ProcessReportsFAQsContactRequest an audit
Hylox Security / Services

Security services

Seven services that protect your project, from the code and infrastructure to the team and legal standing behind it.

Security and auditing

A security review of blockchain networks and protocols: consensus, block production, staking and rewards, node software, bridges and the keys that run them.

What we check

  • Consensus and validator logic
  • Staking and block reward contracts
  • Node configuration and RPC exposure
  • Bridges and cross-chain messaging
  • Operator and validator key management

What you get

  • Protocol security report ranked by severity
  • Prioritised fixes
  • Re-check of fixes
  • Final report

A full manual review of your smart contracts before launch or upgrade. We find vulnerabilities, logic errors and risky design, explain each finding and check your fixes.

What we check

  • Access control and ownership
  • Reentrancy and external calls
  • Arithmetic, rounding and precision
  • Business logic against your specification
  • Upgradeability and admin powers
  • Gas and denial-of-service risks

What you get

  • Audit report with every finding ranked by severity
  • Clear fix recommendations
  • Re-check of your fixes
  • Final report you can publish

We attack your web apps, APIs, servers and cloud set-up the way a real attacker would, then show you how to close every gap we find.

What we check

  • Web apps, dApp front ends and admin panels
  • APIs, authentication and sessions
  • Cloud and server configuration
  • Secrets and key exposure
  • Wallet connection and signing flows

What you get

  • Penetration test report with evidence
  • Fix guidance for each issue
  • Retest after fixes

We help you see attacks early. We set up monitoring for suspicious on-chain activity and infrastructure events, define alerts and plan how your team responds.

What we watch for

  • Unusual transactions and fund movements
  • Admin key and contract upgrade activity
  • Infrastructure and access logs
  • Alert rules and escalation paths
  • Incident response plan

What you get

  • Threat model and monitoring plan
  • Alert rules for your contracts and systems
  • Incident response playbook

Advisory and compliance

Security advice for your whole organisation: architecture reviews, threat modelling, security policies, incident readiness and team training, ideally before code is final.

What we cover

  • Architecture and trust assumptions
  • Key custody and admin controls
  • Security policies and access management
  • Launch and deployment plans
  • Team security awareness

What you get

  • Threat model and recommendations
  • Security roadmap
  • Launch checklist
  • Team training session

We verify the identity of a project’s core team so investors, exchanges and partners know real, accountable people are behind it.

What we verify

  • Government-issued ID documents
  • Live identity check of each team member
  • Role in the project
  • Consistency of public team information

What you get

  • Private verification record kept securely
  • Public KYC certificate for the project
  • Verification badge for your website

Not sure which service you need?

Tell us about your project and we will recommend the right review.