Dev tools · alternatives · 2026
24 alternatives to Phonito Security
Docker Vulnerability Management For Developers
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Phonito Security launched in 2019; newer entries below may have overtaken it.
- 1IB
I found it odd there wasn’t a simple web tool to scan Docker Hub images for vulnerabilities. So I built one. It’s powered by the popular open-source tool Trivy.
2023 · containercve.com · its alternatives →
- 2
- 3
I'm a software engineer who keeps getting pulled into DevOps no matter how hard I try to escape it. I recently moved into a Lead DevOps Engineer role writing tooling to automate a lot of the pain away. On my own time outside of work, I built Artifact Keeper — a self-hosted artifact registry that supports 45+ package formats. Security scanning, SSO, replication, WASM plugins — it's all in the MIT-licensed release. No enterprise tier. No feature gates. No surprise invoices. Your package managers — pip, npm, docker, cargo, helm, go, all of them — talk directly to it using their native…
Feb 2026 · github.com · its alternatives →
- 4
Automate app security with OSS vulnerability management
2020 · its alternatives →
- 5
A curated list of free OSS developer-first security tools
2022 · its alternatives →
- 6DP
2024 · github.com · its alternatives →
- 7TD
2020 · tunnelto.dev · its alternatives →
- 8
- 9
- 10LT
hey guys. the other day i was migrating hosting providers and i just needed something not too heavy and convenient to spin up my backups for awhile and realised there is almost nothing out there. kimchi hasn't been updated for years and cockpit is heavy. so here's something i came up with in a couple hours because of a sudden urge, nothing fancy just basic creation with cloud init, lifecycle management and image/storage, but it's modern-ish and it compiles to a 8.4mb binary inclusive of the embedded web UI, CLI and API, and only dep is libvirt.
2025 · github.com · its alternatives →
- 11TT
Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
Sep 2025 · github.com · its alternatives →
- 12
First Globally Vulnerability Management Platform on earth
2019 · its alternatives →
- 13SA
2019 · made2591.github.io · its alternatives →
- 14NI
Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware
2022 · github.com · its alternatives →
- 15
Vulnerability management, vulnerability discovery, devsecops
2023 · its alternatives →
- 16
Phynd▲9Affordable, automated vulnerability scanning—no blind spots
2025 · phynd.io · its alternatives →
- 17
- 18DR
Dockerized is like npx for unix tools: Run popular cli tools without installation. Example: dockerized npm init dockerized python2 somescript.py Run an older version of a tool: NODE_VERSION=15.0 dockerized node Use cases: - Maintaining multiple versions of an app - Installing without polluting host machine - Quickly run some commands you may not have installed Features: - intuitive use. Just the original command, but with 'dockerized' in front. - dockerized apps can access the current directory and read/modify files, just like native apps. - no need to know which docker image this…
2022 · github.com · its alternatives →
- 19PS
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack. As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside…
2024 · its alternatives →
- 20SL
2016 · blog.alexellis.io · its alternatives →
- 21B0
2015 · github.com · its alternatives →
- 22SZ
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
2025 · securebuild.com · its alternatives →
- 23Podman▲5
Container Management Made Simple, Secure, and Rootless.
2024 · podman.io · its alternatives →
- 24BB
This project addresses the inefficiencies of traditional Dockerfile-based container builds where each customization layer creates storage bloat through duplicate dependencies from repeated apt-get install commands, network inefficiency from redundant package downloads across different images, and slow iteration cycles requiring full rebuilds of all previous steps. Our solution enables building minimal base images from scratch using debootstrap that precisely include only required components in the initial build, while allowing creation of specialized variants (Java, Kafka, etc.) from these…
2025 · github.com · its alternatives →
Also compare
- I built ContainerCVE – a web tool to scan public Docker images alternatives
- Dockhand alternatives
- Artifact Keeper – Open-Source Artifactory/Nexus Alternative in Rust alternatives
- Open Source Security Management by FOSSA alternatives
- Awesome OSS Developer Security Tools alternatives
- Docker-phobia: Analyze Docker image size with a treemap alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →