Life & fun · alternatives · 2026
24 alternatives to I built a tool that detects bad cases of the Log4j vulnerability
Free defensive Log4Shell tools. Scan logs for CVE-2021-44228 JNDI exploitation attempts (including obfuscated payloads) and check whether a Log4j version is vulnerable.
Log4Shell.tools is a detection tool designed to identify instances of the Log4j vulnerability. It helps security teams and developers scan for and locate problematic configurations of Log4j in their systems. The tool… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. I built a tool that detects bad cases of the Log4j vulnerability launched in 2021; newer entries below may have overtaken it.
- 1
Unlogged▲658Open Source tool for mocking, testing & optimising
2024 · plugins.jetbrains.com · its alternatives →
- 2
Browser extension to prevent Log4J exploits against services running on private network and localhost. - paladincyber/log4jprotector
2021 · github.com · its alternatives →
- 3
Secure Audit Log▲272Log important application events with a single line of code
2023 · pangea.cloud · its alternatives →
- 4
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 5
- 6RA
2017 · beta.secureit.io · its alternatives →
- 7
If you've built any web-based app in the last 15 years, you probably used something like Datadog, New Relic, Sentry, etc. to monitor and trace your app, right? Why should it be different when the app you're building happens to be using LLMs? So today we're open-sourcing OpenLLMetry-JS. It's an open protocol and SDK, based on OpenTelemetry, that provides traces and metrics for LLM JS/TS applications and can be connected to any of the 15+ tools that already support OpenTelemetry. Here's the repo: https://github.com/traceloop/openllmetry-js A few months ago we launched…
2024 · github.com · its alternatives →
- 8
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 9
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 10
This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
2025 · github.com · its alternatives →
- 11
JSProbeX▲8Pentesting tool to extract secrets & URLs from JS files
2024 · github.com · its alternatives →
- 12
A terminal-only version of Sumo written in Go. Contribute to SumoLogic/sumoshell development by creating an account on GitHub.
2015 · github.com · its alternatives →
- 13
World's Largest Exploit Database
2023 · exploit.observer · its alternatives →
- 14
Did you know that VSCode extensions run with full access to your system—including file system, network, and credentials? Worse, dozens of malicious extensions have already made it into the marketplace, silently compromising devices. I am a security researcher and student developer who ran into this problem myself. To help tackle this, I built a 100% free tool (no login required) that scans VSCode (and Cursor/Windsurf) extensions for: - Hidden malware and obfuscated code - Dangerous permissions and API misuse - Vulnerable dependencies and suspicious network connections Users have already…
2025 · vscan.dev · its alternatives →
- 15
- 16PS
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack. As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside…
2024 · its alternatives →
- 17WT
2016 · android.fallible.co · its alternatives →
- 18
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…
May 2026 · github.com · its alternatives →
- 19
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb
2022 · github.com · its alternatives →
- 20
A few months ago, a friend asked me to check his WordPress site for vulnerabilities. What I found shocked me – critical flaws exposing sensitive data everywhere. That's why I built CR4SH3R: a focused tool to detect Arbitrary File Download flaws before attackers do Key Features: Lightning-fast multi-threaded scanning, Extracts credentials from exposed files (like wp-config.php), Generates actionable Excel reports, Simple GUI for one-click security checks Would love your feedback!
2025 · github.com · its alternatives →
- 21
I’ve lost count of how many times a junior engineer accidentally pushed something into a dev branch that either contained secrets/credentials etc. or that leaked those into logs/std. out. Secure-log prevent logging for apps on production, scan for Secrets and remove them from logging. No more console.log().
2024 · github.com · its alternatives →
- 22
An awesome list of OSS developer-first security tools - boxyhq/awesome-oss-devsec
2022 · github.com · its alternatives →
- 23
10 JS tools that catch bugs before your code review does
Jul 2026 · jscodecraft-next.netlify.app · its alternatives →
- 24
Hey HN We’ve been building Logdash as a lightweight observability tool for side projects and prototypes. Most logging/metrics tools (Prometheus, Grafana, ELK...) are amazing, but feel like overkill when you're just hacking on something small. Logdash gives you: - Real-time logs and custom metrics - Zero config (no YAML, no setup) - One tiny SDK to drop in - Hosted UI with live dashboards We use Logdash to monitor Logdash — our own prod dashboard is public here: https://logdash.io/demo-dashboard Would love feedback, ideas, or questions!
2025 · logdash.io · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →