nowfound

Dev tools · alternatives · 2026

24 alternatives to CloakPipe

Privacy proxy for LLM & RAG. PII → consistent pseudonyms.

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    I built this out of curiosity about what Claude Code was actually sending to the API. Turns out, watching your tokens tick up in real-time is oddly satisfying. Sherlock sits between your LLM tools and the API, showing you every request with a live dashboard, and auto-saved copies of every prompt as markdown and json.

    Jan 2026 · github.com · its alternatives →

  2. 2

    OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…

    Dec 2025 · github.com · its alternatives →

  3. 3

    Hi HN, not sure if anyone would be interested, but just wanted to share that I've been maintaining my small tool called 'lowfat' that helps me filters some of my verbose CLI output. It's a single binary, works as an agent hook or a shell wrapper. It has a plugin system to customize filters per command. The idea is pretty simple: agents don't need the full kubectl get -o yaml or any 10k-line dump to make decisions. So that lowfat sits in between, strips the noise, and passes through what matters. Here's my real report after 2 months of personal use: lowfat history --all lowfat plugin…

    Jun 2026 · github.com · its alternatives →

  4. 4

    Ditch Burp Suite’s bloat for zxc, a Rust-built, terminal-based proxy that uses tmux and Vim to intercept HTTP/S and WebSocket traffic. It captures requests for debugging, security testing, or tweaking—fast and lean. # Key Features - Disk Wizardry: Stashes massive datasets on disk-100k+ entries without breaking a sweat. - Addons: Boost your workflow with default support for ffuf and sqlmap, or craft your own addons for extra fun. - Buffer Tweaks: Edit variables in a popup (e.g., b:host, b:scheme) in Interceptor/Repeater to twist requests. - Config Control: TOML files for global…

    2025 · github.com · its alternatives →

  5. 5

    Contribute to fmeringdal/covert development by creating an account on GitHub.

    2023 · github.com · its alternatives →

  6. 6

    Send and receive emails anonymously

    2024 · cloakguru.com · its alternatives →

  7. 7AL

    Hi HN, I’m one of the maintainers of Bridge Anonymization. We built this because the existing solutions for translating sensitive user content are insufficient for many of our privacy-concious clients (Governments, Banks, Healthcare, etc.). We couldn't send PII to third-party APIs, but standard redaction destroyed the translation quality. If you scrub "John" to "[PERSON]", the translation engine loses gender context (often defaulting to masculine), which breaks grammatical agreement in languages like French or German. So we built a reversible, local-first pipeline for Node.js/Bun. Here…

    Dec 2025 · medium.com · its alternatives →

  8. 8
    Secli▲85

    A CLI to store secrets locally

    2022 · crates.io · its alternatives →

  9. 9

    Hi everyone, I built a runtime to isolate untrusted code using wasm sandboxes. Basically, it protects your host system from problems that untrusted code can cause. We’ve had a great discussion about sandboxing in Python lately that elaborates a bit more on the problem [1]. In TypeScript, wasm integration is even more natural thanks to the close proximity between both ecosystems. The core is built in Rust. On top of that, I use WASI 0.2 via wasmtime and the component model, along with custom SDKs that keep things as idiomatic as possible. For example, in Python we have a simple decorator:…

    Feb 2026 · github.com · its alternatives →

  10. 10

    What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…

    May 2026 · github.com · its alternatives →

  11. 11

    HTTP client/libcurl TUI front end in Rust, with request + key storage - PThorpe92/CuTE

    2023 · github.com · its alternatives →

  12. 12

    I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…

    2025 · github.com · its alternatives →

  13. 13

    Shmauthor here. Built this for myself, putting it out in case it's useful. Needed any URL as clean Markdown for LLM context — including Cloudflare/anti-bot sites. curl gets HTTP 403 on those, raw HTML is 80%+ nav noise eating context, paid SaaS (Firecrawl, Jina) wasn't an option for me. It's a Docker wrapper around two existing OSS tools — CloakBrowser (stealth Chromium that passes Cloudflare) and rs-trafilatura (HTML → Markdown). No new scraper, just glue. Runs locally, my URLs stay on my box Token reduction (raw curl HTML vs snitchmd, tiktoken cl100k_base): -…

    Apr 2026 · github.com · its alternatives →

  14. 14

    Block bad npm and pip packages. Before they download.

    May 2026 · veln.sh · its alternatives →

  15. 15

    Current AI-assisted CLI tools are often part of larger systems and work better on Linux. I built llm-term to address these. It's a Rust-based tool that compiles into a single binary file. You only need to download the binary, add it to your PATH, and configure your OpenAI key to get started. While llm-term offers an option for gpt-4o, it works great with gpt-4o-mini. So it's not costly. I appreciate any feedback or suggestions.

    2024 · github.com · its alternatives →

  16. 16

    crates.io serves as a central registry for sharing crates, which are packages or libraries written in Rust that you can use to enhance your projects

    Jul 2026 · crates.io · its alternatives →

  17. 17

    Batch PII anonymization with encrypted local vault

    Mar 2026 · anonym.legal · its alternatives →

  18. 18

    Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb

    2022 · github.com · its alternatives →

  19. 19

    Save 89% of wasted tokens on your AI coding agent

    Mar 2026 · rtk-ai.app · its alternatives →

  20. 20

    Raymond here from Butter.dev, an LLM response cache built as a chat-completions proxy. Today we're launching a key feature for the platform: the ability to generalize on dynamic, templated inputs. Caching at the HTTP request level has the obvious problem of generalizability. Nearly no request is identical, due to templated variables (like names) and metadata (like timestamps), so exact-match cache lookups rarely hit. We solve this at Butter by using LLMs to detect dynamic content in requests and derive their inter-relationships, allowing the cache entry to be stored as a template + variables…

    Jan 2026 · blog.butter.dev · its alternatives →

  21. 21

    I built nblm, a Rust-based toolset to automate Google’s NotebookLM Enterprise API reliably. It aims to replace brittle curl snippets with a stable interface you can use in cron/CI or agentic systems. * Python SDK (type-safe): IDE auto-complete, fewer JSON key typos, fits complex workflows. * Standalone CLI: single fast binary for scripts and pipelines. * Handles auth, batching, retries; you focus on logic. Rust core is fast and memory-safe. * Enterprise API only (consumer NotebookLM isn’t supported). Repo: https://github.com/K-dash/nblm-rs Feedback is welcome—I'm…

    Oct 2025 · github.com · its alternatives →

  22. 22IM

    Hi HN, I'm the creator of LogLens. Like many of you, I spend a lot of time digging through massive structured (mostly JSON) log files. I've always relied on grep for its speed and then piped to jq for the actual filtering, but I find this workflow gets slow and complicated, especially with multi-GB files or complex queries. LogLens is my attempt to fix this. It's a single, fast CLI tool written in Rust that's designed specifically for structured logs. It combines a simple SQL-like query language (e.g., loglens query './logs' 'level == "error" && status >= 500') with parallel,…

    Nov 2025 · getloglens.com · its alternatives →

  23. 23

    Needed this in my own work, anonymizing PII/PHI and decided to build this because presidio didn't really cut it for our use-case. Try it and maybe let me know if you have any feedback :)

    2025 · github.com · its alternatives →

  24. 24

    Scan every LLM API call for PII and injection attacks

    Jun 2026 · secure-mind-live.github.io · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →