The whole perimeter
Nine new checks for everything around your code: database rules, the libraries you install, keys left in your repository, and the domain your email and your customers trust.
Read about 1.15Updates
- Newest release
- 1.15 · The whole perimeter
- In the making
- 130 updates since 1.15
- Every release
- 3 big releases
The next release
130 updates since 1.15 so far: Turn on client reports yourself · The day your paid fix is due · Reports with a fix kit run clean under our security policy · Problems on our side are noticed sooner · Your data goes only where our list says · Vallit speaks German · A paid fix within two business days, and no alarm lost · Every paid app on its own invoice line · Every promise in the Terms has a deadline we watch · Check the file before you act · From first check to a removed app, without getting stuck · You accept the Terms when you order · A nightly copy of our database · Readable for screen readers and low vision · Code checks that hold on whole apps · A merged fix gets a fresh check · One Settings entry, one list · Settings in two places: you and your company · A middleware pattern cannot stall a scan · The status page says slow or down only when it is · Request data kept in a Map or Set is followed · Your team's admin tools no longer count as a leak between customers · An incident email that did not arrive is not counted as sent · A dot after the domain is the same domain · Four more checks no longer pass without an answer · A request that got no answer is not a pass · Check limits hold under quick clicks · An incident email goes out once · One rule, one finding, one price in the score · The status page counts only what visitors meet · A failed code read says so · A workflow fix waits for the right permission · Every paid app is checked on time · Limits on confirmation mail, and steadier new features · One unread file no longer fails every check · Track and confirm fix pull requests · Staff access ends when it is removed · Keep credentials out of report records · Clarify repairs on Watch and Care · Limit credentials in AI reviews · Checks tested on whole apps · Preserve the fix you review · Read the settings behind your deployment · Reports explain their limits · Follow a finding through your code · Follow verification through to the action · Monthly reports for your clients, for selected companies · A finding can become a ticket in your own tracker, for selected companies · Page health looks at your pages once a day · A work plan for your findings, for selected companies · We keep count of the time a fix takes · Automatic fixes for new kinds of findings · A fix done another way still counts · An incomplete check is run again, and we hear about it · A passing hiccup no longer leaves a check unrun · Our own files carry the header too · A dark look for the whole app · Every app gets the same daily check · Our count of affected apps adds up · A hardened workflow is no longer a false alarm · A new check moves on without waiting · Code checks survive a heavy repository · Files that miss the header your homepage has · A rise in findings is looked into · A rise in one check is read first · Work on new checks we can follow · Our case pages read right aloud · A busy host no longer costs a day · What a new check needs before it ships · Our counts for a new problem agree · Emails get through a hanging connection · Open until someone starts on it · One finding for a webhook that trusts anyone · Fewer false alarms about raw HTML · Every fix to your code is signed by one person · The whole daily check, before the DNS record · Where and how to fix wait for your domain · Where each new problem stands, and when your fix starts · What runs on its own · A free check promises only what it found · Tear off your copy · No verdict on a challenge page · A billing page that tells the order, Free per app, and every fix on Care · A site with no server is not "Partial" · Large apps are read to the end · No alarm for pages that only look the part · The way to our status page · Plan changes charged fairly, and a billing page that says so · Fresh pictures in every inbox · Calmer emails · Our own status page · A protocol probe is not a forged certificate · Sign-in emails from Vallit · Payments that cannot get lost or charged twice · Every code finding gets the full review · Priced per app: Watch, Care and the Fix · Fewer false alarms on real apps · Six checks for attacks that ride on your signed-in users · 28 new checks, and fixes we write without AI · One sky for every email · The status after a recheck · Checked again before we act · A tighter database · Fixes as pull requests · Fewer false alarms from the code check · See whether we can open a pull request · We read the code behind a finding · Vallit passes its own check · A finding says it once · No alarms from development tools · Your app at a glance · Healthy means good · Partial until every check has run · The top of a report agrees with the rest · Every check finishes or says why · Our internal tools keep their own sidebar · Twenty new security checks · Sign-in buttons in full colour · Our own overview of open work · Your account and your company, in Vallit · The app fills big screens · Big releases stay big · The right password length · A report you can follow, and a page you can show · Form hints in Vallit's own look · Copying you can see · The free check starts on vallit.net · A calmer app, every building block polished · A cover for the whole perimeter · Who your app believes
Follow the request
Five new checks follow what a visitor sends all the way into your server.
The guardian you open every day
First app in one step · Take over a report · Vallit's own sign-in and sign-up
All releases
| Date | Release | Title | Updates in it |
|---|---|---|---|
| Oct 8, 2026 | In the making | The next release | 130 so far |
| Sep 23, 2026 | 1.15.68 | The whole perimeter | 4 |
| Sep 23, 2026 | 1.13.60 | Follow the request | 13 |
| Sep 14, 2026 | 1.0.0 | The guardian you open every day | 1 |