# Sherlock

## Sherlock

- [Introduction to Sherlock](https://docs.sherlock.xyz/readme.md): An overview of Sherlock, our security programs, and how these docs are organized so that teams can quickly find the right guidance for AI, audits, contests, bounties, & coverage. Updated January 2026.
- [FAQ](https://docs.sherlock.xyz/faq.md): High-level information on Sherlock’s lifecycle security model, how our programs work, and how teams choose the right path from development through post-launch.
- [Glossary](https://docs.sherlock.xyz/glossary.md): Definitions for Sherlock programs, people and roles, and core security terms used across these docs: from scope and severity to contests, bounties, judging, and Shield.
- [Disclaimers](https://docs.sherlock.xyz/disclaimers.md): This page summarizes important limitations and risk considerations for protocol teams and other parties who interact with Sherlock programs.
- [Audits for Protocol Teams](https://docs.sherlock.xyz/audits/protocols.md): Explains Sherlock’s pre-launch review options (collaborative audits, audit contests, and Blackthorn) and how teams choose the right model based on scope, timeline, and risk. Includes what to expect
- [How Collaborative Audits Work](https://docs.sherlock.xyz/audits/protocols/how-collaborative-audits-work.md): How Sherlock’s collaborative audits work, including dynamic team assembly, the engagement timeline from scoping through report, and the readiness requirements needed to start on schedule.
- [How Audit Contests Work](https://docs.sherlock.xyz/audits/protocols/how-it-works-for-protocols.md): What a Sherlock audit contest is, how the process works (scoping, contest window, live judging, remediation, and fix verification), and how to plan timelines for a mainnet launch or upgrade.
- [Audit Contest Timeline](https://docs.sherlock.xyz/audits/protocols/audit-pricing-and-timeline.md): Guidance for audit contest duration based on scope size, plus what to budget for judging, remediation, and fix verification after the contest.
- [Scheduling Process](https://docs.sherlock.xyz/audits/protocols/scheduling-process.md): How to reserve and confirm an audit slot with Sherlock, including deposits, start date confirmation, and scheduling flexibility for both major releases and update reviews.
- [Audit Contest Preparation](https://docs.sherlock.xyz/audits/protocols/audit-preparation.md): Covers how to prepare for an audit contest, what’s required 72 hours before start, and what happens if readiness or logistics aren’t complete.
- [Protocol Involvement During the Audit Process](https://docs.sherlock.xyz/audits/protocols/protocol-involvement-during-the-audit-process.md): What Sherlock expects from protocol teams during audit contests and collaborative audits, including communication channels, availability, and how visibility and disclosures are handled during live rev
- [Protocol Involvement Post-Audit](https://docs.sherlock.xyz/audits/protocols/protocol-involvement-post-audit.md): What happens after an audit, including how findings are finalized, how teams confirm disposition and implement fixes, and how Sherlock verifies remediation before a final report.
- [Rescheduling and Cancellations](https://docs.sherlock.xyz/audits/protocols/rescheduling-and-cancellations.md): How Sherlock handles rescheduling and cancellations, including how deposits are treated when a start date is blocked by readiness or logistics, and how to avoid last-minute issues.
- [Watsons](https://docs.sherlock.xyz/audits/watsons.md)
- [Lead Senior Watson Selection Process](https://docs.sherlock.xyz/audits/watsons/lead-senior-watson-selection-process.md)
- [Fix Review Process](https://docs.sherlock.xyz/audits/watsons/fix-review-process.md)
- [Contest Points](https://docs.sherlock.xyz/audits/watsons/contest-points.md)
- [How to Score Issue Points in a Contest](https://docs.sherlock.xyz/audits/watsons/how-to-score-issue-points-in-a-contest.md)
- [Meeting the Payout Criteria](https://docs.sherlock.xyz/audits/watsons/meeting-the-payout-criteria.md): How to make sure you get paid for your findings
- [First Blood Pot](https://docs.sherlock.xyz/audits/watsons/first-submission-pot.md)
- [Leaderboard Points Example](https://docs.sherlock.xyz/audits/watsons/watson-points-example.md): A Hypothetical Walkthrough of How Leaderboard Points are Calculated
- [FAQ](https://docs.sherlock.xyz/audits/watsons/faq.md)
- [Judging](https://docs.sherlock.xyz/audits/judging.md)
- [Judging Conduct Guidelines](https://docs.sherlock.xyz/audits/judging/judging-conduct-guidelines.md)
- [Criteria for Issue Validity](https://docs.sherlock.xyz/audits/judging/guidelines.md)
- [Criteria Changelog](https://docs.sherlock.xyz/audits/judging/guidelines/criteria-changelog.md): All future changes to the Issue criteria page will be logged here.
- [Lead Judge](https://docs.sherlock.xyz/audits/judging/lead-judge.md): The lead judge holds the authority to make final decisions on all contest issues.
- [Community Judging](https://docs.sherlock.xyz/audits/judging/community-judging.md): You’re going to review some issues anyway, why not get paid for it?
- [Dedicated Judge](https://docs.sherlock.xyz/audits/judging/dedicated-judge.md): A dedicated judge is dedicated to judge all issues in the contest and gets a 500% reward boost.
- [Discussion](https://docs.sherlock.xyz/audits/judging/discussion.md): Discussions on the issue voting pages are essential for reaching the correct judgment. To maintain healthy and high-quality discussions, certain constraints apply to commenting.
- [Sherlock's Exclusive Judging Apprentice Program](https://docs.sherlock.xyz/audits/judging/sherlocks-exclusive-judging-apprentice-program.md): What is the Sherlock Judging Apprentice Program, and how does it help you level up your judging skills?
- [Referral Program](https://docs.sherlock.xyz/audits/referral-program.md): Welcome to Sherlock's Referral Program!
- [Pre-Launch Bounty](https://docs.sherlock.xyz/bug-bounties/pre-launch-bounty.md): A Web3 bug bounty is a program that rewards security researchers for responsibly disclosing vulnerabilities.
- [Post-Launch Bounty](https://docs.sherlock.xyz/bug-bounties/post-launch-bounty.md): Sherlock protects teams against hacks at every step of the journey
- [Platform Rules](https://docs.sherlock.xyz/bug-bounties/post-launch-bounty/platform-rules.md)
- [Dispute Resolution](https://docs.sherlock.xyz/bug-bounties/post-launch-bounty/dispute-resolution.md)
- [Criteria for Bug Bounty reports validity](https://docs.sherlock.xyz/bug-bounties/criteria-for-bug-bounty-reports-validity.md): This page includes the standards, duplication clarifications and general out of scope issues general for all Bug Bounty programs.
- [About Sherlock AI](https://docs.sherlock.xyz/sherlock-ai/about-sherlock-ai.md): What Sherlock AI is, how it analyzes repositories in context, and what teams use it for during development and pre-launch review.
- [Configuring a Sherlock AI Run](https://docs.sherlock.xyz/sherlock-ai/configuring-a-sherlock-ai-run.md)
- [Understanding Sherlock AI results](https://docs.sherlock.xyz/sherlock-ai/understanding-sherlock-ai-results.md): How to read Sherlock AI run output, validate assumptions and exploit paths, triage issues as valid or invalid, and close findings with fixes and re-runs.
- [Sherlock Shield](https://docs.sherlock.xyz/coverage/sherlock-shield.md): Exploit payout coverage for qualified audited code
- [Security Researcher Privacy Policy](https://docs.sherlock.xyz/legal/sr-privacy-policy.md)
- [Customer Privacy Policy](https://docs.sherlock.xyz/legal/customer-privacy-policy.md)
