OWASP Smart Contract & Web3 Security
Recognised guidance for assessing smart contracts, wallets, protocols and connected applications.
OWASP Smart Contract SecurityCURATED PROFESSIONAL RESOURCES
Evidence-ledSecurity Insights.
Follow authoritative vulnerability, threat, standards and sector updates, then consider the relevance to your own exposures, controls and business priorities.
Explore authoritative security guidance and independently published updates, with practical implications for technology risk and controls.
AUTHORITATIVE SOURCES
Relevant signals. Responsible interpretation.
These external publishers update their own content. Verify date and applicability before acting on an advisory.
CISA Known Exploited Vulnerabilities Observed exploitation informs vulnerability prioritisation.MITRE ATT&CK Knowledge Base Adversary techniques and mitigation/detection context.OWASP Application & AI Security Web, API, mobile and AI security project guidance.Hong Kong CERT Cybersecurity alerts, threat updates and guidance for Hong Kong.SFC Rules & Standards Financial-market cybersecurity and licensed-firm regulatory guidance.NCSC New Zealand / NZISM Government assurance guidance and information security requirements.Dubai VARA Rulebooks Technology and controls expectations for in-scope digital-asset entities.China CAC Data protection and cross-border transfer requirements.
CYBERSECURITY INSIGHTS
From relevant news to client action.
Authoritative advisories and regulatory updates help organisations connect emerging threats to relevant systems, controls and business priorities.
WEB3 & REGULATED SECURITY INTELLIGENCE
Security Intelligence with Business Relevance
A production Insights service can publish dated, source-linked summaries for financial services, Web3, government and enterprise buyers, identifying material exposure and management implications.
SFC · BMA · Dubai VARA
Official guidance provides regulatory context for custody, platform security, control assurance and virtual-asset operations.
Dubai VARA RulebooksCISA KEV & MITRE ATT&CK
Use independently maintained vulnerability exploitation evidence and attack techniques to inform risk-based decisions.
CISA KEV CatalogueLET'S START WITH THE BUSINESS RISK
Clearer risks. Stronger controls.
More confident decisions.
Tell us about your technology environment, security concerns or upcoming regulatory and programme priorities. We’ll help scope the right specialist assessment or advisory engagement.