Local-first
by design.
Test runs execute on your machine. Findings live in a local SQLite database; webhook secrets and GitHub tokens go to the OS keychain via keytar. The cloud is opt-in, never required.
Security controls
Eight controls.Zero standing access.
Local-first runs
Test runs execute on your machine or in your VPC. Screenshots, recordings, and findings never leave your perimeter.
Keychain-backed secrets
Webhook secrets and GitHub OAuth tokens are stored in the OS keychain via keytar — never in our database, never in plaintext on disk.
Replayable audit trail
Every run is a deterministic recording. Screens, network, console, and DOM state — replay step by step from the desktop app.
On-machine artifacts
Screenshots, video recordings, and traces are written to your filesystem. Nothing leaves your machine unless you opt into the cloud runner.
Token-auth webhooks
Webhook endpoints require a per-project bearer token. Rotate or revoke any time — nothing fires without a valid header.
2FA hand-off
When a scenario hits a 2FA prompt, Viziera pauses and waits for a code you provide from your phone — never store TOTP secrets.
Sandboxed execution
Per-project isolation with resource limits and explicit allow-lists. Scenarios can't reach beyond what you grant them.
Compliance-ready
WCAG 2.2 evidence per release, exportable audit logs, and an enterprise tier with SSO and on-prem deployment.
Trust architecture
Designed for theteams that get audited.
Four principles that govern every Viziera run, with a live audit trail you can replay on demand.
Four principles that govern every agent.
Full visibility
Every step, every keystroke, every network call — recorded and replayable.
Reversible by default
Baselines and findings can be re-approved or rolled back without losing run history.
Your rules, your machine
Test runs execute locally. Cloud lock-in is a choice, not a default.
Zero standing access
Secrets sit in your OS keychain; findings sit on your filesystem. We can't see what we can't reach.
Live Audit Log
StreamingCompliance questions?Deployment questions?
We answer them directly — no SDR funnel. Tell us about your stack and we'll walk through the deployment options that match it.