VICE Platform - Public Beta

VICE provides a comprehensive web security audit by simulating an attacker's perspective. Key features include: • Identification of leaked secrets in bundles • Detection of Supabase Row Level Security misconfigurations • Exposure of vulnerable APIs • Analysis of weak headers and infrastructure • Provision of detailed findings with evidence and suggested fixes The open-source engine can be used as a CLI or GitHub Action, offering an initial scan that quickly identifies critical vulnerabilities such as exposed files and TLS issues. This rapid assessment delivers a security score and grade, enabling developers to prioritize fixes effectively. The platform then allows for domain verification, full audits, and retesting to confirm that identified issues have been resolved. For Supabase users, VICE offers a deep scan, scrutinizing every table, policy, and storage bucket to audit the RLS layer that generic scanners often miss. Each finding is accompanied by a clear, plain-language explanation and a precise patch, making remediation straightforward for developers. The platform tracks security scores over time, providing an embeddable badge to demonstrate ongoing commitment to security. This tool is ideal for development teams, security engineers, and web application owners who need to proactively secure their products against common and specialized web vulnerabilities, ensuring robust protection without extensive manual effort.