Vitreous

Who has your data right now? Vitreous shows every app you've given access to, with personalized security recommendations to monitor risks and prevent data breaches.

ReactTypeScriptFastAPIPythonTailwindGemini AIOAuthHackathon

Built at cmd-f 2026 (Wonderland theme) — winner of the UBC CS Project Hub award.

Vitreous scans your Gmail inbox metadata to surface every third-party app that has ever touched your data. It cross-references against the HaveIBeenPwned breach database, flags dormant accounts inactive for 12+ months, and uses Gemini 2.5 Flash to generate a personalised risk score weighted by data sensitivity, company reliability, and account recency.

  • OAuth + passkey login
  • Connected-service discovery via inbox analysis
  • Real-time breach detection
  • Ghost account flagging
  • Accessible design