Vanguard catches critical smart contract bugs before deployment
Static analysis powered by static analysis. Detect reentrancy, access control issues, and unsafe patterns automatically.
Automated detection with mathematical precision
CI/CD Friendly
Runs on Foundry projects with minimal setup. Integrates into GitHub Actions. Get vulnerability reports on every pull request.
Advanced Vulnerability Triage
Related findings grouped together. Mark root causes to eliminate false alarms in bulk. Review takes minutes, not weeks.
Custom Detectors
Write detectors for patterns specific to your codebase. Reusable across multiple projects.
Precision-Tuned Analysis
Optimized to minimize false alarms. Static analysis provides mathematical guarantees.
Formal methods for smart contract security
Static Analysis
Reasons about contract behavior without executing code. Mathematical models detect vulnerabilities from complex state interactions.
Beyond Pattern Matching
Understands smart contract semantics. Analyzes interleaved transactions across contracts. Traces value flow through protocols.
Formal Methods Foundation
Built on formal methods research. Stronger guarantees than heuristic tools. Fewer false alarms than competing analyzers.
Comprehensive vulnerability coverage.
Reentrancy vulnerabilities
Interleaved transactions. Unexpected state changes. Cross-function patterns.
Access Control Issues
Missing permission checks. Execution path tracing. Authorization bypass patterns.
Unchecked Call Statuses
Failed external calls. Ignored return values. Exploitable protocol states.
Unsafe Token Transfer Patterns
Stuck funds detection. Missing approval checks.
Missing Data Validation
Unsanitized inputs. Missing range checks. Unchecked array accesses.
Seamless workflow integration
CI/CD Integration
Get vulnerability reports delivered to GitHub Actions. Add to pull request workflows. Catch vulnerabilities before merge.
Framework Support
Works with Hardhat and Foundry. Simple setup, no expertise required.
AuditHub Platform
Visual report analysis. Team collaboration. Triage workflows across engagements.
Custom Extensibility
Custom query language for project-specific patterns. Build your detector library.
Encode your expertise into reusable detectors
Transform security knowledge into automation.
Write once, catch forever.
Transform repetitive checks into automated detectors.
Reusable across all projects.
Your knowledge becomes automated security infrastructure.
Built on formal methods
Mathematical guarantees, not probabilistic guesses.
Mathematical Guarantees
Static analysis provides formal guarantees about checked properties. Goes beyond heuristic pattern matching. When Vanguard says a bug class is absent, it’s provably absent.
Production-Proven
Calibrated on 150+ security audits. Detects genuine security risks, not theoretical issues. Tuned for real-world protocols and production codebases.
Frequently AskedQuestions
How accurate is Vanguard compared to manual code review?
Vanguard uses static analysis to provide formal guarantees about checked properties. For supported vulnerability classes like reentrancy and access control issues, Vanguard detection is mathematically sound. Manual reviews cannot provide similar guarantees.
What if Vanguard reports too many false positives?
Vanguard is optimized to minimize false alarms. Through AuditHub, related findings are grouped together. Mark one root cause to eliminate related false alarms in bulk. Reports fewer false alarms compared to other static analysis tools.
How do I run Vanguard on my Solidity project?
Vanguard runs on Foundry projects with minimal setup required. Supports Solidity versions 0.8.4 and newer. Get vulnerability reports delivered straight into GitHub Actions.
Does Vanguard work with my existing development workflow?
Vanguard integrates seamlessly into development pipelines. Works with Hardhat and Foundry projects. Enables continuous monitoring and prevents regressions during refactors.
What is static analysis for smart contracts?
Static analysis is a technique that automatically scans a codebase for vulnerabilities without running the code. For smart contracts, static analysis detects issues like reentrancy, access control flaws, and unsafe patterns faster than manual review.
Catch bugs before deployment
Static analysis with mathematical guarantees. Integrate in minutes.
Get started in 30 minutes / No setup required / See results immediately