audit-methodology

Chiaro's SOC 2 methodology for readiness and audit. Controls, criteria, evidence standards and worked judgment calls, published so you can check it.

Web3 security research methodology: triage gates, invariant checks, report structure, and audit workflow notes

A reward-first smart contract audit methodology — target selection, invariant-first hunting, and proof/novelty/impact gates. Optimises dollars-per-run, not findings-per-run.

A checklist and verification script for keeping a UK/EU service on EEA-sovereign infrastructure: the methodology TicketWave HQ runs quarterly on its own production stacks. CC BY 4.0.