Free public light scans
Run a non-intrusive scan without signing up. The light scan checks public signals like security headers, TLS, robots.txt and security.txt, exposed files, and secrets leaked in public JavaScript.
VICE
Freemium
VICE réalise des audits de sécurité web pour les développeurs indépendants, avec des analyses légères publiques, des audits complets vérifiés, des analyses approfondies de Supabase RLS, des corrections par AI et des vérifications CI.
Qu'est-ce que VICE ?
VICE scans web products for security issues using both public, non-intrusive checks and verified audits tied to a domain you own. The platform focuses on findings with evidence, clear scoring, and remediation context so builders can review what was found and what to do next.
It covers common web exposure checks such as headers, TLS, exposed files, and leaked secrets, plus deeper modules like Supabase Deep Scan, AI/RAG security checks, WordPress checks, scheduled audits, and CI-based audits through GitHub Actions.
Que peut faire VICE ?
Verified full audits
Deeper checks unlock after a DNS TXT record proves domain ownership. Verified audits stay scoped to domains you own and are designed to be non-destructive.
Supabase Deep Scan
VICE can inspect a Supabase project once per domain and check tables, RLS policies, storage bucket exposure, and edge functions for real exposure.
AI fixes with remediation context
Each finding can include a plain-language explanation and an exact patch. The product keeps raw evidence next to the remediation so you can confirm the issue before applying a fix.
CI and scheduled audits
The GitHub Action can run audits on every push and fail the build when a new critical finding appears. Scheduled weekly or monthly runs keep the score fresh and catch regressions.
Domain-based workspaces
Each domain has its own workspace, with audits, findings, modules, and history attached to that domain rather than spread across separate projects.
Cas d'utilisation
“Pre-launch security checks”
Use the free public scan to validate the basics before signup friction, or buy a single audit credit for a one-off pre-launch review of a project.
“Supabase app audits”
For products built on Supabase, save the project once per domain and use the deep scan to look for missing RLS policies, permissive policies, exposed storage buckets, and related exposure.
“Ongoing regression monitoring”
Run weekly or monthly scheduled audits so the score stays current and new findings are caught before users encounter them.
“Continuous integration checks”
Add the GitHub Action to your build pipeline so an audit runs on each push and the build can fail when a new critical issue is introduced.
“Security review for multiple projects”
Use the Pro plan structure to manage more than one verified domain, keep score tracking together, and generate shareable white-label reports.
Questions fréquentes
What does the free light scan check?
It checks public signals only: security headers, TLS, robots.txt and security.txt, exposed files, and secrets leaked in public JavaScript. It does not use authentication or intrusive probing.
How do verified audits work?
A DNS TXT record proves that you own the domain. Once verified, deeper audits unlock for that domain and remain scoped to it.
Can VICE run in GitHub Actions?
Yes. The GitHub Action can run an audit on every push, fail the build when a new critical issue appears, and update the score badge automatically.
What makes the Supabase Deep Scan different?
You save the Supabase project URL and anon key once per domain, and VICE checks what those public credentials can reach, including RLS gaps, permissive policies, exposed storage buckets, and edge functions.
Can I use VICE without creating an account?
Yes for the public light scan. The site says no account is needed for the instant public check, while verified audits and connected workflows use logged-in features.
Informations rapides
- Category
- Web security auditing
- Primary users
- Indie builders, solo builders, and makers running web products
- Public scan
- Free light scan with no signup
- Verified audits
- Unlocked after DNS verification of domain ownership
- Pricing shape
- Free tier, paid monthly plans, and one-off audit credits
- Integrations
- GitHub Actions, GitHub, Supabase, scheduled audits, email and Discord alerts, white-label reports
Analyse du trafic de VICE
Les données de trafic sont fournies à titre indicatif uniquement.
- Évaluation du domaine
- 6
Alternatives à VICE
Mentra Live
mentra.glass
Plateforme open source de lunettes intelligentes pour les équipes terrain et les développeurs qui créent des workflows caméra, des assistants IA et des apps personnalisées avec MentraOS.
Toku
trytoku.com
Toku est une plateforme web de collecte et de paiements qui centralise les paiements automatiques, le rapprochement et le suivi, avec un accent sur la sécurité et la traçabilité.
tweakcn
tweakcn.com
Éditeur et générateur visuel de thèmes pour shadcn/ui avec Tailwind CSS et IA
Deta Surf
deta.surf
Espace de travail local pour naviguer, prendre des notes et rechercher avec l’IA
Pixso
pixso.cn
Outil cloud de collaboration en conception produit avec création d’UI assistée par l’IA, tableaux blancs, prototypage et transfert aux développeurs.
CapMonster Cloud
capmonster.cloud
Service cloud de résolution de CAPTCHA pour applications et workflows web, avec API et extension.