softstack

What softstack does

Softstack GmbH is a German Web3 service provider headquartered in Flensburg, founded in 2017 (originally under the name Chainsulting) and led by Managing Directors Yannik Heinze (CEO) and Florian Protschka. The firm operates across three core service pillars: Web3 Software Development (custom software, mobile apps, dApps, smart contracts), Web3 Security (smart contract auditing, digital asset risk assessment, penetration testing), and Web3 Consulting (regulatory advisory including MiCAR, DORA, and ISO 27001 compliance). Softstack supports multiple blockchain ecosystems including EVM, SVM, Cosmos SDK, Substrate, and Layer 2 stacks, and has completed over 1,200 smart contract audits since inception with zero post-audit exploits. The company holds ISO/IEC 27001:2017 certification issued by TÜV SÜD.

Revenue is generated primarily through project-based professional services engagements, with pricing customized to codebase complexity, lines of code, and project scope. Go-to-market combines direct enterprise sales targeting Web3 protocols, DeFi projects, and financial institutions with an event-driven motion (Proof of Talk at the Louvre Palace, Paris) and a channel-based Service Partner Program that enables VCs and accelerators to refer portfolio companies for commissions up to 20%. Notable enterprise clients include Ripple, BitGo, Siemens, Polygon, Tezos, Fetch.ai, Anchorage Digital, and 21shares, alongside a long tail of DeFi startups. Beyond services, Softstack operates subsidiaries TixLabs (Web3 product development) and Tixbase.com (digital asset storage), and has developed BioHash (Project BEKI), an AI-driven biometric authentication product combining facial recognition with cryptographic primitives for privacy-preserving identity verification.

The company is privately held and founder-owned with no disclosed external institutional investors. It is co-financed by the European Union, German federal government, and Land Schleswig-Holstein under the GRW regional development program. Operating geographies span EMEA and global Web3 hubs, with sales reaching enterprise clients across multiple continents.

Name

softstack

Legal name

Softstack GmbH

Website

https://softstack.io

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

Softstack is a German Web3 service provider offering smart contract auditing, custom blockchain development, and Web3 consulting across multiple ecosystems. The firm serves enterprise clients including Ripple, BitGo, Siemens, Polygon, and Tezos, and has completed over 1,200 audits since 2017.

Ownership category

akta.pro rank

Product category

Web3 Security & Software Development Services

NAICS

Computer Systems Design and Related Services (54151)

SIC

Services-Computer Programming Services (7371)

akta.pro primary industry

Governance, Controls & Policy Automation (GRC for Web3) (FSAPAJAG)

akta.pro secondary industry

Compliance, Risk & RegTech for Tokenized Assets (KYC/AML, sanctions, travel rule, reporting) (FSAPAIAH)

Keywords

• Smart contract auditing
• Web3 software development
• Blockchain cybersecurity
• Decentralized application development
• Web3 regulatory consulting

Headquarters

HQ city

Flensburg

HQ country

Germany

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure

Revenue model

1. Smart Contract Auditing: Security audits of smart contracts and blockchain protocols. Revenue is project-based, varying by codebase complexity and lines of code. Follow-up re-checks and remediation validation are included in the service.
2. Web3 Software Development: Custom software development, mobile applications, dApps, and smart contracts. Project-based professional services with customized quotes based on scope and requirements.
3. Web3 Consulting: Consulting services including project management, software development consulting, Web3 regulations (MiCAR), Web3 transition/integration, and ISMS consulting (ISO27001). Billed as professional services.
4. Digital Asset Assessment: Risk assessments aligned with MiCA, DORA, and Clarity Act standards. Includes technology analysis, governance review, blockchain infrastructure assessment, AML/CFT analysis, and reputational risk evaluation.

Pricing tiers

Go-to-market motion3 records

Distribution channels2 records

Marketing channels6 records

Core offering

Softstack is a German Web3 service company that delivers custom blockchain software development (dApps, smart contracts, mobile apps), cybersecurity services (smart contract auditing, penetration testing, digital asset risk assessment), and Web3 consulting (regulatory compliance with MiCAR/eWpG/DORA and ISO 27001 ISMS). It serves Web3 protocols, DeFi projects, financial institutions, and traditional enterprises globally, and also offers BioHash, a packaged biometric authentication product.

Product overview

Softstack is a German Web3 service company offering three core service pillars: Web3 Development (custom software, mobile apps, dApps, smart contracts), Web3 Security (smart contract auditing, digital asset assessment, penetration testing, dApp audits), and Web3 Consulting (project management, regulatory compliance, ISMS consulting). Additionally, the company offers specialized products including BioHash, an AI-powered biometric authentication solution using facial recognition with cryptographic verification (ZKPs, MPC) for privacy-first digital identity verification. The company also provides Digital Asset Risk Assessment services aligned with MiCA, DORA, and Clarity Act standards, and operates a Service Partner Program (SPP) for VCs and accelerators to refer portfolio companies at preferential rates. The product portfolio is structured as professional services with specialized product offerings.

Differentiator

Problem solved

Functional benefit

Brands

• BioHash: Biometric authentication product using AI-driven facial recognition combined with blockchain technology, featuring cryptographic hash functions, Multi-Party Computation (MPC), and Zero-Knowledge Proofs (ZKPs) for privacy-first digital verification.

Products and services

• Web3 Software Development Custom blockchain development service encompassing custom software, mobile applications, decentralized applications (dApps), and smart contract development for Web3 protocols and enterprises.
• Web3 Cybersecurity Comprehensive Web3 cybersecurity service including smart contract auditing, penetration testing, dApp audits, and digital asset assessment to secure decentralized applications and protocols.
• Web3 Consulting Advisory service guiding clients through Web3 transition, regulatory compliance (MiCAR, eWpG, DORA), software development consulting, and ISO 27001 ISMS implementation.
• Digital Asset Risk Assessment Comprehensive digital asset valuation and risk analysis covering technology, governance, blockchain infrastructure, AML/CFT compliance, reputational/legal risks, and market integrity aligned with MiCA, DORA, and Clarity Act standards.
• BioHash (BEKI) AI-driven biometric authentication product that validates user identity through facial recognition combined with cryptographic hash functions, Multi-Party Computation (MPC), and Zero-Knowledge Proofs (ZKPs), without storing biometric images or personal data.

Quantifiable outcome

• Zero post-audit exploits across 1,200+ smart contract audits since 2017
• +3 more outcomes

Named customers18 records

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability4 records

Feature1 record

Partnerships

Four partnerships are on record, tiered core and minor.

• XVenturescoreStrategic or Co-development Partner · 1 December 2025Partnership with Germany's leading Web3 venture fund to support Proof of Talk growth platform. XVentures portfolio companies and growth program participants gain preferred access to Softstack's Web3 software development, technical advisory, and security expertise. Softstack participates in Proof of Talk events at the Louvre Palace, Paris, providing mentorship, development, and security support for founders.
• Proof of TalkcoreGTM or Marketing Partner · 1 December 2025Flagship leadership summit for digital assets and Web3 held at the Louvre Palace in Paris. Softstack provides technical and security support for founders participating in Proof of Talk growth and pitch programs. The partnership enables Softstack to reach serious Web3 builders and connect with institutional investors and C-level leaders.
• CoinIX Capital GmbHminorGTM or Marketing PartnerVC service partnership where CoinIX refers portfolio companies to Softstack for investment due diligence and valuable services. Softstack enhances the value of CoinIX's portfolio by providing security audits and development services to portfolio companies.
• Proof of PitchminorGTM or Marketing PartnerSoftstack partnered with XVentures and Proof of Talk to support Web3 founders at the Proof of Pitch event held at the Louvre Palace, Paris in June 2026. Softstack provided security expertise and services to participating startups.

Scale indicators4 records

Recent moves5 records

Expansion highlights6 records

Emerging players

• Spearbit: Spearbit operates a curated network of independent senior security researchers for high-end Web3 audits. It is an emerging alternative to traditional audit firms like Softstack, particularly for protocols seeking top-tier individual researchers rather than firm-led teams.
• Zellic: Zellic is a venture-backed smart contract audit firm founded by top CTF security researchers. It directly competes with Softstack for high-complexity protocol audits and represents the emerging wave of well-capitalized, research-led audit shops.

Broad incumbents

• Consensys Diligence: Consensys Diligence is the audit arm of Consensys, one of the largest Web3 infrastructure companies. It audits smart contracts for protocols and enterprises and competes with Softstack for institutional and DeFi engagements, with the backing of a much larger parent.
• OpenZeppelin: OpenZeppelin is a broader Web3 security platform offering open-source contract libraries, audit services, and security monitoring (Forta). It overlaps with Softstack on audit services but also competes on developer tooling, giving it a wider product surface and stronger ecosystem footprint.

Direct peers

• SlowMist: SlowMist is a China-rooted Web3 security firm offering smart contract audits, threat intelligence, and incident response. It is a direct competitor to Softstack across audits and penetration testing, with strong brand recognition across Asian Web3 ecosystems.
• CertiK: Founded in 2018 by Yale professors, CertiK is the largest and best-capitalized Web3 security audit firm. It competes head-to-head with Softstack on smart contract auditing, formal verification, and penetration testing for protocols and exchanges globally.
• Quantstamp: Quantstamp is a leading smart contract audit and security firm that has audited hundreds of protocols across EVM and non-EVM chains. It overlaps directly with Softstack's core auditing business and is regularly co-listed with it in industry rankings.
• Trail of Bits: Trail of Bits is a US-based security research and audit firm with deep smart contract and applied cryptography expertise. It competes for the same institutional and high-end audit engagements as Softstack and is consistently listed alongside it in Web3 auditor rankings.
• Hacken: Hacken is a Web3 cybersecurity firm offering smart contract audits, penetration testing, and bug bounties. It is repeatedly listed alongside Softstack in 'top Web3 audit firm' rankings and competes for the same protocol and exchange clients.
• ChainSecurity (PwC): ChainSecurity is a smart contract audit firm acquired by PwC Switzerland, bringing institutional-grade assurance to Web3. It competes with Softstack for high-end protocol and financial-institution audits, with greater institutional backing post-acquisition.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks1 record

Key highlights7 records

Customer concentration

• Xx.com/softstackHQ
• GitHubgithub.com/softstack
• LinkedInlinkedin.com/company/softstack

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Subsidiaries3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about softstack