Dev tools · alternatives · 2026
24 alternatives to CDK Insights
Catch security issues in your AWS CDK before deployment
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
This is intended to be a repo containing all of the official AWS Serverless architecture patterns built with CDK for developers to use. All patterns come in Typescript and Python with the exported CloudFormation also included. - cdk-patterns/serverless
2020 · github.com · its alternatives →
- 2
hop.js▲129A fast, free, privacy-first CDN for open-source projects
2025 · hopjs.bunny.net · its alternatives →
- 3
Kit.domains▲198Hello Hacker News community, We are excited to announce the launch of KIT.DOMAINS, our new tool designed to simplify the management and monitoring of domains. KIT DOMAINS is a convenient and reliable solution for tracking the status of your domains and SSL certificates. With KIT DOMAINS, you will receive timely notifications about expirations and emerging issues, ensuring your sites remain operational and secure. Key features: - Expiration Tracking: Monitor the expiration dates of your domains to prevent accidental lapses. - SSL Certificate Monitoring: Keep your SSL certificates up-to-date…
2024 · kit.domains · its alternatives →
- 4
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 5
Build something amazing! CDN, Observability, KV Store + more
2024 · fastly.com · its alternatives →
- 6
jsDelivr▲93Free multi-CDN for open source projects hosted on npm
2017 · jsdelivr.com · its alternatives →
- 7
GreenOps Scan now proactively detects deprecated Lambda runtimes, RDS/Aurora/DocumentDB engines, EKS versions, ElastiCache Redis, and OpenSearch domains before AWS starts billing you extra for staying on them.
Aug 2026 · greenops.cloud · its alternatives →
- 8
Dastardly▲57A lightweight web app security scanner for your CI pipelines
2022 · portswigger.net · its alternatives →
- 9
Free security scan that tells you exactly how to fix it
Jun 2026 · its alternatives →
- 10
Hi HN, I'm an Indie Dev. Building web apps, I struggled to check for vulnerabilities on a surface and a deeper level at the same time. Most free scanners gave vague results or missed dependency issues and tools for deeper searches are mainly for enterprise. Also with vibe coding the issue of security is rising more and more. I built SecureNow - a simple web scanner built with Next.js and Supabase that checks SSL, ports, dependencies, headers, and basic vulns. It caught real issues in my projects. Free basic scans at securenow.app. Feedback on accuracy and missing features? Thanks!
Dec 2025 · securenow.dev · its alternatives →
- 11AI
Hi HN, I’m one of the co-founders of a startup named Metrist and today we released a free, no login required, “real” status page for AWS service health. I know we aren’t the first to do this, but I think we take a unique approach and we are excited about what we can do with this, and our full product, going forward. As a company, Metrist exists to test and monitor the functionality, performance, and availability of the web’s most built upon cloud products. For this status page, we are running functional tests against 15 of the most popular AWS services, from 5 North American regions, as…
2022 · metrist.io · its alternatives →
- 12
- 13
Real-time observability into your CI/CD pipelines
2024 · signalops.io · its alternatives →
- 14
AttackerView▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Feb 2026 · attackerview.com · its alternatives →
- 15
- 16
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 17
Know your Attack Surface before attackers do.
May 2026 · threatport.com · its alternatives →
- 18
exit1.dev▲11I'm trying to disrupt the insane pricing of uptime monitoring. I hope you'll help me out. I'm trying to create the absolute cheapest dev monitoring tool on the market, while still being competitive with all the others. This means $3/month plan, while still having monitoring for: Website, REST API, UDP/TCP, ICMP, Heartbeat/CRON, WS/WSS, DNS, Domain Intel/expiry and SSL. Everything with unlimited alerts through webhooks. I'm also taking an unlimited approach to the amount of checks you can have. I'd love to hear your thoughts.
2025 · exit1.dev · its alternatives →
- 19
- 20
- 21
A security scanner for Github Actions that doesn't $uck
Mar 2026 · its alternatives →
- 22
- 23
DepsGuard▲10Configure once, prevent the next compromised package install
May 2026 · depsguard.com · its alternatives →
- 24
I built a CLI that detects patterns AI coding tools leave behind: empty catch blocks, hardcoded secrets, as any everywhere, comments that restate the code, god functions, SQL concatenation. 24 rules across JS/TS and Python. Zero config, runs offline, regex-based so it's fast. npx @yuvrajangadsingh/vibecheck . Also ships as a GitHub Action for inline PR annotations and standalone binaries (no Node required). Why: CodeRabbit found AI-generated PRs have 1.7x more issues than human PRs. Veracode says 45% of AI code samples have security vulnerabilities. "Vibe coding" is everywhere now…
Mar 2026 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →