Alternatives
Products that do what Cerebion Rivet does
Post-quantum vulnerability detection platform
- 1FI
2024 · words.filippo.io
- 2RO
We just launched Rivet, the open-source visual AI programming environment! We built Rivet, because we were building complex AI Agent applications at Ironclad. It unlocked our abilities here, and we're excited to make available to the entire community. Backstory: A few months ago, inspired by things like LangChain and LlamaIndex, we started building an AI agent that could work with legal contracts. Unfortunately, we couldn't just use retrieval augmented generation (RAG), because a lot of contracts are basically identical (many chunks with near-identical embeddings), except for a few key…
2023 · rivet.ironcladapp.com
- 3CC
Dear HN community! Looking forward to hearing your feedback on ACE (assured confidential execution), technology that implements VM-based trusted execution environment (TEE) for embedded RISC-V systems with focus on a formally verified and auditable firmware. We target high-assurance systems that can benefit from compartmentalization and hardware-backed isolation. The key ingredient called security monitor (firmware) is implemented in Rust. The formal specification is defined as annotations directly in code and gets translated to Coq using RefinedRust automation. ACE design is now part of the…
2025 · github.com
- 4
Now with KYBER quantum safe keys + AES GCM encryption
Dec 2025 · arocrypt.vercel.app
- 5MQ
2023 · codeberg.org
- 6OT
In the past few days, there have been uncertainties and concerns about the LUKS (“Linux Unified Key Setup”) disk encryption, which is widely used on Linux. We publish our assessment of this here.
2023 · dys2p.com
- 7AO
This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
Oct 2025 · github.com
- 8CA
Hello HN, What is CambiOS? A microkernel OS built in Rust, that boots in QEMU under x86_64, AArch64, and RISC-V - targeting formal verification. Processes are assigned unforgeable cryptographic identity and IPC gates access to only allowed endpoints. What does it want to be? Ambitious. Cutting away latent security issues, corporate surveillance, centralized identity and data hosting, and OPEN. With the advent of the coding tools, building the things we want is a bit less of a lift. Could it replace Windows? Sure. That's where the idea was born. Secure and intuitive, in a nutshell. I've been…
Jun 2026 · github.com
- 9QO
2025 · github.com
- 10
- 11IB
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com
- 12
- 13PS
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…
Feb 2026 · github.com
- 14
- 15DI
I built an open-source malware detection daemon that monitors all running processes in real-time using ML + heuristics. No kernel modules or eBPF required. Key points: - Polls /proc for new processes (works on any Linux kernel 2.6+) - Random Forest model trained on EMBER 2018 dataset (2.3M samples) - Heuristic rules for crypto miners, ransomware, rootkits - ~20MB RAM, <1% CPU, sub-millisecond scan latency - Pure C, zero runtime dependencies - Model embedded directly in binary (50KB) Why I built this: Existing solutions either require modern kernels (eBPF) or are heavy/proprietary.…
Nov 2025 · github.com
- 16
- 17A2
I’ve been experimenting with structured logic as a way to frame search spaces — not in an academic way, just as a personal project. I wanted to know: what happens if you initialize a brute-force run with a simple equality like xy = x / y? Not as a filter, just as a logical ignition point. I used AES-256-CBC encrypted files with UUID passwords and tested against a 1 million UUID space. It cracked it in under 40 seconds. Then I scaled it to a 1 billion UUID range, and it still found the key without issue. This isn’t a crypto tool, and I’m not trying to solve any cryptographic problems.…
2025 · github.com
- 18ED
Hey HN, I’m Ilias, 19, from Paris. I built Ellipticc Drive, an open-source cloud drive with true end-to-end encryption and post-quantum security, designed to be Dropbox-like in UX but with zero access to your data, even by the host. What’s unique: Free 10GB for every user, forever. Open-source frontend (audit or self-host if you want) Tech stack: Frontend: Next.js Crypto: WebCrypto (hashing) + Noble (core primitives) Encryption: XChaCha20-Poly1305 (file chunks) Key wrapping: Kyber (ML-KEM768) Signing: Ed25519 + Dilithium2 (ML-DSA65) Key derivation: Argon2id → Master Key → encrypts all…
Oct 2025 · ellipticc.com
- 19IR
I do fullstack dev for work and side projects and recently moved everything to a couple VPSs on hetzner. Great setup, low cost, but one thing kept bugging me, how do I know if something is down without manually sshing in all the time? I tried the grafana + prometheus stack but the configuration time and seeing it use more resources than my actual apps was rough. Tried some smaller solutions too but nothing felt right. So I said screw it and built exactly what I wanted. tori is a single go binary that runs on your server, reads host metrics from /proc and /sys, monitors containers…
Feb 2026 · github.com
- 20
Post-Quantum Data Fission:Sovereign security for the Y2Q era
Apr 2026 · nanoshardguardian.com
- 21ZP
The model uses a 1024-dimensional complex Hilbert space with 32 layers of programmable Mach–Zehnder meshes (Reck architecture) and derives token probabilities directly via the Born rule. Despite using only unitary operations and no attention mechanism, a 1024×32 model achieves coherent TinyStories generation after < 1.8 hours of training on a single consumer GPU. This is Part 1 - the next step is physical implementation with $50 of optics from AliExpress.
Nov 2025 · zenodo.org
- 22QE
Hi HN, We're proud to announce the release of the Quantum Evolution Kernel! It's still an early version, so feedback is very much welcome. # What is it? Quantum evolution kernel is an open-source library designed for anyone interested in applying quantum computing to graph machine learning -- and you don’t even need a quantum computer in your living room to start using it! It has a wide range of graph machine learning applications, including prediction of molecular toxicity, as shown in the tutorial. # Why is it exciting? Quantum computing has huge potential, but it needs to be accessible…
2025 · github.com
- 23EE
Hi HN, we have recently completed a research project on how to encrypt emails with post-quantum secure algorithms as well as Forward Secrecy. We'd love to hear your feedback and discuss technical issues. The paper can be found here: https://eprint.iacr.org/2021/875
2021
- 24PC
2024 · pqc.club
Ranked by how close each launch is in meaning, then by votes. Refine with a description →