CertiK

Web3 security company offering smart contract audits, formal verification, on-chain monitoring and the Skynet rating.

No project pays to be listed. How we rank

Facts checked Sep 26, 2026

CertiK key facts

CategorySecurity and compliance
PlatformsWeb
Launched2017
CompanyNew York-based; founded by professors from Columbia and Yale
PricingNot published; free quote on request
Free planSkynet Score, leaderboards and Token Scan are free
US availabilityAvailable in the US
About

What is CertiK?

CertiK is a New York-based Web3 security company founded in 2017 by professors from Columbia and Yale. It sells smart contract audits, formal verification, on-chain monitoring, AML and incident response, and publishes Skynet security ratings. Its homepage states 5,500 clients served.

How CertiK works

Every CertiK smart contract audit starts with a manual review by its security team, with an AI-powered automated review layered on top.

Formal verification is an optional extra step: CertiK writes machine-readable specifications for chosen functions and uses theorem proving to check every execution path against them. Its audit page lists 6,206+ audited projects, 93,159+ findings and 1,233+ formally verified projects.

The report ranks each issue from Critical to Informational with a suggested fix. Issues fixed before launch are marked resolved, and issues the team acknowledges but leaves open carry a note on their effect and the team's reason. Completed reports are public, and audited projects appear on the Skynet leaderboard. Skynet itself scores projects on more than 20 onchain and offchain signals, updated in real time, and offers free tools such as Token Scan.

How to start with CertiK

  1. Projects start with the Request Audit or Request a Quote button on certik.com, and the sales team returns a free quote.
  2. CertiK also sells team KYC for projects, penetration testing, Proof of Reserves audits, bug bounty programs, validator operations and compliance work for DORA, MiCA and Dubai's VARA.
  3. If you are a user, the useful part is free: search a project on Skynet, open the linked audit report, and check the finding list and its status.
  4. A one-time Proof of Reserves audit usually takes about two weeks, according to the FAQ.

CertiK fees and limits

CertiK does not publish prices for audits or other services. Its pages route every request to a free quote from the sales team. Skynet's Score, leaderboards, Token Scan and news are listed as free tools. Team KYC, Proof of Reserves, bug bounty programs and validator services have no listed prices either.

Risks to know before using CertiK

  • Read the report, not only the badge.
  • CertiK's report format keeps acknowledged but unresolved findings in the published report, so a completed audit can still list open issues.
  • Formal verification proves properties only within the specification it was given, as CertiK's FAQ says.
  • Team KYC by CertiK is confidential and does not make identities public.
  • The Skynet Score is dynamic and moves with project behavior, so a score you saw last month may not hold today.
Security and complianceWeb

CertiK alternatives

Other projects people compare with CertiK.

Chainalysis

Blockchain analytics company selling investigation, compliance and monitoring tools to agencies and businesses.

Halborn

Security firm for blockchain and financial companies: smart contract audits, pentesting, red teaming and advisory.

Revoke.cash

Tool to inspect and revoke token and NFT approvals your wallet has granted to smart contracts.

Sherlock

Web3 security platform running audit contests, private collaborative audits and bug bounties.

Sigma Prime

Blockchain security firm that audits smart contracts, protocols and infrastructure and builds the Lighthouse client.

Trail of Bits

Security research firm that audits blockchains, smart contracts, cryptography and AI systems.

Where CertiK ranks on DappAtlas

CertiK pros and cons

Pros
  • 5,500 clients served, per its homepage
  • Offers formal verification as well as manual audits
  • Skynet ratings are public for projects it covers
Cons
  • No published audit pricing; quotes on request
  • A Skynet listing is not the same as a full audit, so read the report itself

CertiK FAQ

What is CertiK?

CertiK is a New York-based Web3 security company founded in 2017 by professors from Columbia and Yale. It sells smart contract audits, formal verification, on-chain monitoring, AML and incident response, and publishes Skynet security ratings. Its homepage states 5,500 clients served.

How much does CertiK cost?

Not published; free quote on request, according to CertiK’s own page (checked Sep 26, 2026). Free plan: Skynet Score, leaderboards and Token Scan are free.

Is CertiK available in the US?

Available in the US, according to CertiK’s own page (checked Sep 26, 2026).

Sources

  1. CertiK: official site
  2. CertiK: About
  3. CertiK: Smart Contract Audit
  4. CertiK: FAQ
  5. CertiK: Terms of Use
  6. CertiK: Homepage

How this page works

Sources: CertiK: official site, CertiK: About, CertiK: Smart Contract Audit. Data as of Sep 26, 2026.

How we review

Not affiliated with any project listed. Educational content, not financial advice.