nowfound

Alternatives

Products that do what EDAMAME Security does

Axios / LiteLLM hacks behavioral detector app for Mac/PC

  1. 1

    Boost enterprise app security with automated AI pentesting

    2024

  2. 2KD

    I've built this to make it easy to host your own infra for lightweight VMs at large scale. Intended for exec of AI-generated code, for CICD runners, or for off-chain AI DApps. Mainly to avoid Docker-in-Docker dangers and mess. Super easy to use with CLI / Python SDK, friendly to AI engs who usually don't like to mess with VM orchestration and networking too much. Defense-in-depth philosophy. Would love to get feedback (and contributors: clear & exciting roadmap!), thx

    Oct 2025 · github.com

  3. 3

    Open-source LLM tracing for agent visibility

    Mar 2026 · breadcrumb.sh

  4. 4

    Trace LLM requests + costs with OpenTelemetry monitoring

    Oct 2025

  5. 5

    Real-time insights into potential breaches and data leaks

    2019

  6. 6KD

    I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

    Nov 2025 · github.com

  7. 7

    LLM-usage observability and monitoring tool

    2025

  8. 8

    Find out when hackers steal your data or leak your identity

    2018

  9. 9AR

    Hi HN, I built this open-source LLM red teaming tool based on my experience scaling LLMs at a big co to millions of users... and seeing all the bad things people did. How it works: - Uses an unaligned model to create toxic inputs - Runs these inputs through your app using different techniques: raw, prompt injection, and a chain-of-thought jailbreak that tries to re-frame the request to trick the LLM. - Probes a bunch of other failure cases (e.g. will your customer support bot recommend a competitor? Does it think it can process a refund when it can't? Will it leak your user's address?) -…

    2024 · promptfoo.dev

  10. 10AM

    I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!

    2025 · prompt-injector.blueprintlab.io

  11. 11IM
  12. 12OS

    Hello everyone I wanted to share a project I've been working on that I think you'll find really interesting. It's called Beelzebub, an open-source honeypot framework that uses LLMs to create incredibly realistic and dynamic deception environments. By integrating LLMs, it can mimic entire operating systems and interact with attackers in a super convincing way. Imagine an SSH honeypot where the LLM provides plausible responses to commands, even though nothing is actually executed on a real system. The goal is to keep attackers engaged for as long as possible, diverting them from your real…

    2025

  13. 13

    Security observability for startups without the complexity.

    Feb 2026 · litesoc.io

  14. 14JR

    Hello Hacker News! We’re Willem, Roeland, Felix and Madeline from Aikido Security (https://aikido.dev/) We’re building a “no BS’ application security platform. It’s the platform we wish existed, but couldn’t find. Willem, our CTO had to manage (application) security at many of his previous startups, and honestly, hated it. Most security tools we had to use made us feel dumb. They were super complex and riddled with false positives. Their platform was behind the book a demo button. They had intransparent pricing models and honestly charged us way too much. We think most of…

    2024

  15. 15IX

    Hello HN! Deploying the next-generation of security telemetry technologies to production is hard, so I’m building Impulse, a fully automated XDR platform that leverages tools like Osquery and eBPF to provide real-time threat detection & integrity monitoring for servers and workstations. It detects malware from behavioural patterns rather than signatures and enables deeper visibility than legacy tools. Impulse agents can be deployed on any device or VM running Linux such as cloud VMs in VPC networks, VPS servers or personal workstations and IoTs. In terms architecture, it is organised around…

    2024 · github.com

  16. 16OS

    tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…

    2023 · openapi.security

  17. 17IB

    Hi HN, I’m the creator of Cordum. I’ve been working in DevOps and infrastructure for years (currently in the fintech/security space), and as I started playing with AI agents, I noticed a scary pattern. Most "safety" mechanisms rely on system prompts ("Please don't do X") or flimsy Python logic inside the agent itself. If we treat agents as autonomous employees, giving them root access and hoping they listen to instructions felt insane to me. I wanted a way to enforce hard constraints that the LLM cannot override, no matter how "jailbroken" it gets. So I built Cordum. It’s an open-source…

    Jan 2026 · github.com

  18. 18

    Guard your AI from prompt attacks, harmful content, and PII

    Feb 2026

  19. 19
    Axiom11

    Local desktop sandbox engine against Client-Side Scanning

    Jul 2026 · gabrielgigitashvili044-pixel.github.io

  20. 20

    An automated security check for apps built with Bolt, Cursor or v0. Plain-English findings and a copy-paste fix. No jargon, no terminal.

    17d ago · sentrint.com

  21. 21

    Monitoring & Alerting layer for Agentic frameworks

    Mar 2026 · openalerts.dev

  22. 22
    Axiom2

    Real time security for AI and LLM applications

    Jan 2026

  23. 23

    #cybersecurity, #api, #developer-tools, #macos

    Jul 2026 · github.com

  24. 24SA

    Hi HN, A few weeks ago, we stealth launched SEC Insights on Product Hunt and were thrilled to reach the top 5! What is SEC Insights? It harnesses the Retrieval Augmented Generation (RAG) capabilities of LlamaIndex to provide answers about SEC 10-K & 10-Q documents. The enthusiastic reception we received on Product Hunt prompted us to open-source our project. Now, developers can use our project either as a reference or they can fork it entirely for their LLM-powered applications. We at LlamaIndex built this to help developers move their LLM app ideas from prototype to production. We're very…

    2023 · github.com

Ranked by how close each launch is in meaning, then by votes. Refine with a description →