Tell us about your setup
These questions filter out controls that do not apply to your team. You may see a follow-up based on your answer.
Do you deploy or operate smart contracts on-chain?
Turns the Protocol & Contract Operations domain on or off.
Are any of your contracts upgradeable?
Adds storage-layout and upgrade-safety controls.
Do you have on-chain token governance?
Adds proposal-review and voting-integrity controls.
Do your contracts rely on price oracles?
Adds oracle-architecture and failure-mode controls.
Do you run DeFi mechanics - lending, staking, liquidity, or liquidations?
Adds DeFi-specific monitoring and attack-pattern controls.
Do you use cross-chain bridges?
Adds bridge-risk, exposure-limit, and emergency-exit controls.
Do you operate a public frontend, dApp, or API?
Adds frontend-integrity, CSP, SRI, and abuse-protection controls.
Do you use a third-party custody, KMS, or HSM provider?
Adds provider audit-log review and exit-plan controls.
Do you issue or centrally manage employee devices?
Adds MDM and device-posture enforcement controls.
Do you handle personal, customer, or counterparty data?
Adds privacy and data-retention controls.
Do you use containers or infrastructure-as-code?
Adds container-trust and IaC-scanning controls.
Do you have a physical office, or store signing devices somewhere physical?
Turns the Physical & Facilities controls on or off.
Do you have regulated treasury, custody, OTC, or payment obligations?
Adds sanctions and AML screening controls.
91 questions · ~45 min
This scope will be saved with your request