simonmorley.co.uk

What It Is

Simon Morley is not a typical cybersecurity vendor website; it feels more like the portfolio page of an individual security engineer and founder. Its current security focus includes NullRabbit, an autonomous security tool for critical infrastructure that focuses on monitoring validator nodes across Ethereum, Solana, Sui, Cosmos, Polkadot, and others; and Rapid Security Review, a fast external security review and remediation service for investors and acquirers.

Core Capabilities and Deployment

Based on the available text, NullRabbit’s protection scope centers on validator-node infrastructure security: continuous monitoring, misconfiguration scanning, initial “shadow deployment” in observation mode, followed by an enforcement hardening phase. Slashr provides a real-time feed of multi-chain validator slashing events, helping node operators understand operational risk. The deployment model only mentions observation mode and enforcing; it does not clarify whether the product is SaaS, agent-based, locally deployed, or a managed service. Before procurement, buyers should confirm data collection boundaries, the permission model, and rollback mechanisms.

Pricing, Compliance, and Integrations

Pricing information is very limited. Rapid Security Review explicitly says it is “free if we don’t find anything,” which suggests an outcome-oriented model, but it does not disclose standard pricing, service duration, deliverable scope, or SLA. No compliance certifications are disclosed. In terms of integrations, the current product clearly covers validator-node ecosystems across multiple public blockchains. The founder’s background includes OpenWRT, MQTT, Golang backends, smart contracts, and compliance systems, but that should not be treated as equivalent to ready-made NullRabbit integrations.

Pros and Cons

Its strength is a highly focused direction, making it suitable for validator nodes, staking infrastructure, and crypto-asset due diligence scenarios. The founder has more than 20 years of experience across networking, crypto trading platforms, compliance systems, and smart contracts, and the service emphasizes “finding and fixing” rather than simply producing reports. The weaknesses are also clear: the website lacks product documentation, console screenshots, customer cases, certifications, payment information, support channels, and verifiable deployment details. It does not yet provide enough information for enterprise-grade procurement.

Best Fit and Access from China

It is better suited to blockchain validator-node operators, small critical-infrastructure teams, and organizations that need a fast external security check before investment or M&A. It is not ideal for large enterprises that require mature compliance materials, fixed pricing, Chinese-language support, and localized delivery. Access from mainland China, payment methods, and local support are all undisclosed, so china_access can only be rated as unknown. For domestic alternatives, buyers could evaluate blockchain security teams such as SlowMist and PeckShield, or combine Prometheus/Grafana to build in-house node monitoring.