nowfound

Dev tools · alternatives · 2026

24 alternatives to Vigil

API Security and Compliance

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

  1. 1

    Build production grade web applications in minutes

    2024 · its alternatives →

  2. 2

    Secure application PII using a simple API call with Pangea

    2023 · crowdstrike.com · its alternatives →

  3. 3

    OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…

    Dec 2025 · github.com · its alternatives →

  4. 4

    A solution to securely expose protected resource as APIs

    2016 · apigateway.shephertz.com · its alternatives →

  5. 5

    Instant Security for your AWS Environments

    2023 · app.bleachcyber.com · its alternatives →

  6. 6

    Hey Everyone! I’ve recently been working on an open-source proxy server to help front end applications securely access third party APIs that require confidential API keys without the need to create your own backend. I would love to get some feedback and hear what you think!

    2024 · github.com · its alternatives →

  7. 7

    The easiest way to ship serverless HTTP APIs

    2020 · arc.codes · its alternatives →

  8. 8

    Turn any website to API by several clicks (serverless and support SPA!) - t9tio/cloudquery

    2019 · github.com · its alternatives →

  9. 9IM

    We are big fans of Netlify [1] (it powers our website and blog!) and we wanted to scratch our own itch to comply with GDPR, as well as various upcoming data security regulations [3]. So we, Very Good Security [2], just released an add-on that lets you securely collect sensitive data (e.g. payments, PII, SSNs, identification, etc.) via web forms on Netlify. With the new add-on, Netlify customers are shielded from data liability, breach risk and the compliance issues that come with holding sensitive data. So you can inherit PCI compliance from VGS (a level 1 service provider) and can…

    2019 · its alternatives →

  10. 10CO

    Introducing Ceryx, a dynamic reverse proxy based on NGINX OpenResty flavor with an API, using the power of Lua scripting in NGINX and a Redis as backend.

    2015 · sourcelair.com · its alternatives →

  11. 11IV

    Hello HN, for the past couple of months I've been working on Routify and wanted to share the progress made so far and hopefully get your opinion/feedback on it. Routify is a global serverless API gateway which handles routing, authentication, rate limiting, load balancing, monitoring, transformation etc (with more coming soon). Routify makes it easier to manage and secure public APIs. It's distributed across many regions globally and acts as a proxy between your clients and your services. You can configure it through the interface in a matter of minutes (no code required). There are…

    2024 · routify.to · its alternatives →

  12. 12

    Serverless udp backends

    2025 · proxylity.com · its alternatives →

  13. 13OS

    tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…

    2023 · openapi.security · its alternatives →

  14. 14DA

    Resource and domain modeling for quick APIs, CMSs, and applications.

    2019 · khalidx.github.io · its alternatives →

  15. 15

    Using serverless functions to provide an API for checking potential passwords against an enormous corpus of passwords leaked from security breaches. - jthomas/serverless-pwned-passwords

    2017 · github.com · its alternatives →

  16. 16

    Hi Hacker News, I’d like to introduce PipeGate, a lightweight, self-hosted proxy built with FastAPI. I created PipeGate as a fun little exercise to understand how tunneling services work under the hood. PipeGate allows you to expose your local servers to the internet, giving you full control over your setup.

    2024 · github.com · its alternatives →

  17. 17
    TrAPI▲29

    API Security Simplified!

    2025 · linkedin.com · its alternatives →

  18. 18

    Tunnel, inspect & mock localhost - no backend needed

    Apr 2026 · proxyhub.app · its alternatives →

  19. 19

    It's time we talked about something many developers, data analysts, and even web application servers are guilty of: downgrading PostgreSQL connection security. Too often, we see connections dropped from full TLS verification to "any TLS" (i.e., sslmode=require) or, even worse, plain text connections. Why? Because most cloud providers, like AWS or Google Cloud SQL, use non-public Certificate Authorities for PostgreSQL. The result? Unverified TLS connections because no one has time to set up all devices across an organization to trust custom certificate authorities. And here's the most…

    2024 · github.com · its alternatives →

  20. 20
    Apex▲14

    Serverless architecture with AWS Lambda

    2016 · github.com · its alternatives →

  21. 21

    Turn your database into a secure API in seconds with no code

    2025 · tryapibridge.com · its alternatives →

  22. 22

    Revisited an old experiment of mine (https://github.com/dan-v/awslambdaproxy): can AWS Lambda functions work as network proxies? This time using UDP NAT hole punching + QUIC tunnels. Client discovers public IP via STUN, writes session data to S3, which triggers a Lambda. Both endpoints punch UDP holes through their NATs, then establish a QUIC connection for encrypted traffic forwarding.

    2025 · github.com · its alternatives →

  23. 23

    We secure your cloud with easy to use tools

    2018 · its alternatives →

  24. 24

    Hi, Please check out my new library funcy. It's really simplified AWS Lambda APIs in my projects, so I thought I would open-source it. It strongly-types all request parameters, has support for CORS, content-negotiation, security headers, etc.. out of the box and works via a very simply declarative interface with progressive disclosure. It's currently pre-release, let me know what you think :)

    2024 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →