VIfix
Get started

Get started

Quick start

This walkthrough takes you from a fresh install to your first fixed issue.

Run a scan#

  1. Open the Scan Control Center

    On the Dashboard, the Scan Control Center lets you choose Local folder or Private GitHub.

  2. Pick your project

    Choose Local folder and select the root of your app (the folder with package.json).

  3. Click Run scan

    The Live Security Checklist shows progress through Static Analysis, Secrets Detection, Database RLS Policies and OWASP Top 10.

Read the findings#

Findings are sorted by severity: critical, high, medium, low. Select one to see the vulnerable lines, the standard it maps to (for example OWASP API1:2023), and a plain-English explanation.

Tip

Start with critical and high findings. Leaked secrets should be rotated at the provider even after you remove them from code.

Fix it#

In Remediation & Report View, generate a fix and review the diff. VIfix re-scans the patched code to confirm the issue is gone before you apply it. Then choose Apply to local file or Commit Fix to GitHub to open a pull request.

What's next#

Learn how fixes are verified in Fixing issues, connect an AI provider in AI fixes, or audit your live database in Database audits.