Watchdog
Check a Solana program before you put money in.
Screenshots
About
Watchdog tells you who can change a Solana program before you put money into it, and reviews its source code for known vulnerabilities. Free to try, no wallet needed: - Check any program on mainnet (your first check is free, then 0.1 SOL per check; the examples are always free): whether a single key, a multisig (with its threshold and time lock) or nobody can replace its code, when it last changed, whether the deployed binary matches public source, and whether it publishes a security contact. - Scan a public GitHub repository (your first preview is free, the example repositories are always free): Watchdog reads every Anchor account, constraint and handler, follows the dependencies that really compile into the program, and checks the deployed program on-chain. The preview shows the risk rating, every count, the coverage and the first issue in full. Full report, 1 SOL or 99 USDC: every issue with its code, why it is exploitable and how to fix it, and every dependency judged for on-chain reach, by email. Paid with the wallet on your phone through Mobile Wallet Adapter; the app never sees your keys. These are automated checks, not a manual audit: Watchdog reports what it finds and does not certify that code is free of bugs. The engine is open source under the MIT license.
What's New
Thanks for the review of version 1.0.0. Watchdog can now be fully tested without paying anything. Open the app and use "Check a program": tap Jupiter, Orca or Drift (always free) or paste any Solana program address (the first one is free), to see who can change its code, with no wallet needed. The "Scan a repo" tab runs a real scan of any public GitHub repository and shows a free preview: tap "planted bugs" to scan a repository with known vulnerabilities and see a critical issue in full. Only the full report is paid, and a complete sample is linked from the app ("See a real report").