Softstack and is consistently listed alongside it in Web3 auditor rankings.
- Hacken: Hacken is a Web3 cybersecurity firm offering smart contract audits, penetration testing, and bug bounties. It is repeatedly listed alongside Softstack in 'top Web3 audit firm' rankings and competes for the same protocol and exchange clients.
- ChainSecurity (PwC): ChainSecurity is a smart contract audit firm acquired by PwC Switzerland, bringing institutional-grade assurance to Web3. It competes with Softstack for high-end protocol and financial-institution audits, with greater institutional backing post-acquisition.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks1 record
Key highlights7 records
Customer concentration
softstack social profiles
Digital presencesoftstack compliance and trust
Trust signalCompliance2 records
softstack financial estimates
Financial estimateRevenue estimate
Valuation estimate
softstack leadership team
Management profileNumber of profiles
Profiles2 records
softstack subsidiaries and ownership
Company hierarchySubsidiaries3 records
softstack funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
softstack M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about softstack
What does softstack do?
Softstack is a German Web3 service company that delivers custom blockchain software development (dApps, smart contracts, mobile apps), cybersecurity services (smart contract auditing, penetration testing, digital asset risk assessment), and Web3 consulting (regulatory compliance with MiCAR/eWpG/DORA and ISO 27001 ISMS). It serves Web3 protocols, DeFi projects, financial institutions, and traditional enterprises globally, and also offers BioHash, a packaged biometric authentication product.
Is softstack a public or private company?
softstack is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was softstack founded?
softstack was founded in 2017. It employs 11 to 50 people.
Where is softstack based?
softstack is headquartered in Flensburg, Germany, in the Europe region.
How does softstack make money?
Four revenue lines are on record. Smart Contract Auditing is the primary driver. The others are web3 Software Development, web3 Consulting and digital Asset Assessment.
Who are softstack's main competitors?
Emerging players on record are Spearbit and Zellic. Broad incumbents are Consensys Diligence and OpenZeppelin. Direct peers are SlowMist, CertiK, Quantstamp, Trail of Bits, Hacken and ChainSecurity (PwC).
Does softstack have an API?
No public API is recorded for softstack.
What industry is softstack in?
softstack's product category is Web3 Security & Software Development Services. Its primary akta.pro industry code is FSAPAJAG, Governance, Controls & Policy Automation (GRC for Web3), with a secondary code of FSAPAIAH, Compliance, Risk & RegTech for Tokenized Assets (KYC/AML, sanctions, travel rule, reporting). Its NAICS code is 54151 and its SIC code is 7371.