Veil

The first agentic and self-improving firewall.

Comment 1

TLDR ⁉️

Protect any vibe-coded web-app with one URL change. Veil detects attacks in real time and turns incidents into code-aware fix recommendations by using agents to self-improve your firewall and connecting to your GitHub.

Try it out on your own web-apps: https://veil.keanuc.net/

You can also find the repository here: https://github.com/retr0ever/Veil

Instructions to run the app are in the repo!

Inspiration

Vibe-coded apps ship fast but security rarely keeps up. Traditional WAFs are mostly static rules that get updated manually and periodically, while modern attacks mutate constantly (encoding tricks, prompt-like payload obfuscation, novel SSRF/XSS chains, etc.). We created a defensive tool that evolves at the pace of attackers: learns new techniques, tests itself, and improves detection continuously without requiring developers to become security experts.

🟧 "For 25% of the Winter 2025 batch, 95% of lines of code are LLM generated. That's not a typo. The age of vibe coding is here." - Garry Tan

What it does

Veil is a drop-in AI WAF that sits in front of any backend and inspects every HTTP request before it hits your app.

✨ The Flow✨

  • Sign in with GitHub
  • Create a Project by pasting your upstream backend/API URL
  • Veil returns a protected proxy URL
  • Point your client/app traffic at Veil (one URL change)
  • Veil classifies every request:
    • SAFE → forwarded to your upstream
    • MALICIOUS → blocked (your backend never sees it)
  • Veil logs everything and streams it to a real-time dashboard (traffic feed, verdicts, threats, agent activity, block rate trend)

✨ The Agents ✨

Veil runs a self-improvement loop powered by three autonomous agents:

  • Peek discovers and generates new attack techniques (SQLi, XSS, SSRF, path traversal, command injection, etc.) and stores them in a threat intelligence DB with sources.
  • Poke red-teams Veil’s own classifier with mutated variants to find bypasses.
  • Patch analyzes bypasses, updates Veil’s detection rules/prompts, and produces code-aware fix suggestions by cross-referencing your GitHub repo, so you know what to change.

The Agents

Built With

Share this project:

Updates