/

Consensys Diligence

  • What it is:Consensys Diligence is a ConsenSys auditing service providing smart contract security audits, analysis tools, and best practices for Ethereum and blockchain projects.
  • Best for:Ethereum developers, Web3 startups, Smart contract auditors
  • Pricing:Free tier available, paid plans from Under $50/month
  • Rating:82/100Very Good
  • Expert's conclusion:ConsenSys Diligence is a credible option for serious blockchain projects desiring professional smart contract security auditing from a reputable Web3 company.
Visit website
Reviewed byMaxim Manylov·Web3 Engineer & Serial Founder

What Is Consensys Diligence and What Does It Do?

The Consensus Diligence is a security audit branch of the blockchain-based company Consensus, which was developed by Joseph Lubin (co-creator of ethereum) to help companies develop their blockchain-based decentralized applications (DApps).

Active
📍Fort Worth, TX
📅Founded 2017
🏢Subsidiary
TARGET SEGMENTS
Blockchain ProjectsDeFi ProtocolsEnterprise ClientsWeb3 Developers

What Are Consensys Diligence's Key Business Metrics?

📊
100+
Smart Contracts Audited
📊
100+
Enterprise Clients
📊
$7 billion
Parent Company Valuation
🏢
600-700
Parent Company Employees

How Credible and Trustworthy Is Consensys Diligence?

82/100
Good

Consensys Diligence has the backing of its parent company’s large market presence and reputation within the ethereum ecosystem and is well known for providing third party auditing services for some of the most high profile cryptocurrency ventures, but due to lack of public information about the company, it limits the ability to determine the total amount of information that is transparent.

BREAKDOWN
Product Maturity85/100
Company Stability85/100
Security & Compliance88/100
User Reviews75/100
Transparency80/100
Support Quality78/100
TRUST SIGNALS
Founded 2017 by established blockchain company ConsensysAudited 100+ leading crypto projects and protocolsDeveloped open-source security tools adopted across blockchain industryBacked by major institutional investors including Microsoft, SoftBank, HSBCPart of Enterprise Ethereum Alliance founding member100+ enterprise customers for parent company services

What is the history of Consensys Diligence and its key milestones?

2015

Consensys Founded

Consensys was created by Joseph Lubin to be a software foundry to create decentralized applications on the Ethereum blockchain.

2017

Consensys Diligence Launched

A smart contract security audit service was introduced by Consensys, with an aim to advance the use of blockchain technology and promote best practices in security throughout the Ethereum ecosystem.

2020

Company Restructuring

After being integrated into one entity, Consensys reorganized into an integrated software company and created Consensys Diligence as a separate division focused on performing security audits in support of protocol and project development.

2020

Quorum Acquisition

Consensys also expanded its offerings to provide enterprise-level blockchain solutions when it purchased JPMorgan Chase’s Quorum banking blockchain platform.

2021

Series C Funding

Consensys received funding of $200M at a value of $3.2B from investors including Animoca Brands, Coinbase Ventures and HSBC.

2022

Series D Funding

Consensys received $450M in funding led by ParaFi Capital, with participation from Microsoft, SoftBank, and Temasek, at a value of $7B.

Who Are the Key Executives Behind Consensys Diligence?

Joseph Lubin— CEO and Founder
Co-creator of Ethereum and Founder of Consensys. Leader in blockchain technology and decentralized software development. Technical expert in developing Smart Contracts and Web3 Infrastructure.

What Are the Key Features of Consensys Diligence?

✨
Smart Contract Auditing
Smart Contract Audit Services – Consensys conducts thorough security audits of smart contracts identifying vulnerabilities, gas optimization issues and best practice violations.
🔒
Protocol Security Assessment
Blockchain Protocol Analysis – Consensys performs in depth analyses of blockchain protocols and consensus mechanisms to identify potential security risks or design flaws.
🔒
Open Source Security Tools
Open Source Tools Development – Consensys develops and maintains a wide range of open source security tools and frameworks used across the blockchain ecosystem for detecting vulnerabilities.
✨
Best Practices Consultation
Access to guidance on blockchain security standards and best practices for implementing blockchain securely in your development team.
📊
Enterprise-Grade Analysis
Comprehensive security assessments for enterprise-level and institutional blockchain projects, as well as central bank digital currency pilots (CBDC).
🔒
Security Training and Knowledge Sharing
Contribution to the growth of security awareness within the blockchain ecosystem through documentation and educational content about potential vulnerabilities and how to mitigate them.

What Technology Stack and Infrastructure Does Consensys Diligence Use?

Infrastructure

Part of Consensys infrastructure spanning U.S. (Fort Worth, Texas headquarters), New York, London, and additional global hubs

Technologies

SolidityEVMEthereumWeb3 frameworks

Integrations

Ethereum ecosystemEVM-compatible blockchainsDeveloper toolsProtocol implementations

AI/ML Capabilities

Not a primary focus; service emphasizes manual security analysis and expert assessment by engineer teams

Based on official Consensys website and company documentation; Diligence team composition inferred from security audit service nature

What Are the Best Use Cases for Consensys Diligence?

DeFi Protocol Developers
Perform a comprehensive smart contract audit prior to mainnet launch to identify potential vulnerabilities and ensure that your protocol is secure, thus protecting user funds and reputation.
Enterprise Blockchain Projects
Obtain security assessments and compliance validation for your enterprise-level blockchain implementations, such as CBDC pilots and asset tokenization systems.
Web3 Startup Teams
Obtain expert security review and best practices guidance during the development phase of your project to minimize vulnerabilities and to quickly achieve a secure launch.
Financial Institutions
Verify the security of your blockchain solutions for use by interbank networks and enterprise applications to meet the risk management requirements of your institution.
Blockchain Protocol Researchers
Receive a detailed protocol analysis and a consensus mechanism security assessment to verify research-based implementations and to identify edge cases.
NOT FORIndividual Developers
Audit Services have limited applicability – audit services are enterprise focused and developed for larger scale projects; not cost effective for smaller individual projects.
NOT FORNon-Blockchain Software Companies
Outside of Scope – Service is specific to blockchain and smart contract security; not applicable to the auditing of traditional software.
NOT FORReal-Time Trading Systems
Not Suitable for Urgent Security Needs – audit timelines are established to allow for a thorough analysis of the code base; not suitable for rapid deployment scenarios.

How Much Does Consensys Diligence Cost and What Plans Are Available?

Pricing information with service tiers, costs, and details
☐Service$CostℹDetails🔗Source
Explorer$0Free plan with up to 100 fuzzing runs, each max 5 minutes—
BuilderUnder $50/monthUnlimited fuzzing scans, each run up to 1 hourOfficial announcement
Builder ProCustom pricingUnlimited fuzzing runs with no time restrictions, for power users and enterprises—
Manual AuditsCustom quoteProfessional smart contract auditing services by Consensys Diligence experts—
Explorer$0
Free plan with up to 100 fuzzing runs, each max 5 minutes
BuilderUnder $50/month
Unlimited fuzzing scans, each run up to 1 hour
Official announcement
Builder ProCustom pricing
Unlimited fuzzing runs with no time restrictions, for power users and enterprises
Manual AuditsCustom quote
Professional smart contract auditing services by Consensys Diligence experts

How Does Consensys Diligence Compare to Competitors?

FeatureConsensys DiligenceSlowMistCertikPeckShield
Core FunctionalitySmart contract audits + fuzzingAudits + monitoringAudits + certificationAudits + real-time monitoring
Fuzzing ToolYes (greybox fuzzing)PartialYesYes
Free TierYes (Explorer plan)NoLimited scansNo
Pricing (starting)Free/$50/moCustom quote$10k+ auditsCustom quote
API AccessYes (via platform)YesYesYes
Enterprise FeaturesCustom plans, dedicated supportYes (SSO, logs)YesYes
Support OptionsCommunity + paid24/7 enterprisePriorityEnterprise
Security CertificationsEnterprise focusMultipleSOC 2Multiple
Core Functionality
Consensys DiligenceSmart contract audits + fuzzing
SlowMistAudits + monitoring
CertikAudits + certification
PeckShieldAudits + real-time monitoring
Fuzzing Tool
Consensys DiligenceYes (greybox fuzzing)
SlowMistPartial
CertikYes
PeckShieldYes
Free Tier
Consensys DiligenceYes (Explorer plan)
SlowMistNo
CertikLimited scans
PeckShieldNo
Pricing (starting)
Consensys DiligenceFree/$50/mo
SlowMistCustom quote
Certik$10k+ audits
PeckShieldCustom quote
API Access
Consensys DiligenceYes (via platform)
SlowMistYes
CertikYes
PeckShieldYes
Enterprise Features
Consensys DiligenceCustom plans, dedicated support
SlowMistYes (SSO, logs)
CertikYes
PeckShieldYes
Support Options
Consensys DiligenceCommunity + paid
SlowMist24/7 enterprise
CertikPriority
PeckShieldEnterprise
Security Certifications
Consensys DiligenceEnterprise focus
SlowMistMultiple
CertikSOC 2
PeckShieldMultiple

How Does Consensys Diligence Compare to Competitors?

vs SlowMist

Consensys Diligence provides users with the ability to integrate fuzz testing tools into their workflow using a free tier model targeting Ethereum developers; whereas SlowMist provides users with comprehensive monitoring and audit capabilities that provide stronger real-time threat detection but at a higher entry point.

Diligence is best suited for cost-effective fuzz testing during development cycles; SlowMist is best used for production monitoring.

vs Certik

Diligence is a market-leader in automated fuzz testing, and is more cost-effective compared to Certik’s formal verification and certification services.

Certik is preferred for high assurance DeFi protocol implementations; Diligence is preferred for rapid prototyping security.

vs PeckShield

PeckShield has better real-time alert and incident response features; Diligence offers better pre-launch fuzz testing through its Foundry integration, and is priced slightly higher (mid-range) compared to PeckShield.

PeckShield is best used for fuzz testing of live systems; Diligence is best used for fuzz testing of projects prior to deployment.

vs Trail of Bits

Trail of Bits primarily serves as an open-source tool developer and research entity; Diligence is a commercial SaaS provider that offers fuzzy testing with multiple tiers of service; Diligence is also supported by the Consensys ecosystem.

Trail of Bits is best suited for custom research; Diligence is best used for large-scale automated testing.

What are the strengths and limitations of Consensys Diligence?

Pros

  • Diligence offers advanced greybox fuzz testing, which is approximately 25 times more effective than competing fuzz testing solutions.
  • A free tier is available for users new to fuzz testing; the free tier allows users to execute up to 100 short test runs, each limited to 5 minutes in duration.
  • Users can integrate their Diligence accounts directly into Foundry to allow for rapid execution of fuzz tests across their project portfolios using a three-step process.
  • Diligence is part of the leading Ethereum ecosystem; it is backed by the Consensys company, which has extensive experience developing blockchain-based products and solutions.
  • When fuzz testing, users receive comprehensive reports detailing all bugs or vulnerabilities discovered by Diligence.
  • Pricing for Diligence is tiered; therefore, users have access to free fuzz testing, as well as affordable Builder plans, and higher-cost Enterprise plans.
  • Diligence is continually updated to improve performance, user experience, and address emerging fuzz testing threats and challenges.

Cons

  • Although there are free and low-cost fuzz testing options provided by Diligence, these options are limited to only 100 short test runs, each lasting no longer than five minutes; thus, users will need to purchase a paid plan to perform more substantial fuzz testing activities.
  • Fuzz testing by Diligence is primarily focused on identifying issues in code and does not replace manual auditing of projects.
  • Custom pricing plans for large-scale and/or high-end fuzz testing customers are available through Diligence; however, the prices for such plans are not transparently disclosed to potential customers.
  • The primary focus of Diligence is on fuzz testing written in Solidity; thus, while users can leverage Diligence to fuzz test smart contracts developed for the Ethereum network, they may find it less useful when attempting to fuzz test smart contracts developed for alternative blockchain networks.
  • Regardless of which plan is selected by a customer, time limits apply to each plan; for example, the Builder plan is capped at one hour per fuzz test run.
  • Customers who wish to utilize the fuzz testing services provided by Diligence must first create an account and have an active Internet connection.
  • Refunds are not available to customers of Diligence who cancel their subscription or downgrade their plan.

Who Is Consensys Diligence Best For?

Best For

  • Ethereum developers — Diligence includes native Solidity fuzz testing capabilities, along with support for Foundry, allowing users to rapidly fuzz test their projects.
  • Web3 startups — In addition to offering a free tier, Diligence also offers an affordable Builder plan for users to perform fuzz testing of their projects prior to launch
  • Smart contract auditors — An automated tool supports high-coverage manual reviews
  • DeFi protocols — Greybox fuzzing is efficient in detecting system-wide vulnerabilities
  • Consensys ecosystem users — A seamless integration with the tools of Consensys

Not Suitable For

  • Non-EVM chains — Solicty-focused; Use a chain specific auditor like Securi Lab
  • Production monitoring — Use SlowMist or Forta for live alerts as it is an early dev/pre-launch tool
  • Budget-constrained solos — Limited free tier; Manual testing or open source tools such as Echidna are better
  • Enterprises needing formal proofs — Fuzzing-based; Use Certik or Quantstamp for mathemetical verification

Are There Usage Limits or Geographic Restrictions for Consensys Diligence?

Free Tier Runs
100 fuzzing runs max, 5 minutes each (Explorer)
Builder Tier Runs
Unlimited runs, up to 1 hour each
Builder Pro Limits
Unlimited runs, no time restrictions
Supported Languages
Solidity primary (Foundry projects)
Payment Terms
Credit card via Stripe; enterprise invoiced, no refunds
Usage Quotas
Fees for overages beyond plan thresholds
Account Requirements
Free account creation required for all plans

Is Consensys Diligence Secure and Compliant?

Smart Contract ExpertiseYears of auditing experience across blockchain ecosystem, public audit reports available
Greybox FuzzingAdvanced security testing covering entire contract systems for comprehensive vulnerability detection
Threat ModelingIdentifies entry points for hackers, visualizes attack surface, updates for evolving risks
Consensys InfrastructureEnterprise-grade security practices from leading Ethereum software provider
Data ProtectionSecure platform handling code analysis; terms prohibit reverse engineering
Audit LoggingComprehensive fuzzing reports with detected bugs and vulnerabilities
Enterprise SupportCustom plans with dedicated support for high-stakes projects

What Customer Support Options Does Consensys Diligence Offer?

Channels
Available at consensys.io/contact and diligence.security/contactContact form submission for quote requests
Specialized
Dedicated security consultation team for smart contract audit requests
Support Limitations
•Limited public information about support hours and response times
•No documented 24/7 support availability
•Support appears to be primarily sales/consultation focused rather than customer support

What APIs and Integrations Does Consensys Diligence Support?

API Type
Not publicly documented
API Documentation
No public API documentation available
Integration Approach
Service-based security auditing platform - integrations handled through manual engagement and reporting rather than programmatic APIs

What Are Common Questions About Consensys Diligence?

Consensys Diligence delivers smart contract auditing, testing, fuzzing, and formal verification services that assist companies across the full spectrum of blockchain development, and can be used at any time during this process. The purpose of these services is to locate potential security flaws within smart contract code so that the overall quality of Web3 applications is ensured.

The services provided by Consensys Diligence include smart contract audits, threat modelling, fuzzing for discovering potential vulnerabilities, and formal verification of blockchain code. Additionally, Consensys Diligence offers its clients additional assistance, including technical guidance on how best to remediate identified issues and provide training to the client's staff on best practices related to blockchain development.

To obtain a quote, please contact the Consensys Diligence team through their website at diligence.security/contact. Once contacted, the Consensys Diligence team will assist the organization in defining their specific security requirements, and develop a customized engagement plan that will meet those requirements.

Any organizations that develop smart contracts, and/or deploy blockchain applications, and wish to have these reviewed professionally for security and testing/verification. This would include DeFi protocols, enterprise blockchain implementations, and Web3 startup companies.

Formal verification is the process of using mathematical methods to demonstrate that smart contract code functions as intended. In general, formal verification will provide stronger assurances of security than testing alone, since it verifies that the code functions as expected under all possible input combinations (i.e., it verifies the code works correctly regardless of the combination of inputs used).

Fuzzing is an automated test methodology where a smart contract is tested with random inputs to find edge cases and potential vulnerabilities. While fuzzing is less expensive than performing a complete audit, it will complement a review performed by an auditor by identifying potential failure modes that may occur when the contract is executed under unusual circumstances.

Is Consensys Diligence Worth It?

ConsenSys Diligence is a well-established division of ConsenSys which has provided a variety of security audit services to companies in the Web3 space since its inception in 2018. It serves a unique purpose in the Web3 community by providing a service that addresses the financial risk of smart contract vulnerabilities in the Web3 space; those same vulnerabilities could lead to the loss of millions in cryptocurrency. Additionally, as a division of ConsenSys, it enjoys the benefit of being able to integrate its security assessments into ConsenSys' overall security architecture, allowing clients access to additional security offerings through ConsenSys.

Recommended For

  • DeFi protocol and token projects preparing for mainnet launch
  • Companies implementing enterprise blockchain solutions that require third-party security certification
  • Web3 startup companies developing security-critical smart contracts
  • Projects that desire formal verification and/or utilize advanced testing methodologies

!
Use With Caution

  • Budget-constrained projects -- the cost of professional audits is a major expense
  • Developers who want to receive real-time security monitoring -- prior to mainnet launch this would be considered a pre-launch security audit vs. real-time security monitoring
  • Hobbyist type projects where the audit cost exceeds the development cost

Not Recommended For

  • Teams that require an immediate security assessment without having to engage in a consulting relationship
  • Projects that require 24x7 Ongoing Security Operations Support
Expert's Conclusion

ConsenSys Diligence is a credible option for serious blockchain projects desiring professional smart contract security auditing from a reputable Web3 company.

Best For
DeFi protocol and token projects preparing for mainnet launchCompanies implementing enterprise blockchain solutions that require third-party security certificationWeb3 startup companies developing security-critical smart contracts

What do expert reviews and research say about Consensys Diligence?

Key Findings

ConsenSys Diligence is the security division of ConsenSys, the leading Ethereum software company. ConsenSys Diligence delivers a full suite of smart contract security services including audits, testing, fuzzing and formal verification. ConsenSys Diligence operates as part of ConsenSys' broader security structure and is positioned as a professional offering for enterprises and larger-scale blockchain projects.

Data Quality

Fair - Limited public information available. Basic service descriptions and contact information available on official websites (consensys.io/diligence and diligence.security). No pricing information publicly disclosed. No customer testimonials or case study details available. Service details suggest professional/enterprise model requiring direct engagement.

Risk Factors

!
There is little publicly available information regarding pricing and terms of engagement
!
No documented Service Level Agreements (SLA) or Response Time Guarantees
!
Limited transparency regarding qualifications of team members and methodology utilized
!
No publicly visible customer success stories or success metrics
Last updated: January 29, 2026

What Additional Information Is Available for Consensys Diligence?

Part of ConsenSys

Consensys Diligence is a security team at ConsenSys which is the largest Ethereum software company. This will give you access to deeper Web3 knowledge and will be able to connect to the larger product family of ConsenSys including MetaMask.

Security Focus

They specialize in Web3 security, which includes Smart Contract Vulnerabilities, Blockchain Architecture, DeFi specific attack paths. As a result they are specialized for security audits related to blockchain specific attacks that are often missed by general software security auditors.

Service Scope

They provide security auditing services across the whole development life cycle of a blockchain application, this includes during the development phase, pre-deployment phase, post deployment phase, as well as testing, auditing, and formal verification based on the current state of the project.

What Are the Best Alternatives to Consensys Diligence?

  • •
    Trail of Bits: A large security company that has been around for years, specializing in audits of smart contracts, and advanced security services. Their auditing services use a very rigorous methodology, they also publish research on how to improve Web3 security. While they have a broad scope of services, they have a lot of experience working with Web3 applications. For those looking for a respected third party security audit service, Trail of Bits may be the best option.
  • •
    OpenZeppelin: An open-source smart contract security tool that offers free audits of open source contracts as well as commercial audits of closed source contracts. They also offer a variety of security tools for developers. They are known for making the process of auditing and securing smart contracts easier. For those looking for an all-in-one solution for both audits and ongoing security tools, OpenZeppelin may be the best option.
  • •
    Certora: A formal verification platform for smart contracts that uses property-based testing and mathematical proofs. This is an automated way to continuously verify your smart contracts. However, users do need to learn their specification language. For those who want to run continuous formal verification checks on their smart contracts instead of a one time audit, Certora may be the best option.
  • •
    Spearbit: A protocol security firm that offers smart contract audits and security consulting. They have a pool of independent security researchers and experienced auditors available to work with clients. Clients can choose from a flexible range of engagement models to fit their needs. For those looking for a high quality audit and a chance to select from a pool of independent security researchers, Spearbit may be the best option.
  • •
    Halborn: Halborn is a full service Blockchain Security Firm that provides auditing of your smart contract code for issues such as insecure storage of funds, Denial of Service attacks on your dApp, etc., in addition to penetration testing and incident response. Halborn offers enterprise level blockchain security solutions and is an excellent choice for large scale blockchain based business' that require broad security protection. (halborn.com)

What Are Consensys Diligence's Audit Track Record?

100+
Blockchain Companies Protected
Wide range
Public Audits Published
10+
Years in Ethereum Ecosystem

What Supported Blockchains Does Consensys Diligence Support?

EthereumEVM-compatible

What Audit Methodology Was Used to Review Consensys Diligence?

Manual Code Review

Review of your smart contracts for vulnerabilities related to Ethereum.

Automated Analysis

Integrates with MythX for Static, Dynamic, and Symbolic Execution Analysis.

Security Best Practices

Customized reviews that address the unique vulnerabilities present in your blockchain.

Detailed Reporting

Remediation Recommendations included in detailed audit analysis report.

How Does Consensys Diligence's Audit Services Compare?

ServiceDescriptionTarget
Smart Contract AuditsComprehensive security audits for Ethereum applicationsStartups to Enterprises
Security ReviewsProtocol readiness assessment for launchHigh-impact projects
MythX IntegrationAutomated vulnerability scanningDevelopment phase

What Notable Audits Does Consensys Diligence Support?

0x Staking ContractsEthereum Ecosystem Projects

What Programming Languages Does Consensys Diligence Support?

Solidity

Expert Reviews

📝

No reviews yet

Be the first to review Consensys Diligence!

Write a Review

Similar Products

Halborn
halborn.com
OpenZeppelin
openzeppelin.com
Trail of Bits
trailofbits.com