AI · alternatives · 2026

24 alternatives to nukon-pi-detect

Tiny, offline prompt-injection scanner for CI pipelines

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

1
Mozilla 0DIN AI Scanner▲80
Scan any LLM chatbot for vulnerabilities
Apr 2026 · github.com · its alternatives →
2
I made a library for LLM prompt injection/exploit/jailbreak detection▲11
Ultra-fast, low latency LLM prompt injection/jailbreak detection ⛓️ - arekusandr/last_layer
2024 · github.com · its alternatives →
3AM
A minimal TS library that generates prompt injection attacks▲33
I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!
2025 · prompt-injector.blueprintlab.io · its alternatives →
4
Stun LLMs with thousands of invisible Unicode characters▲206
I made a free tool that stuns LLMs with invisible Unicode characters. *Use cases:* Anti-plagiarism, text obfuscation against LLM scrapers, or just for fun! Even just one word's worth of “gibberified” text is enough to block most LLMs from responding coherently.
Nov 2025 · gibberifier.com · its alternatives →
5
A simple, highly commented, rootkit which attacks GCC and Python▲94
2014 · github.com · its alternatives →
6
LLMs can be susceptible to a new kind of malware▲17
New ways of breaking app-integrated LLMs . Contribute to greshake/llm-security development by creating an account on GitHub.
2023 · github.com · its alternatives →
7AL
A local-first, reversible PII scrubber for AI workflows▲38
Hi HN, I’m one of the maintainers of Bridge Anonymization. We built this because the existing solutions for translating sensitive user content are insufficient for many of our privacy-concious clients (Governments, Banks, Healthcare, etc.). We couldn't send PII to third-party APIs, but standard redaction destroyed the translation quality. If you scrub "John" to "[PERSON]", the translation engine loses gender context (often defaulting to masculine), which breaks grammatical agreement in languages like French or German. So we built a reversible, local-first pipeline for Node.js/Bun. Here…
Dec 2025 · medium.com · its alternatives →
8
Mugiwara Security▲16
Proves vulnerabilities before reporting them.
Aug 2026 · dashboard-seven-self-13.vercel.app · its alternatives →
9
I built a PR listener and ruleset to detect malicious code in CI/CD▲13
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
10
PromptGuard▲3
Every other gateway is detect-and-block. You don't get a security grade. You don't get red team in CI. We built the one that does. PromptGuard is a proxy: change your base URL (one line with our SDK, or a few lines without), and every request gets checked for prompt injection, PII leaks, jailbreaks, and abuse. 20+ threat vectors, 39+ PII types. We also ship a red team suite and an autonomous agent that mutates attacks to find bypasses - you get a grade (A-F) and a GitHub Action that runs these tests on every PR. So you see where you're weak before you ship. Works with OpenAI, Anthropic,…
Dec 2025 · promptguard.co · its alternatives →
11
KeyLeak Detector – Scan websites for exposed API keys and secrets▲30
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
12
A Mutating Webhook to automatically strip PII from K8s logs▲25
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…
May 2026 · github.com · its alternatives →
13
Keep large tool output out of LLM context: 3x accuracy 95% fewer tokens▲10
LLM agents often place raw JSON tool outputs directly in the prompt. After a few tool calls, earlier results get compacted or truncated and answers become incorrect or inconsistent. I built Sift, a drop-in MCP gateway that stores tool outputs as local artifacts (filesystem blobs indexed in SQLite) and returns an `artifact_id` plus compact schema hints when responses are large or paginated. Instead of reasoning over full JSON in the prompt, the model runs a small Python query: def run(data, schema, params): return max(data, key=lambda x: x["magnitude"])["place"] Query code runs in a…
Mar 2026 · github.com · its alternatives →
14
Patrei API that blocks prompt injection▲6
Just stop jailbreaks & prompt hacks with one API call.
2025 · expireddomains.com · its alternatives →
15
pompelmi▲10
Hi HN — I’m the author of pompelmi, an open-source, in-process scanner for untrusted file uploads in Node.js. Motivation: I wanted a practical “upload guard” that reduces common upload risks (ZIP bombs, traversal in archives, MIME spoofing, polyglots/macro hints) without sending files to a cloud AV service (privacy + latency + GDPR concerns). Key points: - Runs in-process (no cloud calls); files never leave your infrastructure - Deep ZIP inspection with configurable limits (depth/entries/ratio) + nested archive scanning - Composable scanners (heuristics + optional signature…
2025 · github.com · its alternatives →
16
PwnScan▲8
For at least a few years (since before COVID), in my circle everbody wants an AI tool that finds vulnerabilities in binaries. I have my reservations about such a tool because of my perception that AI is overhyped, so I decided to build one myself to see how useful it could be (or not). I was actually kinda surprised how well it worked for my collection of binaries with known CVEs. It definitely has false positives and negatives, as any static analysis tool would, but I think its actually somewhat usable. I dont think the results are super actionable, but interesting nonetheless. I still…
2025 · pwnscan.com · its alternatives →
17
PromptBrake▲6
Find AI vulnerabilities before hackers do
Mar 2026 · promptbrake.com · its alternatives →
18
Jo – AI-native language to catch prompt injection at compile-time▲10
Jo Secure Programming Language. Contribute to typescope/jo development by creating an account on GitHub.
Jun 2026 · github.com · its alternatives →
19
Low latency LLM prompt injection/jailbreak detection▲5
Ultra-fast, low latency LLM prompt injection/jailbreak detection ⛓️ - arekusandr/last_layer
2024 · github.com · its alternatives →
20
Presidio JS — Client-Side PII Scanner▲3
Anonymize prompts privately and securely
Apr 2026 · ergesmema.github.io · its alternatives →
21
PQ PDF▲6
Free PDF forensics scanner — 47 engines, multi-axis verdict: malware/exploit (behavioral sandbox, YARA, ClamAV, ML+SHAP), document-integrity tampering, and content-integrity / AI-ingestion attacks (V/AP divergence, glyph remapping, OCR poisoning, /Alt & /ActualText injection). Offline threat intel,
May 2026 · pqpdf.com · its alternatives →
22
R7 Vuln-Scanner▲5
R7 Vuln-Scanner — Discover the Weakness Before They Do.
Mar 2026 · gum.new · its alternatives →
23
CommitGate – Automatically scan your commit for vulnerabilities▲5
Hello HN! I built a pre-commit code scanner that checks your staged changes for security vulnerabilities every time you run 'git commit'. I am an inexperienced programmer and this is my first personal project. Any feedback, positive or negative, big or small, relevant or not, would be greatly helpful and appreciated! The tool requires Gitleaks and Python to run, you will also need to use your own AI API key, which I understand is a big setup friction. You can check out my demo video instead if that is more convenient: https://youtu.be/ZYe5vWFRTus?si=9Fv8DhTHktwDK4mV Thank you…
Jun 2026 · github.com · its alternatives →
24
Injexzero AI▲2
Stop prompt injection attacks before they reach your LLM
Feb 2026 · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →