Security findings an owner can read
Vexx also guards our own releases: a site with an open critical or high finding is held back until it is fixed.
Measured, not claimed
- Security
- A
- Measured 28 Oct 2026
- Performance
- 89
- Measured 27 Oct 2026
- Accessibility
- 92
- Measured 27 Oct 2026
Lighthouse scores are lab measurements on a simulated phone, not data from real visitors.
Built with
| Built with | Why it matters |
|---|---|
| Node.js | The client console has no third-party packages, so there is less to keep patched. |
| Trivy + osv-scanner | Known vulnerabilities in packages and in the server image. |
| Semgrep + gitleaks | Risky code patterns, and secrets committed by mistake. |
| testssl.sh + nuclei | What the live site actually exposes to the internet. |