agentsast / Field notes
Trail of Bits
Reviewed 2026-09-13
Direct answerTrail of Bits built Buttercup, the AIxCC runner-up, and has reorganised its audit practice around AI: it reports 15 to 200 AI-surfaced candidate bugs per week on suitable engagements, about 20 percent of reported findings first surfaced by AI, every one validated by an auditor, and publishes 201 skills and 94 plugins as open source. It has a cryptography and ZK practice.
- Website
- https://www.trailofbits.com
- Headquarters
- New York, United States
- Focus
- AI-native security practice: Buttercup, 201 open-source skills, about 20 percent of reported bugs first surfaced by AI, all human-validated
- Index position
- #2 of 12
- Founded
- 2012
Services
- AI-assisted security audits with human validation
- Buttercup and open-source skills
- Cryptography, ZK and blockchain audits
Tools this firm builds or uses
Public evidence
Best fit
Choose Trail of Bits for a broad AI-assisted audit of C, Rust and application code with a strong cryptography bench.
Other firms on this index
zkSecurity, Zellic, Nethermind Security, Sherlock, Cantina (Spearbit), Consensys Diligence, Cyfrin, OpenZeppelin, QuillAudits, Certora, Veridise