Cantina
Web3 security audit and bug bounty marketplace
Performances
RD Popularity Index
RD Growth Index
Comparison
Developer
Follow Updates
Follow Lists
People
About Cantina
Cantina is a Web3 security services platform covering smart contract audits, competitions, bug bounties, penetration testing, AI code analysis, managed detection and response (MDR), and institutional security assessment (Web3SOC). Its core model connects clients with vetted independent security researchers rather than acting as a single audit firm (, ).
The market pain points it addresses are structural: traditional audit firms often take a large share of contract revenue and offer inflexible scheduling, while independent researchers bear legal and administrative burdens themselves. Cantina operates as a marketplace (): clients can choose solo auditors, modular teams, or competitive reviews, and researchers receive a higher share of fees. Its competitiveness relies on the Spearbit network, 9,000+ researchers, AI-native analysis combined with human review, SOC 2 Type II certification, and triage of every submission to reduce noise ().
In the past six months, public materials indicate Cantina has shifted toward operational continuity: it launched 24/7 MDR for Web3 with sub-15-minute response for critical events, tabletop exercises and simulations, plus Web3SOC scoring for security maturity, and is developing an AI security analysis tool (). No major negative information was found in the available sources.
Over the past six months (2026-03-07 to 2026-09-07), Cantina has made significant strides. On July 30, 2026, it launched Clarion, an agentic security platform, and secured $8M in new funding led by Framework Ventures, bringing total funding to $16.5M. The Apex Field Report revealed 4,032 findings across 612 production applications, with 702 high-severity or critical issues and 37.4% of targets affected. Cantina also joined Anthropic's Cyber Verification Program, enhancing its AppSec agent's verification and resolution capabilities.
Looking ahead, Cantina will continue investing in Clarion, advancing Apex and its bug bounty offering, and expanding engineering and research teams. The company aims to build a unified agentic security workforce—integrating Apex for discovery, Clarion for remediation, and bug bounty for human validation—while pushing the boundaries of AI-driven defense. Key priorities include improving autonomy policies, auditability, and verified actions across all tools, and strengthening the shared security memory layer.
Co-founder & CEO: Harikrishnan Mulackal (Hari Mulackal). Former Solidity compiler engineer and language designer at the Ethereum Foundation, contributing to Ethereum's smart contract language. Holds an M.Sc. in Mathematics from TU Berlin and a B.Tech in Mathematics and Computing from IIT Guwahati. Founded Spearbit in 2021, then Cantina, focusing on AI-driven Web3 security.
Co-founder & President: Mike Leffer. Former US Army background with 10+ years of experience in cybersecurity defense, security operations, and strategic leadership.