About
A company built around a single question: can you prove it?
Veristria is the security company behind KeyDrift, RowShield and FeeGuard — three products that verify what an application actually deployed, not what its source code intended. Exposed API keys, Supabase row-level security drift, Stripe Connect fee leaks. Different surfaces, one standard: proof over promises.
Veristria is a Norwegian aksjeselskap (AS) under incorporation (filed ). The organisation number is published on the imprint and privacy pages the day registration completes.
Purpose, in one line
Make the truth about a running system cheap enough to check that nobody has to take it on faith.
More software was written last year than in any year in history, and less of it was read. Verification used to be the slow half of a slow process. It is now the only half that was not automated. The distance between what a system claims and what it actually does is where the damage lives — the drained API account, the table anyone could read, the money that left and never came back.
Veristria exists to close that distance in the three places it costs the most: the credentials you expose, the data you leave reachable, and the money you move. Not with assurances. Not with a score out of a hundred. With evidence a person can open and check in under a minute.
The internet is getting harder to trust. It should be getting easier to verify.
The premise
Review stopped scaling with output
For most of software’s history, the rate at which code was written and the rate at which it was read were roughly the same, because the same people did both. That is no longer true. A small team using AI tooling now produces more working code in a week than it can meaningfully review in a month, and the code works — which is precisely what makes the gap hard to see.
The failures that follow are not exotic. A key that was meant for the server ends up in the browser bundle. A database policy that was correct in April stops matching a schema that changed in June. A refund on a marketplace leaves the seller paid and the platform short. In every case the system reports success, and the problem is only visible if something goes and looks at the deployed result.
That is the layer Veristria builds: verification that runs against what actually shipped, continuously, and reports findings specific enough to fix.
How we build
Four commitments, identical across all three products
Evidence over inference
A finding names something checkable — a served file, a query that returns a row, a Stripe object id. We do not report risk scores with nothing underneath them.
Least access that works
Two of the three products find real problems before receiving any credential at all. The third asks for a restricted key scoped to the reads it needs.
Secrets are not inventory
Where a product handles credential material, it stores a masked prefix and a fingerprint. A tool that hoards the secrets it finds has become the exposure.
Free until it is useful
The first genuine answer costs nothing on every product. Payment starts when you turn on continuous monitoring, not when you ask the first question.
The ecosystem
Three products, deliberately separate
- keydrift.dev
KeyDrift
Finds the API keys and secrets that AI coding tools leave behind in client-side JavaScript bundles.
- rowshield.dev
RowShield
Checks what your Supabase anon key can read from a deployed URL — free, read-only, under ten seconds. Connecting one project is free and runs the nine-rule audit daily; paid plans add projects, faster scans, and more alert channels.
- feeguard.dev
FeeGuard
Finds the Stripe Connect application fees a refund leaves behind, from an export you paste — read-only, no credentials. 90-day lookback. Detection stays free.
Leadership
Who leads Veristria
Lars O. Horpestad
Founder, Veristria · responsible for the content of veristria.com, keydrift.dev, rowshield.dev and feeguard.dev
Veristria is led by Lars O. Horpestad. He previously founded AI ThinkLab AS (org.nr. 933 078 523) — a separate company — and is the author of Å ta smartere beslutninger med AI (2023), a practical Norwegian guide to large language models and the AI Operator™ formula. English title: Making Smarter Decisions With AI.
Veristria came out of a gap that work made obvious: teams were shipping generated code faster than anyone could verify the deployed result. The three products are each a narrow, checkable answer to one version of that problem.
He is based in Norway. Commercial, support, security and legal enquiries go to the company desks at @teamveristria.com.
- Book
- Å ta smartere beslutninger med AI (2023)
- Subtitle
- En veiledning til språkmodeller og AI Operator™-formelen
- English
- Making Smarter Decisions With AI
- Author
- Lars O. Horpestad
Company
What Veristria legally is today
- Company
- Veristria — Norwegian aksjeselskap (AS) under incorporation. Incorporation filed on ; organisation number published on the imprint the day registration completes.
- Address
- Veristria
Sofie Steinnes'veg 9A
4352 Kleppe
Norway - Founder
- Lars O. Horpestad, founder; responsible for the content of the four sites
- Phone
- +47 988 36 369 (Europe/Oslo)
Security posture — what we do not claim. No SOC 2 report, no ISO 27001, no PCI attestation — see Security. What we offer instead is checkable controls, and products built so the worst-case version of us still cannot write to your systems without explicit, optional scopes you turn on.
Contact
How to reach us
| Desk | Address |
|---|---|
| SalesPlans, demos, Enterprise procurement | sales@teamveristria.com |
| SupportProduct help and refunds | support@teamveristria.com |
| Security / disclosureVulnerability reports and access questions | security@teamveristria.com |
| Legal / DPADPA, terms and subprocessors | legal@teamveristria.com |
| PressMedia, interviews and fact checks | press@teamveristria.com |
| BillingInvoices, receipts and tax | billing@teamveristria.com |
| GeneralAnything else | info@teamveristria.com |
Phone: +47 988 36 369 (Europe/Oslo). Typical reply: within one business day.
Email authenticity. Legitimate Veristria email only comes from @teamveristria.com, @useveristria.com, @meetveristria.com, @veristriagroup.com, @veristriahq.com, @veristriaworks.com and @withveristria.com. A message claiming to be us from any other domain is not us. Verify company details on the imprint.
Common product questions are answered on the FAQ. Journalists: press kit.