Dev tools · alternatives · 2026
24 alternatives to Open-Source WebSocket Log4j Exploit Immunizer
Browser extension to prevent Log4J exploits against services running on private network and localhost. - paladincyber/log4jprotector
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Open-Source WebSocket Log4j Exploit Immunizer launched in 2021; newer entries below may have overtaken it.
- 1
Free defensive Log4Shell tools. Scan logs for CVE-2021-44228 JNDI exploitation attempts (including obfuscated payloads) and check whether a Log4j version is vulnerable.
2021 · log4shell.tools · its alternatives →
- 2
Excited to share the project I've been working on for the past 7 months! We've seen nearly weekly attacks against the open source software supply chain. I saw the seeds of this trend start in the mid 2015s as an open source maintainer and I've watched it only get worse over the years. I finally decided to try to solve this problem. Socket is taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Unlike other scanning tools, Socket actually analyzes the…
2022 · socket.dev · its alternatives →
- 3
I am happy to announce Stalwart JMAP [1], an open-source JSON Meta Application Protocol server that aims to be scalable, robust and secure. Some of its key features are: - JMAP Core, JMAP Mail and JMAP over WebSocket full compliance. - IMAP4 rev2/1 support via Stalwart IMAP, an imap-to-jmap proxy [2]. - Scalable and fault tolerant: consensus over Raft, node autodiscovery over gossip and read-only replicas. - RocksDB backend with full-text search support in 17 languages. - OAuth 2.0 authorization code and device authorization flows. - Domain Keys Identified Mail (DKIM) message signing. -…
2022 · github.com · its alternatives →
- 4
Scalable open source pub/sub SDK with support for RPC, JWT authentication and Kubernetes — optimized for async/await
2016 · socketcluster.io · its alternatives →
- 5DA
Hey HN! I’ve written a bunch of WebSocket servers over the years to do simple things like state synchronization, WebRTC signaling, and notifying a client when a backend job was run. I realized that if I had a simple way to create a private, temporary, mini-redis that the client could talk to directly, it would save a lot of time. So we created DriftDB. In addition to the open source server that you can run yourself, we also provide https://jamsocket.live where you can use an instance we host on Cloudflare’s edge (~13ms round trip latency from my home in NY). You may have seen my…
2023 · driftdb.com · its alternatives →
- 6
- 7FA
Introducing QuaranTab: Companion extension to quarantine tabs so you can safely use them offline with private data I find myself wanting to use online format parsers to quickly decode that production JWT or decode a base64 Authorization header but cannot trust these websites to not leak my information. I thought to myself if only I could cut-off network access to this site, use it offline, and then throw away all browsing data. So I created an extension just for that. It uses Firefox contextual identities API (Containers) to isolate browsing data and inter-tab communication. Once the site is…
2023 · its alternatives →
- 8
Bring confidence and security to your Web3 transactions
2024 · web3antivirus.io · its alternatives →
- 9
Expose local http, tcp or websocket connections to the public internet - amalshaji/portr
2024 · github.com · its alternatives →
- 10
2018 · chrome.google.com · its alternatives →
- 11
Hey HN, I'm Arjun, an 18-year-old intern at Socket. I've been working on a project that I'm really excited to share with you all - a browser extension that makes it easier to check the security of NPM packages before you use them. You can try the extension on any Chromium-based browser or on Firefox. Chrome extension: https://chrome.google.com/webstore/detail/socket-security/jb... Firefox add-on: https://addons.mozilla.org/en-US/firefox/addon/socket-securi... Socket scans NPM packages for malware, vulnerabilities, code smell, and…
2023 · chrome.google.com · its alternatives →
- 12
- 13
Secure your JavaScript supply chain – block malware packages
2022 · socket.dev · its alternatives →
- 14
A chrome extension tracks front-end JavaScript that uses DOM / jQuery APIs to manipulate html dom elements (e.g., change style, attach event listener) at runtime. - pilagod/js-tracker
2018 · github.com · its alternatives →
- 15AL
2017 · maierfelix.github.io · its alternatives →
- 16
ThreatSlayer▲85Free enterprise grade security for your personal browser
2023 · chromewebstore.google.com · its alternatives →
- 17
I wrote this tool during an internship at Narf Industries in 2023. It's a REPL that allows for quickly developing, testing, and fuzzing for HTTP request smuggling attack payloads. I started the internship having never worked with web servers, and have now found over 100 HTTP implementation bugs. I attribute this mostly to the ease of experimentation in the Garden. REPL-oriented fuzzing is just a really good interface for finding parsing bugs. It's pretty neat to able to run a differential fuzzer, categorize and display all the discovered discrepancies, then let a human pick through them and…
2024 · github.com · its alternatives →
- 18
Add OSINT & Threat tooltips to all pages. Use any REST API!
2017 · github.com · its alternatives →
- 19
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…
May 2026 · github.com · its alternatives →
- 20
I built a Chrome extension that acts as a WebSocket proxy, allowing real-time monitoring, message simulation, and traffic interception. Think "Proxyman for WebSockets" but integrated into Chrome DevTools. Key features: Real-time WebSocket monitoring and message capture Send custom messages in both directions (client ↔ server) Block incoming/outgoing messages for testing Background monitoring (captures connections even when DevTools is closed) Why: I was debugging a WebSocket chat app and needed better tools than browser DevTools. Existing solutions required external proxies or were too…
2025 · websocket-devtools.com · its alternatives →
- 21
Cyber Protection Made Easy
2018 · chromewebstore.google.com · its alternatives →
- 22
This is a small PoC Python project for web server access logs analyzing to classify and dynamically block bad bots, such as L7 (application-level) DDoS bots, web scrappers and so on. We'll be happy to gather initial feedback on usability and features, especialy from people having good or bad experience wit bots. *Requirements* The analyzer relies on 3 Tempesta FW specific features which you still can get with other HTTP servers or accelerators: 1. JA5 client fingerprinting (https://tempesta-tech.com/knowledge-base/Traffic-Filtering-b...). This is a HTTP and TLS layers…
2025 · github.com · its alternatives →
- 23
A crate to protect against malicious JSON payloads. - ADD-SP/json-threat-protection.rs
2024 · github.com · its alternatives →
- 24
Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…
2025 · browsertotal.com · its alternatives →
Also compare
- I built a tool that detects bad cases of the Log4j vulnerability alternatives
- Socket – Secure your JavaScript supply chain alternatives
- Distributed JMAP and IMAP Servers in Rust alternatives
- SocketCluster.io – flexible open-source real-time server with pub/sub alternatives
- DriftDB – an open source WebSocket backend for real-time apps alternatives
- Socket alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →