Audit Forge runs six industry-standard security engines against your Solidity in parallel, then cross-references every finding so you can trust what surfaces. Free, instant and open source. Built and operated by Condo.
Any single tool produces false positives. Audit Forge runs them all inside an isolated, network-disabled sandbox, normalizes every finding to the SWC taxonomy and clusters them by consensus. A finding flagged by three independent engines is real; a lint rule firing alone barely moves the score.
SlitherStatic analysis
by Trail of Bits
The de-facto standard Solidity analyzer: roughly 90 vulnerability detectors, fast and battle-tested.
MythrilSymbolic execution
by Consensys
Reasons about reachable EVM states with an SMT solver to surface reentrancy, integer bugs and unprotected calls.
AderynAST analysis
by Cyfrin
A fast Rust analyzer that walks the syntax tree for vulnerabilities and code-quality issues.
SemgrepPattern matching
by Semgrep
Language-aware semantic rules from the community smart-contract ruleset catch known anti-patterns.
SolhintLinting
by Protofire
Security best-practice and style rules, weighted conservatively so lint noise never drives the score.
EchidnaProperty fuzzing
by Trail of Bits
Declares invariants and hammers them with generated transaction sequences. A counterexample is proof, not a guess.
From paste to verdict in under a minute
1
Submit a contractPaste Solidity, point at a GitHub repo, or enter a verified address on any supported network. Proxies are followed to their implementation automatically.
2
Engines run in parallelStatic analysis, symbolic execution, pattern matching and linting run at once in a sandbox that cannot reach the internet. Property fuzzing is opt-in.
3
Read the reconciled reportA 0-100 score, severity strip, consensus pips per finding, an AI auditor's brief and a branded PDF. Publish to the public registry or embed the badge in your README.
Sandboxed
Every engine runs in a resource-capped Docker container with networking disabled. Your source never leaves the box during analysis.
Consensus-scored
Multi-engine agreement drives the score. Single-engine and style findings are shown for triage but weighted down.
Public registry
Publish audits to a crawlable registry, share score cards, and embed a live badge that links back to the verified report.
Open source
AGPL-3.0. Read exactly how every verdict was reached, self-host it, or contribute a detector.
SUPPORT THE CAUSE
Free for everyone. Funded by the Condo treasury.
Every scan costs real compute. Condo covers it so Audit Forge stays free and open for every builder. If it saved you an audit fee, a contribution keeps the engines running.
CONTRIBUTION ADDRESS · ANY EVM CHAIN0xEf3E49a3197417ccDbF5F6A60D89f7Fa4823199d
Send ETH or tokens on Ethereum, Base, Arbitrum, Robinhood Chain or any EVM network. Contributions are voluntary and non-refundable.
Automated first pass, not a seal of approval. Audit Forge automates triage and catches the well-known bug classes. It is not a substitute for a professional manual audit; engage a qualified auditor for any contract that handles user funds.
