> For the complete documentation index, see [llms.txt](https://zts-guard.gitbook.io/zts-guard-discord-bot/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://zts-guard.gitbook.io/zts-guard-discord-bot/need-a-security-audit.md).

# Need a Security Audit?

<figure><img src="/files/WJwRxXyMCt6JovWSFAZZ" alt=""><figcaption></figcaption></figure>

The ZTS Guard Discord Bot is the Discord bot under Zero Trust Security entity.  The Zero Trust Security entity provides a variety of auditing services through Web2 and Web3.  While the ZTS Guard Bot is vital for Discord Security and used in all Discord Security Audits this does not encompass all the security needed for a team on multiple platforms.  \
\
**Below are most of the Zero Trust Security offerings, that we highly recommend you consider including a formal Discord Security Audit:**\
\
**Discord Security Audit:** This includes a comprehensive review of the entire Discord server, identifying security vulnerabilities, and implementing necessary fixes. You'll receive a detailed report and comprehensive Discord training on server functionality and personal security best practices. This service significantly reduces the risk of server compromise and helps protect your community from phishing attempts.\
\
**X (Twitter) Security Audit:** This includes reviewing the current X Profile settings, providing an X Security Document, and setting up secure access for all users to the X account. This audit minimizes exposed risk by following proper least privilege principles, eliminating security concerns, and making it significantly harder for scammers to take over the X account.

**Telegram Security Audit:** This includes reviewing the current Telegram configurations, permissions, channels, and moderation bots (if any) in place. The server owner's settings will be reviewed, and the group will have access to a Drew Security Telegram bot that offers security features beyond what standard Telegram and other bots provide.

**Secure Telegram Creation:** This includes creating a safe and secure Telegram group to foster community engagement. It comes with a Telegram bot that offers security features beyond what standard Telegram and other bots provide. We also provide comprehensive training and documentation on how to maintain Telegram security.\
\
**Multi-Sig Safe Security/OPSEC Auditing:** This includes auditing your current multi-sig architecture, evaluating signer security, and creating processes/flows to follow for safe interaction/signing. This includes a Security Training for all signers and testing of the policies/architecture that will be set in place.

**Email Phishing Campaigns:** This includes performing quarterly email phishing campaigns to ensure your team is vigilant about emails they receive and properly verifying them. This also provides data on who viewed the emails, who reported them, and who opened or clicked on them.

**Security Training:** This includes Security Training for your team, covering common and advanced scams, as well as personal security requirements. The training provides a security quiz and a reference document for onboarding new users.

**Brand Protection:** This includes registering all your official brand social accounts and domains to protect them and taking down any impersonating accounts. This covers, but is not limited to, X (Twitter), Discord, Email, Websites/Domains, Medium articles, YouTube, Telegram, and more. While awaiting takedown of impostor accounts, applicable cases will be blocked in all wallet providers and browsers.

**TGE Security Protection:** This includes ensuring your team is prepared for TGE through multiple security meetings to secure all platforms and team members beforehand. We develop a comprehensive security action plan for your TGE, audit all platforms before launch, provide on-call support during TGE, and offer TGE partnerships to ensure a smooth launch without false positives.

**Smart Contracts/Dev Creation/Auditing:** This includes creating new smart contracts or auditing existing ones. This service covers everything except games. This includes all chains.

**Ongoing Security Consultant:** This includes an agreement to perform ongoing security management and changes to various platforms such as Discord, Telegram, etc. The service involves conducting regular security training sessions, distributing security awareness messages, and providing quarterly reports.

Want to chat or schedule a call to talk more about a Full Discord Security Audit? Join the <https://discord.gg/zerotrustsecurity> and open a ticket!