Alternatives
Products that do what OpenHack – OSS security scanner, 40x cheaper, on par with Opus 4.6 does
- 1
- 2OO
2021 · github.com
- 3SO
We're open-sourcing Sighthound today, our rules-based static security scanner. What makes it special is that it's coded in rust and uses tree-sitter as it's AST making it very fast and easily extensible. Why build another scanner in 2026? We wanted to improve some of our detection outcomes but noticed the current open source scanners like Semgrep/Opengrep we're capped by a bunch of adoption limitations such as being written in OCaml, requiring a lot of work to add a language parser, and the rulesets were licensed differently and required paid offerings. It also felt that licensing was…
Jul 2026 · github.com
- 4
- 5
- 6
- 7
- 8OA
2016 · oswatch.net
- 9
- 10OT
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com
- 11
- 12
A curated list of free OSS developer-first security tools
2022
- 13
- 14
- 15
Free open-source web scanner with an AI fix advisor
Jul 2026 · bugbounty-arsenal.net
- 16OC
Here's Openclaw Carapace, a CLI security scanner for OpenClaw. It audits your configs, flags CVEs, and scans skill files for vulnerabilities. A few things it does: - Auto-fix common misconfigurations - Hardening profiles for typical deployment patterns - SARIF output so it drops right into GitHub Code Scanning or your CI/CD pipeline Would love feedback — especially on what checks or hardening rules you'd want to see next.
Mar 2026 · github.com
- 17
- 18
Vulnerability scanner built for eCommerce
Jul 2026 · kennersoft.de
- 19OL
Hello Hacker News, I often hear people saying "all build-systems suck", an opinion I have been sharing for years, and this is the motivation for this project. I finally got the opportunity to make it open-source, and here it is. In a few words, it is like make, except it can be comfortably used even in big projects using HPC (with millions of jobs, thousands of them running in parallel). The major differences are that: - dependencies are automatically tracked (no need to call gcc -M and the like, no need to be tailored to any specific tool, it just works) by spying disk activity - it is…
2025 · github.com
- 20
- 21
- 22IB
Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)
2023 · github.com
- 23
- 24
Ranked by how close each launch is in meaning, then by votes. Refine with a description →