VICE Platform - Private Beta is a specialized security auditing tool built explicitly for indie builders and developers who ship fast. Designed to evaluate web applications the exact way an attacker would, VICE identifies critical vulnerabilities such as leaked secrets in JavaScript bundles, Supabase Row Level Security (RLS) misconfigurations, exposed APIs, and weak infrastructure or headers.

The underlying security engine is open source and completely free to use today either as a standalone CLI tool or integrated smoothly into a GitHub Action workflow. For teams looking for a complete end-to-end security loop, the hosted VICE Platform adds domain verification, comprehensive automated audits, evidence-backed findings, actionable suggested fixes, and built-in retesting capabilities to ensure vulnerabilities have been successfully resolved.

Pros of VICE Platform - Private Beta

Open-source scanning engine available as a free CLI or GitHub Action
Audits web apps from an attacker's perspective (bundles, APIs, RLS)
Hosted platform offers a full remediation loop: audit, evidence, fix, and retest
Tailored specifically for indie builders and fast-shipping development teams

Cons of VICE Platform - Private Beta

Currently operating in a private beta phase with limited availability (10 founding spots)
Full remediation and verification loop requires the hosted platform rather than just the open-source CLI

Frequently Asked Questions

What does VICE Platform scan for?

VICE audits web apps for leaked secrets in bundles, Supabase RLS misconfigurations, exposed APIs, and weak infrastructure and security headers.

Is the scanning engine free to use?

Yes, the core engine is open source and free to use today as a CLI or a GitHub Action.

How does the hosted VICE Platform differ from the open-source engine?

The hosted platform provides the full verification and remediation loop: domain verification, full audits, evidence-backed findings, suggested fixes, and confirmation retesting.