Find the gaps in your security controls.
Answer plain-language questions about how your team handles keys, treasury, infrastructure, and incidents. Atlas weighs each gap by potential loss, then shows you what to fix first.
Risk-weighted scoring
Each control is weighted by the loss it could cause. One open critical gap can cap your overall rating.
Only relevant questions
A short intake filters out controls that do not apply to your team before the review begins.
Findings you can act on
Each finding names the missing control, how critical it is, and what full implementation requires.
How the review works
Atlas builds your review from 297 controls across 12 domains and puts the highest-risk gaps first.
- 01
Describe your setup
Answer a short set of questions about your team, products, infrastructure, and custody model.
- 02
Review the controls
Work through plain-language questions at your own pace. Atlas saves your progress and lets you flag anything you need to verify.
- 03
Calculate the rating
Your answers are weighted by loss potential. One open critical control can cap the overall rating.
- 04
Choose what to fix first
Use the ranked findings to decide what needs attention now and what can wait.
One review, useful across the team
Founders, security leads, and investment teams can work from the same set of findings.
Read about data useFounders and operators
See which open controls carry the most risk and choose where to spend time first.
Investment committees
Review a consistent set of operational controls before an investment.
Security and platform leads
Work from a ranked list that separates critical gaps from the rest.
From answers to ranked findings
See your overall rating, compare domains, and work through gaps in order of potential loss.
Operational risk rating
Developing
Capped by 3 unresolved critical findings in signing and key custody.
8 / 12
Domains reviewed
3
Critical findings
17
Open findings
Twelve domains, one rating
Start with a profile-tailored baseline across all 12 domains, or choose a smaller set for a focused review.
Keys & treasury
- KM
Key Custody & Recovery
20 controls · Encryption, Backups, Compromise protocol
- MS
Signing Governance
28 controls · Thresholds, Hardware wallets, Pre-sign checks
- TM
Treasury & Custody Operations
28 controls · Spending limits, Address verification, Reconciliation
- CM
On-Chain Intelligence
19 controls · Wallet alerts, On-call, Alert triage
Engineering & infrastructure
- SC
Protocol & Contract Operations
22 controls · Audits, Timelocks, Bug bounty
- SD
Engineering & Delivery Security
28 controls · Branch protection, Secrets handling, Cloud IAM
- SY
Third-Party & Build Supply Chain
24 controls · Vendor reviews, Pinning, SBOM
- FD
Frontend, Domain & Communications
26 controls · DNSSEC, DMARC, CT logs
People & response
- AC
Identity, Access & Endpoints
40 controls · MFA, Devices, Onboarding & offboarding
- IM
Detection, Response & Recovery
23 controls · IR document, Playbooks, Drills
- GV
Program Governance & Risk
24 controls · Security owner, Policies, Risk register
- PS
Physical, Personnel & Facilities
15 controls · Device storage, Visitor policy, Procurement
Start with the gaps that carry the most risk.
Atlas is invite only. Set up your review, then send your company and work email for approval.