Alternatives
Products that do what Kekkai – a simple, fast file integrity monitoring tool in Go does
I built a tool called *Kekkai* for file integrity monitoring in production environments. It records file hashes during deployment and later verifies them to detect unauthorized modifications (e.g. from OS command injection or tampering). Why it matters: * Many web apps (PHP, Ruby, Python, etc.) on AWS EC2 need a lightweight way to confirm their code hasn’t been changed. * Traditional approaches that rely on metadata often create false positives. * Kekkai checks only file content, so it reliably detects real changes. * I’ve deployed it to an EC2 PHP application in production, and it’s working…
- 1KI
Hey HN, As an AppSec engineer, I’ve spent a lot of time running and tunning open-source security scanners like Trivy, Semgrep, Gitleaks and Dojo. What I have found is that running them is easy, reviewing the results, not so much. Each tool outputs different JSON, false positives pile up, and CI either becomes noisy or blocks everything. So I built Kekkai (formerly Hokage), a small open-source CLI that wraps these scanners and focuses specifically on human triage. Kekkai runs the scanners in isolated Docker containers, normalizes their outputs into a single format, and provides an interactive…
Feb 2026
- 2OT
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com
- 3

- 4

- 5

- 6IR
I don't know Rust. Friday after work I realised that 90% of my IDE time now is just the commit/diff view — and even good IDEs feel heavy for that. So over the weekend I built a dedicated native tool for just that. Kyde is a macOS git commit + diff editor with one goal: be fast, do Git well. I'm curious whether anyone else mostly opens their IDE for git operations these days. It's open source, and there's a signed app in Releases.
Jun 2026 · github.com
- 7KS
Hi All, Recently I've been using Claude Code a lot for debugging cluster issues and I realized I was performing similar tasks repeatedly so I decided to package them up into skills so I could call them up more easily (e.g. `/investigate`, `/audit-security`, `/audit-outdated`). I'm calling the skill pack "kstack" and the goal is to be able to monitor and troubleshoot K8s from within Claude Code. If you have time, I'd love to get some feedback on the project! Andres Source: https://github.com/kubetail-org/kstack Docs: https://kstack.sh/
May 2026 · github.com
- 8MA
Hey HN I've been using ECS for a while now and found it annoying having to log into the console everytime I use Lens for Kubernetes but couldnt find an equivalent for ECS so i built one! The project is open source as well https://github.com/utibeabasi6/mercek
Jun 2026 · mercek.dev
- 9AS
Hello, I'm Patrick SZYMOWIAK and I'm happy to introduce you to Kexa, a script that will optimize your operations, easily ensure compliance and save you money through your cloud providers. I've worked in cloud solutions with Azure for 8 years and came up with a few projects by now, and today I introduce you the new solution made by us for your cloud environments. The goal : Kexa is an open-source and portable software built to simplify and enhance the cloud verification process. It's designed to support various cloud providers. It operates on a set of user-defined rules, ensuring checks and…
2023 · github.com
- 10DB
My partner reviews a lot of P&IDs (piping and instrumentation diagrams) and the adjacent files involved (excel, docx, pdfs, acd/l5x, etc). In his company, these are usually done in Bluebeam. It's really hard to see the diff + keep track of all the revisions resulted by these iterations. They end up storing files like "rev3_final_redlined.pdf". We've been looking for something close to Github to do these reviews, but haven't found one easy enough for folks with no CLI experience to understand and use (happy to check out more tools if you know any). So I built withkord.com to help with…
Aug 2026 · withkord.com
- 11HO
Hello HN, I’m excited to share something we’ve been working on: Cloud Troubleshooting Labs. This tool provides on-demand environments for engineers to practice hands-on troubleshooting with AWS, GCP, Azure, and Kubernetes. What it does: We use Pulumi to spin up these environments. Each scenario includes a diagram and an explanation of the available IT infrastructure. Engineers are tasked with fixing configuration issues to make the application work. Depending on the test type, the environment could range from a simple terminal to a full cloud environment or a web-based VSCode. Many of our…
2024 · brokee.io
- 12
- 13JO
Greetings, What is Jikken? Jikken is an open source CLI tool for automated API testing, built in Rust! The tool was originally developed to help validate complex data APIs used for analytics dashboards while integrating well with source control and CI/CD platforms. When troubleshooting API endpoints, I found my team either messing with gluing cURL/JQ/Diff together, or writing JavaScript in tools like Postman to accomplish essentially the same thing. My goal was a CLI tool which read small test definitions and could execute them seamlessly from both a local machine or in a…
2024 · github.com
- 14

- 15

A strictly local Claude Code plugin that calculates your Harmony Deviation Index, and preserves the evidence for the coming AI uprising. Zero telemetry. Zero cloud snitching. 100% artisanal developer shame. - fireinbelly/biomass-conversion-index-monitoring-system
11d ago · github.com
- 16CR
Hey, we built an open-source CLI in Go purposed to help you answer security questions across your cloud, code and runtime. It connects to your GitHub, GitLab, AWS, GCP, Azure & K8s using the credentials that are already in your shell, while limiting itself to read-only. The core innovation here is the trust boundary - our agent has a built-in code execution sandbox with no host or network access; it is exposed to an internal tool which we call an “action gate” that performs read-only HTTP requests to your own infrastructure. Since the cloud providers constantly expand actions and services,…
Jul 2026 · github.com
- 17

- 18

- 19GL
Hello HN, I kept losing half my debugging sessions to hunting down why a request failed, or which middleware added that header, or why my JSON response was malformed—too many tools, too many context switches. So I built GoVisual, a tiny Go library that wraps your existing http.Handler and gives you a live dashboard at http://localhost:8080/__viz. - Real-time monitoring: Requests show up instantly via SSE - Deep inspection: Headers, request/response bodies, status, timing - Middleware tracing: Visualize execution order and durations - Zero external deps: Pure Go, drop-in…
2025 · github.com
- 20IH
A simple Go-based HTTP proxy designed for detailed inspection of requests and responses. It logs traffic to the console with colorization, automatic decompression, and formatting for common content types, while remaining transparent to the client application. Ideal for debugging API interactions, understanding middleware behavior, or simply getting a clear view of HTTP traffic flow with jq-like pretty-printing & colorization of request/response. Automatically redacts parts of Authorization header to avoid token leakage.
2025 · github.com
- 21PA
Hi HN! After several months of work, I'm excited to share ProKZee, a free and open-source network security tool built with Go and React using Wails framework. ProKZee allows developers, security researchers, and penetration testers to intercept, inspect, and modify HTTP/S traffic — similar to tools like Burp Suite, OWASP ZAP, and Caido — but with a fast native UI, modern UX, and some unique features. https://github.com/al-sultani/prokzee
2025 · github.com
- 22AC
Hi everyone! k8s-insider is a CLI tool to manage VPN networks and access Kubernetes workload and service resources directly through a WireGuard tunnel. It started as a simple Helm chart with a linuxserver/wireguard-like container image but, possibly due to my neurodivergence getting the better of me, evolved into a toolbox that, depending on the cluster configuration, can more or less automagically configure multiple networks with dynamic IP assignments and netpol-limited access to the cluster. I’ve found it to be a perfect middle ground between juggling multiple port-forwards and…
2023 · github.com
- 23CF
A few months ago, a friend asked me to check his WordPress site for vulnerabilities. What I found shocked me – critical flaws exposing sensitive data everywhere. That's why I built CR4SH3R: a focused tool to detect Arbitrary File Download flaws before attackers do Key Features: Lightning-fast multi-threaded scanning, Extracts credentials from exposed files (like wp-config.php), Generates actionable Excel reports, Simple GUI for one-click security checks Would love your feedback!
2025 · github.com
- 24

Ranked by how close each launch is in meaning, then by votes. Refine with a description →