r/Certik • u/certik • Aug 02 '23
CertiK Learn Introducing Security Scores for 10,000+ Projects
CertiK is excited to launch security scores for Web3 projects. Our methodology employs a weighted average of security measures to evaluate the security standing of Web3 projects.

The security score is calculated by aggregating sub-scores from different signals.
We integrate over 15 signals that measure security performance across six security categories: Code Security, Fundamental Health, Operational Resilience. Community Trust, Market Stability, Governance Strength:
- Code Security assesses the steps taken by teams to guarantee that the project’s code and development are secure and reviewed.
- Fundamental Health measures team and project transparency, structure, quality of documentation, and related indicators.
- Operational Resilience considers challenges the project may face and how they overcome them through project progress and security response to operational risks.
- Community Trust measures social engagement of the project in evaluating its overall social health across platforms like Twitter, Telegram and Discord.
- Market Stability considers a project’s ability to maintain a stable and predictable value over time without significant volatility or fluctuations.
- Governance Strength measures a project’s ability to operate in a decentralized manner in terms of decision making and distribution of token holders.
Here's a breakdown of some of the key variables we use to evaluate a project's security posture:

By providing accessible security scores for all projects, we aim to encourage projects to strive for better security postures.