Dev tools · alternatives · 2026
24 alternatives to Plexavo
Find AWS security holes before they find you
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Digger▲354Build on AWS without having to learn it, no-code DevOps
2021 · digger.dev · its alternatives →
- 2
- 3
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 4
Instant Security for your AWS Environments
2023 · app.bleachcyber.com · its alternatives →
- 5
- 6
- 7
- 8
Opsflow cofounder here! We launched a bunch of things recently, some of them well received (Terragen, AWS Bootstrap). It's no secret that AWS is hard, and our mission is to make it simple. What HN crowd helped us realise is that the UI was still not simple enough. Rather confusing in fact. So in the last couple weeks we have radically simplified it based on your feedback. We have removed the unnecessarily complex concepts like Services and Environments - it's just Apps now. All options are now on the new Settings screen. Instead of Infrastructure and Software deployments there is now a…
2022 · opsflow.app · its alternatives →
- 9
- 10
This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…
2024 · github.com · its alternatives →
- 11SS
Expedited Security provides straightforward security services for Heroku, AWS and Google Cloud
2014 · expeditedssl.com · its alternatives →
- 12
CDK Insights▲75Catch security issues in your AWS CDK before deployment
Apr 2026 · cdkinsights.dev · its alternatives →
- 13
GreenOps Scan now proactively detects deprecated Lambda runtimes, RDS/Aurora/DocumentDB engines, EKS versions, ElastiCache Redis, and OpenSearch domains before AWS starts billing you extra for staying on them.
Aug 2026 · greenops.cloud · its alternatives →
- 14
Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️ - elC0mpa/aws-doctor
Jan 2026 · github.com · its alternatives →
- 15
TrailGuide▲18Cloud security service with AWS insights & alerts
2024 · oslabs-beta.github.io · its alternatives →
- 16
Track AWS outages down to the minute
2022 · taloflow.ai · its alternatives →
- 17FL
Learn AWS security with the flAWS challenge
2018 · flaws.cloud · its alternatives →
- 18
I have been a Cloud Security Consultant for over 13 years and all that experience I put into building ARGOS Cloud Security. Probably the most common thing I've seen was teams spending loads of time manually investigating alerts from security products. Detecting security issues is not what it’s ever been about, but about the investigation of these detected issues. If you don’t have time to investigate everything, then what’s the point? Organizations spend time and money on security consultants to help them investigate their environments, but these are often only point-in-time engagements,…
2022 · argos-security.io · its alternatives →
- 19GL
I wanted to do a complete audit of my AWS account but was dissatisfied with the existing tools. Many of them are clunky to use, and their verbose scan outputs are difficult to understand. So, I built my own open-source tool that uses LLMs to summarize the scan results.
2024 · guard.dev · its alternatives →
- 20AS
Embrasure is an open-source, self-hosted secrets management tool built on Amazon Web Services (AWS)
2024 · embrasure.dev · its alternatives →
- 21
Cloud Snitch▲13Open source tool to up your relationship with your cloud
2025 · cloudsnitch.io · its alternatives →
- 22
Hi HN, I'm an Indie Dev. Building web apps, I struggled to check for vulnerabilities on a surface and a deeper level at the same time. Most free scanners gave vague results or missed dependency issues and tools for deeper searches are mainly for enterprise. Also with vibe coding the issue of security is rising more and more. I built SecureNow - a simple web scanner built with Next.js and Supabase that checks SSL, ports, dependencies, headers, and basic vulns. It caught real issues in my projects. Free basic scans at securenow.app. Feedback on accuracy and missing features? Thanks!
Dec 2025 · securenow.dev · its alternatives →
- 23
AttackerView▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Feb 2026 · attackerview.com · its alternatives →
- 24
Hey HN, I'm Jarod. Spent 2 years at SendGrid watching developers struggle with email infrastructure. Built Wraps to fix the SES setup problem. One command or package (CDK & Pulumi) deploys production email infra to your AWS account: `npx @wraps.dev/cli email init` ~30 seconds to configure SES, DKIM/SPF, event tracking, and sandbox exit. You own everything—we just provide the tooling. Key decisions: - BYOC: Deploys to your AWS, you pay AWS directly for sending - Zero credentials stored: OIDC federation only - Open source CLI/SDK: MIT licensed, free forever - No lock-in: Send…
Jan 2026 · wraps.dev · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →