Free public light scans
Run a non-intrusive scan without signing up. The light scan checks public signals like security headers, TLS, robots.txt and security.txt, exposed files, and secrets leaked in public JavaScript.
VICE
Freemium
VICE는 인디 개발자를 위한 웹 보안 감사를 제공합니다. 공개 경량 스캔, 검증된 전체 감사, Supabase RLS 심층 스캔, AI 수정, CI 검사를 지원합니다.
VICE란 무엇인가요?
VICE scans web products for security issues using both public, non-intrusive checks and verified audits tied to a domain you own. The platform focuses on findings with evidence, clear scoring, and remediation context so builders can review what was found and what to do next.
It covers common web exposure checks such as headers, TLS, exposed files, and leaked secrets, plus deeper modules like Supabase Deep Scan, AI/RAG security checks, WordPress checks, scheduled audits, and CI-based audits through GitHub Actions.
VICE(으)로 무엇을 할 수 있나요?
Verified full audits
Deeper checks unlock after a DNS TXT record proves domain ownership. Verified audits stay scoped to domains you own and are designed to be non-destructive.
Supabase Deep Scan
VICE can inspect a Supabase project once per domain and check tables, RLS policies, storage bucket exposure, and edge functions for real exposure.
AI fixes with remediation context
Each finding can include a plain-language explanation and an exact patch. The product keeps raw evidence next to the remediation so you can confirm the issue before applying a fix.
CI and scheduled audits
The GitHub Action can run audits on every push and fail the build when a new critical finding appears. Scheduled weekly or monthly runs keep the score fresh and catch regressions.
Domain-based workspaces
Each domain has its own workspace, with audits, findings, modules, and history attached to that domain rather than spread across separate projects.
사용 사례
“Pre-launch security checks”
Use the free public scan to validate the basics before signup friction, or buy a single audit credit for a one-off pre-launch review of a project.
“Supabase app audits”
For products built on Supabase, save the project once per domain and use the deep scan to look for missing RLS policies, permissive policies, exposed storage buckets, and related exposure.
“Ongoing regression monitoring”
Run weekly or monthly scheduled audits so the score stays current and new findings are caught before users encounter them.
“Continuous integration checks”
Add the GitHub Action to your build pipeline so an audit runs on each push and the build can fail when a new critical issue is introduced.
“Security review for multiple projects”
Use the Pro plan structure to manage more than one verified domain, keep score tracking together, and generate shareable white-label reports.
자주 묻는 질문
What does the free light scan check?
It checks public signals only: security headers, TLS, robots.txt and security.txt, exposed files, and secrets leaked in public JavaScript. It does not use authentication or intrusive probing.
How do verified audits work?
A DNS TXT record proves that you own the domain. Once verified, deeper audits unlock for that domain and remain scoped to it.
Can VICE run in GitHub Actions?
Yes. The GitHub Action can run an audit on every push, fail the build when a new critical issue appears, and update the score badge automatically.
What makes the Supabase Deep Scan different?
You save the Supabase project URL and anon key once per domain, and VICE checks what those public credentials can reach, including RLS gaps, permissive policies, exposed storage buckets, and edge functions.
Can I use VICE without creating an account?
Yes for the public light scan. The site says no account is needed for the instant public check, while verified audits and connected workflows use logged-in features.
주요 정보
- Category
- Web security auditing
- Primary users
- Indie builders, solo builders, and makers running web products
- Public scan
- Free light scan with no signup
- Verified audits
- Unlocked after DNS verification of domain ownership
- Pricing shape
- Free tier, paid monthly plans, and one-off audit credits
- Integrations
- GitHub Actions, GitHub, Supabase, scheduled audits, email and Discord alerts, white-label reports
VICE 트래픽 분석
트래픽 데이터는 참고용으로만 확인하세요.
- 도메인 평점
- 6