Free public light scans
Run a non-intrusive scan without signing up. The light scan checks public signals like security headers, TLS, robots.txt and security.txt, exposed files, and secrets leaked in public JavaScript.
VICE
Freemium
VICE realiza auditorías de seguridad web para desarrolladores independientes, con escaneos ligeros públicos, auditorías completas verificadas, análisis profundos de Supabase RLS, correcciones con AI y comprobaciones de CI.
¿Qué es VICE?
VICE scans web products for security issues using both public, non-intrusive checks and verified audits tied to a domain you own. The platform focuses on findings with evidence, clear scoring, and remediation context so builders can review what was found and what to do next.
It covers common web exposure checks such as headers, TLS, exposed files, and leaked secrets, plus deeper modules like Supabase Deep Scan, AI/RAG security checks, WordPress checks, scheduled audits, and CI-based audits through GitHub Actions.
¿Qué puede hacer VICE?
Verified full audits
Deeper checks unlock after a DNS TXT record proves domain ownership. Verified audits stay scoped to domains you own and are designed to be non-destructive.
Supabase Deep Scan
VICE can inspect a Supabase project once per domain and check tables, RLS policies, storage bucket exposure, and edge functions for real exposure.
AI fixes with remediation context
Each finding can include a plain-language explanation and an exact patch. The product keeps raw evidence next to the remediation so you can confirm the issue before applying a fix.
CI and scheduled audits
The GitHub Action can run audits on every push and fail the build when a new critical finding appears. Scheduled weekly or monthly runs keep the score fresh and catch regressions.
Domain-based workspaces
Each domain has its own workspace, with audits, findings, modules, and history attached to that domain rather than spread across separate projects.
Casos de uso
“Pre-launch security checks”
Use the free public scan to validate the basics before signup friction, or buy a single audit credit for a one-off pre-launch review of a project.
“Supabase app audits”
For products built on Supabase, save the project once per domain and use the deep scan to look for missing RLS policies, permissive policies, exposed storage buckets, and related exposure.
“Ongoing regression monitoring”
Run weekly or monthly scheduled audits so the score stays current and new findings are caught before users encounter them.
“Continuous integration checks”
Add the GitHub Action to your build pipeline so an audit runs on each push and the build can fail when a new critical issue is introduced.
“Security review for multiple projects”
Use the Pro plan structure to manage more than one verified domain, keep score tracking together, and generate shareable white-label reports.
Preguntas frecuentes
What does the free light scan check?
It checks public signals only: security headers, TLS, robots.txt and security.txt, exposed files, and secrets leaked in public JavaScript. It does not use authentication or intrusive probing.
How do verified audits work?
A DNS TXT record proves that you own the domain. Once verified, deeper audits unlock for that domain and remain scoped to it.
Can VICE run in GitHub Actions?
Yes. The GitHub Action can run an audit on every push, fail the build when a new critical issue appears, and update the score badge automatically.
What makes the Supabase Deep Scan different?
You save the Supabase project URL and anon key once per domain, and VICE checks what those public credentials can reach, including RLS gaps, permissive policies, exposed storage buckets, and edge functions.
Can I use VICE without creating an account?
Yes for the public light scan. The site says no account is needed for the instant public check, while verified audits and connected workflows use logged-in features.
Datos rápidos
- Category
- Web security auditing
- Primary users
- Indie builders, solo builders, and makers running web products
- Public scan
- Free light scan with no signup
- Verified audits
- Unlocked after DNS verification of domain ownership
- Pricing shape
- Free tier, paid monthly plans, and one-off audit credits
- Integrations
- GitHub Actions, GitHub, Supabase, scheduled audits, email and Discord alerts, white-label reports
Análisis de tráfico de VICE
Los datos de tráfico son solo como referencia.
- Valoración del dominio
- 6
Alternativas a VICE
GitHub Blog
github.blog
Publicación editorial oficial de GitHub con novedades, ideas e inspiración sobre desarrollo de software, código abierto, seguridad e inteligencia artificial para desarrolladores y equipos de ingeniería.
QR Code AI
qrcode-ai.com
Generador de códigos QR en línea para crear códigos personalizados y rastreables, con 60 tipos de contenido, opciones de diseño, análisis de escaneos y exportación en PNG, SVG o PDF.
Midship
midship.ai
Midship es una solución de IA para pruebas SOX que sigue planes de auditoría, realiza pruebas y genera papeles de trabajo documentados con enlaces a evidencias revisables.
Toku
trytoku.com
Plataforma web de recaudación y pagos para centralizar cobros, pagos automáticos, conciliación y control operativo con seguridad y trazabilidad.
Carbonfact
carbonfact.com
Plataforma de datos ambientales para que marcas y proveedores de moda midan la huella de carbono, gestionen ACV de productos y generen informes listos para auditoría.
Weld
weld.app
Plataforma de movimiento de datos para trasladar, transformar y activar datos entre almacenes, herramientas de análisis y sistemas operativos.