We walked away from a GRC partnership to bet on our own product. Please be as critical as you can.

Hey, Im Tomek, founder of VulX. I would really appreciate any feedback or criticism.(Not advertisement I dont want your money)

quick backstory: Initially our company had a partnership with a GRC company. We have moved away from it to build something of our own and as of today, its live.

what it is:

The goal is bigger than a scan: every codebase keeping itself current, on its own. Not a report you read once and file away a repo that stays patched, keeps its dependencies honest, and tells you the moment something you shipped last month turned dangerous this morning. the vision of a codebase always being up to date with the latest vulnerabilities

Connect a GitHub repo and our autonomous pentesters go at it: reading your code the way an attacker would, arguing with each other about whats actually exploitable, and surfacing a finding only once one of them has tried to prove it wrong and failed.

Every dependency is checked against public vulnerability databases as new advisories land. A cross-network intelligence layer, so a threat found in one codebase strengthens detection across all of them. Plus our own in-house model for filtering false positives.

We've been staring at this for months and have lost the ability to see it clearly. We'd rather have criticism than compliments, so to make it worth your time, anyone who leaves useful feedback gets free access. No card, no catch.

vulx.ai is our landing page

app.vulx.ai — free tier is 2 on demand scans a week. Tell us what's wrong with it.

Our product hunt launch is tomorrow