0
Vulnerability classes
0
Reentrancy precision
0
Languages supported
0
Avg. audit time
How LISA works

Three layers of security analysis

No single technique catches everything. LISA stacks three complementary approaches to maximize coverage across every vulnerability class.

LAYER 01

Static Analysis Engine

AST-level parsing, taint tracking, and control-flow analysis across the full contract call graph. Catches common vulnerability patterns in milliseconds with zero false negatives on known exploit templates.

LAYER 02

LLM Reasoning Core

A fine-tuned large language model reasons over the full semantic context — business logic, economic incentives, cross-protocol interactions — to surface vulnerabilities that rules alone cannot encode.

LAYER 03

Community Validation

8,500+ human researchers review AI findings, hunt for missed edge cases, and submit independent discoveries — rewarded with $LISA for every verified bug.

Vulnerability coverage

What LISA detects

140+ vulnerability classes across every major attack surface in smart contract security.

Critical / High severity

HIGHReentrancy (classic, cross-function, cross-contract)
HIGHUnchecked external calls & return values
HIGHInteger overflow / underflow
HIGHBroken access control & privilege escalation
HIGHFlash loan attack vectors
HIGHPrice oracle manipulation
HIGHSignature replay & front-running

Medium / Low severity

MEDGovernance attack surface
MEDMEV exposure & sandwich vulnerability
MEDDenial of service via gas griefing
LOWMissing zero-address validation
LOWUninitialized storage pointers
LOWIncorrect event emissions
INFOGas optimization opportunities
Developer workflow

Security built into your pipeline

LISA plugs into your existing tools in minutes — no workflow changes required.

GitHub Actions

One-line workflow step. LISA blocks merges automatically when critical vulnerabilities are detected — no manual gatekeeping needed.

-uses: agentlisa/action@v2
with:
target: ./contracts
fail-on: high

Hardhat & Foundry Plugin

Drop into your Hardhat or Foundry config. LISA runs alongside your tests on every npx hardhat test.

VS Code Extension

Real-time vulnerability highlighting as you type. LISA underlines risky patterns and shows fix suggestions inline — before you even save the file.

LISAx402

The HTTP 402 payment protocol for AI security

LISAx402 extends the HTTP 402 "Payment Required" standard to create a seamless, trustless micropayment layer for on-demand audits. Pay per scan in $LISA tokens — no subscriptions, no API keys.

Single HTTP request triggers a full audit and returns structured JSON results

Payment settled on-chain in $LISA — no card, no account, no KYC

Embeddable in any toolchain, DApp, or agentic AI workflow

Get $LISA tokens
LISAx402 API call
$curl -X POST https://api.agentlisa.dev/v1/audit \
-H "Payment: $LISA:500" \
-H "Content-Type: application/json" \
-d '{"source": "vault.sol", "deep": true}'
HTTP 200 OK
{
"status": "complete",
"duration_ms": 4211,
"findings": [...]
}

Ship secure code from day one

Start with the free tier — 5 audits per month, no wallet required. Unlock unlimited scans by staking $LISA.

Start auditing free Get $LISA