OUR SECURITY POSTURE

We audit ourselves.

Before asking DeFi investors to trust our security intelligence, we apply the same NIST 800-53 framework to our own infrastructure. Below are the results of our most recent self-audit of the Google Cloud VM that runs this site. We publish them so you can check our work.

18/19
18 of 19 NIST 800-53 controls fully passed · 1 partial Infrastructure security audit: Google Cloud Compute Engine VM
Last audit: November 8, 2026
Next audit: November 15, 2026
Auditor: DeFi Sentinel Watch (automated self-audit)
Framework: NIST SP 800-53 Rev. 5

CONTROL RESULTS

AC-2
Account Management
Only 1 active user account(s) found. Minimal attack surface.
PASS
AC-3
Access Enforcement
SSH key authentication enforced. Root login disabled. Strong access controls in place.
PASS
AC-6
Least Privilege
Least privilege enforced. Only 0 user(s) have sudo access.
PASS
AU-2
Audit Events
System logging active. Auth and syslog files present. Audit events being captured.
PASS
AU-6
Audit Review
All services actively monitored via systemd. Log review process in place.
PASS
SC-5
DoS Protection
Firewall protection active. Network access restricted to necessary ports only.
PASS
SC-7
Boundary Protection
Only approved services are reachable from outside (3 port(s)); host firewall denies all other inbound traffic.
PASS
SC-8
Transmission Integrity
HTTPS enforced on all domains with valid TLS certificates (55+ days remaining, auto-renewing).
PASS
SI-2
Flaw Remediation
3 updates available. Apply updates promptly.
PARTIAL
SI-4
System Monitoring
3 automated monitors reporting on schedule; host telemetry shipped to Google Cloud Monitoring.
PASS
SI-7
Software Integrity
Deployed application code matches the version-controlled release (cd0b744). Service definitions present.
PASS
CM-6
Configuration Management
All services configured for auto-start. Configuration managed via systemd.
PASS
CP-9
State Recovery
Code backed up to GitHub. 27 audit report(s) stored. Recovery path established.
PASS
RA-3
Risk Assessment
Attack surface assessed: 3 externally reachable service(s) (SSH and web), all others blocked by a default-deny host firewall.
PASS
RA-5
Vulnerability Scanning
Package inventory scanned against security advisories: no outstanding security updates; automatic patching enabled.
PASS
IR-4
Incident Handling
Continuous monitoring agent active. Incident detection and alerting configured via Beehiiv.
PASS
IR-5
Incident Monitoring
No service failures in the last 7 days. Infrastructure incidents tracked and alerted automatically.
PASS
IA-3
Device Authentication
Administrative access requires cryptographic SSH keys; password logins are refused.
PASS
SA-11
Security Testing
4 automated security tests passed against the live site (payment forgery, webhook forgery, debug exposure, access control).
PASS

🔒 Why we publish this

DeFi Sentinel Watch applies the same NIST 800-53 security framework to our own infrastructure that we apply to SparkDex, Spectra Finance, Mystic Finance, Kinetic Market, and Firelight on Flare Network. We publish these results because anyone selling security analysis should meet the standard they hold others to.


Not every control is a full pass, and we show that rather than hide it:


This audit runs automatically every week from our vm_audit.py script, and this page always shows the most recent results (generated 2026-11-08 00:00 UTC).

See what we find on Flare Network protocols

We apply 20 NIST 800-53 controls to SparkDex V3/V4 liquidity pools, Spectra Finance yield tokenization pools, and Mystic Finance lending vaults every week. Free reports are available. No credit card required.

Kinetic Market lending markets (every Tuesday) and the Firelight stXRP vault (every Thursday) also get a weekly NIST 800-53 audit against the same 20 controls.

Subscribe free →