VegaSec

Verify a report

Check that a report is the exact artifact VegaSec signed. No account, no wallet, no API key. Verification proves integrity and authorship. It does not prove the audited contract is safe.

By report id

The id is printed at the top of every report, for example VSS-20260924-ENBE771Z.

By bringing the bytes yourself

Strongest path: paste the canonical text you received, byte for byte. Nothing but the published public key is taken from us.

Canonical text

Key id (optional)Signature value (optional)

Check it without this page

The signature is Ed25519 over the sha256 of the canonical bytes, and the public keys are published as plain JSON. Fetch the bytes, recompute the hash, verify with any Ed25519 library, and compare with the key id in the envelope.