FVLCN.dev
FVLCN.dev builds security tools for modern software development, starting with Secrets Hunter, a scanner that detects exposed secrets across filesystems, domains, and Git history while minimizing false positives. The tool is designed for teams using AI-driven code generation, where secure development practices are increasingly critical. It provides a command-line interface that outputs structured JSON reports for easy integration into development workflows.
- Artificial Intelligence
- Cybersecurity
- Developer Tools
- Software Only
Funding
Founders
Product
Problem
As AI-driven code generation accelerates development, it also increases the risk of accidentally exposing sensitive information such as API keys, credentials, and tokens in codebases, filesystems, and Git history. Traditional secret scanning tools often generate excessive false positives, wasting developers' time and causing critical exposures to be overlooked.
Solution
FVLCN.dev provides security tooling that helps development teams identify and neutralize exposed secrets without disrupting their workflow. Its flagship product, Secrets Hunter, scans filesystems, domains, and Git history to locate exposed credentials while filtering out noise to reduce false positives. The tool is delivered as a simple Python package installable via pip, and it outputs structured JSON reports that can be integrated into automated pipelines. The company's methodology emphasizes a five-step process—Find, Verify, Learn, Control, and Neutralize—to ensure that speed and security go hand in hand during development.
Target Audience
Primary users are software development teams and security engineers who need fast, reliable secret detection as part of their development and CI/CD workflows, particularly those adopting AI-assisted code generation.
Features
- Scans filesystems, domains, and Git history for exposed secrets such as API keys and credentials
- Prioritizes results by severity, flagging items as critical or medium to focus remediation efforts
- Emits structured JSON output for easy integration into CI/CD pipelines and automated reporting
- Installable via pip with a simple command-line interface for quick adoption
- Designed to minimize false positives, saving developers time and reducing alert fatigue