About Vallit
- Built by
- Theo Reichert
- Based in
- Karlsruhe, Germany
- Team
- One person, today
- Reach us
- info@vallit.net
When an app has a hole in it, someone should be told, and someone should fix it. Vallit does both.
Who builds it
Vallit is built by Theo Reichert in Karlsruhe. It is one person today: the person who writes the checks also reads the reports and carries out the fixes you request. You always know who is on the other end.
- Fix requested
- We have picked this up
- Being fixed now
- Fixed
Why it exists
Lovable, Bolt, v0, Cursor and Replit turned shipping an app into an afternoon. Many of those apps run on a platform address that hides who made them, so when someone finds an open database or a leaked key, there is often nobody to tell.
- Nobody to tell · 855
- Could be reached · 775
Source: securityscanner.dev, a scan of 6,194 apps built with AI tools.
What we believe about security for small teams
Plain language first
Every finding says what it means, what could happen and how it gets fixed. You should not need a security team to understand your own app.
Permission first
We only check apps whose owner asked. Ownership is confirmed and logged, never assumed.
Read-only, never destructive
We read what your app already shows to anyone. We never sign in, change anything or run anything against it.
The gap, never the data
A finding records what was exposed and where. The secret itself is never stored.
Fixed, not just reported
A report is where it starts. You request a fix, a person at Vallit prepares the change for your code, and the next check confirms it is gone.
Where we are
Vallit is based in Karlsruhe, Germany. The app and its checks run in Frankfurt.
Talk to a person
A question, a check you want to talk through, or something we should know: write, and Theo answers.
- info@vallit.net
- Form
- Write to us
- Post
- Vallit, Parkstraße 1, 76131 Karlsruhe, Germany
- Legal
- Impressum