The agentic security engineer

Your overloaded security team just got a new hire - one that covers the full vulnerability detection process relentlessly and autonomously, 24/7.

Get VIDOC

Part of the

Everything your team ships

Pull requestsDependenciesSecretsConfigsIaC

vidocon duty

reviewing acme · 47 today

46 cleared · audit-logged

1 needs you

SSRF · acme/api /api/proxy · verified against staging

Fix sent to Cursor

PR #1285 opened with the patch · ready to merge

Built by a team of ethical hackers who secured industry leaders

Details not publicly disclosed

Source >

Stored XSS in repository file viewer

Mythos-ready security for your codebase

Using public models - GPT-5.4 and Claude Opus 4.6 - in an open-source coding agent, our research team reproduced three of four representative Anthropic Mythos findings, including the flagship FreeBSD remote-root NFS bug. The same engine now reviews every PR your team opens.

Read the full study Explore our research

Kernel OOB read in netfilter H.323 ASN.1 decoder

High·CVSS 8.2

decode_int() called get_uint() without bounds-checking a length value read from a CONS-encoded H.323/RAS packet, causing a 1-4 byte slab-out-of-bounds read in the kernel.

View vulnerability →

Kernel OOB read in netfilter H.323 Q.931 decoder

Critical·CVSS 9.1

DecodeQ931() decremented a wire-supplied 16-bit length without checking for zero, wrapping to -1. The kernel decoder then read far past the buffer - network-reachable, no auth required.

View vulnerability →