aid: halborn
name: Halborn
description: >-
  Halborn is a blockchain and digital-asset cybersecurity firm that sells professional security
  services rather than a developer product. Its assurance practice covers smart contract
  assessments, Layer 1 protocol reviews, code security audits, web application and cloud
  infrastructure penetration testing, red team exercises, and custody and key management
  assessments; its advisory practice covers AI security, blockchain architecture, compliance
  readiness, risk assessment, technical due diligence and technical training for banks, exchanges,
  custodians, tokenization platforms, stablecoin issuers, DeFi protocols, central banks and
  blockchain infrastructure providers. Halborn publishes its engagement results as a public audit
  repository, discloses zero-day findings under its own CVE assignment scope as a CVE Numbering
  Authority, and maintains BVSS, the Blockchain Vulnerability Scoring System. As of August 2026 it
  publishes no public API, no developer portal and no machine-readable contract; its Halborn ONE
  client platform at one.halborn.com is an invitation-only customer portal.
image: https://www.halborn.com/og-image.jpeg
url: https://raw.githubusercontent.com/api-evangelist/halborn/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
x-tier: stub
x-tier-reason: harvest
specificationVersion: '0.23'
created: '2026-08-22'
modified: '2026-08-22'
tags:
- Company
- Security
- Cybersecurity
- Blockchain
- Smart Contracts
- Security Auditing
- Penetration Testing
- Web3
- Vulnerability Disclosure
- Compliance
- Financial Services
- Professional Services
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.halborn.com/
- type: Blog
  url: https://www.halborn.com/blog
- type: BlogRSS
  url: https://www.halborn.com/blog/feed.xml
- type: GitHubOrganization
  url: https://github.com/HalbornSecurity
- type: Support
  url: https://www.halborn.com/contact
- type: Login
  url: https://one.halborn.com/login
- type: TermsOfService
  url: https://www.halborn.com/terms
- type: PrivacyPolicy
  url: https://www.halborn.com/privacy
- type: LLMsTxt
  url: llms/halborn-llms.txt
- type: Security
  url: security/halborn-vulnerability-disclosure.yml
- type: VulnerabilityDisclosure
  url: security/halborn-vulnerability-disclosure.yml
- type: TrustCenter
  url: security/halborn-trust-center.yml
- type: Compliance
  url: security/halborn-trust-center.yml
- type: Conformance
  url: conformance/halborn-conformance.yml
- type: DomainSecurity
  url: security/halborn-domain-security.yml
- type: Packages
  url: packages/halborn-packages.yml
x-enrichment:
  date: '2026-08-22'
  status: enriched
  artifacts_added: 9
  pass: local-v1
x-coverage:
  state: none
  reason: no-developer-program
  detail: >-
    Halborn sells blockchain security assessments as professional services and ships no developer
    product: its 1,020-URL sitemap contains no /developers, /docs or /api section, docs.halborn.com
    and api.halborn.com do not resolve at all, and the only authenticated surface — Halborn ONE at
    one.halborn.com — is an invitation-only client portal whose login page says "Contact your local
    org-owner for an invitation". It does publish a real llms.txt, which lists services, industries,
    reports and RSS feeds and names no API.
  evidence:
  - url: https://www.halborn.com/llms.txt
    status: 200
  - url: https://www.halborn.com/openapi.json
    status: 404
  - url: https://docs.halborn.com/
    status: 0
  - url: https://one.halborn.com/openapi.json
    status: 404
  - url: https://www.halborn.com/.well-known/agent-card.json
    status: 404
  checked: '2026-08-22'