BlockSec evaluates crypto operational security against the SEAL framework, reviewing controls and supporting evidence to determine whether certification requirements are met.
SEAL maintains the framework and accredits assessment firms. BlockSec conducts the assessment and issues the certification and its associated on-chain EAS attestation when the scoped requirements are met.
SEAL Certifications is an operational security certification program for crypto protocols. Its public framework covers six modules:
Scope depends on which modules apply to the organization’s operations.
Operational security depends on transaction approvals, privileged access, domain change controls, and incident response. While a code audit examines implementation security, a SEAL Certification Assessment evaluates these operational practices against defined requirements and supporting evidence.
The assessment documents implemented controls and remaining gaps for internal remediation and external due diligence.
Certification confirms conformity with scoped requirements at the time of assessment; it does not guarantee incident prevention.
BlockSec determines applicable modules from the organization’s systems, operational responsibilities, and risks, and confirms scope with the client. In most cases, a module is excluded only when it does not apply.
Evidence requests and verification methods are tailored to the client and in-scope controls, using documentation, operational records, configurations, interviews, and testing evidence where appropriate.
We assess:
We check that signing authority is current, approval rules match the intended risk model, and designated owners can perform emergency actions.
The assessment is relevant to crypto protocol teams responsible for:
Teams can use the framework to:
BlockSec identifies applicable modules; exclusions require documented reasons, and preferences alone do not determine scope.
Each engagement follows five steps: scoping, evidence collection, assessment, remediation and re-assessment, and certification when requirements are met. Evidence requests, verification methods, schedule, deliverables, and pricing are agreed case by case after discovery.
BlockSec identifies applicable modules and controls, and confirms the following with the client:
Scoping records:
BlockSec provides end-to-end blockchain security services. Our SEAL assessment offering brings together assessor accreditation, blockchain security expertise, and purpose-built DNS assessment tooling.
BlockSec is part of the first cohort of SEAL-accredited assessors, providing independent operational security assessments for crypto organizations under the SEAL certification program.
We assess operational controls against the SEAL framework and issue certification when scoped requirements and applicable SEAL review and recognition requirements are met.
Our security expertise spans the entire blockchain stack, including smart contracts, DeFi protocols, L1 chains, L2s and rollups, wallets, bridges, nodes, and RPC infrastructure.
This expertise informs our blockchain penetration testing, including our assessment of the systems, permissions, and configurations that underpin operational controls.
We will build a suite of purpose-built tools to translate assessment requirements into repeatable technical checks, improving efficiency and consistency across engagements.
We have already developed the BlockSec DNS Security Scanner (BDSS), based on the SEAL DNS & Registrar module, to assess publicly observable DNS and registrar configurations.
Share a brief overview of operations and relevant systems. BlockSec will discuss applicable modules, assessment scope, evidence preparation, timeline, and quotation.
