A security finding
should be verifiable.

From the tested scope to the fix, VICE keeps evidence and the limits of each check at the heart of its results.

Evidence you can inspect

Each finding is based on test observations, including their context and scope.

See the findings

An open source engine

Explore the VICE engine’s checks in its public repository.

View the engine

An authorized scope

The light scan checks public surfaces. In-depth tests run on a verified domain.

Compare profiles

A verified fix

Only a new comparable test can confirm that a problem has disappeared.

Understand rescanning

A check.
Evidence. A next step.

An HTTP status or route name alone does not prove a vulnerability. Read each result alongside the observations that support it.

Your domainScope validated
VICE engineSelected checks
The findingsEvidence and recommendations

The platform for monitoring

Track your domains, scans and findings in one place. Share access with your team on Pro.

Discover the platform

The engine for your tools

Explore the engine’s code, checks and documentation. Use the CLI to integrate it into your development workflow.

View GitHub

Marking an issue as fixed
does not verify the fix.

scan

Examines HTTP headers and HTTPS configuration

scananalysis of public surfaces
4 checks0 finished1 in progress3 waiting

Frequently asked questions

Start checking
the security of your site.

Find issues, prepare fixes and verify changes.
Keep your results together for the next deployment.

+10,000 sites scanned
The VICE Platform overview