a one-person concierge scanner, run by from

Your contract has bugs.
Let me show you where.

Paste a Solidity contract below. aedsc runs Slither and Aderyn on it — same tools the $30k auditors use — and lists the findings here in about two seconds. No signup. If you like it, install the GitHub Action so it scans every PR, or queue a full PDF report by email for €29/mo.

19 linesExternal call before state update — the DAO-style bug.
Slither + Aderyn · live on scan.aedsc.xyz · 8 scans / hour / IP free

Ready when you are.

Hit Scan it live. Slither and Aderyn run on the server, findings appear here ranked by severity.

  • Click any finding to jump to its source line
  • Source never persisted past 30 days
  • Same engine that powers the paid scans
0+scans servedsince 2026-02
2.1smedian timeSlither + Aderyn
0high-sev foundall-time, deduped
99.2%tier-1 uptimerolling 30d
How it works

Three things happen when you hit scan.

Nothing magical. Just two open-source engines wired together with sensible defaults and a real human reading the output before it ships to you.

  1. 01

    Slither parses your contract.

    Compiles with the matching solc, walks the AST, runs ~40 detectors. Catches reentrancy, unchecked transfers, weak randomness, the usual suspects.

  2. 02

    Aderyn cross-checks the high-impact stuff.

    Second opinion on the findings that matter — when two engines agree it's almost certainly real. Single-engine findings get marked as such so you know.

  3. 03

    I read the output before you do.

    On the free tier you get the raw ranked list. On Pro I personally triage every report, rewrite the false positives out, sketch a fix where it's mechanical, and email it back. Until I've done ~50, then it becomes an LLM step.

Pricing

Two tiers. One human running them. No tricks.

Free covers the live demo and the CLI. Founder Pro buys you my eyes on every report, a priority queue, and the rate locked as long as you stay subscribed.

Free
€0

For the "is my contract obviously broken" check.

  • Live demo on this page, 8 / hour / IP
  • aedsc CLI · MIT · npx aedsc Vault.sol
  • GitHub Action — comments findings on every PR
  • 3 hosted scans per hour with aedsc upload --email

Stripe Payment Link · cancel from your customer portal in two clicks · no usage tracking · source held only for the duration of the scan plus 30 days for the report email

Alessandro · Lyon, France

Sole operator. You email me, you get me.

Why this is one person

I built this because the price gap was absurd.

I'm a French CS student who got tired of seeing solo Web3 teams ship to mainnet without any pre-audit because Trail of Bits quoted them $30,000.

Slither and Aderyn are free, open-source, and excellent. The missing piece is someone who reads the output, strips the false positives, and writes a paragraph in English explaining the fix. That's the gap aedsc fills.

The plan: do this manually for the first 50 customers, build the data set, then wire the LLM layer that automates the triage step. Founder Pro is €29/month locked for life because the people paying me to learn deserve it.

If you want to chat before paying, my email is up there. I usually answer within a few hours.

FAQ

Things people ask before they pay.

Is this just a wrapper around Slither?
Mostly yes, and that's the point. Slither and Aderyn are state of the art for static analysis of Solidity. What aedsc adds is dedup, severity × confidence ranking, a real human triage pass, plain English summaries, and the eventual LLM patch suggestion layer. If you're comfortable reading raw slither *.sol --json output and have the time to do it, you don't need me — and the free CLI is literally a tiny wrapper you can fork. The hosted version is for everyone else.
Will you replace a proper audit?
No. A pre-audit scanner catches the obvious ~80% before you ship, which is exactly the bugs auditors charge you to find first. Use aedsc before you book a real audit, and you'll spend less on the audit because the firm doesn't have to write up reentrancy in withdraw() for the thousandth time.
What about Mythril?
It conflicts with Slither's eth-utils version on Python 3.10 and uses 500MB-1GB of RAM per scan, which is impractical on the 1GB VM the backend currently runs on. The CLI runs it locally if you have it on your $PATH. The hosted scanner will add it back when I migrate to a bigger box, probably around the 50th paying customer.
Where does my source code go?
It's written to /var/lib/aedsc/scans/<id>/ on a single VM in Berlin (IONOS), kept for 30 days so I can resend the report if your inbox eats it, then deleted. Source bytes are hashed (SHA-256) and used as a cache key so identical contracts return instantly — no copies leave the VM. Email contact@aedsc.xyz for delete-now.
What if it's down?
The hero widget will surface an error. The /scan/form falls back to opening your mail client with the contract pre-filled, addressed to me. I'll run the scan locally and reply. This isn't a marketing fallback — it's the actual flow I shipped with on day one.

one more thing

The CLI works offline. npx aedsc Vault.sol never touches my server. You can audit before mainnet without ever giving me your contract or your email. The hosted thing is just nicer.