K Koschei Web3Security Intelligence
SECURITY · INTELLIGENCE · EVIDENCE · COMMAND

Koschei
security intelligence infrastructure for the on-chain world.

Detect suspicious paths, investigate with evidence, trace authority and approvals, run pre-sign analysis, correlate ARVIS investigations, and keep monitoring, alerts and proof inside one command surface. Koschei shows what the evidence supports—and keeps unknowns visible. What is observed stays observed. What is unknown stays unknown.

\n

Security decisions, with proof attached.

Threat Detectionevidence-backed paths
Evidence Intelligencesource-aware proof
ARVIS Radarrelationship context
Pre-sign Commandinspect before action
OBSERVECORRELATEVALIDATETRACEPROVE

One intelligence surface

Everything Koschei Web3 can do,
without the dashboard maze.

Built for the question after the scan. Start with a public target, then move from identity to authority, approvals, transaction context, evidence correlation, monitoring and professional integration without leaving the security model.

◎
Identity & chain state

Address Intelligence

Classify supported public targets, resolve network context and surface observable account or contract state.

Analyze →
⌘
Control plane

Authority Intelligence

Expose delegation, upgrade authority, admin roles and permission scope as bounded evidence.

Inspect →
◈
Spending surface

Approval Intelligence

Inspect ERC-20 allowance and supported approval semantics without confusing permission with safety.

Inspect →
⇄
Execution context

Transaction Preflight

Inspect supported transaction context before execution and preserve the evidence that changed the decision.

Preflight →
◉
Evidence correlation

ARVIS Investigation

Move from a target to explainable relationships, provenance, unresolved gaps and deterministic evidence-backed conclusions.

Open ARVIS →
!
Monitoring

Evidence & Alerts

Review account-backed alerts and investigation evidence without silently inventing missing telemetry.

Review →
★
Continuous attention

Watchlists

Track supported public targets and bring account-scoped monitoring events back into the evidence workflow.

Watch →
⌁
Chain-specific adapters

Cross-chain Evidence

Keep one reasoning model while Solana, EVM and Bitcoin evidence collectors preserve their own boundaries.

Coverage →
</>
Teams & builders

API / Professional Access

Use the customer workspace and supported programmatic surfaces without collapsing evidence states into marketing scores.

Access →
READ-ONLYNo custody or private keys
FAIL-CLOSEDMissing evidence never becomes safe
EVIDENCE-LEDSource, time and provenance stay attached
ARVISVerdict authority remains explicit

Evidence contract

Every conclusion keeps its boundary.

Premium security intelligence is not a prettier risk score. It is a better chain of custody for what the system actually knows.

01

Observed is not verified

An RPC response can establish observed state without silently becoming independent verification.

02

Permission is not safety

An allowance, delegation or upgrade authority is a control surface—not an automatic malicious verdict.

03

Absence is not proof

No standard proxy slot observed does not mean a contract is immutable or free of another upgrade mechanism.

KOSCHEI / EVIDENCEBOUNDARY PRESERVED
target0x7a4...91d2BOUND
networkethereum-mainnetCHAIN-ID CHECKED
authorityimplementation → adminOBSERVED
trustobserved=true · verified=falseNOT PROMOTED
unknownunresolved evidence remains unknownFAIL-CLOSED

Coverage without theatre

Production where proven.
Expansion where honest.

Network labels describe implemented evidence paths and current product boundaries. They are not marketing substitutes for live production proof.

S

Solana

Production core

Live account observation and existing ARVIS intelligence paths.

LIVE CORE
Ξ

Ethereum

EVM intelligence

Read-only code, delegation and standard proxy authority probes.

PROBE READY
B

Base / L2

EVM intelligence

Chain-ID bound EVM evidence path with the same fail-closed contract.

PROBE READY
₿

Bitcoin

UTXO intelligence

Read-only target probe path with evidence-state separation.

PROBE READY

Koschei Web3

Know what controls the asset
before the asset moves.

Open the operational console for evidence-led security validation and investigation.