Audit Wizard is a web-based security IDE providing all the tools you need to perform a smart contract audit. Import code, log vulnerability findings, use security tools and auto-generate your audit reports.

Native Authentication 🔒

You can now create an Audit Wizard account with your email. While you can still Sign in with Ethereum, we now support native logins. Soon, we will enable GitHub and other 3rd party login options. To create an account, visit app.auditwizard.io

Imports 📥

Audit Wizard enables you to one-click import smart contracts (and their dependencies) from Github, Etherscan, or smart contract addresses. We will be adding one-click imports from Code4rena, Hats Finance, and Immunefi in the near future.

Find Vulnerabilities 🔎

Just read the code, anon? Audit Wizard has an elevated code reading experience, allowing you to tag and submit your findings as you work.

You can scroll through a project, click “Add Finding,” and describe a vulnerability to add it to your findings. These findings will automatically populate your audit report (more below ⚡).

Report Generation 📝

We are excited to unveil report generation as a new feature in Audit Wizard. Report generation allows you to automatically generate your audit reports, removing the need for notes and time spent writing your reports.

Reports are based on the findings you submit as you use Audit Wizard.

AI Assistant 🤓

Audit Wizard has multiple AI features baked-in to make your security work easier. Ask AI to explain the code, query potential security concerns, and explain vulnerabilities to you.

Security Tools 🔧

Audit Wizard has a suite of security tools; all one click away - no downloads or setups required.

Run Slither on projects to find vulnerabilities. Click on your findings to locate them in the code, as well as add Slither findings to your audit report. The graph tool allows you to visualize the function & contract scope of contracts easily. Finally, you can generate the AST of contracts for security analysis.

Conclusion 🙌

This release of Audit Wizard is a step forward in the overall functionality of our tool. We have many improvements in store. Have an idea or suggested feature to improve Audit Wizard? Let us know on Discord or Twitter.

Thank you for testing 💜

We’re offering a free NFT to everyone who helps us test Audit Wizard! Don’t miss out on this chance to revolutionize your auditing work. Try Audit Wizard today!

Getting Started with Audit Wizard

Audit Wizard is an easy-to-use tool made for web3 auditors and developers. Audit Wizard offers a simple UI and removes the need to install and set up various security tools. Click here to access the Wizard.

Audit Wizard allows you to import projects from Github, Etherscan, contract addresses, and Code4rena — and access automatically resolved solidity imports alongside your project code. To get started, click “Sign in” and connect your web3 Ethereum wallet. You will then be asked to sign a message. Your wallet is the only login needed, and all your audit work will be associated with it — allowing you to pick back up where you left off.

Once you’ve logged in, click the + button under ‘my projects’ to import a project. You’ll then see a project URL box, where you can paste links from Github, Etherscan, contract addresses, and Code4rena. Once you’ve pasted a link, click the import button on the right of the URL bar.

The import section also displays current Code4rena and Immunify audit contests. Click the import button to add these contests to your imported projects and begin to work on them! Soon, you will be able to submit findings in Audit Wizard to platforms like Code4rena automatically!

Once you click the import button, the project files will load on the left-hand side of your screen in the project view. Any Solidity imports will be automatically detected and placed in the ‘imports’ folder. From there, you can open a solidity project and run any Audit Wizard tools on your code.

Using Audit Wizard Tools

The graph code tool allows you to generate graphs that visualize the relationship between functions and contracts — depending on the scope you select. Function scope will generate a graph that shows the relationship between the different function calls of each contract. Contract scope will generate a graph that shows the relationship between the contracts at a high level.

Scan Code

The scan code tool allows you to scan all of the Solidity code in a project with either Slither or Mythril (Mythril scanning is currently in development and will be added soon). Slither and Mythril are static code analysis tools that attempt to find security vulnerabilities in the code they scan. Additional code analysis tools will be added to Audit Wizard soon!

AI Assist

The AI Assist tool allows you to leverage AI to help your understanding of the code. Explain code, threat model, and find vulnerabilities in code with our GPT-3 based model. As we all know, AI is not perfect and is not suitable for generating entire reports — yet. AI vulnerability scanning is a priority as we continue to develop Audit Wizard, and we will continue to refine our model and increase its efficiency.

Abstract Syntax Tree (AST)

The AST tool shows you the abstract syntax tree for the Solidity file you have selected, allowing you to explore the structure of the code visually.

Notepad

The notepad feature allows you to take notes in a markdown editor, enabling you to keep track of your audit work as you go. You can export entire audit reports based on the notes you take — removing the need to format and compose them manually. Report formatting is currently in development, but soon you will be able to use Audit Wizard to create submissions suitable for clients, Code4rena, Immunify, your personal auditing portfolio, and more! Notes also automatically save as you type them.

Feedback and Free NFT!

Your feedback is crucial to the future of Audit Wizard. Please fill out this brief feedback form to claim your free POAP NFT!

That’s all— you just tested the Audit Wizard alpha! The goal of Audit Wizard is to make the process of auditing as easy as possible and consolidate all tools auditors need into a single place. If you’re an auditor or developer and have ideas for how we can improve the tool, we want to hear from you. Please report bugs, suggest ideas, and share feedback on our Discord server. The team is happy to answer any questions or concerns there too. Thank you to all our early testers! 🧙

Auditware is a company focused on building revolutionary web3 security tooling. We also offer operational security, application, and smart contract audits as a service. To learn more about us or to request an audit, check out our website and follow us on Twitter!