Tines The single, secure environment for agents, apps, and automations.
Promoted
VICE Platform - Private Beta
Security scans for people who ship fast
9 followers
Security scans for people who ship fast
9 followers
VICE audits your web app the way an attacker would: leaked secrets in your bundles, Supabase RLS misconfigurations, exposed APIs, weak headers and infrastructure.... The engine is open source and free today, as a CLI or a GitHub Action. The hosted Platform adds the full loop: verify your domain, run a full audit, get findings with evidence, apply a suggested fix, then retest to confirm it's gone. It opens as a private beta with 10 founding spots. Built for indie builders who ship fast.
Forge
@luca_deguin Congrats on the launch Luca. Does open sourcing teh engine not in itself pose a security risk?
Forge
@zolani_matebese Thanks for the message, good question.
The open source engine only observes what an anonymous browser can already reach. No exploits, no brute force. Closing the source would take nothing away from an attacker, it would just remove your ability to check what we run against your production.
The hosted version goes further and runs more intrusive probes, but only once you have verified ownership of the domain. That authorisation step is what unlocks the deeper tests, not the secrecy of the code.
nmap, semgrep, ZAP and gitleaks are open source for the same reason. What stays private on our side is the infrastructure and customer results, not the detection logic.