Alternatives
Products that do what IronWall Protocol does
Stop bots without CAPTCHA. 3KB Client-Side Proof of Work.
- 1
- 2IP
The stack: two agents on separate boxes. The public one (nullclaw) is a 678 KB Zig binary using ~1 MB RAM, connected to an Ergo IRC server. Visitors talk to it via a gamja web client embedded in my site. The private one (ironclaw) handles email and scheduling, reachable only over Tailscale via Google's A2A protocol. Tiered inference: Haiku 4.5 for conversation (sub-second, cheap), Sonnet 4.6 for tool use (only when needed). Hard cap at $2/day. A2A passthrough: the private-side agent borrows the gateway's own inference pipeline, so there's one API key and one billing relationship…
Mar 2026 · georgelarson.me
- 3SA
Alright so if you run a self-hosted blog, you've probably noticed AI companies scraping it for training data. And not just a little (RIP to your server bill). There isn't much you can do about it without cloudflare. These companies ignore robots.txt, and you're competing with teams with more resources than you. It's you vs the MJs of programming, you're not going to win. But there is a solution. Now I'm not going to say it's a great solution...but a solution is a solution. If your website contains content that will trigger their scraper's safeguards, it will get dropped from their data…
Dec 2025 · github.com
- 4
- 5
- 6LP
OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…
Dec 2025 · github.com
- 7ST
A fast SOCKS5 proxy that tunnels your traffic through what looks like normal SMTP email, bypassing Deep Packet Inspection firewalls. How it works: - Client runs a local SOCKS5 proxy (127.0.0.1:1080) - Traffic is sent to server disguised as SMTP (EHLO, STARTTLS, AUTH) - DPI sees legitimate email session, not a VPN/proxy Features: - One-liner install on any Linux VPS - Multi-user with per-user secrets and IP whitelists - Auto-generated client packages (just double-click to run) - Auto-reconnect on connection loss - Works with any app that supports SOCKS5 Tech: Python/asyncio, TLS…
Jan 2026 · github.com
- 8
- 9AO
This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
Oct 2025 · github.com
- 10DA
2024 · github.com
- 11
- 12
Turn your machine into a URL. Peer-to-peer over WebRTC -- no account, no client to install, no port forwarding. - richlegrand/bitbang-cli
Jul 2026 · github.com
- 13
- 14RC
I built Nocaptcha after getting frustrated with traditional CAPTCHAs both as a user and developer. WebAuthn passkeys offered a promising alternative that's both more secure and user-friendly. What makes Nocaptcha different: - Uses WebAuthn standard instead of puzzle-solving - No need for users to remember passwords or solve puzzles - Open source Current limitation: Working with W3C WebAuthn Community Group on true passkey disposal for this use case. Looking for feedback particularly on: 1. Integration experience 2. User experience compared to traditional CAPTCHAs
2024 · github.com
- 15
- 16AL
Hi HN, I’m one of the maintainers of Bridge Anonymization. We built this because the existing solutions for translating sensitive user content are insufficient for many of our privacy-concious clients (Governments, Banks, Healthcare, etc.). We couldn't send PII to third-party APIs, but standard redaction destroyed the translation quality. If you scrub "John" to "[PERSON]", the translation engine loses gender context (often defaulting to masculine), which breaks grammatical agreement in languages like French or German. So we built a reversible, local-first pipeline for Node.js/Bun. Here…
Dec 2025 · medium.com
- 17XA
I've launched the new product, xhr.dev (https://xhr.dev/) The initial product is a 1 line code integration that does bot detection avoidance via a forward proxy. Ideal customer is someone who gets blocked by anti-bot defences like cloudflare or other captcha challenges. Usually these customers have web scraping use cases. You can view our historical performance on our status page (https://status.xhr.dev). ty v much, john
2024 · xhr.dev
- 18RC
2021 · repowcha.com
- 19CH
There is a growing number of companies offering anti-bot protection SaaS to protect websites from scraping by automated bots based on Puppeteer/Selenium. Most of them rely on browser properties such as headers, javascript properties (window., navigator.), behavior analysis, to build device/user fingerprints and match it against a database of "whitelisted" fingerprints (typical user behavior/settings/device props etc). For the past few months, together with two other devs I have worked on a customized Puppeteer/Playwright scraping backend. It's essentially a drop-in…
2021
- 20HR
I recently came across an amazing post that really emphasizes the dangers associated with installing npm packages. It seems that every week a new supply chain attack occurs. In my opinion, the existing solutions for this don't quite cut it so I decided to create a library which provides runtime protection for Node. It currently protects against: - Unauthorized file system access - Unauthorized network access - Unauthorized command execution - (by way of exec/spawn) I just released the first beta version of the library and I'd love to hear what you guys think. Note: Protection is still…
2022 · github.com
- 21
- 22IB
I'm a solo dev. A few years ago, I got addicted to Reddit. Spent months in that loop. Being a programmer, I thought I'd be clever. Redirected Reddit's domain to nowhere in my DNS file. Worked great until I'd just... open the file and undo it 20 minutes later. So I made it irreversible. Locked the DNS file so it can't be edited unless I boot my Mac in safe mode. And if I do that, there's a script that instantly locks it again. Haven't used Reddit since last year. Problem solved, right? Wrong. I just replaced Reddit with Twitch and YouTube. Started keeping streams running in the background…
Nov 2025 · chromewebstore.google.com
- 23
- 24SA
I was curious about how tools like 12ft.io worked, so I built an open-source tool to bypass paywalls and generate AI summaries of articles. Built with Next.js 13, Server Actions, shadcn/ui, and React Server Components, it's designed for efficiency and ease of use. Check it out and contribute on GitHub!
2023 · smry.ai
Ranked by how close each launch is in meaning, then by votes. Refine with a description →