{
  "slug": "trail-of-bits",
  "name": "Trail of Bits",
  "url": "https://www.trailofbits.com",
  "hq": "New York, United States",
  "focus": "Software assurance with a dedicated cryptography practice",
  "summary": "Trail of Bits is a security research and consulting firm with a cryptography practice that audits protocols and implementations, including post-quantum ones. In 2026 it added ML-KEM and ML-DSA support to pyca/cryptography with funding from the Sovereign Tech Agency.",
  "pqc_services": [
    "Cryptographic implementation and protocol reviews",
    "Post-quantum library implementation (pyca/cryptography ML-KEM and ML-DSA, 2026)",
    "Static and dynamic analysis tooling for cryptographic code"
  ],
  "evidence": [
    [
      "Cryptography services page",
      "https://trailofbits.com/services/software-assurance/cryptography"
    ],
    [
      "Shipping post-quantum cryptography to Python (2026-06-30)",
      "https://blog.trailofbits.com/2026/06/30/shipping-post-quantum-cryptography-to-python/"
    ]
  ],
  "rank": 2,
  "page": "https://pqaudit.org/auditors/trail-of-bits/",
  "updated": "2026-09-12"
}