VVegaSec
Sign in
EN
Request ReviewMenu
VegaSec / Private Review

Turn a public scan into a Private Review lane.

Use the free Scan for the first read. Reserve Private Review when a launch, repository, or diligence window needs an operator memo, scope confirmation, buyer-call ready evidence, and an optional path into Continuous Watch. VegaSec quotes before paid work starts — no wallet access, no automatic charge, never a financial recommendation.

Confidential private review audit desk with evidence checklist and operator workflow

Confidential review desk

Private Review feels like a secure buyer-call diligence workflow, not just a contact form.

Run an instant scan firstSee sample reportsView report template

How it works

01

Reserve the target

Token contract / explorer URL / DexScreener pair, public GitHub repository, or pasted Solidity reference.

02

Add buyer context

Launch timing, buyer call window, repo concerns. No secrets, no API keys, no wallet access required.

03

VegaSec holds priority review

Standard 48h · Priority 24h · Critical same-business-day intake. Operator confirms scope before billing.

What we review

  • Public-source evidence pass: market data, holder/owner posture, repo activity, contract source provenance.
  • Static analysis of any Solidity source you submit (slither + semgrep) with audit-grade enrichment.
  • Operator-authored risk memo with severity, confidence, failure mode, remediation direction, and explicit approval state.
  • Optional Trust Index entry alignment so the public artifact and the private memo do not contradict.

What is NOT included

  • Not a formal smart contract audit attestation. Use a contracted audit firm for that scope.
  • Does not tell anyone to buy, sell, hold, or invest; not custody, and not a replacement for a contracted audit firm.
  • Not retrospective forensic incident response. Filed separately if you have an active incident.
  • Not on-chain monitoring beyond the requested scope window.

Deliverables

  • Private Review memo (Markdown + shareable HTML preview) covering executive summary, scope, findings, evidence authority, severity, confidence, failure mode, remediation and limitations.
  • Optional buyer-call summary: 1-page executive brief framed for a non-technical reviewer.
  • Re-scan + Trust Index re-evaluation after the project ships the documented remediation.

Turnaround / SLA

Standard

Reply within 48h · memo within 5 business days

Default for non-launch reviews.

Priority

Reply within 24h · memo within 3 business days

Launch window or buyer call inside two weeks.

Critical

Reply same business day · memo within 48h

Pre-launch blocker, active diligence, public exposure within 72h.

SLA tiers cover operator reply and memo turnaround. They do not promise a particular verdict or score outcome. Operator may extend SLA if scope grows during triage; you are notified before any extension is committed.

Confidentiality and data posture

  • Submissions are stored server-side under VegaSec operator access only. Operator inbox is gated behind an env flag.
  • Notes are scanned for common secret/key patterns and redacted before storage. Do not paste seed phrases, private keys, API keys or wallet credentials — VegaSec does not need them.
  • Mutual NDA is available on request before any privileged material is exchanged.
  • Default data retention is 90 days from intake. Earlier deletion on request.
  • VegaSec is not custodian of any asset and does not transact on your behalf at any point.

Pricing framework

  • Free reservation intake

    Reserve a priority review lane with target and context. The public scan remains free and unaffected.

  • Quote after scope

    Once scope is agreed (single contract / repo / multi-contract / time-pressured launch), VegaSec returns a fixed quote and SLA tier. No billable work starts without confirmation.

  • Independent from public score

    A paid Private Review does NOT raise the public Trust Index score. The two surfaces are intentionally separated. Public score reflects public-source evidence only.

Priority reservation intake

Commercial path · no token required

This reserves operator attention for a private audit scope. It does not charge the user, does not block public scans, and does not change any public Trust Index score.

Free reservation. VegaSec returns a scope confirmation and quote before billable work begins. Notes are redacted for common secret patterns before storage.

What happens after you submit

  1. 1 · You receive a reservation id on screen. Save it for follow-up.
  2. 2 · An operator reads the priority intake within the SLA window above.
  3. 3 · Scope and quote (if any) are confirmed back over the contact you provided.
  4. 4 · After agreement, work begins and the private memo is delivered as a shareable artifact.
  5. 5 · Re-scan + Trust Index re-evaluation happens after the project ships the documented remediation.