Dev tools · alternatives · 2026
24 alternatives to Mach
Stateful asset discovery CLI tool for hackers!
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…
May 2026 · github.com · its alternatives →
- 2
Daytona ▲453Secure and elastic infra for running your AI-generated code.
2025 · daytona.io · its alternatives →
- 3
Yes, it's open source: https://github.com/lissy93/web-check :) Why I'm building this? There are a lot of tools out there for discovering meta and security data relating to a website, IP or server. But currently, there isn't anything that does everything, all in one place and without a paywall/ user sign up. It's still a WIP, and I'm working on a new version, with some more comprehensive checks, so any feedback would be much appreciated :)
2024 · v1.web-check.xyz · its alternatives →
- 4
Hurl, run and test HTTP requests with plain text and curl. Hurl can run fast automated integration tests.
2021 · hurl.dev · its alternatives →
- 5
An analysis tool for Python that blurs the line between testing and type systems. - pschanely/CrossHair
2020 · github.com · its alternatives →
- 6
Add OSINT & Threat tooltips to all pages. Use any REST API!
2017 · github.com · its alternatives →
- 7
- 8
A Hacker News lookalike written in Python/Django, powering https://news.python.sc - sebst/pythonic-news
2019 · github.com · its alternatives →
- 9
I wrote this tool during an internship at Narf Industries in 2023. It's a REPL that allows for quickly developing, testing, and fuzzing for HTTP request smuggling attack payloads. I started the internship having never worked with web servers, and have now found over 100 HTTP implementation bugs. I attribute this mostly to the ease of experimentation in the Garden. REPL-oriented fuzzing is just a really good interface for finding parsing bugs. It's pretty neat to able to run a differential fuzzer, categorize and display all the discovered discrepancies, then let a human pick through them and…
2024 · github.com · its alternatives →
- 10
I wrote this tool to get familiar with CLIP model, I know many people have written similar tools with CLIP before, but I'm new to machine learning and writing a classic tool helps my study. The unusual thing with my version is, it is in pure Node.js, with the power of node-mlx, a Node.js machine learning framework. The repo in the link is mostly about implementing indexing and CLI, the code of the model implementation lives as a Node.js module: https://github.com/frost-beta/clip . Hope this helps other learners!
2024 · github.com · its alternatives →
- 11
Hi HN! Smooth CLI (https://www.smooth.sh) is a browser that agents like Claude Code can use to navigate the web reliably, quickly, and affordably. It lets agents specify tasks using natural language, hiding UI complexity, and allowing them to focus on higher-level intents to carry out complex web tasks. It can also use your IP address while running browsers in the cloud, which helps a lot with roadblocks like captchas (https://docs.smooth.sh/features/use-my-ip). Here’s a demo: https://www.youtube.com/watch?v=62jthcU705k Docs start at…
Feb 2026 · docs.smooth.sh · its alternatives →
- 12
I recently dipped my toes into bug bounty hunting and finding security flaws in web applications. As a friend of UNIX shells I was building a repertoire of command line tools to make and analyze HTTP requests. Fortunately there are already many suitable tools like curl, jq, different fuzzers and some really nice tools for specific tasks by Tom Hudson [1]. However, I disliked that the existing fuzzers were monoliths where I had no easy way of creating custom behavior or analyses. They commonly do a multitude of things: Create multiple requests using one or more wordlist, sending the request,…
2024 · github.com · its alternatives →
- 13
Karate Labs▲115Open-source platform unifying API & UI test automation
2023 · karatelabs.io · its alternatives →
- 14
- 15
Black-box fuzzer that fuzzes APIs based on OpenAPI specification. Find bugs for free! - matusf/openapi-fuzzer
2021 · github.com · its alternatives →
- 16
:newspaper: CLI to browse Hacker News. Contribute to rafaelrinaldi/hn-cli development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 17
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com · its alternatives →
- 18
2025 · github.com · its alternatives →
- 19
Hi HN, TL;DR: Collaborative notebooks for debugging your infrastructure I’m mies, founder, and CEO of Fiberplane, and I’m excited to show you what we’ve built; a real-time collaboration tool for SRE and DevOps engineers. As of today, Fiberplane is in public beta. Before Fiberplane, you’d need to cobble together information from teammates and alert tools like PagerDuty in Slack, switch to dashboard Nr. X to look at the data, screenshot it, switch back to Slack, paste, and then rinse and repeat, all while critical services were down. Then you’d do this dance all over again but now pasting…
2022 · fiberplane.com · its alternatives →
- 20GC
2020 · givemeguid.com · its alternatives →
- 21
Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
- 22
A self-contained wifi sandbox for inspecting your own IoT devices - ABGEO/mezz
May 2026 · github.com · its alternatives →
- 23
Get HN discussion for the current URL. Powered by the HN search engine at http://hn.algolia.com - nadeesha/hackertalk
2014 · github.com · its alternatives →
- 24
Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb
2022 · github.com · its alternatives →
Also compare
- Needle: We Distilled Gemini Tool Calling into a 26M Model alternatives
- Daytona alternatives
- I made tool that let's you see everything about any website alternatives
- Hurl – Run and test HTTP requests with plain text, curl and Rust alternatives
- CrossHair – SMT Assisted Testing for Python alternatives
- ThreatPinch Lookup alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →