Alternatives
Products that do what Oppsy — Dependency Vulnerability Alerts does
Real-time dependency vulnerability alerts
- 1

- 2

- 3KG
Hi Hacker News! Shahar and Tal from Keep here. A few months ago, we introduced here at HN (https://news.ycombinator.com/item?id=34806482) Keep as an “open source alerting CLI” and got some interesting feedback - mainly around UI, automation, and supporting more tools. We were VERY early back then, and we understood that although the current DX around creating alerts is not great, it's not that critical and developers don’t need another tool just for that. But we did find something else. While talking to developers and devops, we found that a lot of companies use many tools…
2023 · github.com
- 4SZ
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
2025 · securebuild.com
- 5

- 6

- 7KO
Hi Hacker News! Shahar and Tal from Keep here. We're thrilled to announce that we're open-sourcing our alerting CLI tool, Keep (https://github.com/keephq/keep). Designed by developers for developers, Keep streamlines and simplifies alerting, making it a first-class citizen within the development process. Think of Keep as Prometheus Alertmanager but for all observability tools, with a simple and intuitive (GitHub actions-like) syntax. We believe that alerting has historically been neglected in existing monitoring platforms, leading to subpar alerting practices. With Keep,…
2023 · github.com
- 8NI
Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware
2022 · github.com
- 9OF
A couple of us started building an open-source tool after an on-call shift where a simple container restart turned into more hassle than it should. What should have been a 10-second task meant opening a laptop, connecting to a server, and running commands in the middle of the night. OpsiMate is our attempt to simplify that. It provides a single place to manage Docker containers, Kubernetes pods, and systemd services. We’re also working on integrations with monitoring tools so you can act on alerts and jump directly to dashboards. It’s still early and a bit rough, but already running in use.…
2025 · github.com
- 10NF
2014 · vuln.pub
- 11BR
2023 · emitbase.github.io
- 12RV
Thrilled to announce that very soon The List Of Vulnerabilities collected from multiple platforms including ( npm, Maven, Go, NuGet, PyPI, RubyGems, crates.io, Packagist, Linux, OSS-Fuzz ) will be live at https://vulert.com/vuln-list. In short we are making sure that no vulnerability is left unreported and your software/service is always protected from unexpected attacks. Who doesn’t know Vulert Yet: Vulert, without any integration, notifies you if a Security Issue is found in any of the open-source software you are relying upon. HOW DOES VULERT PROTECT YOU ? PRIVACY: You…
2022
- 13
- 14

- 15

- 16

- 17IB
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com
- 18

- 19

Free repo risk scanner: AI copilot, DORA metrics & CVEs
May 2026 · reporisk-radar-af82e8.gitlab.io
- 20AB
Hey everyone, My friend and I built a simple bug fixing app that listens for alerts/issues from Sentry, contextualizes it against your codebase, and any other data sources you wish to connect (right now we support Notion, Google Docs, and Slack), and deploys an ai agent to write a PR for review in Github or Gitlab to solve the bug. Our current demo shows the end-to-end process for a trivial bug fix, but we have been testing it with open source python repos like http-pie, comparing how our agent solves a bug compared to a human engineer and it gets fairly close. We are working on adding…
2023 · resolvd.ai
- 21LV
Hello HN! We've been working on a new hypervisor https://kwarantine.xyz that can run strongly isolated containers. This is still a WIP, but we wanted to give the community an idea about our approach, its benefits, and various use cases it unlocks. Today, VMs are used to host containers, and make up for the lack of strong security as well as kernel isolation in containers. This work adds this missing security piece in containers. We plan on launching a free private beta soon. Meanwhile, we'd deeply appreciate any feedback, and happy to answer any questions here or on our slack…
2021
- 22

Threat and CVE alerting of your tech stack in your poocket
Jul 2026 · apps.apple.com
- 23IX
Hello HN! Deploying the next-generation of security telemetry technologies to production is hard, so I’m building Impulse, a fully automated XDR platform that leverages tools like Osquery and eBPF to provide real-time threat detection & integrity monitoring for servers and workstations. It detects malware from behavioural patterns rather than signatures and enables deeper visibility than legacy tools. Impulse agents can be deployed on any device or VM running Linux such as cloud VMs in VPC networks, VPS servers or personal workstations and IoTs. In terms architecture, it is organised around…
2024 · github.com
- 24

Hey HN, I built Server Compass because I got tired of two extremes: paying $200+/month to Vercel/Railway for a polished deploy experience, or wrestling with self-hosted panels (Coolify, CapRover, Dokploy) that eat up half my VPS resources just to run their dashboard. The core idea: A GUI SSH client that gives you Vercel-like deployment UX on your own VPS. Nothing gets installed on your server except your apps – every command runs over SSH from your desktop. What it does: - 1-click deploys from GitHub repos or 160+ pre-built templates (Postgres, WordPress, Ghost, Supabase, n8n,…
4d ago · servercompass.app
Ranked by how close each launch is in meaning, then by votes. Refine with a description →