Modules

Everything a solo security team would do

Audits, deep scans, CI checks, schedules and fixes. Each module attaches to the domain it protects, so nothing lives in a silo.

Add a domain

Every domain becomes its own workspace: audits, findings, modules and history in one place.

Verify ownership

One DNS TXT record proves the domain is yours and unlocks the deeper checks.

Run the audit

Light for a quick pulse, full for the complete picture, custom when you know what you want.

Fix and re-score

Apply the AI fix, mark the finding solved, and watch the score climb on the next run.

The same structure across every module

Choose the domain, connect what matters, run the audit, review the result.

Domain audits

Light, full and custom audits run inside the selected workspace with live progress. First results land in about a minute.

Learn more

$ vice scan acme.dev
▸ headers ········· 12 checks
▸ tls ············· valid, HSTS on
▸ files ··········· no .env exposed
▸ supabase ········ 1 RLS gap
score 82/100 · grade B · 4 findings

Supabase Deep Scan

Save the project once per domain. VICE then audits every table, RLS policy, storage bucket and edge function for real exposure.

Learn more

AI/RAG security scan

Discover and test AI APIs, model protections, retrieval boundaries and connected tools from one verified domain.

Learn more

WordPress security scan

Detect WordPress and review public identity, XML-RPC, login and cron exposure from one verified domain.

Learn more

Findings with evidence

Grouped by domain, audit, type and date. Raw evidence stays attached so the next action is always obvious.

Scheduled audits

Weekly or monthly runs keep the score fresh and catch regressions before your users find them.

GitHub Actions built in

The audit runs in CI, fails the build on new criticals, and feeds the same domain score as every other module.

Learn more

An AI fix for every finding

A plain-language explanation and the exact patch for each finding. Prompts stay saved until you regenerate them.

Learn more

-- ai fix · missing-rls-policy
- grant select on public.users to anon;
+ alter table public.users
+   enable row level security;
+ create policy "own rows" on public.users
+   for select using (auth.uid() = id);