OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Developer Tools

Solsec

Solsec is a Rust command-line toolkit for analyzing Solana smart contracts. It provides static analysis, IDL-based fuzzing, configurable security checks and plugins for custom rules, with reports available in JSON, HTML, Markdown and CSV formats. The public repository is licensed under MIT and also documents a Rust library interface.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Solsec — OpenViST project profile in Developer Tools.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use Solsec during development to run static checks or fuzz testing on a Solana program, and to create reports for code review or an automated development workflow.

Who it is for

  • Solana program developers who want command-line security checks during development.
  • Teams that want analysis reports in formats suitable for review or automation.
  • Rust developers seeking to call Solsec’s analysis and reporting components from a Rust project.

Documented uses

  • Scan a Solana project’s Rust files for security issues.
  • Run fuzz testing against a Solana program.
  • Produce reports in multiple formats for review or workflow use.
  • Add custom security rules through the plugin system.
Before you choose

Requirements & limits

The repository is public and displays an MIT license. Installation instructions use Cargo, either from Crates.io or from the source repository.

  • Solsec is a CLI tool written in Rust; its documented installation paths use Cargo.
  • Static analysis scans Rust files, while fuzz testing is exposed through a separate command.
  • The toolkit documents JSON, HTML, Markdown and CSV reports, with JSON and HTML generated by default for scans.
  • The documentation identifies GitHub Actions support and pre-commit hooks for workflow integration.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Scan a Solana project and create reports

Run static analysis on a Solana program and save results in selected report formats.

Before you start

  • Solsec installed from Crates.io using Cargo, or installed from the repository source.
  • A local Solana project or program directory.

Steps

  1. Install with the command below, or clone the repository and run the command below from its directory.

    Documented command
    cargo install solsec
    Documented command
    cargo install --path .

  2. Run solsec scan ./my-solana-program --output ./results to scan the specified project.

  3. To select formats, run solsec scan ./my-program --format json,html,markdown,csv. The default scan generates JSON and HTML.

Expected outcome

Solsec produces analysis reports in the selected formats; HTML reports open automatically in an interactive session unless disabled.

Guide limitations

  • The documented scan is static analysis; findings require review and do not by themselves establish that a program is secure.
  • The repository documents a separate fuzz command, but this guide covers scanning and report generation only.
Documentation 1 ↗
Source-based practical guide

Run Solsec fuzz testing on a Solana program

Invoke the toolkit’s documented fuzz-testing command for a Solana program.

Before you start

  • Solsec installed using the documented Cargo installation route.
  • A local Solana program directory.

Steps

  1. Install Solsec with the command below, or clone the repository and install it with the command below.

    Documented command
    cargo install solsec
    Documented command
    cargo install --path .

  2. Run solsec fuzz ./my-solana-program --timeout 300 to start fuzz testing with the documented timeout argument.

Expected outcome

The command starts Solsec’s fuzz-testing workflow for the specified program.

Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
15 October 2026
Original website title
hasip-timurtas/solsec · Official homepage title · retained in its source language
How we review sourcesSuggest a correction