Hey, Im Tomek, founder of VulX. I would really appreciate any feedback or criticism.(Not advertisement I dont want your money)
quick backstory: Initially our company had a partnership with a GRC company. We have moved away from it to build something of our own and as of today, its live.
what it is:
The goal is bigger than a scan: every codebase keeping itself current, on its own. Not a report you read once and file away a repo that stays patched, keeps its dependencies honest, and tells you the moment something you shipped last month turned dangerous this morning. the vision of a codebase always being up to date with the latest vulnerabilities
Code security is sold to security teams. You don't have one. You have a repo, mostly written by a model, and no way to know if it's still safe.
VulX Watch is the part your model can't do, it can't audit itself. Connect GitHub and your codebase stays current on its own: continuously re-checked as new vulnerabilities appear, so code that was fine when you shipped it doesn't quietly stop being fine. You stop having to wonder.
