Life & fun · alternatives · 2026
24 alternatives to Porting OpenBSD Pledge() to Linux
This project ports OpenBSD's pledge() security feature to Linux, allowing developers to restrict what system calls their programs can make. It's designed for software developers and security-conscious users who want to… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Porting OpenBSD Pledge() to Linux launched in 2022; newer entries below may have overtaken it.
- 1
Hey HN! I just released go-nbd, a lightweight Go library for effortlessly creating NBD servers and clients. Its a neat tool for creating custom Linux block devices with arbitrary backends, such as a file, byte slice or what I'm planning to use it for, a tape drive. While there are a few partially abandoned projects like this out there already, this library tries to be as maintainable as possible by only implementing the most recent handshake revision and baseline functionality for both the client and the server, while still having enough support to be useful. I'd love to get your feedback :)
2023 · github.com · its alternatives →
- 2
Drop: a rootless Linux sandbox for developers. It isolates coding agents and third-party packages while preserving your work environment.
30d ago · droprun.sh · its alternatives →
- 3
A totally proof-of-concept FoundationDB based network block device backend - dividuum/fdb-nbd
2018 · github.com · its alternatives →
- 4
A rest application to update firewalld rules on a linux server - GitHub - prashantgupta24/firewalld-rest: A rest application to update firewalld rules on a linux server
2020 · github.com · its alternatives →
- 5
A filesystem sandbox for Linux using syscall intercepts. - adtac/fssb
2016 · github.com · its alternatives →
- 6
Credentials Dumper for Linux using eBPF. Contribute to citronneur/pamspy development by creating an account on GitHub.
2022 · github.com · its alternatives →
- 7
**PROTOTYPE** FreeBSD Jail/ZFS based implementation of the Application Container Specification - 3ofcoins/jetpack
2015 · github.com · its alternatives →
- 8BO
Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…
2023 · its alternatives →
- 9
:computer: :lock: :key: Secure Boot key manager. Contribute to Foxboron/sbctl development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 10SZ
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
2025 · securebuild.com · its alternatives →
- 11KS
Hi HN! I built KeyPub.sh to solve the problem of user verification for CLI applications. It's essentially OAuth for the terminal, but using SSH keys that developers and users already have. - No installation needed - works with existing SSH setup - Privacy-focused: users control what email info is shared - Simple email verification process - Free public service - Perfect for CLI app developers who don't want to build user verification Try it with: `$ ssh keypub.sh about` Source code: https://github.com/skariel/keypub
2024 · keypub.sh · its alternatives →
- 12
Portainer is one platform to deploy, run, secure, and govern Kubernetes across your whole fleet, from a single control plane. A platform is a product, not a project.
2016 · portainer.io · its alternatives →
- 13
Cross-compile software using our pre-built toolchains
2024 · rstream.io · its alternatives →
- 14
Distr is designed to help software engineers distribute and manage their applications or agents in customer-controlled or shared-responsibility environments. You only need a Docker Compose file or Helm chart—everything else for on-prem is handled by the platform. We’re are an open source dev tool company. Over the past couple of months, we’ve spoken with dozens of software companies to understand their challenges with on-prem deployments. We analyzed the internal tools they’ve built and the best practices from existing solutions, combining them into a prebuilt, Open Source solution that…
2025 · github.com · its alternatives →
- 15
strongDM 2.0▲91Secure, manage, & audit access to anything a developer needs
2020 · strongdm.com · its alternatives →
- 16
Docker configuration for building Linux From Scratch system - reinterpretcat/lfs
2017 · github.com · its alternatives →
- 17GA
I built GRSH because I wanted a modern, memory-safe shell that feels native to FreeBSD but works seamlessly on macOS. While there are many shells out there, GRSH is my take on a minimal, fast, and secure command interpreter written entirely in Rust. It's designed for users who want the safety guarantees of Rust without the overhead of more bloated alternatives. I'm currently working on the official FreeBSD port. I’d love to get feedback on the shell's behavior and performance from the community. Github: https://github.com/antoniomalara301289/grsh
Jan 2026 · grimreaper.icu · its alternatives →
- 18OR
2019 · open-registry.dev · its alternatives →
- 19
SecurSSH▲57SSH access for developers. Secure, European, done right.
May 2026 · securssh.com · its alternatives →
- 20
Lockdown your linux install. The simple zero config linux hardening script - dolegi/lockdown.sh
2020 · github.com · its alternatives →
- 21OS
Hey Hacker News! I am madnuttah, I am a Windows/Linux Sysadmin and some folks may remember this username for "niche" mods I've made for Fallout and Skyrim and some C# UWP Windows Store Apps which I've retired because of Microsoft's unclear strategy abandoning things from one day to another. Why am I writing this? I wanted to be independent from the DNS servers of my provider, because they have often shined brightly with problems in the past instead of functioning properly, wanted to have a little bit more privacy and freedom back by fighting censorship via DNS, so I built my own Unbound…
2022 · its alternatives →
- 22
Secure and simplify infrastructure access with StrongDM’s Zero Trust PAM platform. Control, audit, and manage access across cloud, databases, servers, and apps from a single, unified solution.
2018 · strongdm.com · its alternatives →
- 23SV
Sanctum is a small, reviewable, experimental and fully privilege seperated VPN daemon that runs on openbsd linux and macos. It takes privilege separation to the extreme to make sure all assets are isolated and each component is sandboxed with only the permissions they require.
2024 · sanctorum.se · its alternatives →
- 24OT
In the past few days, there have been uncertainties and concerns about the LUKS (“Linux Unified Key Setup”) disk encryption, which is widely used on Linux. We publish our assessment of this here.
2023 · dys2p.com · its alternatives →
Also compare
- go-nbd – A Pure Go NBD Server and Client alternatives
- Drop – a rootless Linux sandbox with gVisor support alternatives
- A proof-of-concept FoundationDB based network block device backend alternatives
- A proactive way of securing your Linux server alternatives
- FSSB – A filesystem sandbox for Linux alternatives
- Credentials dumper for Linux using eBPF alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →