01VISIBILITY
One view of every risk
Websites, APIs, servers and internal assets come together in one coherent view.
Private pilot · v0.6.1Your attack surface.
Your attack surface.
Under control.
Veilox brings web, API, server and network scanning into one guided experience built for SMBs. Find risk, understand the evidence and fix it without a dedicated AppSec team.
Verified targetsNo marketing trackersEnd-to-end HTTPS
PRODUCT PREVIEW · ILLUSTRATIVE DATA● ACTIVE SCAN
Authorized targetapp.example-secure.test
Routes tested143
Findings12
Confirmed4
Critical · Broken access controlGuided fix
High · Injection detectedEvidence ready
Medium · TLS configurationRetest ready
ownership verified · scope locked
Built for lean teams
Expert depth. SMB-ready clarity.
Veilox turns a complex discipline into clear decisions without hiding the technical evidence.
02CONFIDENCE
Less noise, stronger evidence
Every finding is graded as confirmed, likely or needs review, with full context.
03ACTION
Fix without guessing
Risk, impact and remediation steps are clearly explained, then retested.
Coverage Veilox
From the public perimeter to the internal network.
An extensible platform for the surfaces SMBs actually rely on.
Web & API DAST
Browser discovery, API import and bounded active checks for modern applications.
JavaScriptRESTGraphQLOpenAPI
External exposure
Inventory and testing of exposed domains, services and technologies with ownership verification.
DNSTLSHTTPServices
Secure local agent
Scan servers, LANs and private environments from an agent deployed at the customer site.
LANServersDockerKubernetes
Evidence & retest
Signal correlation, confidence grading, history and differential retesting after remediation.
ConfirmedLikelyNeeds reviewRetest
Remediation as a product
Every vulnerability becomes an action plan.
Technical teams see exactly what was observed, why it matters and how to validate the fix.
CRITIQUEInsufficient access control
CONFIDENCE ÉLEVÉE1
Risk
A user can access a resource they do not own.
2
Safe evidence
Two roles received equivalent responses for a protected resource.
3
Remediation
Check organization and ownership server-side for every resource identifier.
4
Validation
Replay the scenario with two accounts after deploying the fix.
✓ Differential retest readyNo destructive exploitation
A controlled journey
A useful first result in a few steps.
Veilox provides guided setup with visible guardrails and explicit scope.
Define the scope
Add only the domains, applications and networks you are authorized to test.
Verify ownership
Prove control of public assets before any active assessment.
Choose the right profile
Choose public, authenticated or active-staging based on the authorization level.
Fix and retest
Follow the guidance, then obtain evidence that the risk is gone.
Pricing de lancement envisagés
Professional security that SMBs can afford.
Indicative early-access pricing. No payment will be requested before the product and commercial terms are validated.
Essential
€49 /month
billed annually
For a small team securing its first assets.
- 5 verified assets
- Weekly scans
- PDF and technical reports
- 3 users
- Email support
Pro
€129 /month
billed annually
The core Veilox plan for growing SMBs.
- 20 verified assets
- Web, API and external exposure
- Scheduling and retests
- 1 local-agent environment
- 10 users
MSP
€299 /month
billed annually
For providers and multi-client teams.
- 75 verified assets
- 5 agent environments
- Customizable reports
- API and CI/CD integrations
- Unlimited users
Need more assets or a dedicated deployment? Transparent custom plans are available.
Authorization first
Powerful, without crossing the line.
Veilox is built to test authorized systems deeply while reducing scope mistakes.
✓
Verified public targetsDNS verification and strict anti-SSRF policy.
✓
Explicit scan profilesSeparate public, authenticated and active-staging modes.
✓
Isolated workers and agentsNetwork operations do not run inside the web server.
✓
Complete audit trailAuthorization, actions, evidence and retests remain auditable.
Early access
Let’s build the best scanner for your SMB.
Tell us about your environment and priorities. Your email client will open with a pre-filled request; no data is stored on this website.
Or email us directly at [email protected].