AI · alternatives · 2026
24 alternatives to Kexa.io – Open-Source IT Security, Compliance and AI-Powered
Hi HN, We're building Kexa.io (https://github.com/kexa-io/Kexa), an open-source tool developed in France (incubated at Euratech Cyber Campus) to help teams automate the often tedious process of verifying IT security and compliance. Keeping track of configurations across diverse assets (servers, K8s, cloud resources) and ensuring they meet security baselines (like CIS benchmarks, etc.) manually is challenging and error-prone. Our goal with the open-source core is to provide a straightforward way to define checks, scan your assets, and get clear reports on your security…
Kexa.io is an open-source tool that automates IT security and compliance verification across servers, Kubernetes, and cloud resources. It helps teams scan configurations against security baselines like CIS benchmarks… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier.
- 1KI
Hi HN, We're building Kexa.io (https://github.com/kexa-io/Kexa), an open-source tool developed in France (incubated at Euratech Cyber Campus) to help teams automate the often tedious process of verifying IT security and compliance. Keeping track of configurations across diverse assets (servers, K8s, cloud resources) and ensuring they meet security baselines (like CIS benchmarks, etc.) manually is challenging and error-prone. Our goal with the open-source core is to provide a straightforward way to define checks, scan your assets, and get clear reports on your security…
2025 · its alternatives →
- 2

Hello, I'm Patrick SZYMOWIAK and I'm happy to introduce you to Kexa, a script that will optimize your operations, easily ensure compliance and save you money through your cloud providers. I've worked in cloud solutions with Azure for 8 years and came up with a few projects by now, and today I introduce you the new solution made by us for your cloud environments. The goal : Kexa is an open-source and portable software built to simplify and enhance the cloud verification process. It's designed to support various cloud providers. It operates on a set of user-defined rules, ensuring checks and…
2023 · github.com · its alternatives →
- 3

- 4

Hey HN, I'm really proud to share with you my new open source project: Kestra https://github.com/kestra-io/kestra I created a few years ago a successful open source AKHQ project: https://github.com/tchiotludo/akhq (renamed from KafkaHQ) which has been adopted by big companies like Best Buy, Pipedrive, BMW, Decathlon and many more. 2300 stars, 120 contributors, 10M docker downloads, much more than I expected. Now let's talk about Kestra, an infinitely scalable orchestration and scheduling platform for creating, running, scheduling and monitoring…
2022 · github.com · its alternatives →
- 5

Open-source, secure environment with real-world tools for enterprise-grade agents. - e2b-dev/E2B
2023 · github.com · its alternatives →
- 6

- 7
Kodus▲145Hey everyone, Just wanted to share a quick update we just launched at Kodus. For those who don’t know it yet, Kodus is a code review agent that runs directly in your team’s Git workflow (GitHub, GitLab, Bitbucket… and now Azure DevOps as well). It helps maintain code quality and consistency by analyzing each PR based on your team’s own rules and repository standards. Support for Azure had been a common request — so if your team uses it, you can now plug Kodus right into your workflow and give it a try. Docs: https://docs.kodus.io/how_to_use/en/overview Repo:…
Oct 2025 · kodus.io · its alternatives →
- 8
KloudMate▲279Logs, metrics, and traces in one platform. KloudMate helps engineers find and fix issues fast. Ask the built-in AI assistant to help track down the cause.
2023 · kloudmate.com · its alternatives →
- 9
Kimi K2.6▲339Open-source SOTA for long-horizon coding and agent swarms
Apr 2026 · kimi.ai · its alternatives →
- 10

I built a tool called *Kekkai* for file integrity monitoring in production environments. It records file hashes during deployment and later verifies them to detect unauthorized modifications (e.g. from OS command injection or tampering). Why it matters: * Many web apps (PHP, Ruby, Python, etc.) on AWS EC2 need a lightweight way to confirm their code hasn’t been changed. * Traditional approaches that rely on metadata often create false positives. * Kekkai checks only file content, so it reliably detects real changes. * I’ve deployed it to an EC2 PHP application in production, and it’s working…
2025 · github.com · its alternatives →
- 11

Hi everyone, We’re building an open-source identity and risk management platform and we’ve just released the first chunk of code, a fully customizable KYC flow & UI, to the public. We’ve chosen to use Svelte so our flows would be lightweight (it is ~50kb gzipped). Next up: - Adding forms and components for it to be used as a full onboarding flow. - Releasing an open-source case management dashboard, for manual approval of users. - Releasing an open-source rule engine, to help automate decisions. We’d love to hear your feedback, suggestions, or any question you’ve got. And if the rest of the…
2022 · github.com · its alternatives →
- 12
Kastrafree tier, from $19.99/mo▲332Hi HN, Fernando and I built Kastra. Kastra intercepts AI agent tool calls and evaluates them against deterministic policies before they execute. We built this product to control pre- and post-inference workloads. This is aimed at developers using coding agents like Claude Code, Codex, Cursor, and OpenClaw. Kastra pushes an allow, hold, and deny decision before the action runs. You can build these policies in plain English from the web app. The interception engine evaluates the tools, targets, and parameters of every action at sub 1ms at a scale of billions of interceptions per day. We also…
Jul 2026 · kastra.ai · its alternatives →
- 13

I've built this to make it easy to host your own infra for lightweight VMs at large scale. Intended for exec of AI-generated code, for CICD runners, or for off-chain AI DApps. Mainly to avoid Docker-in-Docker dangers and mess. Super easy to use with CLI / Python SDK, friendly to AI engs who usually don't like to mess with VM orchestration and networking too much. Defense-in-depth philosophy. Would love to get feedback (and contributors: clear & exciting roadmap!), thx
2025 · github.com · its alternatives →
- 14

Every data pipeline job I had to tackle required quite a few components to set up: - One tool to ingest data - Another one to transform it - If you wanted to run Python, set up an orchestrator - If you need to check the data, a data quality tool Let alone this being hard to set up and taking time, it is also pretty high-maintenance. I had to do a lot of infra work, and while this being billable hours for me I didn’t enjoy the work at all. For some parts of it, there were nice solutions like dbt, but in the end for an end-to-end workflow, it didn’t work. That’s why I decided to build an…
2024 · github.com · its alternatives →
- 15

- 16

2019 · domino-clj.github.io · its alternatives →
- 17
Kodosumi▲167Hi Hacker News, I’m part of the team behind Kodosumi. We built it because deploying agentic services in production was much harder than building proof-of-concepts. Many frameworks let you build agents, but when you want them to run long tasks, scale across machines, or be observed/monitored reliably, things fall apart. Kodosumi is our answer to that. It’s an open-source runtime that uses Ray + FastAPI + Litestar to let you: Deploy “agents” and “flows” and expose APIs easily, with minimal config (just one YAML) Scale horizontally for bursty workloads and long-running tasks without losing…
2025 · kodosumi.io · its alternatives →
- 18

Hi HN, I’m sharing mochi.js (https://github.com/0xchasercat/mochi), a Bun-native, raw-CDP browser automation framework. It's designed to make programmatic browser use more effective by focusing on consistency and measured parity with regular traffic, purely from the JS layer, against stock Chromium. The most common forms of browser automation focus heavily on client-side line by line probes, which are mostly cosmetic. This makes people feel better but it doesn't have much relevance to actual WAF or anti-automation defences. Mochi.js focuses on what actually matters,…
May 2026 · mochijs.com · its alternatives →
- 19

Hi HN, we’re open-sourcing ktx. It’s an executable context layer that makes agents reliable on your data stack. We built it after going through the experience of building production-grade data agents for dozens of companies. If you’ve also tried building them, or simply tried using Claude Code or Codex on your data warehouse, you’ll know that accuracy is the #1 issue. Agents are great at generating valid SQL, but it’s not always correct SQL. To cite a few examples of “agents gone wrong”: - Stale column + hidden business rule: when preparing a board report, a finance analyst asks Claude Code…
May 2026 · github.com · its alternatives →
- 20

- 21

Hey, we built an open-source CLI in Go purposed to help you answer security questions across your cloud, code and runtime. It connects to your GitHub, GitLab, AWS, GCP, Azure & K8s using the credentials that are already in your shell, while limiting itself to read-only. The core innovation here is the trust boundary - our agent has a built-in code execution sandbox with no host or network access; it is exposed to an internal tool which we call an “action gate” that performs read-only HTTP requests to your own infrastructure. Since the cloud providers constantly expand actions and services,…
Jul 2026 · github.com · its alternatives →
- 22

Hello Everyone, I'm excited to introduce a new open-source observability platform and would love to hear your feedback. We are aware that there are lots of open-source/commercial tools out there. However, we believe that monitoring the clusters and extracting actionable insights requires deep know-how about the tools/domain. We mainly focused on this problem. - Alaz is an eBPF agent installed on your K8s cluster as DaemonSet. Thanks to eBPF, Alaz collects traces directly from Linux kernels. This means there's no need for sidecars, instrumentations, or service restarts. - The UI not…
2023 · github.com · its alternatives →
- 23

Hi HN! I want to share our latest project at NEXA AI. We developed AI agent foundation models designed to transform how developers create AI agent powered apps. One major challenge we've observed with current human-computer interactions is that many simple, one-step tasks become unnecessarily complex, multi-step workflows due to limitations of current GUIs. AI agents can solve this, but existing AI agent models are slow and costly. To tackle these issues, we built lightweight AI agent models based on our Octopus V2, small language models for function calling (You can learn more about our…
2024 · nexa4ai.com · its alternatives →
- 24

Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →