Dev tools · alternatives · 2026
24 alternatives to Kekkai – Interactive security triage in the terminal
Hey HN, As an AppSec engineer, I’ve spent a lot of time running and tunning open-source security scanners like Trivy, Semgrep, Gitleaks and Dojo. What I have found is that running them is easy, reviewing the results, not so much. Each tool outputs different JSON, false positives pile up, and CI either becomes noisy or blocks everything. So I built Kekkai (formerly Hokage), a small open-source CLI that wraps these scanners and focuses specifically on human triage. Kekkai runs the scanners in isolated Docker containers, normalizes their outputs into a single format, and provides an interactive…
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
I built a tool called *Kekkai* for file integrity monitoring in production environments. It records file hashes during deployment and later verifies them to detect unauthorized modifications (e.g. from OS command injection or tampering). Why it matters: * Many web apps (PHP, Ruby, Python, etc.) on AWS EC2 need a lightweight way to confirm their code hasn’t been changed. * Traditional approaches that rely on metadata often create false positives. * Kekkai checks only file content, so it reliably detects real changes. * I’ve deployed it to an EC2 PHP application in production, and it’s working…
2025 · github.com · its alternatives →
- 2
I've built this to make it easy to host your own infra for lightweight VMs at large scale. Intended for exec of AI-generated code, for CICD runners, or for off-chain AI DApps. Mainly to avoid Docker-in-Docker dangers and mess. Super easy to use with CLI / Python SDK, friendly to AI engs who usually don't like to mess with VM orchestration and networking too much. Defense-in-depth philosophy. Would love to get feedback (and contributors: clear & exciting roadmap!), thx
2025 · github.com · its alternatives →
- 3
Hey HN, I am building an open source platform to make on-call better and less stressful for engineers. We are building a tool that can silence alerts and help with debugging and root cause analysis. We also want to automate tedious parts of being on-call (running runbooks manually, answering questions on Slack, dealing with Pagerduty). Here is a quick video of how it works: https://youtu.be/m_K9Dq1kZDw I hated being on-call for a couple of reasons: * Alert volume: The number of alerts kept increasing over time. It was hard to maintain existing alerts. This would lead to a lot…
2024 · github.com · its alternatives →
- 4
Hey HN, I'm really proud to share with you my new open source project: Kestra https://github.com/kestra-io/kestra I created a few years ago a successful open source AKHQ project: https://github.com/tchiotludo/akhq (renamed from KafkaHQ) which has been adopted by big companies like Best Buy, Pipedrive, BMW, Decathlon and many more. 2300 stars, 120 contributors, 10M docker downloads, much more than I expected. Now let's talk about Kestra, an infinitely scalable orchestration and scheduling platform for creating, running, scheduling and monitoring…
2022 · github.com · its alternatives →
- 5KI
Hi HN, We're building Kexa.io (https://github.com/kexa-io/Kexa), an open-source tool developed in France (incubated at Euratech Cyber Campus) to help teams automate the often tedious process of verifying IT security and compliance. Keeping track of configurations across diverse assets (servers, K8s, cloud resources) and ensuring they meet security baselines (like CIS benchmarks, etc.) manually is challenging and error-prone. Our goal with the open-source core is to provide a straightforward way to define checks, scan your assets, and get clear reports on your security…
2025 · its alternatives →
- 6
Hey, we built an open-source CLI in Go purposed to help you answer security questions across your cloud, code and runtime. It connects to your GitHub, GitLab, AWS, GCP, Azure & K8s using the credentials that are already in your shell, while limiting itself to read-only. The core innovation here is the trust boundary - our agent has a built-in code execution sandbox with no host or network access; it is exposed to an internal tool which we call an “action gate” that performs read-only HTTP requests to your own infrastructure. Since the cloud providers constantly expand actions and services,…
Jul 2026 · github.com · its alternatives →
- 7
Hi Hacker News! Shahar and Tal from Keep here. A few months ago, we introduced here at HN (https://news.ycombinator.com/item?id=34806482) Keep as an “open source alerting CLI” and got some interesting feedback - mainly around UI, automation, and supporting more tools. We were VERY early back then, and we understood that although the current DX around creating alerts is not great, it's not that critical and developers don’t need another tool just for that. But we did find something else. While talking to developers and devops, we found that a lot of companies use many tools…
2023 · github.com · its alternatives →
- 8
We built Gonzo to make log analysis faster and friendlier in the terminal. Think of it like k9s for logs — a TUI that can ingest JSON, text, or OpenTelemetry (OTLP) logs, highlight and boil up patterns, and even run AI models locally or via API to summarize logs. We’re still iterating, so ideas and contributions are welcome!
2025 · github.com · its alternatives →
- 9
AttackerView▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Feb 2026 · attackerview.com · its alternatives →
- 10KI
Hi HN, We're building Kexa.io (https://github.com/kexa-io/Kexa), an open-source tool developed in France (incubated at Euratech Cyber Campus) to help teams automate the often tedious process of verifying IT security and compliance. Keeping track of configurations across diverse assets (servers, K8s, cloud resources) and ensuring they meet security baselines (like CIS benchmarks, etc.) manually is challenging and error-prone. Our goal with the open-source core is to provide a straightforward way to define checks, scan your assets, and get clear reports on your security…
2025 · its alternatives →
- 11
Hi HN, I wanted to share my very first (insignificant) project written in Go: a little CLI tool that displays messages with an animated bunny holding a sign. I wanted to learn Go and needed a small, fun project to get my hands dirty with the language and the process of building and distributing a CLI. I've built a similar tool in JavaScript before so I thought porting it would be a great learning exercise. This was a dive into Go's basics for me, from package structure and CLI flag parsing to building binaries for different platforms (never did that on my JS projects). I'm starting to…
2025 · github.com · its alternatives →
- 12CT
Hey , So I’ve been working on a platform called Kage that helps developers sell, secure, and scale their self-hosted software. Self-hosted products are powerful, but getting paid for them, while keeping deployments secure and compliant, is a challenge. With Kage, you can: - Sell: Automatic licensing, renewals, and usage-based billing. - Secure: Prevent unauthorized use, even for enterprise deployments. - Scale: AI-powered deployment that lets customers get started with one click. I built Kage because I saw too many developers struggle to capture the value of their work. I'd love your…
2025 · kagehq.com · its alternatives →
- 13JR
Hello Hacker News! We’re Willem, Roeland, Felix and Madeline from Aikido Security (https://aikido.dev/) We’re building a “no BS’ application security platform. It’s the platform we wish existed, but couldn’t find. Willem, our CTO had to manage (application) security at many of his previous startups, and honestly, hated it. Most security tools we had to use made us feel dumb. They were super complex and riddled with false positives. Their platform was behind the book a demo button. They had intransparent pricing models and honestly charged us way too much. We think most of…
2024 · its alternatives →
- 14
Hey HN! I wanted to share an open-source project I’ve been working on called k8sAI. It’s a personal AI Kubernetes expert that can answer questions about your cluster, suggests commands, and even executes relevant kubectl commands to help diagnose and suggest fixes to your cluster, all in the CLI! As a relative newcomer to k8s, this tool has really streamlined my workflow. I can ask questions about my cluster, k8sAI will run kubectl commands to gather info, and then answer those question. It’s also found several issues in my cluster for me - all I’ve had to do is point it in the right…
2024 · github.com · its alternatives →
- 15
The open-source AIOps and alert management platform - keephq/keep
2023 · github.com · its alternatives →
- 16OS
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
2023 · openapi.security · its alternatives →
- 17
A few weeks ago I got rejected from a role and the feedback was that I needed a deeper understanding of FAISS and LlamaIndex. So I built triage.flow — an AI assistant that lets you explore and understand GitHub repositories through a chat interface. It clones a repo, indexes it using FAISS + BM25 + tree-sitter parsing, and powers a full UI where you can: - Ask natural-language questions like “how does auth work?” or “explain @src/components/Modal.tsx” - Mention specific files/folders with @filename.ts (autocomplete supported) - See how the agent thinks in real time (Thought →…
2025 · github.com · its alternatives →
- 18
Hello, I'm Patrick SZYMOWIAK and I'm happy to introduce you to Kexa, a script that will optimize your operations, easily ensure compliance and save you money through your cloud providers. I've worked in cloud solutions with Azure for 8 years and came up with a few projects by now, and today I introduce you the new solution made by us for your cloud environments. The goal : Kexa is an open-source and portable software built to simplify and enhance the cloud verification process. It's designed to support various cloud providers. It operates on a set of user-defined rules, ensuring checks and…
2023 · github.com · its alternatives →
- 19
- 20
Hey HN, Sascha here, developer of OkaiDokai. Like many others, I fell in love with OpenClaw, but was longing for more control over what it can do without interrupting its autonomous, agentic nature. OkaiDokai solves this for me by allowing me to set up my own rule set of what is allowed by default, what is not, and what it should ask permission for. It comes with a hosted API, web and native apps including push notifications (with quick-response support), plugins for OpenClaw and Claude Code, and soon Codex. I'm still working on getting the apps onto the App Store (currently on TestFlight…
Feb 2026 · okaidokai.com · its alternatives →
- 21
- 22
Find the security holes AI vibe coding tools leave behind.
Apr 2026 · its alternatives →
- 23
A couple of us started building an open-source tool after an on-call shift where a simple container restart turned into more hassle than it should. What should have been a 10-second task meant opening a laptop, connecting to a server, and running commands in the middle of the night. OpsiMate is our attempt to simplify that. It provides a single place to manage Docker containers, Kubernetes pods, and systemd services. We’re also working on integrations with monitoring tools so you can act on alerts and jump directly to dashboards. It’s still early and a bit rough, but already running in use.…
2025 · github.com · its alternatives →
- 24
pompelmi▲10Hi HN — I’m the author of pompelmi, an open-source, in-process scanner for untrusted file uploads in Node.js. Motivation: I wanted a practical “upload guard” that reduces common upload risks (ZIP bombs, traversal in archives, MIME spoofing, polyglots/macro hints) without sending files to a cloud AV service (privacy + latency + GDPR concerns). Key points: - Runs in-process (no cloud calls); files never leave your infrastructure - Deep ZIP inspection with configurable limits (depth/entries/ratio) + nested archive scanning - Composable scanners (heuristics + optional signature…
2025 · github.com · its alternatives →
Also compare
- Kekkai – a simple, fast file integrity monitoring tool in Go alternatives
- Katakate – Dozens of VMs per node for safe code exec alternatives
- I built an open-source tool to make on-call suck less alternatives
- Kestra - Open-Source Airflow Alternative alternatives
- Kexa.io – Open-Source IT Security and Compliance Verification alternatives
- Cynative Security Research Agent alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →