← Articles
Helius Watchtower: grade, scan, alert Solana programs logo
helius

Helius Watchtower: grade, scan, alert Solana programs

· NOV 7, 2026 ·
Read
Share

CLI and dashboard on your machine. Mainnet only. Keep old Parsed Events / LaserStream pieces.

devrels.xyz/a/379

Watchtower is open-source security monitoring for Solana programs. Point it at a program ID: it grades upgrade and admin posture, scans history, and alerts live. It runs on your machine with your Helius API key. CLI or dashboard. No extra database. GitHub: helius-labs/watchtower. MIT. X @helius_dev.

Built on Helius Parsed Events (history scan) and Parsed Streams (WebSocket as txs confirm), via helius-sdk. Needs a key from dashboard.helius.dev with those products. Quickstart: clone, pnpm install && pnpm build, set HELIUS_API_KEY, pnpm dev serve, open http://127.0.0.1:4545. The key stays in .env, never the browser. Mainnet only.

PieceNotes
GradeStart 100. Fail -25, warning -10. Overall is the lowest subject. A 90+, B 75-89, C 60-74, D 40-59, F below 40.
CreditsParsed Events scan: 10 plus 1 per 1,000 txs scanned. Matches returned in full also cost credits.
DetectorsDeployments, Squads proposals, mint authority, treasury outflows, durable-nonce setup, IDL and config changes, build mismatch, attack-chain (stages within 24 hours).
LimitsSquads v3 and v4 recognized. SPL Governance / Realms / other PDAs reported as unrecognized.

Host with Docker: WATCHTOWER_PASSWORD required on a public bind, or WATCHTOWER_READONLY=true for a status page. Alerts: terminal, Discord, Slack, Telegram, or any webhook. LinkedIn omitted.

Keep reading

Get new articles in your inbox

Technical deep-dives on Solana tooling, infrastructure, and ecosystem. No noise.