Proof over promises.
AI writes the code. Something still has to check what shipped.
Veristria is the security company behind KeyDrift, VibeGuard and FeeGuard — three products that read your live deployment, not your repository. Exposed API keys in client-side JavaScript bundles. Supabase row-level security that drifted from the schema. Stripe Connect fees quietly going missing. Every finding comes with the evidence, and the first one is free.
Evidence, not opinion
Every finding a Veristria product reports points at something you can open and check yourself: a served file, a query result, a ledger line.
Zero standing access
Our tools start from what is already public or from the narrowest credential that does the job. Nothing keeps a key it does not need.
Answer before invoice
Each product tells you whether you have a problem before it asks you for anything. The first real answer is free on all three.
The ecosystem
Three products, one standard of evidence
KeyDrift
Finds the API keys and secrets that AI coding tools leave behind in client-side JavaScript bundles.
VibeGuard
Continuous RLS testing, schema-drift detection and security monitoring for Supabase backends.
FeeGuard
Real-time detection and recovery of silent fee leaks in Stripe Connect platforms.
The method
The same three moves, on three different surfaces
- 01
Observe what shipped
Not the repository, not the intent — the artefact. The JavaScript your CDN serves, the policies your database enforces, the transfers your platform actually made.
- 02
Prove the finding
A masked key prefix, a query that returns a row it should not, a fee that was never reversed. Something specific enough to act on without a second opinion.
- 03
Say what to change
One fix, in the words of the stack it belongs to. A finding you cannot act on is a notification, and notifications get muted.
Founder
Lars O. Horpestad
Founder, Veristria
Veristria was founded by Lars O. Horpestad, a Nordic AI figure and the author of the first published Norwegian guide to large language models. The company grew out of a straightforward observation from that work: teams had started shipping generated code far faster than they could read it, and the tooling around them still assumed a human had.
More about the companyWriting
From the Veristria blog
Questions
What people ask before they pick a product
- What is Veristria?
- Veristria is a software company that builds verification tools for teams shipping AI-generated code. It operates three products — KeyDrift, VibeGuard and FeeGuard — each of which checks what an application actually deployed rather than what its source code intended. The company was founded in 2026 by Lars O. Horpestad and is based in Norway.
- How is this different from a normal code scanner?
- Most scanners read your repository or your source tree. Veristria reads the deployed result: the JavaScript your CDN is serving, the row-level security policies your database is currently enforcing, the transfers your payment platform actually made. That distinction matters because the most common failures in AI-assisted development are invisible in source. A build-time environment variable is a variable name in your code and a literal secret in your bundle, so a repository scan of a clean repository returns nothing while the key ships to every visitor.
- Which Veristria product do I need?
- If you ship a JavaScript frontend and want to know whether API keys are exposed in your client bundle, use KeyDrift. If you build on Supabase and want to know whether row-level security still covers your schema, use VibeGuard. If you run a Stripe Connect platform and want to know whether refunds, disputes or FX are silently costing you money, use FeeGuard. They are independent products; most teams need one.
- Is it free?
- The first real answer is free on all three products, with no account required for the public scans. KeyDrift scans a deployed URL for free, and VibeGuard and FeeGuard both run a free audit before any credential is connected. Payment begins when you turn on continuous monitoring.
- Does Veristria store the secrets it finds?
- No. Where a product handles credential material it keeps a masked prefix and a fingerprint — enough to identify a key and track it across scans, never enough to use it. A scanner that retains the secrets it discovers has become the exposure it was hired to find.
- What access do the products need?
- As little as possible, and two of the three need none to start. KeyDrift reads assets that are already served publicly to any browser. VibeGuard runs its free audit against what a project already exposes. FeeGuard requires a Stripe restricted key scoped to the reads it needs, with write scopes gating automatic recovery alone and remaining optional.
- Is Veristria affiliated with Stripe, Supabase or Vercel?
- No. Veristria is independent and is not affiliated with, endorsed by or sponsored by any platform its products examine. Those names appear descriptively, to identify the systems the products work with.
- Who is behind Veristria?
- Veristria was founded by Lars O. Horpestad, a Nordic AI figure and the author of the first published Norwegian guide to large language models. He is based in Norway and leads all three products.
Press, partnerships or a question about the products
One address reaches the whole company. Media enquiries are answered from the press kit.