Eleven presets. One control plane underneath all of them.
A preset is a configuration an operator applies, not a brochure page: it turns on the detection that fits one failure mode and writes down where its reach stops. The base underneath is identical in every one, so running three sectors is running one control plane.
onboardStablecoin
16 detectors
Wallets & signing
Allow, warn or block at signature time with a reason you can put on screen, plus lookalike cover for the domains you own.
onboardWallet
16 detectors
Exchanges & settlement venues
Hot and cold wallet monitoring, deposit and withdrawal screening, reserve reconciliation, and signed off-chain event correlation.
onboardCex
19 detectors
DeFi protocols
Lending markets, AMMs and vaults. The archetype decides what correct means, so it is declared rather than guessed.
onboardDefiProtocol
13 detectors
DAO or corporate treasury
Everything a treasury does is authorised, so the signal is structure and rate: who may sign, whether that changed, and how much may leave per window.
onboardTreasury
17 detectors
Custodian or asset manager
Client segregation, authority changes, counterparty screening and enforced data residency, with a hash-chained record of every decision.
onboardInstitution
16 detectors
Bridges
The class with the worst historical loss severity, and the most conservative defaults in the product. Both directions of every asset must be declared.
onboardBridge
12 detectors
Rollups
Stall detection on your own chain, conservation over the L1 escrow, a withdrawal ceiling per window, and a screen your block builder can call before inclusion.
onboardRollup
16 detectors
RWA issuers
ERC-3643 / T-REX: the token, its identity registry and its compliance module monitored as one control plane, with NAV integrity.
onboardRwa
8 detectors
Perpetual venues
Market contracts and the insurance fund watched together, with funding-rate integrity and cascade detection across the venue.
onboardPerp
5 detectors
Liquid staking
The contract set plus exchange-rate integrity, with drift alerting on the redemption path and share-price manipulation cover on the vault.
onboardLst
5 detectors
Something else
A preset is where a scope starts. If none of the eleven describes you, the conversation still does.
Scope an engagement
A perimeter you can hand to an underwriter.
Every sector has an off-chain edge. The test of a vendor is naming that edge and the control that closes it, in the same sentence, before you sign.
Declared. Each preset states its boundary before a single alert is routed, so nothing is assumed covered that is not.
Closed. Every boundary is paired with the control that covers it: reserve attestation, signed off-chain ingest, payload simulation, measured chain coverage.
Enforced. Where a configuration would predictably end in a control somebody switches off, onboarding refuses it outright rather than accepting it.
One control plane, whichever preset you start from.
Six things arrive with the first wall in your scope and are never sold again. They are identical under all eleven presets, which is why the plate below is one rather than eleven.
Tell us what you run.
A preset is where an engagement starts, not where it ends. The team qualifies your address set, names the boundary in writing, then agrees what runs.