Forta

Forta is a shared blockchain-security intelligence network built around detection bots, rather than a managed incident-response console. Scan nodes run bot logic against chain activity and publish alerts, allowing a team to consume reusable threat signals or write detectors for its own contracts and risk patterns.

Bots turn observed activity into reusable alerts

A Forta bot encodes a condition, from a transaction threshold to a heuristic or machine-learning detection, and emits an alert when scan nodes observe that condition. The bot author supplies the detection logic while the network supplies execution against monitored blocks and transactions.

Bots can also use another bot’s alert as input to more specialised logic. An alert can carry addresses, transaction-linked information, anomaly scores and related alert hashes, giving an application more context than an undifferentiated stream of chain events.

Feeds are intelligence inputs, not a response by themselves

Teams can query alerts through GraphQL or subscribe to notifications and integrations. Premium Feed owners set their own prices, while the general subscription covers other bot intelligence, so the useful coverage and cost depend on the particular feeds a team selects.

A Forta alert can inform an operational action, but it does not pause a contract or move funds on its own. A connected system can map a chosen alert to an action, leaving the user responsible for the trigger criteria, authority and execution path.

An open detector model has a visibility boundary

The shared catalog can cover broad threats or a protocol’s own contracts, making Forta suitable when a security team wants to extend monitoring instead of accepting only a fixed vendor rule set. Custom bots can be built with the SDK or Bot Wizard and consumed alongside existing feeds.

Detection code and alert data are public by default in the shared model. Forta has described private bots with obfuscated code and encrypted alert output, but a team with sensitive detections should establish the intended publication and consumption model before relying on a shared feed.

Composable intelligence beside managed response

Hypernative is the closer choice when confirmed detections need to invoke a configured response playbook, such as pausing a contract, moving funds or unwinding a position through connected controls. Forta is more specific to a team that values an open bot network and wants to integrate its intelligence into its own application or operating tools.

OpenZeppelin Defender is complementary where contract administration and transaction automation are the primary requirement. Forta can provide the signal; an operations product supplies the connected control that can carry out the response.