# Trail of Bits

Security consultancy founded 2012, headquartered in New York. Audits, fuzzing, cryptographic review, and tooling work, with a heavy footprint in the Ethereum / L2 / cryptography corner of the industry.

Three public surfaces worth tracking:

- `blog.trailofbits.com` — author-bylined long-form posts on engagements, tools, and primitives
- `appsec.guide` ([[appsec-guide|Testing Handbook]]) — open, multi-author reference on security testing techniques, organized by language and topic
- The open-source tool portfolio itself

Known projects include the Manticore symbolic executor, Slither (Solidity static analysis), Echidna (smart-contract fuzzer), and now [[gosentry-go-fuzzing-fork|gosentry]] (Go-toolchain fuzzing fork).

## Coverage

Trail of Bits' blog gets ingested when posts cover load-bearing tooling or primitives — not every engagement writeup. Topics worth pulling: fuzzing infrastructure, supply-chain analyses, cryptographic implementation issues, language-level security tooling. The Testing Handbook gets ingested per chapter as the relevant chapter becomes load-bearing for something in the wiki.

## Ingested articles

- [[gosentry-go-fuzzing-fork]] — Go toolchain fork wrapping LibAFL + Nautilus behind the standard `testing.F` API (May 2026, blog)
- [[appsec-guide-fuzzing-handbook]] — Testing Handbook fuzzing chapter overview: terminology, mutation-based evolutionary algorithm, bug-class taxonomy (handbook)