Arnica
Behavior based software supply chain security
Arnica launched on May 11, 2022 with 97 votes, #304 of 2,942 launches that month and more than 75% of that year's launches. The site was still online in September 2026, 4 years on.
What it does
Software supply chain attacks have caught the security community off-guard. Arnica, starting with GitHub & Azure DevOps, addresses the two primary root causes: 1) 🪄 excessive permissions to developer tools 2) 🥸 lack of abnormal behavior detection
Enhance your application security with Arnica's automated tools. Secure your code, streamline development processes, and ensure compliance with ease.
Govern and control the entire AI development lifecycle. Uplevel AppSec teams and increase development velocity with 100% coverage and adoption. Inject your security policy directly into Copilot, Cursor, and Claude Code at the point of generation. The right owner gets the right fix at the right time with developer-native workflows. Address 92% of risks before they ever reach production. Take control of AI-generated code with Arnica's AI-native governance layer. Scan AI code with advanced AI SAST, enforce organizational standards through agentic rules, and ensure every AI-generated line aligns with your security requirements. Scan for meaning and intent, not just patterns. Identify…from arnica.io
Does a similar job
all alternatives →
Tips to stay safe from NPM supply chain attacks2025 · github.com · ▲96Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!
Socket for GitHub 1.02022 · socket.dev · ▲91Secure your JavaScript supply chain – block malware packages
Free secrets scanning for unlimited private GitHub repos2022 · arnica.io · ▲19My name is Nir! I am one of the three co-founders of arnica.io. I’ve worn many hats in cyber security over the years – sys admin, pen-tester, security architect, and Chief Information Security Officer (CISO). What really gets me excited about my work is making security easy and effective for developers and ops teams! In my last role, at one of the top 3 FinTechs, following the attack against Solarwinds, the CEO asked me what we are doing to secure our software supply chain. I met with 15+ vendors, did a few POCs, but unfortunately each solution either increased operational cost or was too…
- PSProactive Security Monitoring for GitHub Actions Workflows2024 · ▲32
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack. As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside…
Chainloop, A Software Supply Chain Attestation solution devs won't hate2023 · github.com · ▲45Hi, my name is Miguel and I am very happy to share what's been months worth of work :) The project has rough edges for sure, but any early feedback, comments or concerns are appreciated! === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain Security. You feel pretty good about the state of things already, your developer teams are signing their commits, deliverables, scanning for vulnerabilities,… Life is good! Then you realize that you are not compliant with the latest security requirements. You get referred to…
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 27d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 25d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 22d ago · openbot.run
Talanoa▲340Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 27d ago · corespeed.io
Source: Product Hunt launch ↗
Launched alongside, May 2022
the whole month →
Peerlist▲1,049A professional network w/ robust work profiles at its core
Life & fun · 2022 · peerlist.io
Switchboard▲768Hey HN this is Daniel, I'm excited to share Airtop with the community! Airtop enables AI agents to seamlessly browse and automate any website — even ones with complex authentication like MFA or OAuth. Whether you need to scrape, interact with dynamic content, or automate tasks across multiple browsers, Airtop's cloud-based infrastructure makes it scalable and accessible. Why Airtop? — AI-Driven Web Automation: Automate interactions with any site through natural language commands even if they include human-in-the-loop scenarios. — Authentication Ready: Airtop handles websites requiring…
Work · 2022 · airtop.ai
Automagically reverse-engineer REST APIs via capturing traffic - alufers/mitmproxy2swagger
Growth · 2022 · github.com
