AI writes the code. Something still has to check what shipped.
Veristria is a small Norwegian security company. Our three scanners check what AI-built software actually shipped — Stripe Connect fees a refund left behind, keys in the browser, Supabase tables anyone can read — and every finding comes with its evidence: the request, the response, the hash. The first answer is free on all three.
Evidence, not opinion
Evidence, not opinion
Every finding a Veristria product reports points at something you can open and check yourself: a served file, a query result, a ledger line.
Zero standing access
Our tools start from what is already public or from the narrowest credential that does the job. Nothing keeps a key it does not need.
Answer before invoice
Each product tells you whether you have a problem before it asks you for anything. The first real answer is free on all three.
The ecosystem
Free scan, no account. Monitoring from $29/month.
Finds the API keys and secrets that AI coding tools leave behind in client-side JavaScript bundles.
Free URL check. One connected project, scanned daily, is free. Faster monitoring from $29/month.
Checks what your Supabase anon key can read from a deployed URL — free, read-only, under ten seconds. Connecting one project is free and runs the nine-rule audit daily; paid plans add projects, faster scans, and more alert channels.
Detection is free. Monitoring from $49/month.
Finds the Stripe Connect transfers and fees a refund leaves behind, from an export you paste — read-only, no credentials. 90-day lookback. Detection stays free.
The method
Observe what shipped
Not the repository, not the intent — the artefact. The JavaScript your CDN serves, the policies your database enforces, the transfers your platform actually made.
Prove the finding
A masked key prefix, a query that returns a row it should not, a fee that was never reversed. Something specific enough to act on without a second opinion.
Say what to change
One fix, in the words of the stack it belongs to. A finding you cannot act on is a notification, and notifications get muted.
Before you reply
Founder
Lars O. Horpestad
Founder, Veristria
Veristria was founded by Lars O. Horpestad, a Norwegian AI founder and the author of Å ta smartere beslutninger med AI (2023), a practical guide to large language models. He previously founded AI ThinkLab AS, a separate company. Veristria grew out of a straightforward observation from that work: teams had started shipping generated code far faster than they could read it, and the tooling around them still assumed a human had.
More about the companyWriting
A finding you cannot open and check is a notification. What a security report owes you, and what a score quietly removes.
4 min readTwo of our three products find real problems before receiving any credential. Why that constraint shapes what we can build, and what it costs in coverage.
5 min readA repository scanner that reports nothing is usually correct. The secret it cannot see does not exist until the build creates it.
4 min readEnter your email for product updates across KeyDrift, RowShield and FeeGuard.
Founding customers (first 100) lock in 25% off annual forever.
18 common questions are answered on the FAQ — is vibe coding safe, why a clean repository still leaks keys, which product fits. Everything else reaches a company desk. We answer every message. Typical reply: within one business day.
Sales, support, security, legal, press and billing each have a desk at @teamveristria.com. Legitimate email from us only comes from @teamveristria.com, @useveristria.com, @meetveristria.com, @veristriagroup.com, @veristriahq.com, @veristriaworks.com and @withveristria.com. Phone: +47 988 36 369.
