Alternatives
Products that do what Vigil does
API Security and Compliance
- 1
- 2
- 3LP
OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…
Dec 2025 · github.com
- 4
- 5IV
Hey Everyone! I’ve recently been working on an open-source proxy server to help front end applications securely access third party APIs that require confidential API keys without the need to create your own backend. I would love to get some feedback and hear what you think!
2024 · github.com
- 6IV
Hello HN, for the past couple of months I've been working on Routify and wanted to share the progress made so far and hopefully get your opinion/feedback on it. Routify is a global serverless API gateway which handles routing, authentication, rate limiting, load balancing, monitoring, transformation etc (with more coming soon). Routify makes it easier to manage and secure public APIs. It's distributed across many regions globally and acts as a proxy between your clients and your services. You can configure it through the interface in a matter of minutes (no code required). There are…
2024 · routify.to
- 7SB
Hello HN, I’ve always loved building frontend-only apps—those you can prototype over a weekend, host for free on GitHub Pages, and scale to millions of users. Unfortunately, AI-enabled apps complicate things, as exposing your OpenAI key to the world is obviously a no-go. This also means mobile developers often have to run their own servers. That’s why I built ServerlessAI, an API gateway that lets you securely call multiple AI providers directly from client side using OpenAI-compatible APIs. You can authenticate users through any identity provider, like Google or Apple, and set per-user…
2024 · serverlessai.dev
- 8OS
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
2023 · openapi.security
- 9HA
With the recent changes around Localstack pricing/licensing I've been hunting for alternatives. I decided that it might be a fun experiment to try rolling my own. SQS is a service I use heavily so I chose that as the first service to implement. I have more services planned and in development. A few things I think are cool: 4MB Docker Image Size Instant Startup AWS Sigv4 Authentication A little admin UI that can be helpful for development/troubleshooting Most of the SQS API implemented, the rest will soon follow :)
Apr 2026 · github.com
- 10PS
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy…
Feb 2026 · github.com
- 11GO
2024 · github.com
- 12AF
2020 · ianwhitestone.work
- 13
- 14PA
Hi Hacker News, I’d like to introduce PipeGate, a lightweight, self-hosted proxy built with FastAPI. I created PipeGate as a fun little exercise to understand how tunneling services work under the hood. PipeGate allows you to expose your local servers to the internet, giving you full control over your setup.
2024 · github.com
- 15PP
It's time we talked about something many developers, data analysts, and even web application servers are guilty of: downgrading PostgreSQL connection security. Too often, we see connections dropped from full TLS verification to "any TLS" (i.e., sslmode=require) or, even worse, plain text connections. Why? Because most cloud providers, like AWS or Google Cloud SQL, use non-public Certificate Authorities for PostgreSQL. The result? Unverified TLS connections because no one has time to set up all devices across an organization to trust custom certificate authorities. And here's the most…
2024 · github.com
- 16
- 17MN
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com
- 18LN
Revisited an old experiment of mine (https://github.com/dan-v/awslambdaproxy): can AWS Lambda functions work as network proxies? This time using UDP NAT hole punching + QUIC tunnels. Client discovers public IP via STUN, writes session data to S3, which triggers a Lambda. Both endpoints punch UDP holes through their NATs, then establish a QUIC connection for encrypted traffic forwarding.
2025 · github.com
- 19RR
I wanted a safer alternative to RegExp for TypeScript that uses a linear-time engine, so I built Regolith. Why: Many CVEs happen because TypeScript libraries are vulnerable to Regular Expression Denial of Service attacks. I learned about this problem while doing undergraduate research and found that languages like Rust have built-in protection but languages like JavaScript, TypeScript, and Python do not. This library attempts to mitigate these vulnerabilities for TypeScript and JavaScript. How: Regolith uses Rust's Regex library under the hood to prevent ReDoS attacks. The Rust Regex library…
2025 · github.com
- 20FA
Hi, Please check out my new library funcy. It's really simplified AWS Lambda APIs in my projects, so I thought I would open-source it. It strongly-types all request parameters, has support for CORS, content-negotiation, security headers, etc.. out of the box and works via a very simply declarative interface with progressive disclosure. It's currently pre-release, let me know what you think :)
2024 · github.com
- 21PH
I built that initially for an AI chat bot that allows teams to perform DevOps tasks straight out of Slack/Teams (with proper permission control, obviously). Useful to let developers perform mundane tasks, or help coordinate incident response. I ended up using it myself on my own machine to manage Hetzner and AWS boxes. I thought that may be useful to others. The default policy should be good enough, but if you don't like living dangerously, you can set it to `paranoid`. Install: `pi install npm:pi-hosts` GitHub: https://github.com/hunvreus/pi-hosts
Apr 2026 · github.com
- 22
The only way to go fast is full YOLO mode in your coding agent. I've got the local sandbox figured out (pro tip: Incus VMs work great) but I wanted to keep my agents from doing things like inadvertently blowing up my cloud services or chasing a prompt to POST to some random website. I struggle most with this on my side projects where my permission model isn't quite as robust as it is at the office. I started with a firewall on the Incus container but every time the agent needed access to something new, I was poking more holes in it - and it didn't differentiate between HTTP verbs. I've been…
Jul 2026 · trollbridge.dev
- 23SF
2017 · medium.com
- 24BP
Hi all, I'm one of the authors of Serverless-Stack.com — an open source guide to building full-stack apps with AWS Lambda and React. Since it's launch in 2017, it's become one of the most widely read guides for building Serverless apps. Today we are adding a new section to the guide that walks you through the best practices of building large Serverless applications. It tries to address some of the most common questions that teams have: - How should my project be structured when I have dozens of interdependent services? - How should I manage my environments? - What are the best practice for…
2019
Ranked by how close each launch is in meaning, then by votes. Refine with a description →