We review who controls Solana programs and how fast they can be changed. We design and build card and stablecoin payments. We set up AI coding and automation that a team can trust and check.
Each line of work has a small first step, most with a fixed price.
Prices in GBP, excluding VAT where it applies.
01 · Security
Who can upgrade or drain your program, and how fast? Most teams cannot answer in one sentence. We answer it from public chain data and your own answers, then tell you what to change.
A major Solana loss in 2026 came through admin infrastructure, not program code: see BlockSec's post-mortem.
Start here
£2,500 fixed price · delivered in 4 working days
You get:
What it is not: an audit. It does not review program code.
The sample report uses a fictional protocol. It is not a real assessment.
Example only. Fictional programs, keys and settings.
| Asset | Controlled by | Threshold | Time lock | What we would say |
|---|---|---|---|---|
| Prog-A (upgrade) | Vault-1 | 2 of 5 | None | Add a time lock before upgrades |
| Prog-B (upgrade) | Key-2 (single key) | 1 of 1 | None | Move to a multisig |
| Mint-C (mint authority) | Vault-1 | 2 of 5 | None | Same multisig as Prog-A; separate them |
| Vault-1 (config) | Vault-1 | 2 of 5 | None | Members can change the rules without delay |
Also in Solana security
The Snapshot plus interviews, a review of signer devices and procedures, runbooks, and a 60-minute tabletop exercise. About 2 weeks.
We run the Snapshot again and report what changed.
A review of your program before you buy an audit: account validation, cross-program calls, admin authorities and the questions an auditor asks first. You get a list of known issues to hand your auditor. Lite takes 3 working days; Standard 1 to 1.5 weeks. Not an audit.
02 · Payments
We have built on-chain card issuing and acquiring across EVM chains and Solana, and the stablecoin rails behind it.
We know where card programmes stall: the processor contract, the programme manager's limits, settlement timing, the rails between fiat and stablecoin, and who is liable when an agent pays on someone's behalf.
Start here
£750 fixed price · written summary in 2 working days
A 90-minute call on your card, stablecoin or agentic payments design, with a written summary in 2 working days.
You get the open questions in your design, the order to settle them in, and what to ask your providers.
What it is not: legal, tax or regulatory advice. We do not hold or move funds.
Also in payments
We compare issuers, processors and programme managers against your written requirements, and recommend a shortlist with reasons. Scope and turnaround agreed after the diagnostic.
03 · AI automation
We run our own engineering this way: written rules for the agent, plans reviewed before code, review steps and checks in CI, and a person who signs off every change. We set the same up in your repositories.
Start here
£4,500 fixed price · half a day · up to 10 people
A hands-on half day for up to 10 people, on your own codebase. Your team leaves with working rules, a review loop and exercises to keep using.
What it is not: a promise of productivity gains. Tools go only through accounts whose terms you have approved.
Also in AI automation
We set up the tools, rules, review steps and CI checks in your repositories, read your delivery baseline first, and hand over a runbook. Scope agreed in writing first.
04 · Modernisation
Many firms still run on manual steps, ageing systems and slow release processes. We help you change that, one piece at a time.
We start with your processes and constraints, not a product to sell you.
There is no fixed package for this. We start with a call, then quote a scope in writing.
05 · Day rates
Engage us by the day, from £750 a day.
| Work | Day rate |
|---|---|
| AI automation engineering | £750 per day |
| Rust and Solana engineering | £850 per day |
| Solana security review outside a fixed package | £1,100 per day |
| Card and stablecoin payments advisory | £1,000 per day |
Day-rate work is agreed in a short statement of work: scope, number of days and who reviews the output.
How to buy
Questions
No, unless the statement of work says it is. A Snapshot, a Full review and an audit-readiness review are not audits. They do not replace one.
No. Nothing we deliver is legal, tax or regulatory advice. We will tell you when you need it, and from whom.
No. We never ask for, hold or store private keys or seed phrases, and we never hold client funds. Our tools never sign or send transactions and hold no keys.
No. We do not offer incident response or out-of-hours cover. For a live incident, contact SEAL 911. If we find a live critical issue while working for you, we tell you in writing the same day.
Yes, to help with analysis, through a commercial API whose terms do not allow training on client data. A person checks every finding before it reaches you.
Engagements are led by Cal, a senior Rust and Solana engineer. You deal with the person doing the work.
Prices are in GBP and exclude VAT where it applies. Overseas clients may pay the equivalent in USD or USDC. Fixed-price work is half up front, half on delivery.
We report it to the owner privately. We never publish a named weakness.
This site has no cookies, no scripts and no analytics. If you email us, we keep your message and details only to answer you and to carry out any work you ask for.