Dev tools · alternatives · 2026
24 alternatives to Datree 2.0
Enforce best practices and security policies on every commit
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Datree 2.0 launched in 2020; newer entries below may have overtaken it.
- 1
- 2DY
Hi HN, I’m Shimon, the co-founder of Datree: A policy management solution for Kubernetes. We help DevOps engineers prevent misconfigurations in their Kubernetes by enforcing an organizational policy on their clusters. Engineers can define a custom policy or use one of Datree’s built-in policies, such as NIST/NSA Hardening Guide, EKS Security Best Practices, CIS Benchmark, and more. Our website is at https://datree.io and our GitHub is here: https://github.com/datreeio/datree This is not the first time I have shown Datree to the HN community: A little over a…
2023 · its alternatives →
- 3DY
Hi HN, this is Shimon and Eyar of Datree (https://www.datree.io/). When I was an Engineering Manager of Infrastructure at ironSource (NASDAQ:IS) for 400 developers, a developer made a mistake, causing a misconfiguration to reach production, which caused major problems for the company's infrastructure. Mistakes happen all the time - you learn from them and hope to never make them again. But how can we prevent a production issue from recurring, or, how about a bigger challenge — how can you prevent the next one from the get-go? In our case, we tried sending emails to our devs,…
2021 · its alternatives →
- 4
- 5
Skip migration and launch MCP with built-in Auth
Nov 2025 · arcade.dev · its alternatives →
- 6
Hi HN, I'm Hugo. I've been building Rocky over the past month, shipping fast in the open. The binary is on GitHub Releases, `dagster-rocky` on PyPI, and the VS Code extension on the Marketplace. I held off on a broader announcement until the trust-system surface was coherent enough to talk about as one thing. The governance waveplan — column classification, per-env masking, 8-field audit trail on every run, `rocky compliance` rollup, role-graph reconciliation, retention policies — landed end-to-end last week in engine-v1.16.0 and rounded out in v1.17.4 (tagged 2026-04-26). That's the…
Apr 2026 · github.com · its alternatives →
- 7
Sym▲123Secure your production infrastructure without slowing down
2023 · symops.com · its alternatives →
- 8DA
2018 · dotmesh.com · its alternatives →
- 9
Keypup 2.0▲74Development streamlining & get pull requests under control
2021 · keypup.io · its alternatives →
- 10
Monitor NuGet and NPM packages in your repositories
2021 · its alternatives →
- 11
Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
2025 · github.com · its alternatives →
- 12
- 13
Develop faster, eliminate complexity, protect your secrets
2022 · 1password.com · its alternatives →
- 14
A curated database of insecure Python packages. Contribute to pyupio/safety-db development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 15
PACE▲88The new OS data security engine, write data policies as code
2024 · github.com · its alternatives →
- 16
SafeDep Vet▲72GitLab CI Component that lets you seamlessly protect your pipelines from vulnerable and malicious open source dependencies. The component integrates directly into your CI/CD workflow through the GitLab CI Catalog and allows you to establish policy-driven guardrails using Common Expression Language (CEL). Key features: - Set your own opinionated security policies as code using CEL - Detect and block risky OSS components before they enter your codebase - Seamless integration as a native GitLab CI Component - Available directly in the GitLab CI Catalog Try and lets us know our thoughts!
2023 · safedep.io · its alternatives →
- 17FL
Hi HN! We just launched Codacy Guardrails, an IDE extension with a CLI for code analysis and MCP server that enforces security & quality rules on AI-generated code in real-time. It hooks into AI coding assistants (like VS Code Agent Mode, Cursor, Windsurf), silently scanning and fixing AI-suggested code that has vulnerabilities or violates your coding standards, while the code it’s being generated. We built this because coding agents can be a double-edged sword. They do boost productivity, but can easily introduce insecure or non-compliant code. One recent research team at NYU found that 40%…
2025 · its alternatives →
- 18
I’ve been tinkering with what a “multi-agent IDE” should look like if your day-to-day workflow is mostly in terminal (Claude Code, OpenAI Codex, etc.). The more I played with it, the more it collapsed into three fundamentals: * A good TUI: Terminal is the center stage, with other stuff (CodeEdit, Diff, Review) baked on the side. I don’t like piping Agent’s output through some electron wrapper, here you get to run CC/Codex/Droid/Amp/etc directly. * Isolation: agents shouldn’t step on each other’s toes. The simplest primitive I’ve found is Git worktrees. It is not as…
Jan 2026 · agentastic.dev · its alternatives →
- 19
We’ve been building visual rule engines (clear spreadsheet interfaces -> API endpoints that map incoming data to a large number of potential outcomes), and had the fun idea lately to see what happens when we use our decision table UI with Claude’s PreToolUse hook. The result is a surprisingly useful policy/gating layer– these tables let your team: - Write conditional, exception-friendly policies beyond globs/prefixes (e.g. allow rm -rf only in */node_modules/*, deny / or $HOME, ask if --force or network call; gate kubectl delete / SQL DROP with a clear reason) -…
Jan 2026 · github.com · its alternatives →
- 20
deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server. It calls public package registry and OSV APIs directly; there is no hosted deptrust service. I built this because AI coding agents kept suggesting outdated or vulnerable package versions. I kept having to manually tell tools like Claude and Codex to use newer, safer versions. deptrust gives the agent a quick way to verify whether a…
Jul 2026 · github.com · its alternatives →
- 21
Beads tables (Steve Yegge's) for issue tracking. Can view git trees, terminals, issue tables, notes, and files all on one screen. Can connect multiple machines via private network (like tailscale) I had this issue where i really did not like the when i had many terminals open at the same time - when you try to code with 6+ agents at the same time, across, say, 3 projects, you get huge context fragmentation. I am a visual person, and its way easier for me to remember where things are if I placed them there - I build this 2D canvas for myself initially and then decided to open-source - the…
Aug 2026 · github.com · its alternatives →
- 22
Data governance for secure cross-border data flows
Aug 2026 · policy-mesh.vercel.app · its alternatives →
- 23
Linter for dangerous Postgres migration patterns in Diesel and SQLx. Prevents downtime caused by unsafe schema changes. - ayarotsky/diesel-guard
Dec 2025 · github.com · its alternatives →
- 24
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
Also compare
- Datree alternatives
- Datree (YC W20) – End-to-End Policy Management for Kubernetes alternatives
- Datree (YC W20): Prevent K8s misconfigurations from reaching production alternatives
- Warestack alternatives
- Secure MCP Framework by Arcade.dev alternatives
- Rocky – Rust SQL engine with branches, replay, column lineage alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →