We're excited to announce the first production release of zkao! This early access launch brings AI-powered security analysis to Circom zero-knowledge circuits.
What is zkao?
zkao is an AI-powered security platform designed specifically for zero-knowledge circuits. We've built specialized flows that guide AI agents to analyze your ZK code and identify potential vulnerabilities, logic errors, constraint issues, and best practice violations that could compromise the security of your circuits.
Circom Support
This initial release focuses exclusively on Circom circuits. Our flows are designed to find issues specific to the Circom ecosystem:
- Under-constrained signals
- Constraint logic errors
- Arithmetic overflow/underflow risks
- Signal assignment vs constraint confusion
- Template instantiation issues
Two Specialized Flows
SnarkSentinel
A comprehensive security audit flow that performs deep analysis of your Circom codebase. SnarkSentinel examines your circuits for a wide range of security issues and provides detailed findings with severity ratings.
Invariants Hunter
A targeted bug-hunting flow that generates and verifies invariants for your circuits. Invariants Hunter identifies properties that should hold in your code, then systematically checks for violations that could indicate vulnerabilities.
GitHub Integration
Connect your GitHub repositories directly to zkao for seamless scanning:
- Support for both public and private repositories
- Automatic detection of Circom circuit files
- Scan any commit or branch
- Track findings over time as your code evolves
Early Access Program
This is an early access release, and we're actively working to improve the platform:
- Better false positive handling: We're continuously improving our flows to reduce false positives and provide more accurate findings
- Improved flows: Working on enhanced detection capabilities to discover more impactful security issues
- More ZK frameworks: We plan to add support for Noir, Leo, gnark, Plonky2/3, Halo2, and other ZK circuit frameworks
Getting Started
- Sign up for early access at zkao.io
- Connect your GitHub account
- Add your Circom repositories
- Launch your first security scan
We'd love your feedback as we continue to improve zkao. Report issues or share suggestions through the platform.