Three ways to submit code (GitHub URL, zip upload, raw paste) — and what happens next.
QorTrace runs two audit tiers — pick the one that fits your stage.
Choose your tier
| Tier | Turnaround | Best for | Includes |
|---|---|---|---|
| Standard (AI-only) | Minutes | Pre-deploy sanity check, internal review | Claude-powered detector pass + signed PDF |
| Deep Dive (AI + Human) | 5-10 business days | Mainnet launches, raises, vendor questionnaires | Senior auditor review, exploit narratives, threat model, signed PDF + public verify URL |
Buy credits from /pricing/audits or your existing subscription.
Step 1 — Open the audit submitter
Visit /audit (signed-in) and pick how you want to provide the code:
Option A — GitHub URL
Paste any public repo URL. We'll clone, scope to Solidity sources, and start the run.
Example: https://github.com/your-org/your-protocol
Option B — Zip upload
Drag and drop a .zip of your repo (max 50MB). Useful if your code is private.
Option C — Raw paste
Drop a single .sol file inline. Quickest path for one-file contracts.
Step 2 — Pick the tier and confirm
You'll see your remaining credits in the top-right. Click Submit Audit.
Step 3 — Track progress
You'll get an email confirmation immediately and another when the report lands. Track in real-time at Account → Audits.
What happens during the run
- AI pass (5-15 minutes) — Claude Sonnet 4.5 sweeps for our 9-detector inventory + bespoke pattern matching against the methodology.
- Human pass (Deep Dive only, 5-10 business days) — senior auditor reviews findings, adds threat-model narrative, drafts remediation guidance.
- Delivery — signed PDF, public
/verify/<id>URL, embeddable certificate SVG, and an email with everything linked.
Tip: Run a Standard first to fix the obvious stuff, then upgrade to Deep Dive for the polish before mainnet. Most teams save 30-40% in human-auditor time this way.