Alternatives
Products that do what AIOStack – Using eBPF to Secure AI Services in Kubernetes does
Hey HN! We built a tool that uses eBPF to discover AI services and their data flows in Kubernetes clusters. Modern AI apps often follow this pattern: 1. Service receives request 2. Queries database (PostgreSQL/Redis/MongoDB) 3. Sends data to LLM API (OpenAI/Anthropic/Bedrock) 4. Consumes or returns the AI generated response Security teams often don't know: - Which services are making AI calls - What databases they're accessing first - Whether PII is being sent to third-party APIs - What libraries and packages are being used for AI Our eBPF based tool attaches to network…
- 1PI
2020 · pixielabs.ai
- 2
- 3
- 4
- 5
- 6
- 7
- 8
- 9
- 10PO
2022 · github.com
- 11FC
Wanted to share some exciting news - CAST AI (AI-driven cloud cost monitoring and management platform) has launched a free Cloud security insights tool for K8s. Security Insights offers the following features: Kubernetes configuration checks, to ensure your cluster is configured according to best practices for pods and workloads. Users are provided with details on individual checks and resources through CAST AI’s user interface. Vulnerability scans, which offer an overview of potential issues that might appear due to container images downloaded from public registries. Round-the-clock…
2022 · cast.ai
- 12BM
Today we released an open, Valkey-native context layer for AI agents as part of our packages at BetterDB (agent memory, semantic + multi-tier caching, typed retrieval) that run on a Valkey instance no matter where it is - no vendor lock-in. We even started provisioning Valkey instances starting today. Packages are shipped on npm and PyPi. Why we made it: BetterDB originally started as a monitoring and observability platform for Valkey, Redis and any RESP compatible db. This is still the core of the product, but in the process of building this, we kept seeing that one of the fastest-growing…
Jun 2026 · github.com
- 13
- 14BA
Started this because configuring Fabric8 for EKS was driving me crazy. Building a client that auto-detects your environment (IAM roles, profiles, local configs) so you don't have to wire it all up manually. Still pretty early and building for EKS right now. Long way to go, but putting it out there early to see if others have hit the same problems or want to help shape where this goes.
Oct 2025 · github.com
- 15WB
Over the past few months, as we scaled our internal AI Agents, we hit a dead end: Running LLM-generated arbitrary code in Docker is basically running naked on security due to container escape risks. But using full traditional VMs takes minutes to boot and eats too much memory to support high-density concurrency. We loved the developer experience of SaaS sandboxes on the market, but they are closed-source, expensive, and have too high a barrier to entry for self-hosting. So, our team decided to build our own. After months of grinding, using RustVMM and KVM, we built a blazing-fast,…
Apr 2026 · github.com
- 16AA
We’ve published a set of open-source reference implementations on how to build production-grade Agentic AI applications on AWS. What’s in the repo: • Agentic RAG, memory, and planning workflows with LangGraph & CrewAI • Strands-based flows with observability using OTEL & Arize • Evaluation with LLM-as-judge and cost/performance regressions • Built with Bedrock, S3, Step Functions, and more GitHub: https://github.com/aws-samples/sample-agentic-frameworks-on-... Would love your thoughts — feedback, issues, and stars welcome!
2025 · github.com
- 17XV
Hello, I just released the (eventually) final version of my xcapture eBPF performance tool that now uses modern eBPF (libbpf, BTF, CO-RE, passive sampling using task iterators, task-local storage, etc). The previous BCC-based v2 version got a good discussion here last year [1], but due to BCC being less flexible and now deprecated, I decided to pull the plug and start from scratch with the latest eBPF features available. I'm targeting Linux kernels 5.14 and up. So Ubuntu 20 with HWE kernel (5.15) already works, RHEL9 works, Oracle's RHEL8 clone OEL8 with Oracle's UEK7 kernel (5.15) also…
2025 · tanelpoder.com
- 18WM
We've recently made our product, ozma.io, open-source. It's a CRM/ERP platform for building enterprise systems. We believe that AI will soon handle implementing most of the boilerplate and UIs in the specialized business software. Just look at what lovable.dev does today! Soon products which make creating business software easier for developers will become obsolete, or transform into "libraries" to be used by AIs. We are losing this race, so we go the second route — publish everything and go on building other products on top of it. GitHub repo URL:…
2025 · github.com
- 19KO
Hey HN! I wanted to share an open-source project I’ve been working on called k8sAI. It’s a personal AI Kubernetes expert that can answer questions about your cluster, suggests commands, and even executes relevant kubectl commands to help diagnose and suggest fixes to your cluster, all in the CLI! As a relative newcomer to k8s, this tool has really streamlined my workflow. I can ask questions about my cluster, k8sAI will run kubectl commands to gather info, and then answer those question. It’s also found several issues in my cluster for me - all I’ve had to do is point it in the right…
2024 · github.com
- 20OC
Hi everyone, I'm Vasek (https://x.com/mlejva), the CEO of the company behind this - https://e2b.dev. The company is called E2B. We're an open-source (https://github.com/e2b-dev) devtool that makes it easy to run untrusted AI-generated code in our secure sandboxes. You can think of us as coding runtime for LLMs. You can self host us on GCP (https://github.com/e2b-dev/infra/blob/main/self-host.md) and we're working on AWS, then Azure, and any Linux machine. This repo is one of our open-source projects that we're…
2025 · github.com
- 21OS
We’re building an open-source tool that makes it easy to expose secure, LLM-optimized APIs on top of your structured data—without manually designing endpoints or worrying about compliance. AI agents and LLM-powered applications need structured access to data, but traditional APIs and databases weren’t built with AI workloads in mind. Our tool automatically generates APIs that: - Filter out PII & sensitive data to comply with GDPR, CPRA, SOC 2, and other regulations. - Provide traceability & auditing, so AI apps aren’t black boxes, and security teams stay in control. - Optimize for AI…
2025 · github.com
- 22IB
Hi HN, I’m the creator of Cordum. I’ve been working in DevOps and infrastructure for years (currently in the fintech/security space), and as I started playing with AI agents, I noticed a scary pattern. Most "safety" mechanisms rely on system prompts ("Please don't do X") or flimsy Python logic inside the agent itself. If we treat agents as autonomous employees, giving them root access and hoping they listen to instructions felt insane to me. I wanted a way to enforce hard constraints that the LLM cannot override, no matter how "jailbroken" it gets. So I built Cordum. It’s an open-source…
Jan 2026 · github.com
- 23CA
Hey HN, We launched Coroot a while ago as an open source observability tool that collects complete telemetry using eBPF. Today we are adding a major new capability: Coroot enterprise now includes AI-powered Root Cause Analysis. When an incident happens (like an SLO violation), Coroot: - Automatically kicks off an RCA - Summarizes what went wrong in plain English - Suggests immediate fixes - Shows the full investigation using metrics, logs, traces, and profiles With most tools, the quality of root cause analysis depends on how well the system is instrumented. Coroot takes a different…
2025 · coroot.ai
- 24IB
I've been playing with cross platform windows/linux Kubernetes clusters recently and have had endless problems with installer scripts misconfiguring networking by using the wrong NIC etc. I got frustrated with the tooling on windows to debug container networking so I built a tool that attempts to stitch together the HNS (Host Network Service) & HCS (Host Compute Service) resources into a tree that shows the relationship between configs. You can also search over it to find the networking impacting your containers or launch the windows built in packet capture tool to create a network…
2022 · github.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →