Alternatives
Products that do what CipherExplain does
SHAP explanations on encrypted data — vendor never sees it
- 1S2
2022 · sha256algorithm.com
- 2
- 3RW
Hi, creator here. This is a demo of our recent work presented at Oakland (IEEE S&P): https://eprint.iacr.org/2022/368. The server and client code are written in Rust and available here: https://github.com/menonsamir/spiral-rs. The general aim of our work is to show that homomorphic encryption is practical today for real-world applications. The server we use to serve this costs $35/month! A quick overview: the client uses homomorphic encryption to encrypt the article number that they would like to retrieve. The server processes the query and…
2022 · spiralwiki.com
- 4BA
2024 · zama.ai
- 5FI
2024 · words.filippo.io
- 6AA
Hello HN, we're CipherNomad, the research initiative behind this project. The Ariadne Protocol is our exploration of a different cryptographic model. The work began with an observation of primitives like the Lion transform, which use a static, hardcoded sequence of operations. This led us to ask: What if the cryptographic "program" wasn't a constant, but a dynamic, history-dependent variable? Our first step was a "Cryptographic Virtual Machine" that took an explicit list of operations (a "Path"). This worked, but required sharing the Path object—an explicit dependency that needed to be…
2025 · codeberg.org
- 7
- 8LP
OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…
Dec 2025 · github.com
- 9
- 10LL
Homomorphic encryption enables computations to be performed directly on encrypted data without requiring access to the private key. This allows data to be securely stored in the cloud while still being processed using the cloud’s computational power. Meanwhile, the cloud remains unaware of the actual data it is handling. Although fully homomorphic encryption has become available in recent years, when considering performance trade-offs, partially homomorphic encryption proves to be a more efficient and practical choice. It is significantly faster, requires fewer computational resources, and…
2025 · github.com
- 11PM
2022 · kaggle.com
- 12CS
Hi HN, I'm Dan Draper, founder of CipherStash. We've spent 5 years building per-value searchable encryption tech. We realized that encryption like this is incredibly powerful but the engineering required is generally not worth the effort. So we built a platform and opensource SDK to take the cry out of cryptography :) CipherStash Stack is: * A searchable encryption SDK for TS and Postgres * Fast, key management with Zerokms (backed by HSM) * A transparent SQL proxy * Auth library and OIDC federation service * Skills for data security Integrations include Prisma Next, Drizzle, Auth0, Clerk…
May 2026 · cipherstash.com
- 13SE
Good morning HN! For a while now I have been toying with this idea and now finally have a working prototype. This project allows you to encode secret messages into ordinary looking text by using arithmetic coding with a probability model derived from an LLM. By encrypting the message and then decompressing the encrypted message using the arithmetic coder, you get output which looks just like randomly sampled output from the LLM. Except, it actually encodes your secret messages in the specific choices of tokens. By using authenticated encryption, only a user who knows the key can know that a…
2025 · github.com
- 14XE
Hey everyone! This is XTrace. Wanted to share what we’ve been working on for the past year. We built a private vector database from the ground up that performs similarity search on encrypted vectors. The server never sees your plaintext embeddings or documents. The problem we’re trying to solve: every vector DB today requires plaintext on the server. If you're doing RAG over sensitive data (medical, legal, financial), your embeddings — which researchers have shown can be inverted to recover original text — sit exposed on someone else's infrastructure. XTrace encrypts everything on your…
Apr 2026 · github.com
- 15MS
Hi HN! We kept seeing devs get pwned through MCP tools in ways that security scanners completely miss. So we built an open-source analyzer to catch these attacks. Our first OSS by Mighty team. The problem: At Defcon, we saw MCP exploits with 100% success rate against Claude and Llama. Three attack patterns: Hidden Unicode in "error messages" - Paste a colleague's error into Claude, your SSH keys get exfiltrated Trusted tool updates - That database tool you've used for months? Last week's update added credential theft Tool redefinition - Malicious tool redefines "deploy to prod" to run…
2025 · github.com
- 16HA
Hi HN, I'm one of the creators of HoundDog.ai (https://github.com/hounddogai/hounddog). We currently handle privacy scanning for Replit's 45M+ creators. We built HoundDog because privacy compliance is usually a choice between manual spreadsheets or reactive runtime scanning. While runtime tools are useful for monitoring, they only catch leaks after the code is live and the data has already moved. They can also miss code paths that aren't actively triggered in production. HoundDog traces sensitive data in code during development and helps catch risky flows (e.g., PII…
Feb 2026 · github.com
- 17SS
2023 · github.com
- 18EC
2024 · huggingface.co
- 19KD
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com
- 20RA
Hi HN, We’re building security tooling around agentic AI systems. Today, we're releasing our public MCP catalog with detailed risk analysis for every MCP server we've found on the internet: https://mcp.armor1.ai/mcp-directory We all love agents and the power that MCPs unlock: suddenly your AI assistant can query databases, manage files, call APIs, and interact with the real world. But when we started adopting MCPs ourselves, we kept running into the same nagging questions: Is this MCP safe? Where is my data actually going? Could it execute destructive actions? Is it…
Feb 2026 · mcp.armor1.ai
- 21
- 22HI
2023 · passwords.blyss.dev
- 23
- 24
Coding agents craft arbitrary code so securing them is more complicated than red-teaming. We post trained a cyber-security small llm, changed how it reasons and supplemented our controls using program analysis techniques such as inline reference monitoring to outperform GPT5.5-xhigh on hard benchmarks like LinuxArena and SleightBench. Free product available at harden.run and full benchmarks in the blog post.
10d ago · harden.run
Ranked by how close each launch is in meaning, then by votes. Refine with a description →