Your healthcare client will ask for proof.
You promise HIPAA-compliant development. VLayer generates the audit-ready evidence — with your agency’s name on it — in 60 seconds.
Run it. Get the PDF. Bill the client.
Three steps from your terminal to a deliverable on your invoice.
Point VLayer at your source. One command scans the whole project and stamps it with your agency’s brand.
$ vlayer report ./src \
--brand-name "Your Agency" \
--brand-logo logo.pngAn audit-ready PDF: your agency cover page, findings grouped by category, HIPAA §164.312 mapping, and verification hashes.
$ report.pdf → cover · findings · §164.312 · hashesHand it to your client as a deliverable. Add it to your invoice as a line item: “HIPAA Compliance Scan & Report.”
$ Invoice — HIPAA Compliance Scan & ReportThe math is not subtle.
$449/month. Unlimited projects. Agencies bill the report at $500–$2,000 per delivery.
Bill the report at $500–$2,000. VLayer is $449/month, unlimited.
We don’t ask you to take our word for it.
Real rules
The HIPAA technical safeguards a security review checks — mapped to your code, in CI.
Scanned nightly, in public
We run VLayer against our own site every night and publish the result.
See the audit workflow →Open source, MIT
The scanner is open source. Read every rule before you bill on it.
View the repo →Put the badge on your proposals.
Agencies on the Agency plan can show the “VLayer Verified” badge in proposals and pitches — a visual signal that your HIPAA claims come with evidence behind them.
Questions agencies ask
Does this replace a formal HIPAA audit?
No. A formal audit is broader and human-led. VLayer is the technical, code-level evidence that accompanies it — the proof that your codebase was actually scanned against HIPAA technical safeguards.
Is it really white-label?
Yes. Your agency name and logo go on the cover and throughout the report. You deliver it as your own work product — VLayer stays behind the scenes.
Is this SOC 2?
No. SOC 2 is wide and organizational. VLayer is HIPAA at the code level — deep, not wide. It answers “was this codebase built against HIPAA technical safeguards?”, not “is your company SOC 2 certified?”
Does my client’s code leave my machine?
Not on the free/local tier — the scan runs entirely on your machine. The optional AI tier sends only the minimal context of a single finding for triage, never your whole codebase.
Stop promising. Start proving.
$449/month, unlimited projects. Your first white-label report is 60 seconds away.