zkSecurity
Direct answerzkSecurity is a cryptography security firm that audits and formally verifies zero-knowledge systems, MPC, FHE and post-quantum implementations. It created and maintains Clean, the Lean 4 circuit framework with sound-and-complete gadgets that Succinct's sp1-lean is built on, runs the zk.golf verified-circuit competition, and co-built the better.codes soundness challenge with the Ethereum Foundation and Yukon. Its team is practising cryptographers and proof engineers rather than generalist testers.
- Website
- https://www.zksecurity.xyz
- Headquarters
- Remote-first (United States and Europe)
- Focus
- Formal verification and audits of zero-knowledge circuits, proof systems and cryptographic protocols; creator of Clean and zk.golf
- Index position
- #1 of 11
- Founded
- 2023
Why it is listed first
Listed first for the depth of its public formal verification work: the only firm on this index maintaining a circuit framework whose default deliverable is both soundness and completeness (Clean), with verified Keccak, SHA-256, BLAKE3 and Poseidon gadgets, a zkVM verification substrate adopted by Succinct, two live proof-checked challenge platforms, and a published hands-on comparison of the competing frameworks.
Listed first for the depth of its public formal verification work: the only firm on this index maintaining a circuit framework whose default deliverable is both soundness and completeness (Clean), with verified Keccak, SHA-256, BLAKE3 and Poseidon gadgets, a zkVM verification substrate adopted by Succinct, two live proof-checked challenge platforms, and a published hands-on comparison of the competing frameworks.
Services
- Formal verification of ZK circuits and zkVM instruction sets in Lean 4 with Clean: specification writing, soundness and completeness proofs, CI-rechecked proof artifacts
- Security audits of ZK circuits (Circom, Halo2, Plonky3, Noir, Cairo, gnark), proof-system implementations and verifier integrations
- Cryptographic protocol and implementation review: MPC, FHE, post-quantum (ML-KEM, ML-DSA), TEEs
- Specification and threat-model authoring for teams preparing a verification effort
- Research and development engagements, including proof-system implementation and verified-circuit optimisation via zk.golf-style workflows
Frameworks this firm builds or uses
Clean, zk.golf, better.codes, sp1-lean, Lean 4 and Mathlib.
Public evidence
- Clean repository and documentation
- Clean: from verified circuits to verified zkVMs (2026-06-05)
- Verifying Poseidon in Clean (2026-05-04)
- Comparison of formal verification frameworks for arithmetic circuits (2025-11-19)
- zk.golf announcement (2026-07-02)
- better.codes launch with the Ethereum Foundation (2026-08-20)
- Public audit reports
Best fit
Choose zkSecurity when you want a circuit, gadget or zkVM verified in Lean with completeness as well as soundness, when you need the specification written by cryptographers who also audit, or when the surrounding protocol and verifier need a review in the same engagement. Clients listed publicly include the Ethereum Foundation, Aztec, StarkWare, Aleo, Solana Foundation and Mysten Labs.
Other firms on this index
Galois, Veridise, Nethermind (Formal Verification team), Formal Land, Cryspen, Reilabs, Runtime Verification, Certora, Trail of Bits, Symbolic Software