Docs menu

What is Luora?

A one-minute pitch: what Luora shows, who it is for and when to reach for it.

Luora is a visual, defensive tool for smart contract auditors and bug bounty hunters. It reads what your Foundry project already produces (forge test traces, the compiler's AST and storage layout, Slither and Aderyn reports, coverage) and draws it: every call of a test on the source line it ran, your contract as a graph, findings on the pieces they touch, and scenario tests you wire and export as .t.sol.

Trace: a forge test's calls, decoded, with the source line each one ran

When to use Luora

  • A test passes or fails and you want to see exactly which calls ran, with which arguments, on which lines.
  • You start on an unfamiliar codebase and want its functions, storage and external calls as one map.
  • Slither and Aderyn report the same issue twice and you want one triaged list.
  • You want to pin intended behaviour (access control, accounting, pause) as Foundry tests without writing them by hand.

Who it is for

Auditors, bug bounty hunters and Solidity developers who already use Foundry. Luora assumes you read code and judge findings yourself: AI explains, you decide.

What Luora is not

  • Not an exploit tool. It never writes attack contracts, calldata or attack steps. Tests it helps you write check intended behaviour.
  • Not a hosted scanner. Your code is never uploaded. The exporter runs on your machine and the app reads the file in your browser tab.
  • Not a replacement for forge, Slither or Aderyn. It reads their output and lays it over the contract.
  • Not an AI. Luora hosts no model. Ask AI uses one you bring, or built-in text.

Next steps

Go to Quick start to load your own project in a few minutes, or open the sample vault right away. Then read Your first audit session.

EnterOpenEscClose↑↓Move