nowfound

Dev tools · alternatives · 2026

24 alternatives to TitanShield - CLI

A free, open-source SAST scanner for Android, CI/CD friendly

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    Free & open source security scanner for developers

    2023 · cycode.com · its alternatives →

  2. 2

    SonarQube provides advanced SAST, SCA & secrets detection to secure your SDLC. Scan 40+ languages for vulnerabilities. Start your free trial today.

    2016 · dependencyci.com · its alternatives →

  3. 3

    I built LocalGPT over 4 nights as a Rust reimagining of the OpenClaw assistant pattern (markdown-based persistent memory, autonomous heartbeat tasks, skills system). It compiles to a single ~27MB binary — no Node.js, Docker, or Python required. Key features: - Persistent memory via markdown files (MEMORY, HEARTBEAT, SOUL markdown files) — compatible with OpenClaw's format - Full-text search (SQLite FTS5) + semantic search (local embeddings, no API key needed) - Autonomous heartbeat runner that checks tasks on a configurable interval - CLI + web interface + desktop GUI - Multi-provider:…

    Feb 2026 · github.com · its alternatives →

  4. 4BO

    Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…

    2023 · its alternatives →

  5. 5

    Open sourced application to detect security vulnerabilities.

    2020 · github.com · its alternatives →

  6. 6

    A simple weekend project, to check if chat conversation could be used on CLI. Uses Google Gemini's gemini-2.0-flash model. Configs will make it nicer, but I wanted to keep it simple to test and launch for now. I can add things for you :) Please give it a try!

    2025 · blog.google · its alternatives →

  7. 7

    I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…

    2025 · github.com · its alternatives →

  8. 8

    Access the top products on PH right from your terminal

    2019 · quintomondo.net · its alternatives →

  9. 9

    Onboard-CLI—a blazing-fast developer tool I built in Go. It uses AST parsing (Tree-sitter) to map out codebase architecture and automatically blocks spaghetti code and bad dependencies locally before you even commit. I heavily optimized the concurrency, so it can parse 50k+ files in under 10 seconds.

    Jul 2026 · github.com · its alternatives →

  10. 10

    Build high quality Android apps 3x faster using any agent

    Apr 2026 · android-developers.googleblog.com · its alternatives →

  11. 11

    Run AI agents like Claude Code, Codex, Opencode on mobile

    Dec 2025 · vibepocket.com · its alternatives →

  12. 12

    A lightweight web app security scanner for your CI pipelines

    2022 · portswigger.net · its alternatives →

  13. 13
    RustScan▲108

    Fast and developer-friendly Rust contract security scanner

    2025 · its alternatives →

  14. 14

    Open source AI-driven antivirus engine written in Rust

    2022 · github.com · its alternatives →

  15. 15

    Open-source malware scanner and runtime guard for AI agents

    Jul 2026 · panguard.ai · its alternatives →

  16. 16CB

    Clink lets you use the coding agents you already pay for (Claude Code, Codex CLI, Gemini CLI, Z.ai GLM) to build → live-preview → ship apps in an isolated container. No token purchases, no extra cost for coding. Just link your existing Claude/OpenAI/Gemini account and start building and deploying instantly. Why we built this: Claude Code is our go-to for coding, but it lacked preview + deploy capabilities. We didn't want to pay Lovable again just for that. Different agents excel at different tasks - Claude Code for versatility, Codex for complex work, GLM for speed. We needed one…

    2025 · clink.new · its alternatives →

  17. 17

    Catch code vulnerabilities before they ship.

    Jul 2026 · vuln-shield.vercel.app · its alternatives →

  18. 18KI

    Hey HN, As an AppSec engineer, I’ve spent a lot of time running and tunning open-source security scanners like Trivy, Semgrep, Gitleaks and Dojo. What I have found is that running them is easy, reviewing the results, not so much. Each tool outputs different JSON, false positives pile up, and CI either becomes noisy or blocks everything. So I built Kekkai (formerly Hokage), a small open-source CLI that wraps these scanners and focuses specifically on human triage. Kekkai runs the scanners in isolated Docker containers, normalizes their outputs into a single format, and provides an interactive…

    Feb 2026 · its alternatives →

  19. 19

    Real-time vulnerability scanning and auto-patching CLI tool.

    Jul 2026 · v0-azeminal.vercel.app · its alternatives →

  20. 20

    Find & fix open source vulnerabilities - for all languages

    2018 · github.com · its alternatives →

  21. 21

    What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…

    May 2026 · github.com · its alternatives →

  22. 22

    As we all are, I've been experimenting with ways to reduce external saas spend, and continually bring traditionally external pieces of context (prs, docs, trello boards) into the one mono repo. I have toyed with a markdown todo list and setting claude/codex into a "ralph" loop previously, but always missed the web ui for organising, planning, and tracking things in progress. So codex and I build kanban-cli, an installable or npx-runnable cli util that takes one or more markdown files, and uses markdown headers and todo syntax to track and manage agentic tasks. Let me know your thoughts,…

    May 2026 · github.com · its alternatives →

  23. 23

    Integration library for all your Android hardware barcode scanner integration needs - enioka-Haute-Couture/enioka_scan

    2022 · github.com · its alternatives →

  24. 24

    Anonymize client docs before you paste them into AI

    Jul 2026 · promptshield.ca · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →