septakis

We've got your back. Seven times over.

Septakis is the company behind vexproof, a command-line tool for security and compliance work. It runs in your own CI, reads what your build really produced, and writes down what it found in open formats, with the evidence attached.

Go to vexproofWhat it does
Products

Tools that show their work

Every Septakis product runs where your code already lives and backs its answers with evidence you can check. vexproof is the first.

vexproof

For JavaScript teams. Proves which vulnerable npm code never ships, in your browser bundle or on your server, and writes VEX statements your scanner applies and your auditor can check.

  • 4 of 8advisories on Gitea's frontend proved not shipped; the other 4 name the file that ships
  • MITopen-source core, with every supported bundler and scanner
  • $1,200per year for Pro, up to 500 employees; larger, let's talk. Free for open source
Go to vexproofSource
Principles

Seven rules Septakis works by

  1. Offline friendly

    A tool you depend on shouldn’t depend on a connection. Ours run on your own machines, rely on no service of ours, and treat the network as optional.

    your machinenetwork

  2. Wide compatibility

    The best tool is the one that fits what’s already there. We build on open standards and common ground, so nothing has to be torn down to make room for us.

  3. Reduce toil

    Repetitive work is a job for machines; judgment is a job for people. Our tools take the first off your hands, so you have more time for the second.

    repetitive workyour call

  4. Test everything

    Dependable software comes from testing. Every release we make is tested against real-world projects before it ships, so it does what you expect when you rely on it.

  5. Help the world

    Safer software is good for everyone. We keep the foundations open, make the rest free for those who build in the open, and share what we learn.

  6. Show the evidence

    An answer is only as good as the reason behind it. Our tools keep their working beside every result, so anyone can check it without taking our word for it.

    result

  7. Know the limits

    Every tool has edges. Ours say plainly what they checked and what they couldn’t, so a gap is never mistaken for a pass.

    checkednot checked

vexproof is built to all seven. Anything we make after it will be too.

About

Making software easier to trust

Septakis is a software company based in Chicago. We make developer tools that prove what software actually ships.

We start with focused tools that each do one job well, and build them to work together as the set grows.

Contact

Get in touch

vexproof questions and bugs
Open an issue on GitHub
Free Pro for open source
Request a license
Security issues
Email us rather than opening a public issue.