Oak Security

Founded in 2017, Oak Security is a cybersecurity company based in Munich, Germany working in application security, penetration testing, security awareness.

Oak Security is a security firm focused on Web3 protocols and organisations. Its core service is blinded, multi-expert security audits of smart contracts, consensus algorithms, virtual machines and bridges, with Foundation, Seed and Signature tiers. It also offers continuous audits (pull-request reviews between full audits with guaranteed turnaround), operational security reviews covering multisig design, key management, deployment security, governance and incident response, Web3-native penetration testing of wallets, browser extensions, web interfaces and backends, operational security training for technical and non-technical team members, and vCISO services. Oak Security reports 600+ engagements since 2017 and publishes its audit reports on GitHub. It develops the open TRACE threat modelling methodology and the AiTM and Pre-Audit Agent tools, currently in private beta. The company is an accredited assessment firm for the SEAL operational security certification.