AGORA

Crypto-agility, on Solana.

AGORA is the crypto-agility layer for Solana. We build a unified map of every cryptographic primitive, dependency, program, and infrastructure component in your stack. Surface where post-quantum migration lands hardest. Provide a migration plan. Then commit the proof on-chain.

Join the waitlistGet the CLI
By the numbers

PQC Risk Analysis in Minutes

0protocols attested
0findings surfaced
CBOM 1.6CycloneDX format
100%on-chain verifiable
How it works

From zero visibility to on-chain proof

STEP 01

RUN AGORA ON YOUR CODE

Point the AGORA command line at your program source, so it reads the cryptography in place. Your code never leaves your machine.

STEP 02

GET THE AGILITY AUDIT

A CycloneDX CBOM 1.6 inventory with a NIST IR 8547 transition-phase traceability matrix and ranked exposure.

STEP 03

VERIFY ON-CHAIN

Every scan commits an attestation to Solana devnet, so a counterparty can verify the result independently.

Live on devnet

Five protocols. Five real attestations.

Squads · Marinade · Jito · Kamino · Drift. Each card is a full source → CBOM → on-chain commit. The signature is verifiable on Solscan; the hash is reproducible locally.

5protocols
377findings
152KLOC top scan
devnetcluster
Rule coverage

What AGORA inventories

Crypto-agility checks across three surfaces of your Solana program. AGORA reports what it finds and where the blast radius is largest. The migration itself stays protocol-layer-owned by Anza and Firedancer.

PQlogic
3surfaces
CBOM 1.6output
devnetattestation
Algorithms & key materialDirect crypto usage in your program.
4 rules
  • CA-001Info

    Algorithm enumeration

    Every verify, hash, signature site with file:line.

  • CA-008Medium

    Hardcoded curve params

    Curve25519 constants baked in code, not behind an abstraction.

  • CA-009Medium

    Revealed pubkey exposure

    Public keys leaked through logs, account data, or IDL.

  • INVInfo

    SHA-256 hash sites

    Every hash site logged for inventory completeness.

Authorities & topologyWho holds what, and how it's gated.
5 rules
  • CA-002Medium

    Authority pinning

    Single-signer authorities flagged as migration targets.

  • CA-004High

    Mint · freeze · upgrade

    Critical token authorities tied to single-signer keys.

  • CA-006Medium

    Oracle operator keys

    Pyth, Switchboard, custom feed operators inventoried.

  • CA-007Medium

    Multisig topology

    M-of-N slots and thresholds, mapped slot by slot.

  • L5Medium

    Validator vote · stake

    LST-backed validator authorities, ranked by delegated stake.

Cross-program & dependenciesBoundary effects and supply chain.
3 rules
  • CA-003Medium

    Cross-program assumption

    CPIs that assume a signature scheme on the callee side.

  • INVInfo

    Latent dependency crypto

    Crypto crates in the build that no instruction invokes.

  • INVInfo

    PDA seed classification

    Crypto-relevant content embedded in PDA seeds.

Classical → Post-quantum

PQ audit + migration plan, in minutes.

AGORA inventories every classical primitive in your Solana program and pairs each one with the NIST FIPS algorithm slated to replace it, so when Anza and Firedancer ship the protocol-layer migration you already know exactly what changes for you.

Inventory only · migration = protocol layer
Ed25519signature
PQ migrate
ML-DSAFIPS 204
PQ replacement
X25519 · Curve25519key-exchange
PQ migrate
ML-KEMFIPS 203
PQ replacement
secp256k1signature
PQ migrate
ML-DSAFIPS 204
PQ replacement
SHA-256hash
Stays
SHA-256PQ-safe
PQ-safe

References: FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), NIST IR 8547 (post-quantum transition roadmap).

The tool

Runs on your code, from the CLI

AGORA runs where your program lives. Point the command line at your source and it reads the cryptography in place, then writes the audit pack and commits the attestation. Your code never leaves your machine.

agora
$ pinpoint agora scan ./my-solana-program AGORA | Post-quantum crypto-agility for SolanaReading cryptographic usage across 4 modules… CA-004  HIGH    Mint authority on Ed25519 single signer    state/liq_pool.rs:142CA-002  MEDIUM  Stake authority held by single signer      lib.rs:88CA-001  INFO    Ed25519 verification site enumerated       checks.rs:33 ✓ CBOM 1.6 + NIST IR 8547 traceability written to ./agora-audit/✓ Attestation committed to Solana devnet
The audit pack

What ships in every pack

CycloneDX CBOM 1.6

A machine-readable cryptographic bill of materials, emitted in the CycloneDX CBOM 1.6 format.

NIST IR 8547 traceability

Each rule maps to a transition-roadmap phase, so reviewers can trace findings against the published guidance.

Ranked exposure

Mint, freeze, upgrade and single-signer authorities surfaced with file:line and ranked by blast radius.

On-chain attestation

An independently verifiable Solana devnet record committed for every scan.

audit-pack.cbom.json
{
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "components": [
    {
      "bom-ref": "agora:122c0a99…b15f",
      "cryptoProperties": {
        "assetType": "related-crypto-material",
        "relatedCryptoMaterialProperties": {
          "algorithmRef": "ed25519",
          "type": "public-key"
        }
      },
      "name": "Single-signer authority …",
      "properties": [
        { "name": "pinpoint:rule_id",
          "value": "CA-002" },
        …
      ]
    },
    …
  ]
}
Marinade · 1450 linesDownload full CBOM
See the four hosted audit packs
Built for institutional review

Evidence a reviewer can stand behind

AGORA is built for the people who sign off on cryptographic risk. Every pack is structured so a GRC reviewer, custodian, or regulator can read the inventory and verify it on-chain.

Standards-aligned

CycloneDX 1.6 + NIST IR 8547

Findings map directly to the published transition guidance, so reviewers can trace exposure against industry references they already use.

Independently verifiable

On-chain devnet attestation

Every scan commits the audit-pack hash to Solana devnet. A reviewer can verify the result on Solscan without taking our word for it.

Engine-proven

Powered by SPECTRE

AGORA is built on the SPECTRE engine, scanning real Solana programs in production. The PQ surface is one rule pack on a battle-tested core.

Who we are

The team building AGORA.

A small team obsessed with making Solana programs post-quantum ready, on hackathon time.

Royce Carbowitz

Royce Carbowitz

Co-founder

JP McCorley

JP McCorley

Co-founder

Dheeraj Kumar

Dheeraj Kumar

ML Engineer

Early access

Join the AGORA waitlist.

AGORA is rolling out post-quantum crypto-agility audit packs for Solana programs, built on SPECTRE and running on devnet today. Early teams get first access as we open it up.