Overview

Getting Started

OpenAudit AI is a deterministic Solidity smart contract security analysis tool designed for developers, auditors, and security teams who need reproducible, structured findings.

Note: OpenAudit AI is open source and actively developed. npm package publishing is coming soon — use the local development setup in the meantime.

What is OpenAudit AI?

OpenAudit AI performs static analysis on Solidity source code using a deterministic rule engine. Every scan of the same code produces the same findings — no randomness, no model drift, no hallucinations.

Optionally, you can enable an AI explanation layer that translates structured findings into plain-language developer guidance. The AI does not decide whether something is vulnerable. The rule engine does. The AI only explains.

Deterministic

Same contract → same findings, every time.

Team-friendly

Share findings knowing teammates see identical results.

CI-native

Designed as a pipeline tool from day one.

Who is it for?

  • Solidity developers who want to catch security issues before code review or deployment.
  • Smart contract auditors who need a reliable first-pass tool to surface structured findings.
  • Security-minded teams who want to integrate automated analysis into CI/CD pipelines.
  • Protocol teams who want ongoing, reproducible monitoring of their contract codebase.

Why deterministic analysis matters

AI-based auditing tools can produce different outputs on consecutive runs of the same code. This makes results difficult to audit, compare, or integrate into automated pipelines.

OpenAudit AI's rule engine is rule-based and deterministic. A reentrancy rule either fires or it doesn't. You can write tests for rules. You can version them. You can compare findings across git commits with confidence.

Tip: Deterministic output means you can use exit codes in CI: if findings above a severity threshold are emitted, block the deploy. No flaky results.

Next steps