Halborn
Security firm for blockchain and financial companies: smart contract audits, pentesting, red teaming and advisory.
No project pays to be listed. How we rank
Halborn key facts
| Category | Security and compliance |
|---|---|
| Platforms | Web |
| Company | Fully remote; founded by Rob Behnke and Steve Walbroehl; CEO Jacques Boschung; 800+ clients |
| Pricing | Not published; requests go through the contact form |
| US availability | Available: terms name no country restrictions |
What is Halborn?
Halborn is a security firm that serves blockchain and financial services companies. Its services cover smart contract and Layer 1 assessments, code audits, web and cloud penetration testing, red team exercises and advisory. Its homepage states 4K+ assessments and 800+ clients, and it publishes audit reports on its site.
How Halborn works
Halborn splits its work into assurance and advisory.
Assurance covers smart contract assessments, Layer 1 protocol reviews, source code audits, web and cloud penetration tests, red team exercises and AI security testing. Advisory covers architecture reviews, custody and key management assessments, compliance readiness, technical due diligence and training. Its client stories include a red team plus smart contract review of a CBDC pilot that found 4 critical, 9 high and 3 medium issues.
Findings in smart contract reports are scored with Halborn's own Blockchain Vulnerability Scoring System, modeled on CVSS. BVSS rates exploitability by attack origin, cost and complexity, adjusts for reversibility and scope, and then scores impact on confidentiality, availability, integrity, deposits and yield. A public calculator on its site shows how each vector maps to a severity.
How to start with Halborn
- Projects start through the contact form on halborn.com, picking one or more services from the list, from Smart Contract Assessment to Technical Training.
- For sensitive details, Halborn offers an email address on Proton Mail.
- It is a fully remote company founded by Rob Behnke and Steve Walbroehl and now led by CEO Jacques Boschung.
- Its homepage cites ISO 27001:2022 and SOC 2 Type 2 certification, which matters to banks and custodians running vendor reviews.
- To report a vulnerability to Halborn, including one in its own systems, email [email protected].
- Halborn says it acknowledges valid reports within 24 hours and sends a fuller reply within 72 hours with its view of severity and next steps.
- It scores those reports with CVSS 3.1 and includes the steps to reproduce you provide.
Risks to know before using Halborn
- When Halborn finds a flaw in someone else's product, its disclosure policy gives the vendor 90 days to fix it, up to six months with coordination.
- If a vendor does not respond within 14 days, Halborn may publish.
- That is useful to know if you rely on a protocol with an open Halborn disclosure.
Halborn alternatives
Other projects people compare with Halborn.
Tool to inspect and revoke token and NFT approvals your wallet has granted to smart contracts.
Web3 security platform running audit contests, private collaborative audits and bug bounties.
Blockchain security firm that audits smart contracts, protocols and infrastructure and builds the Lighthouse client.
Security research firm that audits blockchains, smart contracts, cryptography and AI systems.
Prague audit firm for Solana and EVM smart contracts, maker of the Wake and Trident testing tools.
Security platform with AI agents, researcher bug bounties and Spearbit onchain audits.
Where Halborn ranks on DappAtlas
Listed next to Halborn
- OpenZeppelin Smart contract tool
- CertiK Security and compliance
Halborn pros and cons
- Offers pentesting and red teaming, not only contract audits
- Publishes audit reports and vulnerability disclosures on its site
- 800+ clients and 4K+ assessments, per its homepage
- No published pricing
- Homepage does not state a founding year
Halborn FAQ
What is Halborn?
Halborn is a security firm that serves blockchain and financial services companies. Its services cover smart contract and Layer 1 assessments, code audits, web and cloud penetration testing, red team exercises and advisory. Its homepage states 4K+ assessments and 800+ clients, and it publishes audit reports on its site.
How much does Halborn cost?
Not published; requests go through the contact form, according to Halborn’s own page (checked Sep 26, 2026).
Is Halborn available in the US?
Available: terms name no country restrictions, according to Halborn’s own page (checked Sep 26, 2026).
Sources
How this page works
Sources: Halborn: official site, Halborn: Who we are, Halborn: Contact. Data as of Sep 26, 2026.
Not affiliated with any project listed. Educational content, not financial advice.