© 2026, Open Security Alliance, 501(c)(3)
Our Initiatives
SEAL 911 is a free, around-the-clock emergency hotline that connects anyone facing an active or imminent security incident with a vetted team of world-class security researchers. From exploit triage to fund recovery, SEAL 911 is the crypto ecosystem's first line of defense.
SEAL Intel gathers, analyzes, and shares actionable threat intelligence across the crypto ecosystem. Members receive real-time alerts on emerging threats, from phishing campaigns and wallet drainers to state-sponsored attackers.
SEAL Frameworks distills battle-tested practices from traditional infosec and Web3 security research into a single, vendor-neutral, open-source library. Covering topics from operational security and wallet management to incident response and DPRK threat mitigation, each framework is modular and designed to be adopted incrementally, whether you're a DeFi protocol, an L2, or a startup.
SEAL Certifications is a modular certification program built around the actual threats facing crypto organizations. Covering incident response, multisig operations, treasury security, workspace security, DNS management, and more, certifications are assessed by accredited auditors and recorded as on-chain attestations.
Our Projects
Safe Harbor is an on-chain agreement that protocols adopt to pre-authorize whitehat interventions during active exploits. Rescued funds must be returned within 72 hours, with bounties set at 10% of recovered assets (capped at $1M). Whitehats are further backed by the Security Research Legal Defense Fund, which covers eligible researchers' legal fees.
Wargames are live security drills that simulate realistic exploit scenarios such as oracle manipulation and leaked private keys so protocol teams can pressure-test their detection, coordination, and response before a real attack hits.
lazarus.group is a public resource that tracks and exposes North Korean operatives infiltrating the crypto industry. The site profiles known DPRK IT workers and their aliases, helping companies identify threats before they're hired.
