UniKernels
Minimal, single purpose kernels with a far smaller attack surface than a general purpose OS.
Orijtech Security
Securing the cyber realm and supply chain.
Build secure components from the ground up, then prove it with audits, tools and advisories. Security and performance from core contributors to Go and Cosmos.
Audits and advisories for
- Cosmos
- Celestia
- Quicksilver
- Evmos
- Ignite
- Chainguard
- American Express
What we do
Our products and offerings
Static analyzers
Purpose built analyzers that catch leaks, missing returns and lost signals before they ship.
Security audits
Deep code and protocol reviews, from Merkle trees and p2p stacks to whole chains.
Symbolication and pattern search
Find every place a vulnerable pattern lives, across large codebases and binaries.
Semantic code search
Search by meaning, not by string, to trace how data and control really flow.
Publicly attributed CVEs
Vulnerabilities found, disclosed and credited publicly.
Supply chain analysis
Mapping and hardening the dependencies, images and pipelines your software is built from.
Programming language expertise
Core contributors to the Go programming language and the Cosmos ecosystem.
High performance engineering
Security and speed together: profiling, load testing and efficient systems.
Our approach
Build secure, instead of only catching what is broken.
Defending and catching issues forever is a losing game. A more pragmatic and holistic approach is to build secure components from the ground up, which is what Orijtech Security was started to do.
Many of the ideas in the US Executive Order 14028 on improving the nation's cybersecurity are what we had already planned for.
Coming up
Work and tools
Audits
Selected audits and advisories, filterable by ecosystem. Tools
Open source analyzers and load testers, with links. Supply chain
Reports, the Cosmos Hardening Guide and the Go Coding Guide. CVEs stage 5, building
Publicly attributed vulnerabilities. Contact stage 6, building
A short form that reaches the security team.
Selected audits and advisories, filterable by ecosystem. Tools
Open source analyzers and load testers, with links. Supply chain
Reports, the Cosmos Hardening Guide and the Go Coding Guide. CVEs stage 5, building
Publicly attributed vulnerabilities. Contact stage 6, building
A short form that reaches the security team.