Senior security support for early-stage Web3 teams
This is Protocol Security with Care
Early-stage Web3 teams need more than a last-minute audit. Security affects smart contracts, protocol design, infrastructure, operations, and developer workflows.
If you only need a security stamp, I may not be the right fit.
But if you want senior security support before launch, audit, fundraise, or major upgrades, this is how we can work together:
Fractional Security: senior protection before things break
Security should not start two weeks before an audit.
I work with early-stage Web3 teams that need senior security guidance before they are ready to hire a full-time security lead. The goal is to reduce risk continuously across code, architecture, infrastructure, operations, and developer workflows.
This is not just a code review. It is lightweight, ongoing security support for teams preparing to launch, fundraise, pass an external audit, or ship major protocol upgrades.
-
Understand the protocol and risk surface
Reviewing what you are building, your architecture, launch timeline, admin model, dependencies, current security practices, and where the highest-risk decisions are.
-
Harden the foundations:
Spotting the areas that can create immediate exposure: key management, multisigs, admin roles, timelocks, deployment processes, infrastructure assumptions, frontend integrations, and incident-response readiness.
-
Improve developer workflows:
Integrating security earlier into the development process through review habits, testing strategy, automated tooling, fuzzing or invariant testing guidance, and threat-modeling sessions with the team.
-
Prepare for audit, launch or upgrade:
Improve audit readiness, documentation, test maturity, and remediation workflows so external reviews and production changes are less chaotic and more effective.
The goal is simple:
Turn security from a last-minute blocker into a continuous engineering practice.
Need senior security support without a full-time hire?
Focused review of smart contracts, architecture, and protocol design
Not every team needs an ongoing retainer from day one. Sometimes the right starting point is a focused review of a critical component, design decision, upgrade, integration, or launch scope.
I review Solidity/EVM systems, DeFi protocols, account abstraction flows, Rust-based components, and protocol architecture from both code-level and attacker-mindset perspectives.
Useful before an external audit, after a major refactor, before mainnet launch, or when your team wants independent security input on a specific area.
Unsure where the real risk is?
Audit Readiness: prepare before the audit starts
External audits are expensive, time-boxed, and often happen under launch or fundraising pressure.
I help teams prepare before the audit starts by reviewing documentation, test maturity, known risks, deployment assumptions, and scope definition.
During or after the audit, I can help triage findings, review fixes, and verify that remediation does not introduce new issues.
Audit coming soon?
I teach smart-contract and blockchain security through university courses, practical workshops, CTFs, and vulnerable-by-design training environments.
Training can help your team understand vulnerability patterns, improve internal review habits, and work more effectively with external auditors.
Sessions can be delivered online or in person, and adapted to your protocol, team maturity, and technical background.
Need practical security training?
“I'm interested, what about your rates?”
Engagements depend on your stage, scope, urgency, and the level of support required.
I work with a small number of teams at a time so I can stay close to the project and provide senior security judgment instead of a generic report.