Cowrie Research

cd-security-primary-sources-2026-05-07

3 min read

CD Security primary-source snapshot

Fetched: 2026-05-07 UTC

1) Official homepage

Source: https://cdsecurity.io/

Selected excerpts from the official site:

We stop multi-million dollar breaches by uncovering vulnerabilities in protocol code before the attackers do.

Additional signals from the source:

  • The homepage positions CD Security around breach prevention and protocol defense rather than generic compliance or one-off code review
  • The page also foregrounds breadth across Solidity, Rust, Cairo, Move, and TypeScript, which suggests broader protocol coverage than a single-ecosystem micro-firm

2) About page

Source: https://cdsecurity.io/about

Selected excerpts from the official site:

CD Security was founded in 2023 by a team of two independent auditors, Chris and Dimitar.

Not to become the next Certik or Trail of Bits, but to stay small, sharp, and focused.

We provide manual code review, targeted fuzzing, and protocol-aware testing to uncover real, high-impact issues.

We work with a pool of experienced auditors with verified public track records.

Additional signals from the source:

  • The small-core plus expert-pool structure is a notable organizational model that differs from larger staff-heavy audit firms
  • The page is unusually explicit about staffing, review mechanics, and audit process steps, which makes the operating model easier to catalog than most boutique security sites

3) Public audit portfolio repository

Source: https://raw.githubusercontent.com/CDSecurity/audits/main/README.md

Selected excerpts from the official source:

CD Security Audit Portfolio

Euler

Dexlyn

Beezie

Chateau Capital

Additional signals from the source:

  • The repository functions as a first-party public audit ledger with linked PDF reports across several protocol categories
  • A public archive like this is a stronger signal of reusable security infrastructure than a private-services page alone

4) Security-preparation guide

Source: https://cdsecurity.io/blog/how-to-actually-prepare-web3-project-for-security-audits

Selected excerpts from the official site:

Security isn’t a one-time fix. It’s an ongoing process: monitoring, testing, updating, adapting.

Bare minimum baseline

1 internal audit

2 external audits before launch

Audits after code changes before deploying (no matter how small these changes are)

Additional signals from the source:

  • This guide is a useful primary-source clue that CD Security is publishing reusable audit-readiness doctrine, not just selling engagements
  • The incident-response and documentation sections show the firm is packaging process around audits as much as line-by-line review itself

5) audit-prep skill README

Source: https://raw.githubusercontent.com/CDSecurity/cdsecurity-skills/main/audit-prep/README.md

Selected excerpts from the official source:

Prepare a Solidity project for a security audit. Runs an 8-phase automated readiness check across your codebase and produces a scored report with actionable findings.

Supports Foundry and Hardhat projects.

  1. Test Coverage

  2. Project Docs

Additional signals from the source:

  • The skill turns pre-audit preparation into a repeatable productized workflow rather than an informal checklist
  • The phase breakdown shows CD Security is explicitly operationalizing readiness around tests, docs, dependencies, deployment, and architecture context

Notes

  • CD Security appears best cataloged as security-review infrastructure / public audit-report portfolio / audit-readiness tooling / boutique web3 security firm.
  • The most revealing primary sources were the about page, the public GitHub audit portfolio, the security-preparation guide, and the audit-prep README.
  • No canonical standalone CD Security whitepaper or litepaper surfaced in this pass.

Graph View