nowfound

Dev tools · alternatives · 2026

24 alternatives to qsa.sh

External security scan of your own IP, in your terminal

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    Hey all, wanted to share my recent weekend hack project. I wanted to improve upon the existing space for looking up information about IP addresses and ASNs. The backend is written in Rust and pulls BGP data every 8 hours from the RIPE RIS project to build up a routing table and also adds geolocation information. The frontend is using React and Tailwind. Would love any feedback or suggestions on what to improve.

    2023 · ip.guide · its alternatives →

  2. 2

    Hi HN, To truly understand how operating systems and network protocols work, I decided to combine two classic learning tools: the xv6 teaching OS and a from-scratch TCP/IP stack. I'm excited to share the result: my own from-scratch TCP/IP networking stack running directly inside the xv6-riscv (https://github.com/pandax381/xv6-riscv-net) kernel. The project uses a modern virtio-net driver, allowing it to run seamlessly in QEMU and communicate with the host machine. Key features: - From-Scratch Stack: The core is powered by microps…

    2025 · github.com · its alternatives →

  3. 3

    Hosted vuln scanning with client-ready reports

    Jul 2026 · vulnscanners.com · its alternatives →

  4. 4

    Dear HN community! Looking forward to hearing your feedback on ACE (assured confidential execution), technology that implements VM-based trusted execution environment (TEE) for embedded RISC-V systems with focus on a formally verified and auditable firmware. We target high-assurance systems that can benefit from compartmentalization and hardware-backed isolation. The key ingredient called security monitor (firmware) is implemented in Rust. The formal specification is defined as annotations directly in code and gets translated to Coq using RefinedRust automation. ACE design is now part of the…

    2025 · github.com · its alternatives →

  5. 5

    Hey all, I built babyshark, a terminal UI for PCAPs aimed at people who find Wireshark powerful but overwhelming. The goal is “PCAPs for humans”: Overview dashboard answers what’s happening + what to click next Domains view (hostnames first) → select a domain → jump straight to relevant flows (works even when DNS is encrypted/cached by using observed IPs from flows) Weird stuff view surfaces common failure/latency signals (retransmits/out-of-order hints, resets, handshake issues, DNS failures when visible) From there you can drill down: Flows → Packets → Explain (plain-English…

    Feb 2026 · github.com · its alternatives →

  6. 6

    Docker image to run an IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2. Auto-generates server config and supports VPN client setup on Linux, Windows, macOS, iOS and Android. - hwdsl2/docker-ipsec-vpn-server

    2016 · github.com · its alternatives →

  7. 7WI

    A few weeks ago, an Internet-Draft titled Internet Protocol Version 8 (IPv8) caught our eye.

    Aug 2026 · goonhost.rocks · its alternatives →

  8. 8TY

    Hi HN, Some misbehaving networks drop WireGuard packets either by accident or on purpose. Commonly the latter is done with simple DPI rules that block the handshake initiation [1], but it could be applied to other message types as well. We thought it would be great if there was tool for folks to use as a quick litmus test to see if this happening for them, without having to configure a client to send data through a random, functional WireGuard tunnel to an untrusted remote host. So we built probe.sh. How it works: - The probe.sh web app is an Elixir Phoenix app that spawns a few gen_udp…

    2024 · probe.sh · its alternatives →

  9. 9

    Scan any LLM chatbot for vulnerabilities

    Apr 2026 · github.com · its alternatives →

  10. 10

    IP address anonymizer module for nginx. Contribute to masonicboom/ipscrub development by creating an account on GitHub.

    2018 · github.com · its alternatives →

  11. 11

    Hi, I just saw this tweet[^1] by @QuinnyPig that mentions accessing your Pi-hole while traveling thanks to TailScale and wondered how to deploy Pi-hole at the edge, instead of a home lab, for improved latency. My simple solution involves running it on Fly.io to make it easy to relocate anywhere, and embedding tailscale into the same firecracker VM (né docker container) to keep the infra dead simple and cheap. Naively deploying a publicly accessible DNS resolver is not ideal[^2] so the main constraint was to secure the VM by 1) keeping all public ports closed and 2) having Pi-hole listen only…

    2022 · github.com · its alternatives →

  12. 12

    hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…

    Jul 2026 · search.cerast-intelligence.com · its alternatives →

  13. 13

    Run your own PaaS using Docker, Traefik, and great analytics - almarklein/mypaas

    2020 · github.com · its alternatives →

  14. 14

    Easy to use ,security and assessment tool for online servers

    Oct 2025 · scantide.com · its alternatives →

  15. 15

    The curl API for WorldIP is now live and completely free to use. You can hit it right from your terminal: curl worldip.io — returns information about your requesting IP. curl worldip.io/8.8.8.8 — returns details on any specific IP. The main differentiator here is that we aren't just wrapping another provider's API and reselling their data. We built and run our own global infrastructure capable of scanning the entire IPv4 space in about a day. Happy to answer any questions about the scanning infrastructure or the stack!

    Jul 2026 · worldip.io · its alternatives →

  16. 16

    Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t

    Feb 2026 · attackerview.com · its alternatives →

  17. 17

    A simple performant GeoIP server written in Rust using MaxMind DBs with auto database update - alisinabh/atlas

    2024 · github.com · its alternatives →

  18. 18AS

    Hi! I am sharing this because it may be useful to others. I created a simple Docker image that lets you easily expose a web app running locally on your dev machine to the Internet, via a proxy server. It is a self hosted alternative to something like Ngrok, which is a paid service if you use custom domains. A small server is cheaper than Ngrok (I use Hetzner Cloud and the cheapest server costs me 3€ per month). I use this method in particular to test HTTP verification with Let's Encrypt for a SaaS app running on my Mac. Hope this is useful :) Code:…

    2019 · its alternatives →

  19. 19

    Free runtime CVE scanner with zero data stored

    Jul 2026 · cvescan.app · its alternatives →

  20. 20

    Whack the moles your current scanner can't see.

    Aug 2026 · whack.sh · its alternatives →

  21. 21

    Find your web app's vulnerabilities before attackers do

    Jul 2026 · sensagraph.com · its alternatives →

  22. 22
    Depna▲2

    Dependency security scans — no repo access, no OAuth

    Jun 2026 · depna.io · its alternatives →

  23. 23

    Nessus for homelabs. Mac-native, $79 one-time.

    May 2026 · noxen.app · its alternatives →

  24. 24

    Tunnel, inspect & mock localhost - no backend needed

    Apr 2026 · proxyhub.app · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →