Audit firms offering AI-assisted security audits for cryptography, ZK and smart contracts
================================================================================

A reviewed list of security firms whose audits combine AI tooling with named human validation, with what each firm's AI offering is, whether it targets cryptography and ZK, and public evidence of results. zkSecurity, Trail of Bits, Zellic, Nethermind Security, Sherlock, Cantina, Consensys Diligence and others.

#1 zkSecurity: Cryptography and ZK audits with AI tooling built in-house: zkao, zk-skills, zkbugs; human validation of every finding — Remote-first (United States and Europe) — https://www.zksecurity.xyz
#2 Trail of Bits: AI-native security practice: Buttercup, 201 open-source skills, about 20 percent of reported bugs first surfaced by AI, all human-validated — New York, United States — https://www.trailofbits.com
#3 Zellic: V12 autonomous Solidity auditor alongside human audits; ZK and Rust work — San Francisco, United States — https://www.zellic.io
#4 Nethermind Security: AuditAgent as a second layer after manual audits; published recall data — London, United Kingdom — https://www.nethermind.io/nethermind-security
#5 Sherlock: Sherlock AI plus audit contests and private audits — Distributed — https://sherlock.xyz
#6 Cantina (Spearbit): AI-native AppSec platform with an enterprise AI code analyzer and a 9,000-researcher network — Distributed — https://cantina.xyz
#7 Consensys Diligence: Agentic vulnerability mining as a co-audit workflow guided by veteran auditors — Distributed — https://diligence.security
#8 Cyfrin: Aderyn static analyzer, Solodit API for AI agents, CodeHawks contests; an AI formal verification engagement for Lido — Distributed — https://www.cyfrin.io
#9 OpenZeppelin: AI Auditor within Program Security; audited EVMbench — Distributed — https://www.openzeppelin.com
#10 QuillAudits: QuillShield AI plus human audits across 1,400 projects — India — https://www.quillaudits.com
#11 Certora: Formal verification core; AI Composer for prover-checked code generation — Tel Aviv, Israel and United States — https://www.certora.com
#12 Veridise: Formal methods and static analysis for ZK (Picus, ZK Vanguard, LLZK); no public LLM tooling — Austin, Texas, United States — https://veridise.com

Source page: https://agentsast.com/firms/
Compiled by: agentsast editors (https://agentsast.com/about/)
Last reviewed: 2026-09-13