What is Vidoc?
Vidoc is a code security platform that uses AI to detect real security vulnerabilities in your source code. Unlike traditional static analysis tools that flood you with false positives, Vidoc validates each finding against your codebase context to surface only actionable issues.Key Capabilities
AI-Powered Detection
LLMs analyze your code to find vulnerabilities that pattern-based scanners miss
Context-Aware Validation
Each finding is validated against your codebase to reduce false positives
Learnings System
Teach Vidoc your codebase patterns to continuously improve accuracy
PR Integration
Get security feedback directly in your GitHub pull requests
Who Uses Vidoc?
AppSec Teams use the Vidoc dashboard to:- Configure security scanning for repositories
- Review and triage security findings
- Create learnings to reduce false positives
- Track security posture across projects
- GitHub PR comments with security feedback
- CLI for local scanning during development
- AI chat for understanding security issues
How It Works
- Scan - Vidoc analyzes your code via GitHub integration or CLI
- Detect - AI identifies potential security vulnerabilities
- Validate - Each finding is validated against codebase context
- Report - Real issues surface in the dashboard and PR comments
Security Categories
Vidoc detects two main types of security issues:| Type | Description | Examples |
|---|---|---|
| Attack Vulnerabilities | Issues that can be directly exploited | XSS, SQL Injection, Command Injection, SSRF |
| Compliance Issues | Security weaknesses and misconfigurations | Hardcoded secrets, weak cryptography, insecure transport |