Watch it · Defend it

A scan tells you today.
Vigil keeps you safe tomorrow.

Most scanners stop at a report. Vigil watches every deploy, maps every API you depend on, and tells you the moment something slips — with the fix already attached.

Watch it

It never stops looking.

Your app changes every deploy. So does its risk. Vigil re-reads it on a schedule and shows you the difference, not just the score.

Scheduled re-scans

Weekly on Pro, daily on Studio. Every deploy gets checked without you remembering to.

Score history & diffs

See exactly what changed between scans: new issues, fixed issues, regressions — not just a number going up or down.

API connection map

Every external service your app talks to — payments, auth, database, AI, analytics — discovered on each scan and flagged when one is plaintext or new.

Attack-surface drift

A new subdomain in CT logs, a staging host that went public, a DNS record left dangling. You hear about it first.

Defend it

Every finding ships with its fix.

Not a list of problems — a plan. Alerts carry the fix, the Fix Pack applies it, and the CI gate stops the next one.

Alerts with the fix attached

Email, Slack or Discord the moment a new critical issue appears — with the AI prompt that fixes it already in the message.

Fix Pack

One consolidated, prioritised prompt tailored to your stack. Paste it into Cursor, Claude Code or Lovable and work through the list.

CI gate

Scan from GitHub Actions with an API key. Fail the build when a critical ships or the score drops below your threshold.

Authorized deep tests

Once you verify a domain, scheduled scans include the active probes too, so a regression in input handling is caught, not just a missing header.

See plans API & CI docs

See it on your own app.

Fifteen seconds. First scan free with an account.

A scan tells you today.Vigil keeps you safe tomorrow.