Dev tools · alternatives · 2026
24 alternatives to Layerleak – Like Trufflehog, but for Docker Hub
layerleak the Docker Hub Secret Scanner. Contribute to Brumbelow/layerleak development by creating an account on GitHub.
Layerleak is a security scanning tool designed for developers who publish images to Docker Hub. It works similarly to Trufflehog by detecting secrets and sensitive information that may be accidentally included in… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1IB
I found it odd there wasn’t a simple web tool to scan Docker Hub images for vulnerabilities. So I built one. It’s powered by the popular open-source tool Trivy.
2023 · containercve.com · its alternatives →
- 2
Hey HN, we built Subtrace (https://subtrace.dev) to let you see all incoming and outgoing requests in your backend server—like Wireshark, but for Docker containers. It comes with a Chrome DevTools-like interface. Check out this video: https://www.youtube.com/watch?v=OsGa6ZwVxdA, and see our docs for examples: https://docs.subtrace.dev. Subtrace lets you see every request with full payload, headers, status code, and latency details. Tools like Sentry and OpenTelemetry often leave out these crucial details, making prod debugging slow and annoying. Most of the…
2025 · github.com · its alternatives →
- 3
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 4LS
2020 · lynk.sh · its alternatives →
- 5
layer▲88I built a small CLI called layer. It manages .git/info/exclude so you can keep local-only files in a repo without adding them to the shared .gitignore. This came from a normal team repo problem. People keep their own local files in a repo: API_SPEC.md, BACKEND_GUIDE.md, ARCHITECTURE_NOTES.md, CLAUDE.md, prompt files, scratch notes, temporary investigation docs, and other markdown files with custom names that are useful for one developer but should not be committed. The usual answer is “just put it in .gitignore”, but that gets messy fast because these files are different for each…
Mar 2026 · crates.io · its alternatives →
- 6
Hi HN, we're Lucas and Lucas, the authors of Layerform (https://github.com/ergomake/layerform). Layerform is an open-source tool for setting up development environments using plain .tf files. We allow each engineer to create their own "staging" environment and reuse infrastructure. Whenever engineers run layerform spawn, we use plain .tf files to give them their own "staging" environment that looks just like production. Many teams have a single (or too few) staging environments, which developers have to queue to use. This is particularly a problem when a system is large,…
2023 · github.com · its alternatives →
- 7
Hi all, I'm excited to announce Stratoshark, a sibling application to Wireshark that lets you capture and analyze process activity (system calls) and log messages in the same way that Wireshark lets you capture and analyze network packets. If you would like to try it out you can download installers for Windows and macOS and source code for all platforms at https://stratoshark.org. AMA: I'm the goofball whose name is at the top of the "About" box in both applications, and I'll be happy to answer any questions you might have.
2025 · stratoshark.org · its alternatives →
- 8
Trayce (https://github.com/evanrolfe/trayce_gui) is an open source desktop application which monitors HTTP(S) traffic to Docker containers on your machine. It uses EBPF to achieve zero-configuration sniffing of TLS-encrypted traffic. As a backend developer I wanted something which was similar to Wireshark or the Chrome network tab, but which intercepted requests & responses to my containers for debugging in a local dev environment. Wireshark is a great tool but it seems more geared towards lower level networking tasks. When I'm developing APIs or microservices I dont care…
2024 · trayce.dev · its alternatives →
- 9BO
Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…
2023 · its alternatives →
- 10
Scan Dockerfiles for security issues. Offline. Free.
Jun 2026 · deepakms.com · its alternatives →
- 11
- 12
Container Diet▲105Slim down your Docker images with AI-powered sass. 🐳💅
Nov 2025 · k1lgor.github.io · its alternatives →
- 13
SClawHub▲96Security scanner for OpenClaw AI agent skills
Feb 2026 · sclawhub.com · its alternatives →
- 14
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com · its alternatives →
- 15GF
2021 · contains.dev · its alternatives →
- 16DC
2017 · medium.com · its alternatives →
- 17
Dastardly▲57A lightweight web app security scanner for your CI pipelines
2022 · portswigger.net · its alternatives →
- 18
- 19
Contribute to fmeringdal/covert development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 20
Declaratively manage images built from a set of Dockerfiles - jbergknoff/Dockerfiler
2020 · github.com · its alternatives →
- 21
Simple inbound/outbound packet sniffer. Contribute to altilunium/lacakgrak development by creating an account on GitHub.
2024 · github.com · its alternatives →
- 22
My name is Nir! I am one of the three co-founders of arnica.io. I’ve worn many hats in cyber security over the years – sys admin, pen-tester, security architect, and Chief Information Security Officer (CISO). What really gets me excited about my work is making security easy and effective for developers and ops teams! In my last role, at one of the top 3 FinTechs, following the attack against Solarwinds, the CEO asked me what we are doing to secure our software supply chain. I met with 15+ vendors, did a few POCs, but unfortunately each solution either increased operational cost or was too…
2022 · arnica.io · its alternatives →
- 23
This project addresses the inefficiencies of traditional Dockerfile-based container builds where each customization layer creates storage bloat through duplicate dependencies from repeated apt-get install commands, network inefficiency from redundant package downloads across different images, and slow iteration cycles requiring full rebuilds of all previous steps. Our solution enables building minimal base images from scratch using debootstrap that precisely include only required components in the initial build, while allowing creation of specialized variants (Java, Kafka, etc.) from these…
2025 · github.com · its alternatives →
- 24IB
2024 · securelog.com · its alternatives →
Also compare
- I built ContainerCVE – a web tool to scan public Docker images alternatives
- Subtrace – Wireshark for Docker Containers alternatives
- KeyLeak Detector – Scan websites for exposed API keys and secrets alternatives
- Lynk – Securely expose local TCP and HTTP services to the web alternatives
- layer alternatives
- Layerform – Open-source development environments using Terraform files alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →