Watchdog

Watchdog tells you who can change a Solana program before you put money into it, and reviews its source code for known vulnerabilities.

Free to try, no wallet needed:

• Check any program on mainnet (your first check is free, then 0.1 SOL per check; the examples are always free): whether a single key, a multisig (with its threshold and time lock) or nobody can replace its code, when it last changed, whether the deployed binary matches public source, and whether it publishes a security contact.
• Scan a public GitHub repository (your first preview is free, the example repositories are always free): Watchdog reads every Anchor account, constraint and handler, follows the dependencies that really compile into the program, and checks the deployed program on-chain. The preview shows the risk rating, every count, the coverage and the first issue in full.

Full report, 1 SOL or 99 USDC: every issue with its code, why it is exploitable and how to fix it, and every dependency judged for on-chain reach, by email. Paid with the wallet on your phone through Mobile Wallet Adapter; the app never sees your keys.

These are automated checks, not a manual audit: Watchdog reports what it finds and does not certify that code is free of bugs. The engine is open source under the MIT license.