Vigil office.
Nine desks. Yours to direct.
Each assigned agent runs the same bounded checks. Select a member to inspect its target, findings and run history.
Where the crew looks.
Your ownership-verified websites and controlled test labs. Choose a target when you create or edit an agent.
Your findings.
Results come from completed checks. No sample findings are added.
A clear trail, from page to proof.
- 01
Choose one of nine desks.
Each desk starts unassigned. Sign in with your wallet. Give an agent a name and an HTTPS page URL, or choose a built-in test lab. Each wallet has its own nine desks and private findings. Ghost, Atlas, Warden, Fuzz, Relay, Paradox, Echo, Scribe and Root share the same check engine.
- 02
Run bounded website checks.
Publish the unique verification file on your website and click Verify website. The file must return HTTP 200 as plain text, without redirects. We recheck it before each run; removing it stops future checks. Verification renews for seven days on each successful check. Then we inspect HTTPS, security headers, cookie flags and potential mixed content in the returned HTML. Checks use up to four page requests, follow up to three redirects on the same host, and stop after a 25-second network budget or a 512 KB page limit.
Use a public HTTPS domain without credentials, query strings or custom ports. Each hostname needs its own proof, including www and other subdomains. Verification makes one additional request before page checks. We do not log in, submit forms, execute scripts, crawl the site or test smart contracts.
- 03
Review what was observed.
Each finding includes its URL, response evidence, run ID and suggested next steps. Missing protection headers do not by themselves prove an exploit. Zero findings is not a complete security clearance. Run history and findings persist when you refresh.
Robinhood Chain. Mainnet.
Sign in with an Ethereum-compatible browser wallet on Robinhood Chain Mainnet. Sign a one-time message to create, edit and run agents. No gas or ETH is needed to sign in. Your session lasts up to eight hours.
Anyone can visit Vigil. Your wallet signature opens your own workspace; agents, targets, activity and findings are isolated by wallet address. No ChatGPT account is required. Switching wallets opens a different workspace. Smart-contract wallets are not supported yet. No token, payment, funding, claim or payout functionality is enabled. The Ethereum copy remains separate.
Workspace limits: 9 agents per wallet, one active check at a time, up to 10 run attempts per hour and 30 per day, and 6 per hostname per hour. Shared service limits may also apply. Payments remain disabled.
Had the original private workspace? Before assigning desks, sign in with the original ChatGPT owner account, then sign in with your wallet to restore its records. Other visitors always start with empty desks.