Projects

​

Your project page

Every project on Trustblock has a page. It lists the audits published for the project, their findings and the contracts they cover, and shows the project’s links. When no audit is published for a project, the page says “Trustblock holds no audit for this project”. This is not a statement about whether the project has been audited elsewhere.

​

Finding a security firm

Security firms have profiles on Trustblock with their published audits and the metrics computed from them. You can search security firms and open their profiles.

​

Having your audit published

Audits are published by the security firm that conducted them. Ask your security firm to publish yours, or check whether it already has. Report files are hosted on IPFS: a file’s address (its CID) is derived from its content, so anyone can check that the report they are reading is byte for byte the one that was published. Each audit shows who published it and when.

​

Findings and their status

Each finding has a severity and a status. When your team read a finding and accepted the risk without fixing it, the security firm can record it as acknowledged. It is shown as “Acknowledged” and counted as not fixed.

​

Showing your record on your site

The free label shows your project’s record on any web page, and updates when the record changes. Show your record on your site sets the label, the API and a plain link side by side, with what each one states.