Let's Seal – Let's Encrypt for document signing, free and self-hosted
Does for document seals what Let's Encrypt did for TLS by making verification free.
Zero to OneBig BrainBold Bet
nsokin
93312d ago
Security Projects
Security projects from Show HN — penetration testing, encryption, privacy tools, and vulnerability scanners.
We Built Private Post-Training and Inference for Frontier Models
First multi-GPU TEE stack for training trillion-parameter models with under 10% overhead.
WizardryBold BetZero to One
oscarmoxon
714mo ago
Vett – Scan, sign, and verify AI agent skills before installing
First real supply-chain defense for AI agent ecosystems; catches nation-state-grade payloads.
Zero to OneBig BrainWizardry
nikon
305mo ago
CVE-2026-40369 Windows Kernel Arbitrary Write Chrome SBX
100% deterministic SYSTEM escalation from Chrome sandbox via audited syscall.
WizardryBig BrainRabbit Hole
orinimron123
302mo ago
GitHub
git log for your infrastructure — tamper-evident host snapshots, diffable history, and drift rules for Linux (and your AI agent's config)
0Go
●●●●Gem
Git log for your infrastructure (including your AI agent's config)
Git log for infrastructure with cryptographic proof — catches backdoors and config drift.
WizardryZero to One
ibukunolu
301d ago
Edictum – Runtime governance for LLM agent tool calls
Proves text safety ≠ tool-call safety; catches hidden harmful executions deterministically.
Zero to OneBig BrainWizardry
acartag7
205mo ago
Whorl – Fingerprinting LLMs as horrible password generators
Identifies LLM models by password bias patterns when they refuse to tell you.
Big BrainZero to OneNiche Gem
tehryanx
204mo ago
Honeypo(e)t – a honeypot that replies to every scan with a poem
Responds to every internet knock with a tailored poem. Pure whimsy meets security observation.
Zero to OneWizardryCozy
Honeypoet
105mo ago
We gave an OpenClaw full tool access and hit stop. It didn't stop
Empirical proof: AI agents ignore stop commands and delete emails without enforceable boundaries.
Zero to OneBig BrainWizardry
davidresilify
114mo ago
Terminal Phone – E2EE Walkie Talkie from the Command Line
E2E voice over Tor in pure Bash; no server, no accounts, .onion address is your identity.
WizardryBold BetSolve My Problem
smalltorch
322855mo ago
Clawk – Give coding agents a disposable Linux VM, not your laptop
Real VM isolation beats prompt-based safety guards for agent execution.
Solve My ProblemWizardry
celrenheit
22615916d ago
GitHub
A HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
1,976Go
●●●Banger
Agent Vault – A HTTP credential proxy and vault for AI agents
Agents never see credentials — brokered access beats retrieval for prompt injection safety.
Zero to OneSolve My Problem
dangtony98
156563mo ago
Bramble – Local-first password manager
P2P password sync via Nostr + WebRTC with zero cloud vault—unlike Bitwarden or 1Password.
WizardryZero to OneSolve My Problem
MegagramEnjoyer
1535027d ago
Claw Patrol, a security firewall for agents
Wire-protocol parsing gates agent actions before they hit production—no LLM gateway does this.
Big BrainZero to OneSolve My Problem
rough-sea
112311mo ago
OneCLI – OSS credential gateway that keeps secrets out of AI agents
Network-layer proxy that injects secrets per request so agents never actually hold the keys.
Big BrainSolve My Problem
Jonathanfishner
110326d ago
GitHub
Open source Baltic Sea shadow fleet tracker. 1200+ vessels, live AIS, cable proximity alerts. No cloud, no subscription, runs locally
41Python
●●●Banger
Baltic shadow fleet tracker – live AIS, cable proximity alerts
Cable proximity alerts on shadow fleet vessels when MarineTraffic only shows positions.
Dark HorseZero to OneNiche Gem
FormerLabFred
56184mo ago
GitHub
Open-source security gateway & static scanner for AI agents. Enforce role-based access control (RBAC), human-in-the-loop approvals, segregation of duties, and cryptographically signed, offline-verifiable audit logs.
50TypeScript
●●●Banger
Scan your AI agents for dangerous capabilities
Banking-style segregation of duties stops agents from approving their own dangerous tool calls.
Solve My ProblemBig BrainShip It
smashini
441923d ago
Mezz, a curl-able WiFi sandbox for IoT pentesting
Turns any Linux laptop into a curl-able IoT pentest lab with per-query DNS logging.
WizardryNiche Gem
ABGEO
40102mo ago
Exploiting Slack's video embeds to achieve E2EE communication
Slack video blocks as encrypted iframe carriers is genuinely clever security research.
WizardryBig Brain
victorio
3131mo ago
Tines 3B – safe workflow automation for when everyone builds software
Governed AI execution environment when everyone's pasting API keys into personal Vercel accounts.
Big BrainBold Bet
retsol
2721d ago
Logira – eBPF runtime auditing for AI agent runs
eBPF runtime visibility for AI agents—first tool solving the trust problem with Claude Code and similar.
Solve My ProblemWizardry
melonattacker
2635mo ago
GitHub
A lightweight, multi-layer Linux sandbox combining namespaces, pivot_root, seccomp-bpf, capability dropping, and an evidence-based verdict engine (Truthimatics Public Version) for secure, auditable code execution.
73C
●●●Banger
Z-Jail – A 130 KB Linux sandbox-C99 with 7 defense layers and zero deps
Seven security layers in 130 KB with zero deps fills the bwrap-nsjail gap.
WizardryBig Brain
Zierax
232328d ago
Shibuya – A High-Performance WAF in Rust with eBPF and ML Engine
eBPF kernel drops + dual ML engine beats Cloudflare in latency, single microsecond blocks.
WizardryBig BrainBold Bet
germainluperto
22185mo ago
GitHub
Agent Beacon is the world's first open-source telemetry layer for AI agents wherever they run: locally, in CI, or in the cloud.
293Go
●●●Banger
Beacon - The open-source layer for local AI agent visibility
Endpoint telemetry for AI agents when cloud logs miss local activity.
Solve My ProblemShip It
jqdsouza
21102mo ago
Make sure your OpenClaw isn't doing things it's not supposed to
Blocks unauthorized agent actions before execution with cryptographic intent binding.
Solve My ProblemShip It
vaibhavb007
1853mo ago
CipherStash Stack – Data Level Access Control in TS/JS
Searchable encryption running queries over ciphertext faster than AWS KMS direct.
Big BrainWizardrySolve My Problem
dandraper
1702mo ago
Ash, an Agent Sandbox for Mac
macOS Endpoint Security frameworks beat sandbox-exec for AI agent isolation.
WizardrySolve My Problem
amsha
16154mo ago
I built an SDK that scrambles HTML so scrapers get garbage
CSS flex ordering makes textContent return garbage while visual rendering stays perfect.
WizardryBig Brain
larsmosr
16384mo ago
GitHub
Deep research for your infra. Cynative runs frontier models across your code, cloud and runtime - reasoning through GitHub, GitLab, AWS, GCP, Azure and Kubernetes as one system - and comes back with verified answers.
146Go
●●●Banger
Cynative – Read-only CLI in Go that explains your live infrastructure
Sandboxed agent verifies findings across code and runtime where Prowler and Datadog only scan.
Big BrainWizardry
szin
1641d ago
OkaiDokai, tool-level firewall for OpenClaw, Claude Code and Codex
Per-request push approval for agents with sub-ms rule matching; beats static policies cold.
Solve My ProblemSlick
cedel2k1
1505mo ago
Agent Passport – OAuth-like identity verification for AI agents
First open standard for agent identity—solves a real security gap Cisco documented.
Zero to OneBold Bet
samerismail
14155mo ago
GitHub
A CI/CD Red Team Framework for demonstrating Build Pipeline security risks.
367Go
●●●Banger
SmokedMeat, like Metasploit, but for CI/CD (open-source)
Metasploit for CI/CD pipelines with terminal UI and cloud provider pivoting.
WizardryNiche Gem
flexorium
1393mo ago
XTrace – Encrypted vector DB (search embeddings without exposing them)
Homomorphic encryption on vector search when Pinecone and Qdrant require plaintext on server.
WizardryBig BrainZero to One
TristanX
1333mo ago
Endo Familiar, an O-cap based JavaScript agent sandbox
O-cap security model beats the credential-bag approach every agent framework currently uses.
Big BrainBold BetZero to One
zmanian
1333mo ago
Cerno – CAPTCHA that targets LLM reasoning, not human biology
Motor-control maze analysis targets LLMs where Turnstile and hCaptcha fail.
Zero to OneWizardryBold Bet
plawlost
12214mo ago
Vestauth – Auth for Agents
Agent auth via key-signing beats API keys and OAuth for autonomous systems.
Big BrainSolve My ProblemZero to One
scottmotte
1115mo ago
GitHub
See what your AI coding agent actually did on your computer. 100% local: every file it opened, every secret that entered its context, every sensitive-read-then-network-call. Zero dependencies, zero network calls.
10TypeScript
●●●Banger
Confessor – replay what private info Claude Code accessed on your PC
Connects sensitive file reads to network calls when compliance loggers miss the link.
Big BrainSolve My Problem
ninjahawk1
11118d ago
GitHub
The local runtime control layer for OpenClaw/Hermes-agent, PII & sensitive credentials protection.
314Rust
●●●Banger
ClawShell, Process-Level Isolation for OpenClaw Credentials
Moves credential security from prompt-injection hope to OS process isolation for agents.
Solve My ProblemZero to One
guanlan
1015mo ago
How to analyze your LLM output – A behavioural health monitor for LLMs
Detects sycophancy and jailbreak drift in LLMs without needing model weights.
Big BrainBold BetNiche Gem
k-thimmaraju
1072mo ago
TLS Certificate Management and PKI
Finally, a certificate manager that works for home labs, not just enterprises.
Solve My ProblemDark Horse
zaitanz
1002mo ago
We post-trained a model that pen tests instead of refusing your code
Post-trained model for offensive security instead of wrapping GPT with safety refusals.
Big BrainBold Bet
dk189
1041mo ago
Ekko – PQC encryption inside of your keyboard
End-to-end encryption for Instagram DMs without forcing friends to switch apps.
Bold BetZero to One
kvasilev
10109d ago
My agents are building a secure fork of OpenClaw
AI agents get credentials without ever seeing them—SQL prepared statements for secrets.
Zero to OneBig BrainWizardry
stcredzero
905mo ago
GitHub
Scan your dev machine for AI agents, MCP servers, IDE extensions, and suspicious packages - in seconds.
168Go
●●●Banger
Scan your dev machine for AI agents, MCP servers, and IDE extensions
Fills the EDR blind spot for AI tooling — timely and actually useful today.
Solve My ProblemDark Horse
varunsharma07
904mo ago
Gecit – DPI bypass using eBPF sock_ops, no proxy or VPN
eBPF sock_ops injection beats GoodbyeDPI with kernel-level packet manipulation.
WizardryDark Horse
boratanrikulu
923mo ago
TunnelMind – reputation API for IPs, ASNs, and ad-tach supply chains
Cross-correlates threat intel across four lenses where incumbents stay siloed.
Big BrainZero to One
o2k
9111mo ago
GitHub
an implementation of the ideas in Erik Meijer's "Guardians of the Agents: Formal Verification of AI Workflows" (Communications of the ACM, January 2026)
139Python
●●●Banger
Guardians – Verify tool-using agent workflows before execution
Applies formal verification to prevent prompt injection before any tool executes.
WizardryBig BrainZero to One
namin
803mo ago
Declaw Arena – a CTF-style challenge to break an AI agent in a microVM
CTF challenges where you break AI agents in microVMs—0% cracked at full policy strength.
Rabbit HoleWizardry
ShivamNayak11
8027d ago