V–00THE SHOWCASE · HOW IT WORKS, FRONT TO BACK · THE MACHINE IS RUNNING
See how VulX actually works.
An app built by AI can look right, pass every check it knows, and still get the one rule that’s yours alone wrong.
You can’t grade your own homework. VulX is the independent check — this is the whole machine, laid open, and every surface it produces.
PROTOTYPE SURFACES · HONESTY-LABELED · THE NUMBERS ARE REAL
Counts from the live VulX Intelligence corpus. “False positives on proven” is scoped to proven findings — the ones demonstrated for real, never guessed.
HALL 01THE ENGINE · FROM THE BACK
Find. Prove. Fix.
Remember.
Five stations turn an AI-built app into something you can trust. Breadth is coverage — the whole app is checked. Proof is the serious part — the dangerous findings are demonstrated for real, never guessed.
APP IN→FIND→PROVE→FIX→REMEMBER→TRUST OUT
01Find
Scan the whole app for the full range of risks — exposed keys, weak dependencies, data leaks, and more. The coverage.
02Prove
For the dangerous ones — a stranger reading private data — safely run the real exploit in a sandbox, always rolled back. Proof, not a guess.
03Fix
Hand over a fix, and prove it closes the hole and keeps the real user working — the check no one else runs.
04Remember
Every proven finding is banked as de-identified memory — raw code never enters — so the next check is smarter. The moat.
05Surface
The product: a deploy gate, a dashboard, a public trust badge, a plain-English report your users can read. All of it on display downstairs.
HALL 02THE GALLERY · EVERY SURFACE IT PRODUCES
See the whole thing.
Every surface, broken out — the builder’s dashboard and onboarding, the live check, the public report and trust badge, the showpieces, and the intelligence vault behind it all. Each plate below is running.
HALL 03THE INTELLIGENCE · THE MOAT
The vault it all feeds.
What the check leaves behind — every proven finding sealed as retrievable memory, so each one makes the next discovery cheaper. Scanners are commodity; memory is the moat.
Enter the vault →That’s the whole machine.
In at the top as an app someone built. Out at the bottom as something their users can trust — proven, not guessed.