Alternatives
Products that do what Picteto does
Smart WAF for everyone. Block threats before they hit.
- 1PA
Pico is an open-source alternative to Ngrok. Unlike most other open-source tunnelling solutions, Pico is designed to serve production traffic and be simple to host (particularly on Kubernetes). Upstream services connect to Pico and register endpoints. Pico will then route requests for an endpoint to a registered upstream service via its outbound-only connection. This means you can expose your services without opening a public port. Pico runs as a cluster of nodes in order to be fault tolerant, scale horizontally and support zero downtime deployments. It is also easy to host, such as a…
2024 · github.com
- 2

- 3

- 4

- 5

- 6

- 7

- 8

- 9
- 10

- 11TA
If you have heard of [Haven](https://github.com/guardianproject/haven), then Tripwire fills in the void for a robust anti evil maid solution after Haven went dormant. The GitHub repo describes both the concept and the setup process in great details. For a quick overview, read up to the demo video. There is also a presentation of Tripwire available on the Counter Surveil podcast: https://www.youtube.com/watch?v=s-wPrOTm5qo
Dec 2025 · github.com
- 12

- 13SA
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…
Feb 2026 · ghostklan.com
- 14CH
There is a growing number of companies offering anti-bot protection SaaS to protect websites from scraping by automated bots based on Puppeteer/Selenium. Most of them rely on browser properties such as headers, javascript properties (window., navigator.), behavior analysis, to build device/user fingerprints and match it against a database of "whitelisted" fingerprints (typical user behavior/settings/device props etc). For the past few months, together with two other devs I have worked on a customized Puppeteer/Playwright scraping backend. It's essentially a drop-in…
2021
- 15SA
Built StopX after struggling with the limitations of traditional blocklist-based filters. Most existing solutions rely on static URL databases that are constantly outdated and easily bypassed. Our approach uses proprietary WebShield™ technology that combines: Real-time AI image recognition for visual content analysis Contextual URL pattern matching beyond simple domain blocking Cross-device synchronization with encrypted settings sync Military-grade bypass protection with stealth mode operation The interesting technical challenge was achieving 99.7% accuracy while maintaining sub-100ms…
2025 · stopx.today
- 16

- 17
- 18

Secure your website instantly with powerful security headers
Dec 2025 · inspiredmonks.com
- 19AR
picosnitch helps you protect your security and privacy by "snitching" on anything that connects to the internet, letting you know when, how much data was transferred, and to where. It uses BPF to monitor network traffic per application, and per parent to cover those that just call others. It also hashes every executable, and will complain if some mischievous program is giving it trouble.
2022 · github.com
- 20

- 21

- 22

- 23

Instantly check if a website is safe and trustworthy [free].
Oct 2025
- 24IM
So I'm a junior Go dev and I made a small site that allows me to share images with someone privately and securely, and give me control over how many times the private link can be shared and how long the image will be accessible for. There are similar services to this one, but they are either convoluted with ads, or require sign-up, or expect you to fill out a survey or something. picburn is small, safe, and has no interest (nor the code or the server space) for storing your uploads. give it a try if it fits your usecase and let me know what you think. Note: there was a typo in the url
Aug 2026 · picburn.xyz
Ranked by how close each launch is in meaning, then by votes. Refine with a description →