Web3 security provider Certik announced on Tuesday (April 7) that it has officially transitioned its internal AI auditing tool into a public solution available to developers worldwide. This release represents a significant milestone in Certik's 'AI-first' security roadmap, marking a shift from reactive audits to proactive, always-on defense.
Performance: 88.6% detection rate across 35 incidents
According to the press release, the new AI Auditor back-tested against 35 major Web3 security incidents that occurred this year, achieving an 88.6% detection accuracy. The system effectively identifies critical vulnerabilities while reducing the 'noise' typical of automated tools. Certik co-founder Ronghui Gu stated: 'The question is no longer whether AI can find vulnerabilities, but whether it can truly help development teams identify security issues earlier. By eliminating endless false positives, our AI Auditor delivers high-signal, actionable clarity, transforming security from a bottleneck into an accelerator.'
Technical architecture: Multiscanner Framework and dynamic knowledge base
The low-noise performance stems from a multi-layer architecture built on the Multiscanner Framework. Unlike single-model tools, this framework runs specialized scanners in parallel, expanding detection coverage across various attack vectors. Results are then processed by proprietary tools that perform multiple deduplications and evaluate the semantic validity and exploitability of alerts. By filtering out irrelevant data, the system effectively eliminates the 'alert fatigue' that typically slows development cycles. The AI Auditor also incorporates a dynamic knowledge base that ingests real-world exploit and emerging attack pattern information in real time, applying the latest threat intelligence at inference rather than relying solely on static training data. This makes AI Auditor a force multiplier for security experts, handling basic detection and pre-audit triage so human specialists can focus on complex protocol-level risks.
Industry impact: Embedded into developer workflows, modular expansion to DeFi and institutions
The release signals a broader industry shift toward embedding security directly into developer workflows. Its modular design allows deep customization across environments ranging from fast-moving DeFi projects to compliance-heavy institutional settings. Certik plans to extend the modular AI architecture into DeFi and institutional investor environments with strict compliance requirements. As the Web3 ecosystem grows increasingly complex, AI-driven real-time defense is becoming a critical component for protecting user assets and smart contract integrity.