Vlayer

An open-source command-line tool that scans TypeScript and JavaScript codebases for HIPAA compliance issues, mapping checks to 45 CFR §164.312. It detects PHI exposure, weak encryption, audit logging gaps, access control problems, and data retention issues. It sells to developers and engineering teams building healthcare applications, from individual developers to enterprises. It is delivered as a CLI tool that integrates with CI/CD pipelines, IDEs, and supports custom YAML rules, with a free open-source tier and paid plans for teams.

Key features

• PHI exposure detection
• Encryption standards checks
• Audit logging verification
• Access control detection
• Data retention flagging
• CI/CD integration
• VS Code extension
• Custom YAML rules
• Multiple report formats
• Auto-fix for common issues