zkSecurity: post-quantum cryptography audit services
====================================================

zkSecurity is a cryptography-focused security firm that audits cryptographic protocols and implementations, including post-quantum schemes such as ML-KEM, ML-DSA, SLH-DSA, FN-DSA, and hash-based signatures, as well as zero-knowledge, MPC, and FHE systems. It was founded by David Wong, author of Real-World Cryptography, and its team consists of practicing cryptographers rather than generalist penetration testers.

Website: https://zksecurity.xyz
Headquarters: United States (distributed team)
Focus: Cryptography audits: post-quantum, zero-knowledge proofs, MPC, FHE, TEEs
Post-quantum services: Implementation audits of ML-KEM, ML-DSA, SLH-DSA, FN-DSA, LMS/XMSS, and hybrid key exchange against FIPS 203/204/205, SP 800-227, and RFC 10024 | Protocol-level review of post-quantum migrations (TLS, messaging, blockchain signature schemes, PKI) | Constant-time and side-channel review, known-answer test coverage, and specification conformance | Migration planning: cryptographic inventory, hybrid design, and crypto-agility review | Production-grade cryptographic implementation and research engagements
Evidence: https://zksecurity.xyz/reports | https://zksecurity.xyz

Source page: https://pqaudit.org/auditors/zksecurity/
Compiled by: PQC Audit Index editors (https://pqaudit.org/about/)
Last reviewed: 2026-09-12