Alternatives
Products that do what TitanShield - CLI does
A free, open-source SAST scanner for Android, CI/CD friendly
- 1
- 2LA
I built LocalGPT over 4 nights as a Rust reimagining of the OpenClaw assistant pattern (markdown-based persistent memory, autonomous heartbeat tasks, skills system). It compiles to a single ~27MB binary — no Node.js, Docker, or Python required. Key features: - Persistent memory via markdown files (MEMORY, HEARTBEAT, SOUL markdown files) — compatible with OpenClaw's format - Full-text search (SQLite FTS5) + semantic search (local embeddings, no API key needed) - Autonomous heartbeat runner that checks tasks on a configurable interval - CLI + web interface + desktop GUI - Multi-provider:…
Feb 2026 · github.com
- 3BO
Hi HN, we’re the co-founders of Bearer, and today we launch an open-source alternative to code security solutions such as Snyk Code, SonarQube, or Checkmarx. Essentially, we help security & engineering teams to discover, filter and prioritize security risks and vulnerabilities in their codebase, with a unique approach through sensitive data (PII, PD, PHI). Our website is at https://www.bearer.com and our GitHub is here: https://github.com/bearer/bearer We are not originally Security experts but have been software developers and engineering leaders for over 15…
2023
- 4
- 5
- 6
- 7MS
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com
- 8
- 9
- 10
- 11
- 12
- 13
- 14
- 15
An AST-powered, local-first CLI that visualizes complex system architectures and enforces architectural boundaries via instant Git hooks. - animesh-94/Onboard-CLI
Jul 2026 · github.com
- 16CO
Hey, HN! I'm Aaron. I built an open-source Lovable for Claude Code users. Platforms like Lovable, Replit Agent, and Bolt require separate API keys and $25+/month subscriptions. But if you’re already subscribed to Claude Pro or Cursor, you can use those plans directly without extra costs. Claudable runs entirely locally through Claude Code (Cursor CLI also supported) and provides: - Instant UI preview (similar to Lovable) - Web-optimized, production-ready designs - Direct Git integration - One-click Vercel deployment - Zero additional API costs It’s open source and available today. I’m…
2025 · github.com
- 17SS
Nov 2025 · smart.mcpshark.sh
- 18CB
Clink lets you use the coding agents you already pay for (Claude Code, Codex CLI, Gemini CLI, Z.ai GLM) to build → live-preview → ship apps in an isolated container. No token purchases, no extra cost for coding. Just link your existing Claude/OpenAI/Gemini account and start building and deploying instantly. Why we built this: Claude Code is our go-to for coding, but it lacked preview + deploy capabilities. We didn't want to pay Lovable again just for that. Different agents excel at different tasks - Claude Code for versatility, Codex for complex work, GLM for speed. We needed one…
Oct 2025 · clink.new
- 19
- 20ES
2022 · github.com
- 21PS
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…
Feb 2026 · github.com
- 22
Run Claude Code, Codex, Cursor, and OpenCode on mobile and write code from your phone. Shellular gives you secure remote access to your dev machine: a real agent UI, terminal, files, Git, ports, and browser DevTools, all from your phone.
Jul 2026 · shellular.dev
- 23KI
Hey HN, As an AppSec engineer, I’ve spent a lot of time running and tunning open-source security scanners like Trivy, Semgrep, Gitleaks and Dojo. What I have found is that running them is easy, reviewing the results, not so much. Each tool outputs different JSON, false positives pile up, and CI either becomes noisy or blocks everything. So I built Kekkai (formerly Hokage), a small open-source CLI that wraps these scanners and focuses specifically on human triage. Kekkai runs the scanners in isolated Docker containers, normalizes their outputs into a single format, and provides an interactive…
Feb 2026
- 24
Ranked by how close each launch is in meaning, then by votes. Refine with a description →