Since 2012, Trail of Bits has helped secure some of the world’s most targeted organizations and products. We combine high-­end security research with a real­ world attacker mentality to reduce risk and fortify code.

Our clientele ­ -ranging from Facebook to DARPA- ­ lead their industries. Their dedicated security teams come to us for our foundational tools and deep expertise in reverse engineering, cryptography, virtualization, malware, and software exploits. According to their needs, we may audit their products or networks, consult on the modifications necessary for a secure deployment, or develop the features that close their security gaps.

We’re especially well suited for the technology, finance, and defense industries.

After solving the problem at hand, we continue to refine our work in service to the deeper issues. The knowledge we gain from each engagement and research project further hones our tools and processes, and extends our software engineers' abilities. We believe the most meaningful security gains hide at the intersection of human intellect and computational power.

CHECK OUT OUR LATEST WORK

osquery for Windows

Treat your infrastructure as a database with this open source endpoint security tool.

> Learn More

Cyber Reasoning System

Automatically detects, mitigates, and exploits software vulnerabilities on par with more complex systems, but requires half the code.

> Learn More

Tidas

The first commercial service ever to use iOS’s Secure Enclave, Tidas replaces users’ passwords with a simple touch to log into your app.

> Learn More

Challenge Binaries

Allows for the objective comparison of bug-finding tools, program-analysis tools, patching strategies and exploit mitigations with a multi-platform set of vulnerabilities in complex programs.

> Learn More

Protofuzz

Unlocks the power of fuzzing to test programs behind Google’s Protocol Buffers format (protobuf) decoding.

> Learn More

Security Automation

We focus on building tools that make us more effective. We’re not going to become more secure if we rely on machines entirely.

> Learn More

Recent Press

Wall Street Journal

“Tech Firms Push Toward a Future Without Passwords” Read More >

Motherboard

"The Rise of the Hackbots” Read More >

DARPA

“DARPA Helps Cadets, Midshipmen Prep for Cyber Mission” Read More >

RISKY.BIZ

“Apple vs the Government of the United States” Read More >

Wired

“New Documents Solve a Few Mysteries in the Apple-FBI Saga” Read More >

Organizations We Support