Dev tools · alternatives · 2026
24 alternatives to SecureBuild – Zero-CVE Images That Pay OSS Projects
We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243) helping commercial and open source software vendors securely distribute their apps to enterprise environments. During that time, we saw firsthand how hard it is for maintainers to fund their work, and how increasingly demanding enterprises have become when it comes to demonstrable…
SecureBuild offers container images built with zero known vulnerabilities for open source projects, based on Wolfi. The service provides full software bill of materials and supports enterprise security requirements. It… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
I would like to share Minimal - Its a open source collection of hardened container images build using Apko, Melange and Wolfi packages. The images are build daily, checked for updates and resolved as soon as fix is available in upstream source and Wolfi package. It utilizes the power of available open source solutions and contains commercially available images for free. Minimal demonstrates that it is possible to build and maintain hardened container images by ourselves. Minimal will add more images support, and goal is to be community driven to add images as required and fully customizable.
Jan 2026 · github.com · its alternatives →
- 2
- 3
- 4
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2020 · github.com · its alternatives →
- 5
🦅 Built-from-source container image of NGINX. Contribute to ricardbejarano/nginx development by creating an account on GitHub.
2019 · github.com · its alternatives →
- 6
A curated list of free OSS developer-first security tools
2022 · its alternatives →
- 7
I'm a software engineer who keeps getting pulled into DevOps no matter how hard I try to escape it. I recently moved into a Lead DevOps Engineer role writing tooling to automate a lot of the pain away. On my own time outside of work, I built Artifact Keeper — a self-hosted artifact registry that supports 45+ package formats. Security scanning, SSO, replication, WASM plugins — it's all in the MIT-licensed release. No enterprise tier. No feature gates. No surprise invoices. Your package managers — pip, npm, docker, cargo, helm, go, all of them — talk directly to it using their native…
Feb 2026 · github.com · its alternatives →
- 8
I built this as a small side project to learn and experiment, and I ended up with this! I used a subdomain from my personal portfolio, and everything else runs on free tiers. The project uses Nuxt, SVG, Cloudflare Workers, D1 (SQL), KV, Terraform, and some agentic coding with OpenAI Codex and Claude Code. What started as a joke among friends turned into a fun excuse to build something end to end, from zero to production, and to explore a few things I’d never touched before. I’d really appreciate any feedback or suggestions.
Jan 2026 · certificate.brendonmatos.com · its alternatives →
- 9
SafeDep Vet▲72GitLab CI Component that lets you seamlessly protect your pipelines from vulnerable and malicious open source dependencies. The component integrates directly into your CI/CD workflow through the GitLab CI Catalog and allows you to establish policy-driven guardrails using Common Expression Language (CEL). Key features: - Set your own opinionated security policies as code using CEL - Detect and block risky OSS components before they enter your codebase - Seamless integration as a native GitLab CI Component - Available directly in the GitLab CI Catalog Try and lets us know our thoughts!
2023 · safedep.io · its alternatives →
- 10
- 11
AI You Own Owned Intelligence. Built for Enterprise. The open infrastructure, tools, and expertise to build AI your organization actually owns, not rents. T ...
2019 · openteams.com · its alternatives →
- 12
OpenBerth▲84Deploy AI-generated apps to your own server with one command. Open source, sandboxed, automatic HTTPS. Built for non-engineers.
Apr 2026 · openberth.io · its alternatives →
- 13
AttackerView▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Feb 2026 · attackerview.com · its alternatives →
- 14
This project addresses the inefficiencies of traditional Dockerfile-based container builds where each customization layer creates storage bloat through duplicate dependencies from repeated apt-get install commands, network inefficiency from redundant package downloads across different images, and slow iteration cycles requiring full rebuilds of all previous steps. Our solution enables building minimal base images from scratch using debootstrap that precisely include only required components in the initial build, while allowing creation of specialized variants (Java, Kafka, etc.) from these…
2025 · github.com · its alternatives →
- 15
Hi HN, I'm an Indie Dev. Building web apps, I struggled to check for vulnerabilities on a surface and a deeper level at the same time. Most free scanners gave vague results or missed dependency issues and tools for deeper searches are mainly for enterprise. Also with vibe coding the issue of security is rising more and more. I built SecureNow - a simple web scanner built with Next.js and Supabase that checks SSL, ports, dependencies, headers, and basic vulns. It caught real issues in my projects. Free basic scans at securenow.app. Feedback on accuracy and missing features? Thanks!
Dec 2025 · securenow.dev · its alternatives →
- 16
Hi HN! I've posted this a few weeks back without much HN traction - today we've added a free community tier, so anyone can try it out. TL;DR: We’ve launched StableBuild, a new tool to easily freeze and pin Docker images, operating system packages, Python packages, and arbitrary build dependencies; in 5 lines of code: https://stablebuild.com . As the CTO at an ML startup w/ 75 people (https://edgeimpulse.com/) I’ve grown incredibly frustrated with non-deterministic builds. Last year basically every week one of our containers (we have 40+ unique ones in prod)…
2024 · stablebuild.com · its alternatives →
- 17
Linux Foundation survey says 70-90% of modern software constitute OSS code. Yet we are stuck with tools that scan only for vulnerabilities in 3rd party libraries and that too with high degree of false positives. I built `vet` for policy and data driven analysis of 3rd party packages that goes beyond only vulnerability and allows codifying organisational policies related to OSS consumption. https://github.com/safedep/vet Looking forward to feedback and suggestions from HN :)
2023 · github.com · its alternatives →
- 18
Apply.Build▲16Secure app deployments without the DevOps headache
2025 · apply.build · its alternatives →
- 19
An awesome list of OSS developer-first security tools - boxyhq/awesome-oss-devsec
2022 · github.com · its alternatives →
- 20SE
I have built this service to allow every project to have basic cybersecurity, in an easy to setup way. It will basically alert you when your service/server is running on vulnerable software. The website is: https://secureit.io You can even try it anonymously at: https://beta.secureit.io/tryit And you can also join in on the discussion and show us some love on ProductHunt as we launched there today https://www.producthunt.com/posts/secureit Thanks for caring, I did this mainly to help out starting businesses/projects - and it will always…
2018 · its alternatives →
- 21
A collection of open-source projects built with Dub.
2024 · oss.gallery · its alternatives →
- 22
Open Source Powered Online Vulnerability Scanner
Feb 2026 · securelic.com · its alternatives →
- 23
Find & fix open source vulnerabilities - for all languages
2018 · github.com · its alternatives →
- 24
Military-grade digital vault for card & document security
2025 · fortexasecure.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →