# softstack
> German Web3 service partner (softstack GmbH): security audits, software development, and consulting. ISO 27001 certified. Institutional and MiCA-ready work. Made in Germany.

Softstack helps companies build, secure, and scale Web3 products across three equal pillars.

## Security
- [Blockchain Security](https://softstack.io/blockchain-security): Hub for smart contract audits, dApp audits, penetration testing, MiCA/DORA/VARA readiness, ICT preparation, and TLPT.
- [Smart Contract Audit](https://softstack.io/blockchain-security/services/smart-contract-audit): Smart contract security audits with remediation support.
- [dApp Audit](https://softstack.io/blockchain-security/services/dapp-audit): Decentralized application security reviews.
- [Penetration Testing](https://softstack.io/blockchain-security/services/penetration-testing): Offensive security testing for Web3 infrastructure and applications.
- [Threat-Led Penetration Testing](https://softstack.io/blockchain-security/services/threat-led-penetration-testing): Intelligence-led TLPT for DORA-designated entities and VARA-notified VASPs.
- [Digital Asset Risk Assessment](https://softstack.io/blockchain-security/services/digital-asset-risk-assessment): Risk assessments for custodians, exchanges, and digital asset operators.
- [MiCA Compliance](https://softstack.io/blockchain-security/services/mica-compliance): Security testing and evidence packs for EU CASPs, ART/EMT issuers, and token projects.
- [DORA Compliance](https://softstack.io/blockchain-security/services/dora-compliance): ICT resilience testing and TLPT readiness for EU financial entities and CASPs.
- [VARA Compliance](https://softstack.io/blockchain-security/services/vara-compliance): Annual pentests, smart contract audits, and TLPT support for Dubai VASPs.
- [ICT Preparation](https://softstack.io/blockchain-security/services/ict-preparation): Critical function mapping and pre-test readiness for regulatory resilience programmes.

## Software Development
- [Blockchain Development](https://softstack.io/blockchain-development): Hub for Web3, smart contract, dApp, and mobile development. Made in Germany.
- [Web3 Development](https://softstack.io/blockchain-development/services/web3-development): Full-stack blockchain and Web3 software engineering.
- [Smart Contract Development](https://softstack.io/blockchain-development/services/smart-contract-development): Smart contract engineering across major chains.
- [dApp Development](https://softstack.io/blockchain-development/services/dapp-development): Decentralized application design and build.
- [Mobile App Development](https://softstack.io/blockchain-development/services/mobile-app-development): Mobile clients and wallets for Web3 products.

## Consulting
- [Web3 Consulting](https://softstack.io/web3-consulting): Strategy, architecture, and go-to-market advisory for Web3 projects.
- [Digital Asset Regulation Consulting](https://softstack.io/services/digital-asset-regulation-consulting): MiCA, BaFin, and digital asset regulatory guidance.
- [ISO 27001 Consulting](https://softstack.io/services/iso27001-consulting): ISMS and ISO 27001 consulting for crypto and Web3 organizations.
- [Software Development Consulting](https://softstack.io/services/software-development-consulting): Engineering advisory for blockchain and software delivery.
- [Web3 Integration Consulting](https://softstack.io/services/web3-integration-consulting): Integrating Web3 into existing enterprise systems.
- [Project Management](https://softstack.io/services/project-management): Delivery leadership for complex Web3 programs.
- [Service Partner Program (SPP)](https://softstack.io/service-partner-program-spp): Partner program for VCs, studios, and platforms that need a trusted delivery partner.

## Ecosystems & Expertise
- [Blockchain Ecosystems](https://softstack.io/blockchain-ecosystems): Chains softstack supports for development, audit, and consulting.
- [Ethereum](https://softstack.io/ecosystems/ethereum): Ethereum development, audit, and consulting partner.
- [Solana](https://softstack.io/ecosystems/solana): Solana development, audit, and consulting partner.
- [Programming Languages](https://softstack.io/programming-languages): Languages and stacks softstack engineers use in production.

## Case Studies & Insights
- [References](https://softstack.io/references): Public case studies covering audits and product builds.
- [Insights / Blog](https://softstack.io/blog): Articles on security, development, regulation, and Web3 delivery.
- [Siemens AG €330M Tokenised Bond](https://softstack.io/references/siemens-ag-issues-e330m-tokenised-bond-on-blockchain-audited-by-softstack): Smart contract audit for Siemens AG’s institutional tokenised bond.
- [HAL Bank Securities Register](https://softstack.io/references/hal-bank-launches-blockchain-securities-register-audited-by-softstack): Smart contract audit for HAL Bank’s eWpG blockchain securities register.
- [AllUnity MiCAR Stablecoin](https://softstack.io/references/softstack-secures-allunitys-micar-compliant-stablecoin): Security work for a MiCAR-compliant stablecoin.
- [How Much Does a Smart Contract Audit Cost](https://softstack.io/blog/how-much-does-a-smart-contract-audit-cost-in-2025): Pricing and scope guidance for audits.
- [Top Web3 Development Companies](https://softstack.io/blog/top-web3-development-companies-in-2025): Market context for choosing a Web3 development partner.
- [Navigating MiCA Regulation](https://softstack.io/blog/navigating-mica-regulation-for-web3-projects): Practical MiCA steps for Web3 projects.

## Company
- [About Us](https://softstack.io/about-us): softstack GmbH in Flensburg, Germany. Security, development, consulting.
- [Career](https://softstack.io/career): Open roles.
- [Press & Branding](https://softstack.io/press-branding): Brand assets and press resources.
- [Contact](https://softstack.io/contact): Book a meeting or request a quote.
- [BioHash](https://softstack.io/biohash): Privacy-first biometric identity lab product.
- [Brand facts (JSON)](https://softstack.io/.well-known/brand-facts.json): Machine-readable company facts for agents.