We build developer tooling for security and verifiability — scanners, provenance, and contract-testing harnesses that slot into CI.
The tools ship as CLIs and GitHub Actions, report in SARIF / JSON / Markdown, and come with tests, CI, and security checks enabled from day one.
| Project | What it does |
|---|---|
| sorseal | Provenance + security scanning for WASM artifacts. Rebuild, hash, and seal deployed bytecode to a signed manifest, verify the deployed contract matches the source, and scan source + binary for 16 vulnerability patterns. Rust CLI + GitHub Action. |
| stellargate | DevSecOps gate — contract scanning, API contract locking, and secrets scanning as one CLI with a single pass/fail report. |
| RytScan | Zero-config static security scanner for smart contracts, with SARIF output and a CI merge gate. |
| stellar-pathfinder | Cross-border remittance route finder for Stellar anchors, ranked by compounded fee and time. |
| schemalock | Declarative API contract test harness — one YAML file locks error envelopes, auth boundaries, and status code contracts across releases. |
| shieldscan | Practical web vulnerability assessment for small businesses — automated scanning with plain-English remediation guidance. |
| vaultsweep | Secrets scanner for repos and CI that catches leaked keys, tokens, and default credentials before merge. |