What Pessimistic does

Pessimistic OÜ, registered in Tallinn, Estonia, is a private blockchain security firm founded in 2017 that delivers smart contract, dApp, and blockchain protocol audits alongside continuous threat monitoring and open-source security tooling for EVM-compatible networks (primarily Ethereum). Its core service line consists of structured, six-stage manual-led audits in which at least two security engineers review codebases — typically at a cadence of ~200 lines per engineer per day — augmented by proprietary automated tooling, with findings delivered via a private report, client-led remediation, verification review, and optional public report publication on GitHub. The firm supplements audit services with retainer/subscription engagements, a vCISO offering, and a dedicated Threat Monitoring service that targets post-deployment protection.

The company's technology stack centers on two proprietary assets: Slitherin, a free open-source extension to Trail of Bits' Slither framework providing 30+ vulnerability and protocol-specific detectors (covering Uniswap, Aeve, Compound, Balancer integrations), and Spotter, a proactive monitoring system that surfaces exploits during early stages of an attack, distributed partly through a public Telegram bot. Pessimistic monetizes through quote-based professional services (pricing tied to codebase volume and complexity, with estimates typically within 10% of final cost) and recurring retainer/vCISO subscriptions. Its go-to-market is enterprise-direct via website quote requests, supported by content marketing (Medium blog, GitHub public audit reports, conference appearances) and developer community channels. Customer logos span DeFi (1inch, Zerion, Morpho, Sweat Economy), liquid staking (Lido), NFT (Rarible), DAOs (xDAO), privacy (Tornado Cash), and broader blockchain protocols, with multi-year relationships including Zerion since 2017 and Azuro since 2021. The firm operates as an independent, founder-led entity (CEO Alexander Seleznev, CTO Evgeny Marchenko) with no disclosed external funding.

Name

Pessimistic

Legal name

Pessimistic OÜ

Website

https://pessimistic.io

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

Pessimistic is an Estonian blockchain security firm founded in 2017 that delivers smart contract, dApp, and protocol audits, threat monitoring, and vCISO services for Web3 projects, alongside open-source tools Slitherin and Spotter for vulnerability detection and exploit monitoring.

Ownership category

akta.pro rank

Headquarters

HQ city

Tallinn

HQ country

Estonia

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Smart Contract Auditing Services: One-time auditing engagements for smart contracts, dApps, and blockchain protocols. Cost determined by codebase size and complexity using formula: Number of lines of code / 200 * 1.5 * cost of one working day for the team.
2. Retainer/Subscription Services: Subscription-based service offering ongoing support, continuous oversight, and expertise at each phase of the development process. Includes post-audit support and monitoring services.
3. vCISO Services: Virtual Chief Information Security Officer service providing security audits, real-time threat monitoring, incident response plans, and team training. Includes connection to security partners for formal verification, fuzzing, unit testing, bug bounty programs, and pentests.

Pricing tiers

Go-to-market motion1 record

Distribution channels1 record

Marketing channels4 records

Core offering

Pessimistic provides security auditing services for Web3 / blockchain projects, including manual smart contract audits, blockchain protocol audits, and decentralized application (dApp) audits. Beyond pre-launch audits, the firm offers continuous threat monitoring through its Spotter platform and strategic advisory through a virtual CISO (vCISO) service, supplemented by the open-source Slitherin static analyzer for Solidity code.

Product overview

Pessimistic is a crypto security company offering a comprehensive suite of blockchain security services and products. The core offering consists of professional audit services including Smart Contract Audit, Blockchain Protocol Audit, dApp Audit, Threat Monitoring, vCISO, and Ethereum Smart Contract Audit. The product portfolio includes Slitherin, a free open-source static code analysis tool with over 30+ vulnerability detectors built on the Slither framework, and Spotter, a proactive monitoring system that detects exploits before they reach the blockchain. The company also operates a research blog and public audit repository. Services are delivered through a combination of manual review and automated techniques with over 400 security audits delivered to date.

Differentiator

Problem solved

Functional benefit

Brands

• Spotter: A proactive alert system against crypto exploits - a cutting-edge monitoring system that detects potential exploits in early stages, often before they reach the blockchain. Available via Telegram bot @attackdetectorbot.
• Slitherin

Products and services

• Smart Contract Security Audit Manual security audit of EVM-based (primarily Solidity) smart contracts for Web3 projects, identifying vulnerabilities prior to mainnet deployment. Targeted at blockchain protocol teams and dApp developers.
• Blockchain Protocol Audit Security review of an underlying blockchain protocol layer (consensus, networking, or protocol-level logic) for protocol engineering teams. Provided as a project-based consulting engagement.
• dApp Audit End-to-end security audit of decentralized applications, combining smart contract review with off-chain and front-end component analysis. Targeted at dApp development teams preparing for launch.
• Threat Monitoring (Spotter) Subscription-based continuous on-chain threat monitoring service for deployed smart contracts, detecting suspicious activity and potential exploits in real time. Built on Pessimistic's "Spotter" platform.
• vCISO (Virtual CISO) Strategic security advisory engagement providing a fractional Chief Information Security Officer function to Web3 projects, including security roadmap guidance, governance, and program oversight.
• Slitherin Open-source static analysis tool for Solidity / EVM smart contracts, publicly available to developers. Used both as a community-facing developer tool and as supporting infrastructure inside Pessimistic's audit practice.

Quantifiable outcome

• 90% of auditing time devoted to manual review, ensuring comprehensive vulnerability detection
• +3 more outcomes

Named customers12 records

Segments3 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability1 record

Feature3 records

Partnerships

One partnership is on record.

• Slither (Trail of Bits)coreTechnology or IntegrationSlitherin is built on top of the industry-standard Slither framework developed by Trail of Bits. Slither is described as the most technically profound, actively maintained, and regularly updated engine for analyzing smart contracts in Solidity and Vyper languages.

Scale indicators9 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• Trail of Bits: Trail of Bits is the creator of the Slither framework that Pessimistic's Slitherin tool extends, and offers the same core services: smart contract audits, security assessments, and open-source security tooling for EVM chains.
• Certora: Certora provides formal verification and security audits for smart contracts using its Certora Prover. It targets the same DeFi protocol customer base as Pessimistic with a complementary verification-led methodology.
• Quantstamp: Quantstamp is one of the earliest and largest smart contract audit firms, offering audits and a security-ledger product. It serves the same DeFi and enterprise blockchain clients with comparable audit methodologies.
• ChainSecurity: ChainSecurity specializes in smart contract audits and formal verification for DeFi protocols. It targets the same Ethereum-heavy client base as Pessimistic with overlapping audit methodologies.
• Spearbit: Spearbit operates a curated network of independent smart contract auditors, offering audit services on a similar engagement model. It competes for the same enterprise protocol clients seeking senior manual reviewers.
• Runtime Verification: Runtime Verification provides formal verification and security audits for smart contracts and blockchain protocols, with overlap in DeFi and L1/L2 protocol security work.

Broad incumbents

• OpenZeppelin: OpenZeppelin is the largest Web3 security firm, offering smart contract audits, audit reports marketplace, and Defender security operations product. It overlaps directly with Pessimistic's core audit service but operates at greater scale with broader product portfolio.
• ConsenSys Diligence: ConsenSys Diligence is the audit arm of ConsenSys, offering smart contract audits, Mythril tooling, and formal verification. It competes for the same Ethereum protocol clients but benefits from broader ConsenSys ecosystem distribution.

Emerging players

• Zellic: Zellic is a newer boutique smart contract audit firm focused on EVM and Solana security reviews. It competes for similar protocol clients with a leaner senior-heavy team structure.
• Code4rena: Code4rena runs crowdsourced audit competitions for smart contracts, offering an alternative model that overlaps with Pessimistic's pre-deployment audit service for DeFi protocols.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks5 records

Key highlights7 records

Customer concentration

• Xx.com/pessimistic_io
• GitHubgithub.com/pessimistic-io
• LinkedInlinkedin.com/company/pessimistic-security

Compliance1 record

Revenue estimate

Valuation estimate

Number of profiles

Profiles2 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Pessimistic