CATAAM

What it does

Cataam is an enterprise GRC and exposure platform by TheMarkups Canada Inc. We unify continuous SOC 2/GDPR evidence automation with advanced ASM, internal ASM, and BAS—featuring AI-driven Red Teaming for active threat planning. Built for the full security ecosystem, Cataam includes a native CISO/CPA reseller architecture and a collaborative marketplace allowing compliance partners to seamlessly exchange leads, streamline multi-tenant client management, and accelerate audit delivery.

Automate SOC 2, ISO 27001, HIPAA & PCI-DSS evidence with built-in attack surface monitoring and breach simulation — about 50% below Qualys, Rapid7 & Tenable.

Unified GRC platform for SOC 2, ISO 27001, HIPAA, PCI-DSS & NIST — with built-in internal attack surface management (iASM) and breach & attack simulation (BAS). From automated evidence collection to internal attack surface management and breach simulations — CATAAM covers the full security and compliance lifecycle for organizations and the firms that serve them. Manage SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF, COBIT 5, ITIL, and more from a single platform. Cross-framework mapping automatically identifies overlapping controls so you implement them once and satisfy multiple standards simultaneously. Automatically collect evidence from your connected tools — AWS, GitHub, Jira, and more.…from cataam.com

• 
  Ashera AIFeb 2026 · ▲99

  GTM, Run by AI

• 
  Abricam2024 · abricam.ir · ▲8

  Smart security, for a better future

• 
  Automated red teaming for your LLM app2024 · promptfoo.dev · ▲23

  Hi HN, I built this open-source LLM red teaming tool based on my experience scaling LLMs at a big co to millions of users... and seeing all the bad things people did. How it works: - Uses an unaligned model to create toxic inputs - Runs these inputs through your app using different techniques: raw, prompt injection, and a chain-of-thought jailbreak that tries to re-frame the request to trick the LLM. - Probes a bunch of other failure cases (e.g. will your customer support bot recommend a competitor? Does it think it can process a refund when it can't? Will it leak your user's address?) -…

• 
  Conduct a Step-by-Step Risk Assessment, Together with Your Project Team2019 · teamsuccess.io · ▲16

  Product Owner and program manager with an engineering background. GTM, localization and compliance coordination (GDPR, EU AI Act, ISO 27001). Helsinki-based, working with international software teams.

• 
  Heeler2024 · heeler.com · ▲13

  Shift left with context: ASPM, SCA, Runtime Threat Modeling

• 
  GitHub2025 · github.com · ▲12

  Modular AI threat detection & GDPR logging for LLMs

• 
  Run full iOS 16.5 firmware on Android Devices▲504

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 1d ago · github.com

• 
  /dev/null▲493

  a social network for devs

  Dev tools · 4d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 29d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 24d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 22d ago · talanoa.email

• 
  Brew ▲900

  Like Claude design for email marketing

  AI · May 2026 · brew.new

• 
  Kilo Code for VS Code▲896

  Parallel agents, diff reviewer, and multi-model comparisons

  Dev tools · May 2026 · kilo.ai

• 
  StoreClaw▲806

  Grow your store profits with agents that know how to sell

  AI · May 2026 · storeclaw.ai

• 
  PollyReach▲795

  Give your agent a real number and voice to make calls.

  AI · May 2026 · pollyreach.ai

• 
  Needle: We Distilled Gemini Tool Calling into a 26M Model▲776

  Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…

  Life & fun · May 2026 · github.com

• 
  Files.md – Open-source alternative to Obsidian▲730

  🌱 Private, quiet space for thinking. Simple app for .md files. - zakirullin/files.md

  Dev tools · May 2026 · github.com