Crypto Bitcoin Ethereum Blockchain Gaming DeFi Mining Exchanges

Ellis Norman on Leading Cybersecurity at Hexens and the Future of Web3

James Schwahn
Hexens.io Interview Permissionless III

At Permissionless III, we had the pleasure of speaking with Ellis Norman, a dynamic leader in the technology and sales sectors. Currently serving as the Chief Revenue Officer at Hexens, Ellis brings a wealth of experience in SaaS sales, business development, and strategic partnerships. His career has seen him excel in various leadership roles, including his time at HackerEarth, where he spearheaded Web3 partnerships within a global developer community of over 8 million.

Ellis's impressive track record includes his role as State Director for Virginia at Polygon Technology and his advisory positions that highlight his commitment to fostering innovation in the tech landscape. His journey also encompasses significant contributions at Adia, where he led sales development efforts and drove revenue growth to $20 million in just two years.

An alumnus of Hampden-Sydney College, Ellis holds degrees in Economics and English Language and Literature, reflecting his analytical prowess and communication skills.

Join us as we dive into Ellis's insights on sales leadership, the evolution of Web3, and the future of technology partnerships!

The Hexens.io Website

James (CryptoBit Mag): Did you want to introduce yourself real quick?

Ellis Norman: Yeah. My name is Ellis Norman. I'm the Chief Revenue Officer of Hexens cybersecurity.

James (CryptoBit Mag): What exactly do you guys do with your platform?

Ellis Norman: So there's a couple of pieces. Hexens is one of the leading security research teams in web three. We do all things cybersecurity across web two and web three. So smart contract audits, pen testing, cloud security, you name it. We tend to work with Tier One projects across layer ones and layer twos.
With that, we also release products. The products are called Remedy, Glider, and also a ZK prover that we brought to market so far. All of those act more like public goods.
  1. Remedy is a first-of-its-kind, free bug bounty in web three. It has no success fees, no commission. There is managed triage if somebody wants to opt in for it.
  2. Glider is a first-of-its-kind query language and framework for Solidity that allows blockchains to actually scan for vulnerabilities at once across the entire blockchain. It's built as a security tool. It can actually call any data that you'd like to, so think about it like Dune, but specifically for vulnerabilities and security.

James (CryptoBit Mag): What is your target market? Can anyone come in and buy your services? Is it scalable? If someone small comes in, is it going to be a different price than someone that has a huge project? How does the pricing work?

Ellis Norman: Sure. On the smart contract audit side, it's actually pretty easy. It's based on the amount of lines of code that somebody's going through manually. It's all manual. Generally, it works out that about 1000 lines of code equals roughly one calendar week of time. Costs range anywhere from call it 25 to 50,000 per calendar week, and then just based on length. So if it's a huge project, it might take six months. If it's a small project, it might take four days.
For Glider, the pricing is essentially just setup cost and infrastructure which allows for the chain to be integrated with the query package.

James (CryptoBit Mag): What do you see your platform doing that your competitors don't? What is your advantage?

Ellis Norman: Talking specifically about Glider, once it's integrated, it allows somebody to essentially write queries which describe scenarios in Solidity and then run it against the entire blockchain to find vulnerabilities in any derivatives.
In the market today, there are a couple of variant analysis tools out there, like Slither and others. The amount of time it would take you to search an entire chain using existing products in the market is months. With Glider, it takes minutes. You can write in 10 lines of code what would take you 100 lines of code in other products. So it's quicker, easier, faster, and more reliable because it's actually doing source code rather than bytecode.

James (CryptoBit Mag): Do you have social media and other channels where people can reach you?

Ellis Norman: Yep, if anybody's interested in exploring opportunities, feel free to reach out to me on Telegram. It's LSJ Norman. Follow us on Twitter. It's hexens_io for the Hexens brand, and then remedy.xyz, I believe, for Remedy, which is the bug bounty side and the community-driven side.

James (CryptoBit Mag): Thank you for your time; I truly appreciate it.

Ellis Norman: Appreciate your time.

Follow Hexens.io on their Website, LinkedIn, Facebook, X.com, and GitHub.

All interview transcripts have been meticulously transcribed by Stylo.Network, ensuring accuracy and clarity in every detail.

Hexens.io is Trusted By

Hexens.io: Pioneering Cybersecurity in the Web3 Space

In the rapidly expanding universe of Web3 technologies, where decentralization is not just a buzzword but a new frontier, security becomes paramount. Enter Hexens.io, a cybersecurity firm that's setting new benchmarks in protecting this evolving digital landscape. But what makes Hexens.io stand out in the crowded field of cybersecurity? Let's delve into some of its standout features:

1. Comprehensive Security Audits

Hexens.io specializes in smart contract security reviews, offering in-depth audits that are crucial for any DeFi project. Their approach isn't just about finding vulnerabilities; it's about understanding the intricacies of smart contracts to ensure they are impervious to attacks. In 2023 alone, Hexens conducted close to 40 smart contract security reviews, identifying critical vulnerabilities that could have led to significant losses.

2. Innovative Bug Bounty Program

Moving beyond traditional audits, Hexens.io hosts a bug bounty program on the Remedy platform. This initiative invites ethical hackers from around the globe to identify and report vulnerabilities in exchange for rewards. What's unique here is the zero success fee for bug bounties and professional triage services, making it an attractive proposition for both the hunters and the projects seeking to fortify their security.

3. Cutting-Edge Technology Integration

Hexens.io isn't just about defense; it's about using the latest tech to stay ahead. With access to the ZK prover interface, they incorporate zero-knowledge proofs into their security solutions, offering a level of privacy and security that's cutting-edge in the cybersecurity domain.

4. Professional and Responsive Service

Client testimonials, like that from Burak Benligiray of API3, highlight Hexens.io's commitment to professionalism and responsiveness. Their ability to deliver high-quality audits not only speaks to their technical expertise but also to their customer service excellence.

5. Education and Community Engagement

Understanding that security in Web3 isn't just a technical challenge but also an educational one, Hexens.io contributes through thought leadership. Their CEO, Sipan Vardanyan, actively engages as a Cyber Security Lecturer, spreading knowledge and emphasizing the importance of cybersecurity in both Web2 and Web3 realms.

6. Strategic Collaboration and Support

Hexens.io supports projects by not just identifying vulnerabilities but also by helping migrate existing security programs to more robust platforms like Remedy, offering free project listings and full support throughout the transition. This holistic support system is designed to foster a safer Web3 environment.

Conclusion

Hexens.io stands as a beacon of cybersecurity in the Web3 world, combining traditional security measures with innovative approaches like bug bounties and advanced technology integration. For any project in the blockchain space looking to safeguard its assets and reputation, partnering with Hexens.io could be one of the smartest moves towards ensuring a secure and trustworthy ecosystem. Their blend of auditing expertise, community engagement, and technological innovation makes them not just a service provider, but a pivotal ally in the quest for a secure decentralized future.

What services does Hexens.io offer?

Hexens.io provides comprehensive cybersecurity services including smart contract audits, bug bounty programs, and security advisory services aimed at minimizing risks in the Web3 space.

Why are smart contract audits important, and how does Hexens.io approach them?

Smart contract audits are crucial for identifying vulnerabilities in blockchain projects. Hexens.io conducts detailed security reviews to ensure smart contracts are secure against potential attacks.

What is unique about Hexens.io's bug bounty program?

Hexens.io hosts a bug bounty program on the Remedy platform with zero success fees for bug bounties, professional triage services, and no charge for project listings, encouraging a community of ethical hackers to uncover vulnerabilities.

Can Hexens.io help migrate existing security programs to new platforms?

Yes, Hexens.io offers full support in migrating current security programs to more robust platforms like Remedy, ensuring a seamless transition with comprehensive support.

What technologies does Hexens.io use to enhance security?

They utilize cutting-edge technologies including access to the ZK prover interface, which leverages zero-knowledge proofs for advanced privacy and security measures.

Who is Sipan Vardanyan in relation to Hexens.io?

Sipan Vardanyan is the co-founder and CEO of Hexens.io, with over 11 years of experience in cybersecurity, focusing on blockchain and emerging tech security solutions.

Does Hexens.io only focus on Web3 security?

While Hexens.io has a significant focus on Web3 due to the emerging risks in this space, their expertise also covers traditional web security, reflecting their broad experience in both Web2 and Web3 environments.

How does engaging with Hexens.io benefit DeFi projects?

By ensuring thorough security audits and running effective bug bounty programs, Hexens.io helps DeFi projects protect their assets, gain community trust, and comply with security best practices.

What does professional triage by Hexens.io entail?

Professional triage involves the assessment, prioritization, and management of the vulnerabilities reported through their bug bounty program, ensuring that each issue is addressed efficiently.

How can someone get started with Hexens.io for their project's security needs?

Interested parties can reach out through Hexens.io's official website or platforms like Remedy to start with a security audit, set up a bug bounty, or get consultancy on cybersecurity strategies.

DISCLOSURE

CryptoBit Magazine is a leading media outlet dedicated to covering the cryptocurrency industry. Our journalists adhere to a strict set of editorial policies to maintain the highest standards of integrity and accuracy. CryptoBit Magazine operates with complete editorial independence, ensuring unbiased and trustworthy reporting on all aspects of the crypto world.

Nothing on this site should be considered financial advice. Always conduct your own research and consult with a professional before making any financial decisions.