Dev tools · alternatives · 2026
24 alternatives to Kekkai – a simple, fast file integrity monitoring tool in Go
I built a tool called *Kekkai* for file integrity monitoring in production environments. It records file hashes during deployment and later verifies them to detect unauthorized modifications (e.g. from OS command injection or tampering). Why it matters: * Many web apps (PHP, Ruby, Python, etc.) on AWS EC2 need a lightweight way to confirm their code hasn’t been changed. * Traditional approaches that rely on metadata often create false positives. * Kekkai checks only file content, so it reliably detects real changes. * I’ve deployed it to an EC2 PHP application in production, and it’s working…
Kekkai is a file integrity monitoring tool built in Go for detecting unauthorized code modifications in production environments. It records file content hashes during deployment and verifies them later to catch… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
KloudMate▲279Logs, metrics, and traces in one platform. KloudMate helps engineers find and fix issues fast. Ask the built-in AI assistant to help track down the cause.
2023 · kloudmate.com · its alternatives →
- 2KI
Hi HN, We're building Kexa.io (https://github.com/kexa-io/Kexa), an open-source tool developed in France (incubated at Euratech Cyber Campus) to help teams automate the often tedious process of verifying IT security and compliance. Keeping track of configurations across diverse assets (servers, K8s, cloud resources) and ensuring they meet security baselines (like CIS benchmarks, etc.) manually is challenging and error-prone. Our goal with the open-source core is to provide a straightforward way to define checks, scan your assets, and get clear reports on your security…
2025 · its alternatives →
- 3KI
Hey HN, As an AppSec engineer, I’ve spent a lot of time running and tunning open-source security scanners like Trivy, Semgrep, Gitleaks and Dojo. What I have found is that running them is easy, reviewing the results, not so much. Each tool outputs different JSON, false positives pile up, and CI either becomes noisy or blocks everything. So I built Kekkai (formerly Hokage), a small open-source CLI that wraps these scanners and focuses specifically on human triage. Kekkai runs the scanners in isolated Docker containers, normalizes their outputs into a single format, and provides an interactive…
Feb 2026 · its alternatives →
- 4
Every data pipeline job I had to tackle required quite a few components to set up: - One tool to ingest data - Another one to transform it - If you wanted to run Python, set up an orchestrator - If you need to check the data, a data quality tool Let alone this being hard to set up and taking time, it is also pretty high-maintenance. I had to do a lot of infra work, and while this being billable hours for me I didn’t enjoy the work at all. For some parts of it, there were nice solutions like dbt, but in the end for an end-to-end workflow, it didn’t work. That’s why I decided to build an…
2024 · github.com · its alternatives →
- 5
- 6
We built Gonzo to make log analysis faster and friendlier in the terminal. Think of it like k9s for logs — a TUI that can ingest JSON, text, or OpenTelemetry (OTLP) logs, highlight and boil up patterns, and even run AI models locally or via API to summarize logs. We’re still iterating, so ideas and contributions are welcome!
2025 · github.com · its alternatives →
- 7
0github.com is a pull request viewer that color-codes every diff line/token by how much human attention it probably needs. Unlike PR-review bots, we try to flag not just by "is it a bug?" but by "is it worth a second look?" (examples: hard-coded secret, weird crypto mode, gnarly logic, ugly code). To try it, replace github.com with 0github.com in any pull-request URL. Under the hood, we split the PR into individual files, and for each file, we ask an LLM to annotate each line with a data structure that we parse into a colored heatmap. Examples:…
Oct 2025 · 0github.com · its alternatives →
- 8
A simple utility for running exhaustiveness checks on Go "sum types." - BurntSushi/go-sumtype
2017 · github.com · its alternatives →
- 9
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 10
Hey HN, I'm really proud to share with you my new open source project: Kestra https://github.com/kestra-io/kestra I created a few years ago a successful open source AKHQ project: https://github.com/tchiotludo/akhq (renamed from KafkaHQ) which has been adopted by big companies like Best Buy, Pipedrive, BMW, Decathlon and many more. 2300 stars, 120 contributors, 10M docker downloads, much more than I expected. Now let's talk about Kestra, an infinitely scalable orchestration and scheduling platform for creating, running, scheduling and monitoring…
2022 · github.com · its alternatives →
- 11
ValidKube combines the best open-source tools to help ensure Kubernetes YAML best practices, hygiene & security.
2022 · validkube.com · its alternatives →
- 12
The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent. - cloudgraphdev/cli
2021 · github.com · its alternatives →
- 13
Helps analyze goroutines. Inspired by TDA for Java and goroutine-inspect for golang. - openziti/goroutine-analyzer
2022 · github.com · its alternatives →
- 14
Kerno▲132Hey HN! Anibal, Sean, Vlad, Maxi and Karim here we're the co-founders of Kerno (https://www.kerno.io/). We're building a zero-hassle tool to help developers monitor and troubleshoot their services in a way that makes sense. No complex rollouts, no custom infra, no tons of instrumentation, no sidecars… none of that! Just a minimum effort, out-of-the box, highly contextualized and interactive experience so you and your team can focus on shipping! We basically scan your cluster resources, build usable abstractions on top of all the kubernetes craziness, identify monitor your…
Dec 2025 · kerno.io · its alternatives →
- 15
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…
May 2026 · github.com · its alternatives →
- 16
k6 is an open-source tool and cloud service that makes load testing easy for developers and QA engineers.
2017 · k6.io · its alternatives →
- 17KI
Hi HN, We're building Kexa.io (https://github.com/kexa-io/Kexa), an open-source tool developed in France (incubated at Euratech Cyber Campus) to help teams automate the often tedious process of verifying IT security and compliance. Keeping track of configurations across diverse assets (servers, K8s, cloud resources) and ensuring they meet security baselines (like CIS benchmarks, etc.) manually is challenging and error-prone. Our goal with the open-source core is to provide a straightforward way to define checks, scan your assets, and get clear reports on your security…
2025 · its alternatives →
- 18
Hey, we built an open-source CLI in Go purposed to help you answer security questions across your cloud, code and runtime. It connects to your GitHub, GitLab, AWS, GCP, Azure & K8s using the credentials that are already in your shell, while limiting itself to read-only. The core innovation here is the trust boundary - our agent has a built-in code execution sandbox with no host or network access; it is exposed to an internal tool which we call an “action gate” that performs read-only HTTP requests to your own infrastructure. Since the cloud providers constantly expand actions and services,…
Jul 2026 · github.com · its alternatives →
- 19
Tools for observing Kubernetes resources in real time, powered by Pulumi. - pulumi/kubespy
2018 · github.com · its alternatives →
- 20
Bunge Bits summarizes long parliamentary sessions from the Kenyan National Assembly and Senate. Built with Rust, Whisper v3, and GPT-4o. Sessions are typically 3–7 hours long, mixing English and Swahili. This tool transcribes, chunks, and summarizes them to make political content more accessible and searchable for the public. https://bungebits.ke/summaries
2025 · github.com · its alternatives →
- 21
Hello Everyone, I'm excited to introduce a new open-source observability platform and would love to hear your feedback. We are aware that there are lots of open-source/commercial tools out there. However, we believe that monitoring the clusters and extracting actionable insights requires deep know-how about the tools/domain. We mainly focused on this problem. - Alaz is an eBPF agent installed on your K8s cluster as DaemonSet. Thanks to eBPF, Alaz collects traces directly from Linux kernels. This means there's no need for sidecars, instrumentations, or service restarts. - The UI not…
2023 · github.com · its alternatives →
- 22
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 23
Benchi is a CLI tool for running benchmarks and collecting metrics. It's using Docker Compose to orchestrate the infrastructure and tools being benchmarked, making it repeatable and runnable on different machines. It allows you to run the same benchmark for different tools and compare the collected results. The repository contains a simple example. For a more elaborate example see how we use Benchi to compare data pipelines running on Conduit and Kafka Connect, two data streaming tools (still work in progress): https://github.com/ConduitIO/streaming-benchmarks
2025 · github.com · its alternatives →
- 24
Traceformer.io is a web application that ingests KiCad projects or Altium netlists along with relevant datasheets, enabling LLM-based schematic review. The system is designed to identify datasheet-driven schematic issues that traditional ERC tools can't detect. Since our first launch (formerly as Netlist.io), we've made some big changes: - Full KiCad project parsing via an open-source plugin - Pass-through API pricing with a small platform fee - Automatic datasheet retrieval - ERC/DRC-style review UI - Revamped review workflow with selectable frontier models (GPT 5.2, Opus 4.5, and…
Jan 2026 · traceformer.io · its alternatives →
Also compare
- KloudMate alternatives
- Kexa.io – Open-Source IT Security and Compliance Verification alternatives
- Kekkai – Interactive security triage in the terminal alternatives
- I built an open-source data pipeline tool in Go alternatives
- KEKKAI 結界 alternatives
- Gonzo – A Go-based TUI for log analysis (OpenTelemetry/OTLP support) alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →