The Standard for Ethereum Node Operator Security    ·  

Get Started

For node operators For assessors For stakers + builders

For node operators

Achieve NORS certification to verifiably attest that your infrastructure operations meet an enterprise-grade standard for validator risk management. NORS certification is a differentiator for professional Ethereum node operators.

Get NORS certified

Following known attestation standards designed by AICPA, the simple steps to receive NORS certification are designed to be similar and complementary to established standards like SOC 1.

  • 1.

    Optional

    Engage with a NORS Qualified Readiness Assessor

    → View list

  • 2.

    Optional

    Conduct readiness to prepare your company for its assessment, ensuring you are prepared to provide the attestation materials

  • 3.

    Engage with a NORS Qualified Assessor

    → View list

  • 4.

    Complete assessment with Qualified Assessor, providing relevant materials to show that your company adequately meets NORS controls.

    → View full NORS Risk & Controls Matrix

  • 5.

    Receive a custom assurance report from your Qualified Assessors

  • 6.

    If your Qualified Assessor has attested that your operations meet the NORS control objectives, apply for NORS certification, including your passing assurance report

  • 7.

    Successfully complete a compliance screening and agree to the NORS Certification Terms and Conditions.

  • 8.

    Receive and display NORS certification

The standard for enterprise-grade security

  • The development of the Node Operator Risk Standard (NORS) advances the institutional Ethereum staking industry. Through a common, shared standard of validator risk management, NORS establishes trust amongst banks and large institutions by simplifying due diligence for Ethereum staking. The NORS certification positions Ethereum staking favorably for wider institutional adoption.

    Konstantin Richter, Founder & CEO at Blockdaemon

  • The introduction of the Node Operator Risk Standard (NORS) signifies a pivotal advancement for the institutional adoption of Ethereum staking. By establishing a comprehensive framework for validator risk management, NORS streamlines the due diligence process for banks and large institutions. This certification not only fosters trust but also solidifies Ethereum staking's position as a viable asset class for institutional investors.

    Zane Glauber, Head of Blockchain Infrastructure at Galaxy

  • The launch of NORS is a great step towards long-term institutional growth and adoption. Now, it will be much easier for institutions to do true due diligence on staking providers. We're proud to have participated in the NORS Development Working Group to advance Ethereum staking and expand crypto as a trusted asset class for institutional investors.

    Ben Rodriguez, Senior Protocol Specialist, Coinbase

NORS Qualified Assessors

To receive NORS certification, engage with a NORS Qualified Assessor to complete attestation. You may also engage with a NORS Qualified Readiness Assessor to prepare for the attestation.

  • Qualified Assessor: Eric Rae, Partner, KPMG LLP - erae@kpmg.ca

View All NORS Qualified Assessors

For assessors

Be a leader in your field by providing professional custom attestations at the cutting edge of technology and high-value infrastructure, attesting to the operational risk management practices of global leaders in web3 technology.

NORS follows the AICPA assertion based report format. NORS attestation is designed to complement other standards that node operators may hold (SOC1, ISO, etc.). Assessors need to have the skills, training, experience and expertise necessary to conduct an audit, assurance, or advisory engagement, and can apply to be a Qualified Assessor, Qualified Readiness Assessor, or both.

View the NORS Qualified Assessor Policy



World-class auditors provide NORS custom attestations

  • NORS helps bridge the gap between existing certifications like SOC 2 and ISO 27001, taking into account the many nuances of staking. Having participated as a subject matter expert in the NORS Development Working Group, I am proud that the resulting certification does an effective job assessing a node operator’s design and effectiveness of controls related to staking.

    Joshua Faier, Senior Product Manager at Figment

  • NORS represents a pivotal development for the cryptoasset industry. At a time when large, sophisticated financial institutions are getting seriously involved in public blockchain networks, building security standards that align with institutional expectations is critical for making it easier to onboard and adopt this technology. By setting a robust, verifiable framework for validator risk management, alongside the formal AICPA attestation process familiar from SOC 1 and other security standards, institutions will finally be able to evaluate the quality of staking infrastructure on a level playing field.

    Evan Weiss, COO at Alluvial

  • The launch of NORS marks a significant milestone for the Ethereum staking ecosystem. By creating a framework for validator risk management, NORS simplifies due diligence for banks and large institutions making institutional-grade trust a reality for Ethereum. With this certification, we’re another step closer to onboarding the masses.

    Joseph Xu, Chief Technology Officer at Chainproof

For stakers & builders

Stakers

Use NORS certification as a key checkpoint to evaluate whether a service provider meets your needs for ETH staking risk management, including slashing prevention, private key management, operational security, and more. Compliment or reduce due diligence cycles by asking for a NORS certification.

Builders

Require NORS certification to streamline your node operator onboarding, simplifying node operator risk qualification for staking products, staking insurance cover offerings, liquid staking protocols, and more.


  • Today is an important day for Ethereum staking - aligning on standards for node operators lays a foundation for a more robust and secure Ethereum. By adopting best practices and secure staking technologies like distributed validators, node operators can more easily prevent key compromise, slashings, and downtime in the future.

    Oisín Kyne, CTO & Co-Founder at DV Labs

  • As part of our commitment to enhancing the security and resilience of Ethereum’s staking infrastructure through restaking solutions, Eigen Labs participated in the development of the Node Operator Risk Standard (NORS) to provide expertise in how restaking can be accurately represented within this new professional certification. We believe NORS can represent a benchmark for node operator security and operational excellence, enhancing the trust and reliability of the entire staking ecosystem, including restaking.

    Clayton Menzel, Growth at Eigen Labs

  • NORS is another step forward for the wider ETH ecosystem. Not only will it increase credibility and trust by formalizing security and risk management practices for stakers, it's further demonstration that crypto is becoming a fully fledged alternative asset class.

    Hugh Karp, Founder at Nexus Mutual