Sift

AI triage for Solidity audits

Kill the false positives. Ship the real fixes.

Sift runs your scanners, then judges every finding. Review the five that matter, not the five hundred that do not.

AI Triage Report 334 → 27 to review
reentrancy-eth true positive

State written after an external call in Vault.withdraw. Move the balance update above the call.

block-timestamp suppressed

Timestamp gates a 7 day window. Sub-15s drift cannot affect it. False positive.

12 more false positives suppressed
Excerpt from reports/triage.md

Scanners find everything. That is the problem.

Slither and Aderyn flag hundreds of issues per run. Most are not bugs. After the first dozen false alarms, engineers stop reading the report, and the one finding that mattered ships to mainnet.

9 in 10

static-analysis findings are false positives. Triage is where audit time actually goes.

How Sift works

Four steps. The scanners stay free and open source. The intelligence is the part you pay for.

Scan

Run the tools you already trust. Sift drives Slither and Aderyn and collects their output.

make audit

Fingerprint

Every finding gets a content hash that survives line shifts and reformatting, so nothing is ever triaged twice.

detector + file + function + code

Triage

An open-weights model trained on audited contracts returns a verdict, a confidence score, an exploit path, and a fix.

verdict: true_positive conf 0.94

Remember

Verdicts persist in a ledger you commit to your repo. Confirm a false positive once and it stays suppressed until the code changes.

.audit-ledger.json

Compare the plans

The scanners are open source and run free in your CI. Start free with 50 hosted-AI triaging a month — no card — and upgrade as you scale.

Free Pro Team
Slither and Aderyn scans Included Included Included
Hosted AI triage 50 a month 500 a month 5,000 a month
Repositories 1 3 15
Repo and PR scanning Coming soon Coming soon
Price $0 $9 a month $99 a month

Pricing

Flat plans, no per-seat surprise. Start free with 50 hosted-AI triaging a month — the open-source pipeline is always free too.

Free

Try hosted AI free, every month.

$0

per month

  • 50 hosted AI triaging a month — limited period offer
  • Slither and Aderyn pipeline
  • No credit card required

Pro

popular

Hosted AI triage for individuals.

$9

per month

  • Everything in Free
  • Hosted AI verdicts and fixes
  • 500 findings a month
  • Up to 3 repositories

Team

For teams and protocols shipping often.

$99

per month

  • Everything in Pro
  • 5,000 findings a month
  • Up to 15 repositories
  • Priority triage queue

Need higher limits, data residency, or SSO? Talk to us about Enterprise.

Benchmark

Never hides a real bug.

On a real Slither run across contracts with known vulnerabilities, Sift surfaced every annotated bug — 0 hidden — while cutting 91.9% of the noise: 334 raw findings down to 27 worth reading.

Known bugs hidden0 / 10
every known bug surfaced0 dismissed

The one error a security tool can’t make is hiding a real bug. When Sift isn’t certain, it surfaces the finding for review — it never silently dismisses a possible vulnerability.

Noise removed91.9%
27 surfaced334 raw

Most of the cut is trivial informational noise removed by a severity filter — no AI needed. The model does the hard part: judging the security-relevant remainder.

Raw Slither findings334
Informational / optimization — auto-filtered−303
Security-relevant — sent to the AI31
↪ false positives cut by the AI−4
Real findings surfaced27

Measured on raw Slither output, scored against known audit results. The triage model holds its accuracy on unseen 2023 audit contests it was never trained on — it generalizes, it doesn’t memorize. We’ll keep these numbers honest as the model improves.

Your code never leaves the request.

Findings are adjudicated in memory and discarded. Nothing is stored. Run the scanners in your CI or on GitHub; the pipeline is open source under the MIT license.

  • No code retention, ever
  • Best model, fully managed
  • Deterministic, auditable verdicts

Ready to cut the noise?

Create an account, run your scanners, and let Sift triage every finding. Free includes 50 hosted-AI triaging a month — no card.

Already have one?