All tools, by category
Cryptography and ZK specialists
Tools built for the code that general scanners handle worst: finite-field arithmetic, constraint systems, pairing libraries, MPC and post-quantum implementations. zkao (zkSecurity) is the only product in this class with public, upstream-confirmed critical findings; zk-skills makes the same audit patterns available as open-source agent skills; zkCraft adds LLM guidance to circuit fuzzing. Category guide →
| Tool | Targets | Approach | Access | Status |
|---|---|---|---|---|
| zkao zkSecurity | CircomLeo (Aleo)Rust cryptoGo cryptoMPCFHEPost-quantumTLS / E2EE | Multi-agent LLM workflows with expert-maintained skills, a second wave of validating agents, PoC harnesses, and automatic re-scans as models improve | SaaS; prepaid non-expiring credits; enterprise plans with human audits | Active (zkao 2.0 released 2026-07-24) |
| zk-skills and circom-auditor zkSecurity | CircomClaude CodeCodexCursor | Agent skills (prompts, workflows and checklists) that turn a general coding agent into a Circom auditor | Open source (MIT) | Active (released 2026-08-05) |
| zkCraft (with zkFuzz) Academic (Takahashi et al.) | CircomNoir (preliminary) | LLM proposes mutation patterns; zkFuzz's trace-constraint consistency test supplies ground truth | Open source | Research (zkFuzz at IEEE S&P 2026; zkCraft 2026 preprint) |
| AI Grinding for cryptanalysis (research) Olejnik and Naskrecki (academic) | Published cryptographic constructionsCryptanalysis | Autonomous workflow: agents propose low-precision attack hypotheses, an exact, adversarially controlled test provides evidence | Research paper | Research (2026-08-22) |
Frontier-lab and general scanners
General-purpose vulnerability scanners from Anthropic, OpenAI and Google, plus independent products such as AISLE and XBOW. They target C, C++, and mainstream application code and have produced CVEs in OpenSSL, OpenSSH, GnuTLS, wolfSSL, SQLite, FFmpeg and V8. They are not cryptography-aware, but cryptographic libraries are written in the languages they scan. Category guide →
| Tool | Targets | Approach | Access | Status |
|---|---|---|---|---|
| Claude Security Anthropic | General codeEnterprise repositoriesClaude Code plugin | Agentic multi-stage analysis that traces data flows and re-examines findings to filter false positives; findings carry CWE, severity and confidence; produces patch files | Enterprise SaaS, billed as token usage | Active (public beta May 2026; on Claude Mythos 5 from 2026-08-21) |
| Codex Security (formerly Aardvark) OpenAI | General codeCommits and pull requests | Builds a project threat model, scans commits, validates exploitability in a sandbox, proposes patches | SaaS for ChatGPT Pro, Business, Enterprise and Edu | Active (research preview 2026-03-06) |
| Big Sleep and CodeMender Google DeepMind and Project Zero | C / C++ open sourceV8SQLiteFFmpeg | LLM agent evolved from Project Naptime; CodeMender validates with sandboxed PoCs and patches with a model-as-judge; Gemini 3.5 Flash Cyber trained on OSV and OSS-Fuzz data | Big Sleep internal; CodeMender preview on Google Cloud; Flash Cyber gated to governments and partners | Active |
| AISLE AISLE | C sourceOpenSSLcurl | Autonomous analysis of C code with on-premises deployment option | Enterprise | Active |
| XBOW XBOW | Web applicationsDeployed services | Autonomous black-box penetration testing agent | SaaS | Active (155 million dollar Series C in 2026) |
Cyber reasoning systems (DARPA AIxCC)
The seven finalists of DARPA's AI Cyber Challenge, all open-sourced after the August 2025 final. They combine LLMs with fuzzing and program analysis to find and patch bugs in C and Java, processed 54 million lines of code in the final, found 18 real zero-days and patched 43 of 54 synthetic bugs. OpenSSF's OSS-CRS packages them for open-source maintainers. Category guide →
| Tool | Targets | Approach | Access | Status |
|---|---|---|---|---|
| Atlantis Team Atlanta (Georgia Tech, Samsung Research, KAIST, POSTECH) | CJava | Ensemble of independent bug-finding modules sharing seeds, with eight patching agents | Open source | Open-sourced after the 2025-08-08 final |
| Buttercup Trail of Bits | CJava | LLM plus fuzzing plus program analysis using non-reasoning models; finds and patches | Open source | Open-sourced 2025 |
| RoboDuck Theori | CJava | LLM-only pipeline with no fuzzing or symbolic execution | Open source | Open-sourced 2025 |
| OSS-CRS and other AIxCC finalists OpenSSF and the AIxCC finalist teams | CJavaOSS-Fuzz projects | Packaging of finalist components (Shellphish ARTIPHISHELL, 42-b3yond-6ug BugBuster, all-you-need-is-a-fuzzing-brain, Lacrosse) for open-source maintainers | Open source | Active |
Smart-contract AI auditors
Commercial and open-source AI auditors for Solidity, Vyper, Rust (Solana), Move and Cairo. Published recall against human audits ranges from about 30 percent (Nethermind AuditAgent on its own audits) to about 70 percent on the EVMbench benchmark; precision on live code is around 55 percent in the one controlled study (Sherlock AI). Several also cover ZK circuit languages. Category guide →
| Tool | Targets | Approach | Access | Status |
|---|---|---|---|---|
| Sherlock AI Sherlock | SolidityEVM | Multi-step LLM reasoning trained on top researchers' findings; GitHub PR integration; codebase chat; verification tests for fixes | Commercial (contact sales) | Active (v2 May 2026) |
| AuditAgent Nethermind Security | EVMSolanaStarknet | LLM agent run after manual review as a second layer | SaaS | Active |
| Zellic V12 Zellic | Solidity | LLM combined with static analysis, aimed at the roughly 70 percent of bugs that are coding mistakes | Announced as free; current availability and pricing not confirmed | Active (announced 2025-09-25) |
| Savant Chat Novel Codes DMCC | SolidityVyperRustMoveCairoFunCCircomHalo2Noirarkworks | Multi-agent LLM stack across 200+ vulnerability classes; critic subagent writes a PoC per finding on higher tiers | Pay per line (0.07 to 0.50 dollars) or 250 to 2,500 dollars per month; 75 dollars free credits | Active |
| Olympix Olympix | Solidity | IR and custom detectors, symbolic execution, fuzzing, mutation testing plus AI, with executable PoCs, run per commit | Commercial CI tool | Active (founded 2022) |
| Octane Security Octane | EVMSolanaAptosSuiCosmos | Continuous AI scanning with automated fixes | Commercial | Active (6.75 million dollar seed) |
| Hound Bernhard Mueller (scabench-org) | Language-agnosticSolidity | Relation-first knowledge graphs, persistent vulnerability hypotheses, scout and strategist model switching | Open source | Active (paper 2025-10) |
| QuillShield QuillAudits | Solidity | AI audits plus open-source Claude skills using a 'Semantic State Protocol' (behavioral decomposition, threat modeling, adversarial simulation, risk scoring) | Commercial; skills open source | Active |
| Cecuro Cecuro | DeFi contracts | Specialised agent; benchmark and baseline open-sourced, agent withheld | Commercial | Active |
| Certora AI Composer Certora | Solidity | Secure generation: model writes code, the formal prover checks invariants before acceptance | Open source alpha (2025-12-04) | Alpha |
| Immunefi Magnus Immunefi | Smart contractsBounty programs | Security Swarm agents, Fuzzland AI fuzzing integration, CODEX vulnerability dataset | Commercial platform | Active |
Benchmarks and research
The datasets used to score AI bug finders, and the research systems that established the methods. zkbugs is the only ZK-specific benchmark; EVMbench (OpenAI and Paradigm) is the most cited for Solidity and the most criticised for contamination; CyberGym and BountyBench cover general software. Read the methodology before the headline number. Category guide →
| Tool | Targets | Approach | Access | Status |
|---|---|---|---|---|
| zkbugs zkSecurity | CircomZK DSLs139 catalogued vulnerabilities | Reproducible vulnerable circuits with direct and full-codebase evaluation modes; public knowledge base at bugs.zksecurity.xyz | Open source | Active |
| EVMbench OpenAI and Paradigm | Solidity117 vulnerabilities from 40 audits | Detect, patch and exploit modes | Open source | Active (released 2026-02-18) |
| ScaBench and SCONE-bench scabench-org; Anthropic | Solidity31 projects from Code4rena, Cantina, Sherlock | Ground truth from public contest findings; SCONE-bench from Anthropic | Open source | Active |
| CyberGym, BountyBench and SEC-bench Academic | General software1,507 CyberGym instances from 188 projects40 BountyBench tasks | Reproduce real vulnerabilities from crash inputs (CyberGym), offence and defence bounty tasks (BountyBench), end-to-end PoC generation (SEC-bench) | Open source | Active |
| GPTScan and PropertyGPT (research) Academic | Solidity | GPTScan: GPT plus static analysis for logic bugs (ICSE 2024); PropertyGPT: retrieval-augmented generation of formal properties (NDSS 2025) | Research | Published |