trailofbits

Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform

Systematic code maturity assessment using Trail of Bits' 9-category framework.

CodeQL is a static analysis framework that queries code as a database.

Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis.

Measures timing side channels in cryptographic implementations by running them, using dudect for statistical analysis and Timecop over…

Scans Cosmos SDK blockchain modules and CosmWasm contracts for consensus-critical vulnerabilities — chain halts, fund loss, state…

Extracts protocol message flow from source code, RFCs, academic papers, pseudocode, informal prose, ProVerif (.pv), or Tamarin (.spthy)…

Guides the design and structuring of workflow-based Claude Code skills with multi-step phases, decision trees, subagent delegation, and…

Generates Mermaid diagrams from Trailmark code graphs.

Annotates codebases with dimensional analysis comments documenting units, dimensions, and decimal scaling.

Analyzes DWARF debug information in compiled binaries.

Analyzes smart contract codebases to identify state-changing entry points for security auditing.