'%20d='m0%200%2018%2011h65%2065%2065%2065%2066L51%2039h65%2065%2065%2065L18%2066h65%2065%2065%2065%2066L51%2094h65%2065%2065%2065L18%20121h65%2065%2065%2065%2066L51%20149h65%2065%2065%2065L18%20177h65%2065%2065%2065%2066L51%20205h65%2065%2065%2065L18%20232h65%2065%2065%2065%2066z'/%3e%3c/svg%3e){kind=small}
'%3e%3cpath%20fill='%23fff'%20d='M619.4%20512H-112V0h731.4z'/%3e%3cpath%20fill='%230038b8'%20d='M619.4%20115.2H-112V48h731.4zm0%20350.5H-112v-67.2h731.4zm-483-275%20110.1%20191.6L359%20191.6z'/%3e%3cpath%20fill='%23fff'%20d='m225.8%20317.8%2020.9%2035.5%2021.4-35.3z'/%3e%3cpath%20fill='%230038b8'%20d='M136%20320.6%20246.2%20129l112.4%20190.8z'/%3e%3cpath%20fill='%23fff'%20d='m225.8%20191.6%2020.9-35.5%2021.4%2035.4zM182%20271.1l-21.7%2036%2041-.1-19.3-36zm-21.3-66.5%2041.2.3-19.8%2036.3zm151.2%2067%2020.9%2035.5-41.7-.5zm20.5-67-41.2.3%2019.8%2036.3zm-114.3%200L189.7%20256l28.8%2050.3%2052.8%201.2%2032-51.5-29.6-52z'/%3e%3c/g%3e%3c/svg%3e){kind=small}
Tool calls become workflows
Multi-step tool calls are saved as a workflow, so you can rerun it any time.
Agent investigationsAgents test in parallel and findings stream in as they land.Retest in secondsOnce you’ve found the issue, anyone can reproduce it.Unified asset mapvScan learns your deployment so everyone shares one picture.Foundation modelsOur own security models, with open weights you can run anywhere.
VEX is the typed language powering Vaktex. Every investigation becomes a workflow you can read, rerun, and hand to a teammate.
Surface check
input domain: hostsubs = subfinder(domain)live = httpx(subs.subdomains)parallel(max=8) for url in live.urls { r = http.get(url, timeout=5s) expect r.status < 500, "server error", severity="medium"}out(head(live.urls, 5))
8.41s
Started on sandboxParsed cleanlyhttps://www.example.comhttps://api.example.comhttps://docs.example.comhttps://status.example.comhttps://app.example.com
The first language for security professionals and agents
Typed for security
Every tool checks its inputs before a command runs, so code doesn’t fail mid-run.
Retests written like code tests
Developers rerun them as often as they like, without waiting on agents or the security team.
More work per token
VEX is built to be easy to read and short to write, so models spend fewer tokens on every step.
Auto optimizations
The runtime optimizes your code for you, so code from agents, or your own rough drafts, runs as if a 10x engineer wrote it.
People stay in control
Algorithms and agents validate every call before anything irreversible changes, so dangerous actions are caught first.
Retest in seconds
Every finding links to a workflow, so future retests run quickly and your team can confirm it’s resolved.
Vulnerable
Last retested on Oct 9 at 3:51 PM UTC
1 run
Repro: Stored cross-site scripting via unsanitized product review fields (routes/createProductReviews.ts)
Open workflowRe-runs cell 1, finished in 33.1s
The cell was re-run and the finding happened again.
- ReproducedOct 9, 3:51 PM UTC
Steps to reproduce
- Sign in as a regular customer account.
- Open any product page and leave a review.
- Load the same product page as a different user.
- Confirm the review renders as markup rather than plain text.
Run retest
From a question to a workflow you keep
Ask. Describe what you want checked, in plain words.
Investigate. Vaktex explores and writes each step as VEX.
Review. Every call, input and check is on the page.
Rerun. On a schedule, or the moment a solution ships.
See VEX run on your own stack
Book a demo and we’ll write a workflow against a system you choose. Or read how we built the language.