VICE, your web security scanner
VICE is the web security audit platform by Webba Creative Technologies. Its open source engine checks your application for exposed secrets, misconfigurations and Supabase RLS issues, with evidence to guide your fixes.
Security reports you can actually read
No compliance theater, no fear-mongering. Findings, evidence, and the exact fix. Written for builders, not CISOs.
First results in about a minute
The light scan covers headers, TLS, exposed files and leaked secrets, then comes back with a score while other scanners are still warming up.
Supabase Deep Scan
Every table, every policy, every storage bucket. VICE audits the RLS layer generic scanners don't understand, built for the stack you ship on.
A score worth showing off
One number out of 100, tracked over time, with an embeddable badge. Proof that your product takes security seriously.
An AI fix for every finding
Each finding ships with a plain-language explanation and the exact patch. Paste it into Cursor or your migration and move on.
One workspace per domain
Verify ownership once. Audits, modules, schedules and findings stay attached to the domain they belong to.
Verified domains go deeper
A DNS TXT record proves the domain is yours. Only then do the deeper checks unlock. VICE never runs intrusive scans on domains you don't own.
Evidence, not vibes
Every finding keeps its raw evidence next to the remediation, so you can verify the problem is real before you fix it.
GitHub Actions built in
Run VICE in CI and fail the build when a new critical lands. Reports and the score badge update on every push.
Audits on a schedule
Weekly or monthly runs keep the score fresh and catch regressions while you sleep.
Connect the tools you already use
Use VICE in your browser, with the vice-security CLI, or in GitHub Actions. The platform and developer tools share the open source VICE engine.
What our beta testers say
From the beta cohort: solo founders, freelancers and small teams shipping public products.
VICE detected a misconfigured RLS policy on a Supabase table I thought was properly protected. The issue was fixed a few minutes later.
Phillipe M.
What I like most is that VICE does more than tell me there is a problem. I get the explanation and the fix to apply right away.
Charles P.
For a Supabase-based application, this is exactly the kind of tool I was looking for. Having a real analysis of tables, RLS policies and buckets in one place is extremely useful.
Michel M.
I develop on my own, and security is clearly not my area. VICE helps me understand what is wrong without having to interpret a 40-page pentest report.
Theo R.
Within minutes, I had a clear list of issues to fix, ranked by priority. Checking them manually would have taken me much longer.
Esteban O.
The GitHub Actions integration is probably what I use most. I can automatically check that a change does not introduce a new critical issue.
Arthur S.
The fact that the engine is open source definitely influenced my decision to try VICE. For a security tool, understanding what runs behind the scenes matters.
Laurent H.
I wanted something more serious than a basic header scanner, without moving to an overpriced enterprise platform. VICE fits that middle ground well.
Martine G.
First scan, three issues fixed straight away. That is exactly what I expect from a security tool.
Océane Q.
Simple pricing for solo builders
Start free with public checks. Upgrade when a domain is worth defending.
Free
€0
Start free with public checks. Upgrade when a domain is worth defending.
Public light scans
One tracked domain
Security headers and TLS checks
Manual domain verification
Solo
€7
/ month
Billed 84 EUR / year, save 24 EUR
Verified full audits
10 audits per month
Supabase Deep Scan and AI fixes
Scan history and score tracking
GitHub Actions and scheduled audits