The VICE engine is open source→
Open source / MIT

The security engine built to show its work

VICE maps a web attack surface, tests it within strict boundaries, and returns evidence you can verify. Run it remotely, inspect a codebase locally, or wire it into CI.

CLI

CI

API

APP

VICE ENGINE
01

Set the boundary

02

Observe the surface

03

Run modules

04

Return the proof

One engine, two views of the same surface

The remote runner observes what an attacker can reach. The local runner reads the code and configuration that the network cannot see.

Remote scan

Black-box DAST against a live target, with scope, redirect, protocol and request budgets enforced before probes run.

DNS

HTTP

DOM

TLS

16modules

Local scan

White-box checks for repositories and build configuration, without importing the web platform into the engine.

10
modules

CODE

DEPS

CONFIG

AUTH

A finding has to earn its place

VICE separates what was observed from how strongly it supports a conclusion. Weak signals remain weak instead of being promoted into certainty.

Evidence

Open source engine

Clone it, inspect every rule, run the CLI or add it to GitHub Actions. No account is required.

VICE

CLI

CI

LIB

Tools built on VICE Engine