VINDICTA
Security Workspace
AI security workspace and learning platform.
Scan codebases, track findings, and master security — all on your machine.
Free · No account required · No telemetry
Everything you need
Built for security review.
Runs without the cloud.
Local Project Registry
Register real codebases and keep full security context tied to the files that live on your machine.
AI Security Scanning
Run read-only AI reviews for concrete vulnerabilities, abuse paths, evidence, and remediation guidance in seconds.
Findings Tracker
Convert scan results into tracked security items with severity, status, evidence, and remediation guidance.
Dependency Inventory
Inspect package manifests across Node, Rust, .NET, Python, Go, Java, PHP, and Ruby ecosystems.
Secret Detection
Scan text files with conservative local patterns for exposed tokens, keys, passwords, and private key material.
Portable Security Record
Store scans, findings, and history in a local vindicta.json file. Offline-first, readable, no account required.
Security Academy
A structured bootcamp from security fundamentals to penetration testing. AI-guided by Professor Vindicta with a completion certificate.
No Subscription
Free to download, free to use forever. No accounts, no telemetry, no data ever leaves your machine.
Bring your own model
Works with the AI you already use
Choose any supported provider — scans run through whichever model you configure in settings.
Claude
Anthropic
OpenRouter
Multi-model
Ollama
Local / Offline
Two scan depths, one workspace
Choose your depth
Switch between scan modes anytime from the scan panel.
Quick Scan
Surface-level · Fast results
Rapid triage of obvious vulnerabilities. Great for routine checks after commits or dependency updates.
Deep Scan
Full analysis · Evidence-rich
Exhaustive review with full call-chain traces, abuse paths, and remediation code. Best for pre-release audits.
Built-in learning
Vindicta Academy.
From zero to pentest.
A structured 30-lesson security bootcamp built right into the app. Learn security fundamentals, web attack vectors, penetration testing, and defensive tactics — guided by an AI professor.
30
Lessons
~45h
Content
1
Certificate
Getting Started
- Course orientation
- How the AI Professor works
- Terminal & lab setup
- Setting your goals
Security Foundations
- CIA triad & threat modelling
- Auth & access control
- Cryptography basics
- Secure SDLC
- OWASP Top 10 intro
Web App Security
- SQL injection & XSS
- CSRF & SSRF
- Insecure deserialization
- API security
- Burp Suite basics
Penetration Testing
- Recon & footprinting
- Network scanning
- Exploitation basics
- Privilege escalation
- Report writing
Defensive Security
- Logging & SIEM
- IDS/IPS setup
- Incident response
- Hardening & patching
- Blue team tactics
Full Assessment
- End-to-end pentest simulation
- Certificate of completion
Professor Vindicta — AI Tutor
An AI professor powered by Claude, Codex, or OpenRouter sits alongside every lesson. It teaches interactively, asks quiz questions, and only unlocks the next lesson once you demonstrate real understanding — not just reading.
Audio Narration
Generate full offline narrations for any lesson. Uses an on-device TTS engine — listen while you work.
Simple setup
Up in three steps
Add a Project
Register a local codebase directory. Vindicta attaches scan state directly to the source.
Run the Scan
Pick a scan depth and let the AI review security-sensitive paths for vulnerabilities and risks.
Track & Fix
Open full evidence, create findings, assign sprint tasks, and move issues to closure.
Start securing.
Without the cloud.
Sign up for the open beta, open a project, and run your first scan — offline, no account, forever free.
No account · No telemetry · Windows 10/11 · Free