Alternatives
Products that do what TideCloak – Decentralized IAM for security and user sovereignty does
Hey HN! After 6 years of R&D, our small team is excited to share our project TideCloak - an IAM designed to help developers move fast without worrying about catastrophic breaches or overpowered admins with keys to the kingdom. Traditional IAMs rely on centralized authority - admins, root certificates, and decryption keys - which create glaring vulnerabilities in a breach. To address this, we’ve integrated Keycloak (Red Hat’s IAM) with a decentralized key architecture powered by our (academically validated) Ineffable Cryptography. Here’s the idea: keys are split across a decentralized network…
- 1
- 2FA
For the past 5 years or so I've been working on a ground-up redesign of Freenet, my peer-to-peer project from the early 2000s (now renamed Hyphanet). The new Freenet has been up and running since December along with some early applications like River[1], our decentralized group chat and Delta - a decentralized CMS. Users have already started to build their own apps on Freenet including games, and we have some interesting apps in development like Atlas, a search/recommendation engine. Architecturally, this new Freenet is a global, decentralized key-value store where keys are webassembly…
May 2026 · freenet.org
- 3
One identity layer for your customers, APIs, and agents
Jul 2026 · monocloud.com
- 4OV
We built OneCLI because AI agents are being given raw API keys. And it's going about as well as you'd expect. We figured the answer isn't "don't give agents access," it's "give them access without giving them secrets." OneCLI is an open-source gateway that sits between your AI agents and the services they call. You store your real credentials once in OneCLI's encrypted vault, and give your agents placeholder keys. When an agent makes an HTTP call through the proxy, OneCLI matches the request by host/path, verifies the agent should have access, swaps the placeholder for the real…
Mar 2026 · github.com
- 5LA
2017 · github.com
- 6OA
A lightweight engine for durable execution / deterministic workflows I built with Rust, wasmtime and the WASM Component Model. Its main use is running reliable, long-running workflows that can automatically resume after failures. Looking for feedback on the approach and potential use cases!
2025 · obeli.sk
- 7
- 8KD
I've built this to make it easy to host your own infra for lightweight VMs at large scale. Intended for exec of AI-generated code, for CICD runners, or for off-chain AI DApps. Mainly to avoid Docker-in-Docker dangers and mess. Super easy to use with CLI / Python SDK, friendly to AI engs who usually don't like to mess with VM orchestration and networking too much. Defense-in-depth philosophy. Would love to get feedback (and contributors: clear & exciting roadmap!), thx
Oct 2025 · github.com
- 9
- 10
- 11
- 12
- 13SU
Hi everyone, I built a runtime to isolate untrusted code using wasm sandboxes. Basically, it protects your host system from problems that untrusted code can cause. We’ve had a great discussion about sandboxing in Python lately that elaborates a bit more on the problem [1]. In TypeScript, wasm integration is even more natural thanks to the close proximity between both ecosystems. The core is built in Rust. On top of that, I use WASI 0.2 via wasmtime and the component model, along with custom SDKs that keep things as idiomatic as possible. For example, in Python we have a simple decorator:…
Feb 2026 · github.com
- 14DA
I’ve been working on a solution to the "Physical Oracle Problem" (trustless trading of physical goods) and just released the full Alpha implementation. The Core Thesis: Existing decentralized marketplaces rely on reputation, which inevitably centralizes. Dealta replaces reputation with a Nash Equilibrium-based mechanism. We use staked, pseudo-randomly selected "Brokers" to physically verify goods. The protocol ensures that honesty is the dominant strategy for all actors via strict payoff matrices. It intended use is preferably trading of mid to high value goods. Nobody expecting a computer,…
Jan 2026 · github.com
- 15CS
Hi HN, I'm Dan Draper, founder of CipherStash. We've spent 5 years building per-value searchable encryption tech. We realized that encryption like this is incredibly powerful but the engineering required is generally not worth the effort. So we built a platform and opensource SDK to take the cry out of cryptography :) CipherStash Stack is: * A searchable encryption SDK for TS and Postgres * Fast, key management with Zerokms (backed by HSM) * A transparent SQL proxy * Auth library and OIDC federation service * Skills for data security Integrations include Prisma Next, Drizzle, Auth0, Clerk…
May 2026 · cipherstash.com
- 16CA
In 2023, AWS announced[1] IAM authentication for MSK Kafka clusters with support for "all programming languages"… except C++. While Java[2], Python[3], Go[4], and others got official SDKs, C++ developers/vendors were stuck hardcoding SCRAM-SHA credentials in code/configs or relying on heavier Java-based tools like Kafka Connect or Apache Flink. Later, community projects added Rust[5] and Ruby[6] support. Why no C++? Rust might be the new favorite, but C++ is still king for high-performance data systems: minimal dependencies, lean resource use, and raw speed. At Timeplus, we needed…
2025 · github.com
- 17AA
Hello HN, we're CipherNomad, the research initiative behind this project. The Ariadne Protocol is our exploration of a different cryptographic model. The work began with an observation of primitives like the Lion transform, which use a static, hardcoded sequence of operations. This led us to ask: What if the cryptographic "program" wasn't a constant, but a dynamic, history-dependent variable? Our first step was a "Cryptographic Virtual Machine" that took an explicit list of operations (a "Path"). This worked, but required sharing the Path object—an explicit dependency that needed to be…
2025 · codeberg.org
- 18UU
Hey HN, I'm building Uncloud — a lightweight clustering and container orchestration tool that lets you deploy and manage web apps across cloud VMs and bare metal with minimal cluster management overhead. After several years of managing and extending Kubernetes at a unicorn, I realised that I desperately needed a change. All those abstraction layers, unnecessary complexity, boilerplate… I wanted container orchestration to bring me joy again, the way Ansible did when I first tried it a decade ago, or Docker after that. That’s when I decided to start an experiment that is now called Uncloud.…
2025 · github.com
- 19SE
Hello. I made this project as an experiment in using key cryptography for user identity in a client server model, and for some future peer to peer projects that I am working on. I am looking for feedback, please let me know what you think. Also, Merry Christmas to HN! :-)
2022 · github.com
- 20AA
2019 · axiom.org
- 21TA
Hey everyone! sharing an open source storage engine I created and work on called TidesDB. I hope you check it out, and do let me know your thoughts and or questions! You can also find design documentation, benchmarks, libraries and more on the website. Alex
Feb 2026 · github.com
- 22PO
Hello HN! We are developers and security researchers making tools for developers to encrypt data at an application level while maintaining sole control of their keys. We believe that data should always be encrypted unless it is part of an active computation. Encryption is relatively easy, but key management is challenging. There are plenty of encryption tools and SDKs that are out there (Hashicorp Vault, AWS KMS etc.) but we are focusing on ease and speed of implementation, developer experience and self custody of keys. A few months ago, we quit our jobs and started full time on Phase. So…
2023 · github.com
- 23WB
Over the past few months, as we scaled our internal AI Agents, we hit a dead end: Running LLM-generated arbitrary code in Docker is basically running naked on security due to container escape risks. But using full traditional VMs takes minutes to boot and eats too much memory to support high-density concurrency. We loved the developer experience of SaaS sandboxes on the market, but they are closed-source, expensive, and have too high a barrier to entry for self-hosting. So, our team decided to build our own. After months of grinding, using RustVMM and KVM, we built a blazing-fast,…
Apr 2026 · github.com
- 24BA
Bonjour HN! I lead the product efforts at DSLA Protocol, a peer-to-peer third-party risk management infrastructure for developers and their communities. tl;dr I wanted to share news about our ongoing hackathon and ways to get started! DSLA Protocol lets anyone manufacture and package their own insurance, or add insurance to any existing product and service offerings. Within hours. Like a factory, but for customer protection and service differentiation. We designed DSLA Protocol as a decentralised alternative to service-level agreements (SLA). Instead of using offline legal documents with a…
2021
Ranked by how close each launch is in meaning, then by votes. Refine with a description →