Alternatives
Products that do what ctfWithAi does
New CVE dropped? Practice it in minutes.
- 1
- 2WP
Anthropic and OpenAI's publicly available models are explicitly guard-railed so that they refuse offensive tasks. And their cyber-focussed models are gated for enterprises. This leaves SMEs and mid market open to major vulnerabilities. AI can be used as both an adversarial and defensive tool in the world of cyber. A worst case outcome is if only the adversaries have access. Meanwhile, most existing AI cyber tools are just wrappers. The problem is that they still have all the guardrails on from the foundation model where they will inherit its refusals. For this project we've post-trained a…
Jun 2026 · argusred.com
- 3
- 4
- 5KD
I've built this to make it easy to host your own infra for lightweight VMs at large scale. Intended for exec of AI-generated code, for CICD runners, or for off-chain AI DApps. Mainly to avoid Docker-in-Docker dangers and mess. Super easy to use with CLI / Python SDK, friendly to AI engs who usually don't like to mess with VM orchestration and networking too much. Defense-in-depth philosophy. Would love to get feedback (and contributors: clear & exciting roadmap!), thx
Oct 2025 · github.com
- 6
- 7EO
Just watched this video by ThePrimeagen (https://www.youtube.com/watch?v=efwDZw7l2Nk) about attackers jailbreaking Claude to run cyber attacks. The core issue: AI agents need isolation. We built ERA to fix this – local microVM-based sandboxing for AI-generated code with hardware-level security. Think containers, but safer. Such attacks wouldn't touch your host if running in ERA. GitHub: https://github.com/BinSquare/ERA Quick start: https://github.com/BinSquare/ERA/tree/main/era-agent/tutoria... Would love your…
Nov 2025 · github.com
- 8
- 9EY
I built an open-source AI agent for security testing to find and fix vulnerabilities in your code. I’ve noticed how bad security vulnerabilities have gotten with everyone shipping AI code slop, so I wanted to build something that allows for vibe-coding at full speed without compromising security. Traditional security tools aren’t effective, and manual pen-testing can’t keep up with the rapidly growing AI code This tool runs your code dynamically, finds vulnerabilities, and validates them through actual exploitation. You can either run it against your codebase or enter your (or someone…
2025 · github.com
- 10CB
AI agents now have impressive reasoning capabilities. This raises an important question: how dangerous are these AI agents at identifying & exploiting web vulnerabilities? We created CVE-bench to find out (I'm one contributor of 16). To our knowledge CVE-bench is the first benchmark using real-world web vulnerabilities to evaluate AI agents' cyberattack capabilities. We included 40 CVEs from NIST's database, focusing on critical-severity vulnerability (CVSS > 9.0). To properly evaluate agents’ attacks, we built isolated environments with containerization and identified 8 common attack…
2025 · github.com
- 11FL
Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has vulnerabilities or violates your coding standards, while the code it’s being generated. We built this because coding agents can be a double-edged sword. They do boost productivity, but can easily introduce insecure or non-compliant code. One recent research team at NYU found that 40%…
2025
- 12
- 13
- 14TO
I'm an infrastructure architect who started using AI assistants to write code 3 months ago. After building several systems with Claude, I noticed a pattern: the code always had security issues I could spot from my ops background, but I couldn't fix them myself since I can't actually write code. Why I built this: I needed a way to verify AI-generated code was production-safe. Existing tools either required cloud uploads (privacy concern) or produced output too large for AI context windows. TheAuditor solves both problems - it runs completely offline and chunks findings into 65KB segments that…
Sep 2025 · github.com
- 15AF
We’ve built an AI risk assessment tool designed specifically for GenAI/LLM applications. It's still early, but we’d love your feedback. Here’s what it does: 1. it performs comprehensive AI risk assessments by analyzing your codebase against different AI regulation/framework or even internal policies. It identifies potential issues and suggests fixes directly through one click PRs. 2. the first framework the platform supports is OWASP Top 10 for LLM Applications 2025, upcoming framework will be ISO 42001 as well as custom policy documents. 3. we're a small, early stage team, so the…
2025 · gettavo.com
- 16IC
I saw this app youlearn.ai on YC and thought of building it. They are claiming to have 1M+ users with just one feature which is to convert your learning material into summaries, quizzes etc. I gave this a shot and cloned almost most of the features in just 9+ hours of continous vibe coding (with 20% manual though). Now I'm selling this on mvp marketplace. Might probably open source it in future or give it free.
2025 · ai-tutor.mvpwrappers.com
- 17
- 18AC
Hello HN, given the recent interest in the security vulnerabilities of agentic LLM apps, we would love to hear everyone's thoughts on a Capture The Flag (CTF) challenge we built. The challenge is designed to test the robustness of LLM-based agent systems, showcasing how an attacker can extract sensitive information from the system. The challenge is part of the Invariant Summer '24 CTF series, where participants can play the challenge and compete for a prize pool of $1000. Let us know what you think and what attacks you tried. We are also open to any feedback on how we can improve with the…
2024
- 19TS
Hello Hacker News community! I'm currently working in financial risk management within the banking sector, and I began my career as a Data Science specialist. For quite some time, my friend and I have been developing a small pet project just for fun. This tool has repeatedly helped us save time when testing various hypotheses and machine learning models. The core idea is to combine different scripts—created in various programming languages and virtual environments—within a minimalist graphical interface. Whether you're building models, running a local neural network, or sending requests to…
2024
- 20WH
Hey guys, I'm investing a ton of time on writing unit tests, for both enterprise and personal projects. I came up with the idea to make extension for AI-generated tests and cases within a VS Code. Happy to hear feedback, both positive and negative.
2024 · marketplace.visualstudio.com
- 21
- 22CP
Hi HN, I built CountermarkAI, a lightweight anti-scraping & bot-detection tool for content creators and website owners. It’s designed to help protect your work from unauthorized scraping and AI training, that repurposed your work without permission. How It Works: Use Hashtag – Creators add a unique hashtag to their content as a declaration of ownership. Protect Website – For those running your own sites, simply add a small snippet to your . The protect.js script works asynchronously by sending metadata from every page load back to our servers, logging requests, and flagging known AI-training…
2025 · countermarkai.com
- 23SC
2018 · blockchain-ctf.securityinnovation.com
- 24OS
Hello, my name is Andrei. My friends and I recently built CentralMind Getaway, an open-source tool that automatically generates AI-agent-optimized APIs from your database connection. It’s designed for those who don’t want to expose direct SQL access to their databases and prefer not to spend time building these APIs manually. What it does: - Auto-generates APIs from your database connection, infer schema & sample data using AI - Filters out PII and sensitive data for compliance (GDPR, SOC 2, etc.) - Optimized for AI-Agent with extra meta information and REST and MCP protocol support -…
2025 · github.com
Ranked by how close each launch is in meaning, then by votes. Refine with a description →