Life & fun · alternatives · 2026
24 alternatives to SandGuard Malware Analysis Platform
Confidential Advanced Malware Analysis Platform
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
Sandworm▲293Keep your JavaScript code secure and compliant with Sandworm
2023 · sandworm.dev · its alternatives →
- 2
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 3
- 4
Hi HN, I spent the past year building this in my spare time because I got tired of enterprise security tools that cost $50K/year and don't understand Linux. TheProtector is a comprehensive security monitoring tool that actually runs on the systems we use (Linux) instead of being a Windows-first afterthought. Built it entirely on a $500 laptop because I believe good security shouldn't require unlimited budgets. Features: - Real-time process, network, and file monitoring - YARA malware detection with custom rules - eBPF kernel monitoring (when available) - Behavioral baseline…
2025 · github.com · its alternatives →
- 5
I'm excited to introduce Zerobox, a cross-platform, single binary process sandboxing CLI written in Rust. It uses the sandboxing crates from the OpenAI Codex repo and adds additional functionalities like secret injection, SDK, etc. Watch the demo: https://www.youtube.com/watch?v=wZiPm9BOPCg Zerobox follows the same sandboxing policy as Deno which is deny by default. The only operation that the command can run is reading files, all writes and network I/O are blocked by default. No VMs, no Docker, no remote servers. Want to block reads to /etc? zerobox…
Mar 2026 · github.com · its alternatives →
- 6
All your malware analysis tools in one place
2021 · analyze.intezer.com · its alternatives →
- 7
- 8
malwareleaks▲16Defend the digital landscape against evolving cyber threats
2025 · malwareleaks.com · its alternatives →
- 9
ThreatSlayer▲85Free enterprise grade security for your personal browser
2023 · chromewebstore.google.com · its alternatives →
- 10
I built a GitHub app that detects it in pull requests, notifies or blocks them. Alongside it, I published a Semgrep ruleset for any stage of the CI/CD. I started this after getting frustrated by all the FUD around malicious code - lots of noise, little effort to solve it. Having said that, it's still a major attack vector - a stored RCE, with the codebase itself as the sink. Feedback is appreciated. The app, PRevent - https://github.com/apiiro/PRevent The ruleset: https://github.com/apiiro/malicious-code-ruleset The research:…
2025 · github.com · its alternatives →
- 11
Metaguard▲13Anti Phishing tool for all your Crypto Transactions
2021 · metaguard.app · its alternatives →
- 12
A tiny "sandbox" to run untrusted code 🏖️. Contribute to craigmulligan/sandy development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 13
Advanced ip reputation & threat intelligence solutions
2025 · fraudguard.io · its alternatives →
- 14
Hi HN! We kept seeing devs get pwned through MCP tools in ways that security scanners completely miss. So we built an open-source analyzer to catch these attacks. Our first OSS by Mighty team. The problem: At Defcon, we saw MCP exploits with 100% success rate against Claude and Llama. Three attack patterns: Hidden Unicode in "error messages" - Paste a colleague's error into Claude, your SSH keys get exfiltrated Trusted tool updates - That database tool you've used for months? Last week's update added credential theft Tool redefinition - Malicious tool redefines "deploy to prod" to run…
2025 · github.com · its alternatives →
- 15KA
The guardian angel for Kubernetes.
2017 · target.github.io · its alternatives →
- 16ST
Get a baited crypto wallet so you know if someones broken into your computer or server.
2019 · serverthiefbait.com · its alternatives →
- 17
Keep your JavaScript code secure and compliant with Sandworm - Sandworm
2022 · github.com · its alternatives →
- 18
DNSWatch - intelligent and affordable malware protection. Protect your business and your data from the growing threat of attacks with DNSWatch.
2015 · strongarm.percipientnetworks.com · its alternatives →
- 19
World's Largest Exploit Database
2023 · exploit.observer · its alternatives →
- 20
- 21
CodeScan▲16Scan and secure your code to prevent future cyber threats.
2025 · codescan.dev · its alternatives →
- 22
ByteGuard is a privacy-first Chrome extension that tracks real-time bandwidth usage per website, enables smart daily/monthly budgets, and automatically activates low-data mode to prevent overages. Built using Manifest V3, declarativeNetRequest, and modern browser APIs. PLEASE STAR THE REPO ⭐ - gauta
Jan 2026 · github.com · its alternatives →
- 23
- 24
I built an open-source malware detection daemon that monitors all running processes in real-time using ML + heuristics. No kernel modules or eBPF required. Key points: - Polls /proc for new processes (works on any Linux kernel 2.6+) - Random Forest model trained on EMBER 2018 dataset (2.3M samples) - Heuristic rules for crypto miners, ransomware, rootkits - ~20MB RAM, <1% CPU, sub-millisecond scan latency - Pure C, zero runtime dependencies - Model embedded directly in binary (50KB) Why I built this: Existing solutions either require modern kernels (eBPF) or are heavy/proprietary.…
Nov 2025 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →