Dev tools · alternatives · 2026
24 alternatives to AttackerView
Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

Hi Hacker News! Shahar and Tal from Keep here. A few months ago, we introduced here at HN (https://news.ycombinator.com/item?id=34806482) Keep as an “open source alerting CLI” and got some interesting feedback - mainly around UI, automation, and supporting more tools. We were VERY early back then, and we understood that although the current DX around creating alerts is not great, it's not that critical and developers don’t need another tool just for that. But we did find something else. While talking to developers and devops, we found that a lot of companies use many tools…
2023 · github.com · its alternatives →
- 2CP
Hi hackers, long time reader, first time "real" submitter. This is by no means a revolutionary idea, or even execution, but rather something I've always wanted to do, just to see if I could write a good implementation of it. So without further adieu: http://ca.pitali.st/ Yes, it's just an URL shortener. Please check out the API and if there anything you like about it, please share, so I can take this feedback with me to my future projects. If there's something you REALLY hate, that's feedback too. Don't be afraid to hurt my feelings; this was put together in less than 4 hours to see if I…
2011 · ca.pitali.st · its alternatives →
- 3

I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 4

Howdy friends. I've been a zero to one product manager for 12 plus years and along the way I kept borrowing pieces from different discovery frameworks until I had a methodology of my own, one that actually raises the odds of an idea succeeding. This does not replace user interviews obviously, but it leads you in the right direction. Looking forward for your feedback
Jul 2026 · github.com · its alternatives →
- 5

World's Largest Exploit Database
2023 · exploit.observer · its alternatives →
- 6

I participated in the Nvidia + Vercel 2 hour hackathon in SF tonight, and built something I've wanted, but hadn't tried building. I implemented an MCP Server and VS Code extension to allow Claude Desktop to place breakpoints, step through code, and execute expressions (assuming language support). So you can ask it a question that requires actually stepping through the code and now it can actually do that - check values for you, etc. It's _definitely_ not perfect. Have improvements? Please make a PR!
2025 · github.com · its alternatives →
- 7

Hey everyone, My friend and I built a simple bug fixing app that listens for alerts/issues from Sentry, contextualizes it against your codebase, and any other data sources you wish to connect (right now we support Notion, Google Docs, and Slack), and deploys an ai agent to write a PR for review in Github or Gitlab to solve the bug. Our current demo shows the end-to-end process for a trivial bug fix, but we have been testing it with open source python repos like http-pie, comparing how our agent solves a bug compared to a human engineer and it gets fairly close. We are working on adding…
2023 · resolvd.ai · its alternatives →
- 8
PwnScan▲8For at least a few years (since before COVID), in my circle everbody wants an AI tool that finds vulnerabilities in binaries. I have my reservations about such a tool because of my perception that AI is overhyped, so I decided to build one myself to see how useful it could be (or not). I was actually kinda surprised how well it worked for my collection of binaries with known CVEs. It definitely has false positives and negatives, as any static analysis tool would, but I think its actually somewhat usable. I dont think the results are super actionable, but interesting nonetheless. I still…
2025 · pwnscan.com · its alternatives →
- 9

Uptime monitoring & a free website security scan
Jul 2026 · tellmewhendown.com · its alternatives →
- 10ET
Hey Hacker News, For the last 2 months, I've been working on a testing agent to free developers from the endless maintenance of end-to-end tests. You just push up a PR, and our agent analyzes the code changes and automatically visits the preview to test things out like a real human! We also support describing tests in English (or even in the PR description), and we'll go through your site whenever you want via a GitHub action to test and make sure various core flows continue to work as expected. We are looking for early testers and are giving out a generous free tier! Just sign up on the…
2025 · playmatic.ai · its alternatives →
- 11

Hi HN, I'm an Indie Dev. Building web apps, I struggled to check for vulnerabilities on a surface and a deeper level at the same time. Most free scanners gave vague results or missed dependency issues and tools for deeper searches are mainly for enterprise. Also with vibe coding the issue of security is rising more and more. I built SecureNow - a simple web scanner built with Next.js and Supabase that checks SSL, ports, dependencies, headers, and basic vulns. It caught real issues in my projects. Free basic scans at securenow.app. Feedback on accuracy and missing features? Thanks!
Dec 2025 · securenow.dev · its alternatives →
- 12

Free open-source web scanner with an AI fix advisor
Jul 2026 · bugbounty-arsenal.net · its alternatives →
- 13

I’ve spent the last 2.5 months building a product that runs LLM-powered code reviews on my pull requests — and I just launched it. The tool is built specifically for solo developers. You install it on your repo, trigger a scan by creating a pull request, and it leaves structured review comments using OpenAI under the hood. Funnily enough, I used the dev version of this app to review its own pull requests while building it. It helped me spot bugs, simplify structure, and keep quality high — all with minimal need for another human in the loop. Things I want to try out in the next months : -…
2025 · codii.dev · its alternatives →
- 14AM
I built this after one too many 3 AM wake-ups due to API outages. Existing solutions felt overpriced and overcomplicated for my small-scale needs. Key features: Simple, GitHub-inspired dashboard Free tier: 5-minute checks, email alerts, 30-day retention Premium tier: 1-minute checks, SMS alerts, unlimited retention Significantly more affordable than enterprise solutions Tech stack: Next.js frontend, Node.js backend, MongoDB, Stripe for payments. This is my attempt to solve the "sleep vs. downtime" dilemma for fellow indie hackers. I'd appreciate any feedback or feature suggestions. What's…
2024 · martinup.app · its alternatives →
- 15WV
Hi HN, I'm the CEO at https://replay.io. We've been working on time travel debugging for web development for a while (https://news.ycombinator.com/item?id=28539247) and more recently an AI app builder that uses that debugger to get past problems instead of spinning in circles (https://news.ycombinator.com/item?id=43258585). We've gotten to where we can pretty easily build apps to replace business-critical SaaS tools, some of which we're now using internally: * We built our own issue tracker to keep track of all our development projects, tickets, bug…
Dec 2025 · its alternatives →
- 16

I built this for myself. I was tired of checking Product Hunt, Hacker News, Reddit, Indie Hackers, and YouTube separately while building. Here Be Shovels is a calm, opinionated place that aggregates tools, launches, AI signals, and YouTube channels indie makers actually watch. It’s intentionally incomplete and updated every few hours and I had a lot of time building out the Wild West metaphor. Happy to hear feedback
Dec 2025 · herebeshovels.com · its alternatives →
- 17

- 18

Hi HN, I just wanted to share what I have been working on for the past few months: A firmware analyzer for embedded Linux systems that helps uncovering security issues running entirely in the browser. This is a very early Alpha. It is going to be rough around the edges. But I think it provides quite a lot of value already. So please go ahead and drop a firmware (only .tar rootfs archives for now) and try to break it :)
Mar 2026 · xray.boldwark.com · its alternatives →
- 19

Figured I'd track the popular coding agents to see merge and approval rates. At first I was tracking Opened vs. Approved, but realized most people aren't approving; they just merge. I haven't found a way to reliably track the other agents (Jules, Devin, etc), since they don't have a standardized branch naming convention. Interesting to watch this over time. Open to ideas.
2025 · github.com · its alternatives →
- 20

Find your web app's vulnerabilities before attackers do
Jul 2026 · sensagraph.com · its alternatives →
- 21WS
http://webscanner.tk/quickscan/ Hi! I made this project over the couse of a week to help teach myself more about Django and web app development. I am studying computer security in school and web security is one of my passions. It is a tool that helps web developers ensure that they have implemented helpful security mechanisms like HTTPOnly flags, X-Frame-Options, etc. There are hundreds of tools that offer to scan websites for things like cross-site scripting, mySQL injection, etc. This tool simply looks for information that is available via one or two GET requests (the headers, protocols,…
2013 · webscanner.tk · its alternatives →
- 22

Hey Hacker News, I'm the maker of Kopage, a free & self-hosted Website Builder. While working on new, cool features (AI, of course), it would be great to hear some HN feedback :) Thanks, Simon
2024 · kopage.com · its alternatives →
- 23

I got fed up with endless PR reviews and the constant fear of missing a security bug, so I built Shieldcode. What it does: - Scans new pull requests for bugs and vulnerabilities automatically - Comments directly on GitHub with clear, actionable feedback - Works out of the box with no complex setup required Next up: NPM VScan, which will check your npm dependencies on every push for vulnerabilities or malware. I’d love to hear your thoughts and feedback! https://shieldcode.space
2025 · shieldcode.space · its alternatives →
- 24GS
I've worked on several projects writing and implementing specifications (particularly CLN): I've found the specs I write are much better when I quote them in the implementation, so I can see what implementers need to know. Also, when specs change in development, it's almost trivial to find where to update the code. This project is a formalization of my various hacky scripts which ensure the requirements are accurately quoted, and give coverage if any are missing. Not a major Opus, but I hope someone else finds it useful!
Jul 2026 · greatspectations.org · its alternatives →
Also compare
- Keep – GitHub Actions for your monitoring tools alternatives
- ca.pitali.st, not a weekend, but afternoon project alternatives
- I built a PR listener and ruleset to detect malicious code in CI/CD alternatives
- Vibe-check skill alternatives
- Monitor all exploits in wild easily for any CVE/EDB/GHSA or Technology alternatives
- Enable Claude to interactively debug your code alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →