Performances
RD Popularity Index
RD Growth Index
Comparison
Follow Updates
Follow Lists
People
About Opsek
An Argentine operational security consultancy for Web3, running since 2024, which audits and trains protocols, funds, exchanges and high-net-worth individuals, often teams that have already suffered phishing or permission incidents. Its premise is that most losses come not from contract bugs but from compromised human workflows, so the audit object moves from code to devices, accounts and signing flows: threat modelling first, mapping the organisation, key assets and attack surface, then reviewing signer distribution in multisigs, seed phrase and hardware wallet handling, password manager and communication tooling, and finally small-group drills and open-source intelligence checks drawn from real incidents, ending in an actionable hardening list.
What it fills in the ecosystem is the gap audit firms leave: a code audit answers whether a contract has bugs, operational security answers who signed this transaction on which device. Clients include DeFi protocols, venture funds and centralised exchanges, delivered mostly as on-site or remote workshops alongside hardening scripts and incident response guidance. The work complements code audits, usually concentrated before a raise, a launch or an incident review, and its deliverables feed directly into internal security policy.
In 2026 Opsek turned operational security from advisory work into a certifiable standard business. In May founder Pablo Sabbatella was elected one of six members of the Arbitrum Security Council, adding to signer roles on the Optimism, Polygon and Everclear councils. That month Opsek also co-hosted one-on-one security office hours with Shield3 for SEAL during Solana Accelerate in Miami.
The bigger shift is accreditation: SEAL Certifications, built by the Security Alliance, cover six domains including multisig operations, treasury, incident response, DevOps, DNS and identity, and Opsek became one of the first accredited assessors able to issue a pass or fail verdict. The firm says it has helped protect more than 15 billion dollars in TVL, with clients spanning DeFi protocols, venture funds, centralized exchanges and high-net-worth individuals.Its method treats people, not code, as the attack surface: audits cover domains and DNS, password managers, Slack and GitHub permissions, signing ceremonies and drills, with phishing tests measuring response, a process more protocols adopted after 2026 social engineering incidents.The verdict is a single pass or fail rather than a scored ranking.
Future strategy and roadmap: Opsek will tie certification assessments to subscription security services, expand into multisig signer supervision and incident response drills, and use open tools such as SafeCheck and OSs-Security as an entry point for new clients.
Pablo Sabbatella — Founder & Security Researcher; member of SEAL, signer on the Optimism and Polygon security councils, and founder of Defy Education, Latin America's largest blockchain academy.
Louis Marquenet — Head of Operations & Security Researcher; focuses on securing Web3 accounts and infrastructure.