Dev tools · alternatives · 2026
24 alternatives to A Mutating Webhook to automatically strip PII from K8s logs
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…
A Mutating Webhook is a Kubernetes tool that automatically removes personally identifiable information from cluster logs. It intercepts and modifies log data before storage, helping organizations comply with data… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…
Dec 2025 · github.com · its alternatives →
- 2
Hi all, I'm excited to announce Stratoshark, a sibling application to Wireshark that lets you capture and analyze process activity (system calls) and log messages in the same way that Wireshark lets you capture and analyze network packets. If you would like to try it out you can download installers for Windows and macOS and source code for all platforms at https://stratoshark.org. AMA: I'm the goofball whose name is at the top of the "About" box in both applications, and I'll be happy to answer any questions you might have.
2025 · stratoshark.org · its alternatives →
- 3
Catch PII leaks in code & keep your PII inventory current
2024 · hounddog.ai · its alternatives →
- 4PI
2020 · pixielabs.ai · its alternatives →
- 5
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 6
Kloak - Kubernetes eBPF Secret Interceptor for HTTPS. Secure secret management without application changes or sidecars.
Apr 2026 · getkloak.io · its alternatives →
- 7
Point any webhook at a private URL. Pascal reads the payload and writes the Alert, no parser, no field mapping. iPhone only.
Sep 2026 · pascalspager.com · its alternatives →
- 8
[I'm the author] Spall is a web-accessible profiler that I made to help my web-dev friends load gigabyte+ JSON traces without lunch-break-long load times. Recently, Spall got experimental support for auto-tracing with binary traces (along with an in-progress native-port, to give it more memory headroom), which was used to help track down and fix some hard-to-spot lock contention issues in the Odin-language compiler. I demoed it at the Handmade Seattle conference in October, https://guide.handmade-seattle.com/c/2022/spall/, with a head-to-head against Perfetto,…
2023 · gravitymoth.com · its alternatives →
- 9
Redact API▲87Secure application PII using a simple API call with Pangea
2023 · crowdstrike.com · its alternatives →
- 10
I built a tool called *Kekkai* for file integrity monitoring in production environments. It records file hashes during deployment and later verifies them to detect unauthorized modifications (e.g. from OS command injection or tampering). Why it matters: * Many web apps (PHP, Ruby, Python, etc.) on AWS EC2 need a lightweight way to confirm their code hasn’t been changed. * Traditional approaches that rely on metadata often create false positives. * Kekkai checks only file content, so it reliably detects real changes. * I’ve deployed it to an EC2 PHP application in production, and it’s working…
2025 · github.com · its alternatives →
- 11
Hi Everyone! Kubetail is a general-purpose logging dashboard for Kubernetes, optimized for tailing logs across multi-container workloads in real-time. With Kubetail, you can view logs from all the containers in a workload (e.g. Deployment or DaemonSet) merged into a single chronological timeline, delivered to your browser or terminal. I launched Kubetail on HN last year and at that time the top request was to add search. Now I'm happy to say we finally have search available in our latest official release (cli/v0.4.3, helm/v0.10.1). You can check it out in action here:…
2025 · github.com · its alternatives →
- 12KC
Hello HN community! I'm excited to share K8s Cleaner, a tool designed to help you clean up your Kubernetes clusters. As Kubernetes environments grow, they often accumulate unused resources, leading to confusion, waste, and clutter. K8s-cleaner simplifies the process of identifying and removing unnecessary components. The tool scans your Kubernetes clusters for unused or orphaned resources—including pods, services, ingresses, and secrets—and removes them safely. You can fully customize which resources to scan and delete, maintaining complete control over what stays and what goes. Getting…
2024 · sveltos.projectsveltos.io · its alternatives →
- 13
bootstrap K3s over SSH in < 60s 🚀. Contribute to alexellis/k3sup development by creating an account on GitHub.
2019 · k3sup.dev · its alternatives →
- 14
HookWatch▲112Automated webhook monitoring for indie hackers & small teams
Feb 2026 · hookwatch.dev · its alternatives →
- 15
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 16
LogStitch▲84Find AWS Lambda failures fast, right on your Mac
Jun 2026 · logstitch.app · its alternatives →
- 17
- 18
Open sourced application to detect security vulnerabilities.
2020 · github.com · its alternatives →
- 19AL
Hi HN, I’m one of the maintainers of Bridge Anonymization. We built this because the existing solutions for translating sensitive user content are insufficient for many of our privacy-concious clients (Governments, Banks, Healthcare, etc.). We couldn't send PII to third-party APIs, but standard redaction destroyed the translation quality. If you scrub "John" to "[PERSON]", the translation engine loses gender context (often defaulting to masculine), which breaks grammatical agreement in languages like French or German. So we built a reversible, local-first pipeline for Node.js/Bun. Here…
Dec 2025 · medium.com · its alternatives →
- 20
Welcome to K8up - a Kubernetes Backup Operator
2019 · k8up.io · its alternatives →
- 21
HeimWall▲34Signal, not surveillance. See how your engineers use Cursor, Claude Code, and Copilot: catch leaked secrets, PII, and confidential data, without blocking them or reading their prompts.
Jul 2026 · heimwall.ai · its alternatives →
- 22IM
Hi HN, I'm the creator of LogLens. Like many of you, I spend a lot of time digging through massive structured (mostly JSON) log files. I've always relied on grep for its speed and then piped to jq for the actual filtering, but I find this workflow gets slow and complicated, especially with multi-GB files or complex queries. LogLens is my attempt to fix this. It's a single, fast CLI tool written in Rust that's designed specifically for structured logs. It combines a simple SQL-like query language (e.g., loglens query './logs' 'level == "error" && status >= 500') with parallel,…
Nov 2025 · getloglens.com · its alternatives →
- 23
Hi HN, I'm Robel. I built LogClaw because I was tired of paying for Datadog and still waking up to pages that said "something is wrong" with no context. LogClaw is an open-source log intelligence platform that runs on Kubernetes. It ingests logs via OpenTelemetry and detects anomalies using signal-based composite scoring — not simple threshold alerting. The system extracts 8 failure-type signals (OOM, crashes, resource exhaustion, dependency failures, DB deadlocks, timeouts, connection errors, auth failures), combines them with statistical z-score analysis, blast radius, error velocity, and…
Mar 2026 · logclaw.ai · its alternatives →
- 24
This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
2025 · github.com · its alternatives →
Also compare
- Local Privacy Firewall-blocks PII and secrets before ChatGPT sees them alternatives
- Stratoshark, a sibling application to Wireshark alternatives
- HoundDog.ai Static Code Scanner alternatives
- Pixie, Instant Kubernetes-Native Application Observability Using EBPF alternatives
- MCP-Shield – Detect security issues in MCP servers alternatives
- Kloak, A secret manager that keeps K8s workload away from secrets alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →