zkSecurity: AI-assisted security audits for cryptography and ZK
===============================================================

zkSecurity is a cryptography security firm with more than a hundred audits across zero-knowledge, MPC, FHE, post-quantum and consensus systems. It builds [zkao](/tools/zkao/), the continuous AI scanner for cryptography code, publishes [zk-skills](/tools/zk-skills/) and the [zkbugs](/tools/zkbugs/) benchmark as open source, and offers enterprise packages that combine zkao with its security engineers and manual audits. Its 2026 case studies (Cloudflare CIRCL, OpenVM, Bron Labs) are the most detailed public accounts of AI findings in cryptographic code, including what the AI got wrong.

Website: https://www.zksecurity.xyz
Headquarters: Remote-first (United States and Europe)
Focus: Cryptography and ZK audits with AI tooling built in-house: zkao, zk-skills, zkbugs; human validation of every finding
Index position: #1 of 12
Services: Continuous AI scanning of cryptographic code with zkao, from single circuits to large codebases, with prepaid credits | Enterprise continuous coverage: zkao plus zkSecurity engineers validating findings, minimising proofs of concept and handling disclosure | Human security audits of ZK circuits, proof systems, MPC, FHE, post-quantum and consensus code | Open-source agent skills (zk-skills) and the zkbugs benchmark for teams running their own first pass | Formal verification in Lean 4 with Clean for components that need proofs rather than scans
Tools: zkao, zk-skills and circom-auditor, zkbugs
Evidence: https://blog.zksecurity.xyz/posts/circl-bugs/ | https://blog.zksecurity.xyz/posts/openvm-bugs/ | https://blog.zksecurity.xyz/posts/bron-bugs/ | https://blog.zksecurity.xyz/posts/circom-auditor/ | https://blog.zksecurity.xyz/posts/the-year-finding-bugs-became-cheap/ | https://reports.zksecurity.xyz/

Source page: https://agentsast.com/firms/zksecurity/
Compiled by: agentsast editors (https://agentsast.com/about/)
Last reviewed: 2026-09-13