nowfound

AI · October 20, 2025

Detect and Deny (D2)

AI agent function level authorization for dummies

Detect and Deny (D2) launched on October 20, 2025 with 9 votes, #1,657 of 8,178 launches that month and more than 50% of that year's launches. The site was still online in September 2026, 1 year on.

What it does

Secure your LLM tools with easy peasy authorization. One decorator, instant security. Zero infrastructure.

Pigeon Labs builds the best AI pentester product on the market and delivers managed AppSec, managed bug bounty, AI/agent reviews, pentesting, and done-for-you remediation.

Other AI security companies sell platforms. We run the pentest, find what breaks, and hand your team the fixes. Start with the $1 pentest. We take the security work off your plate. Your engineers keep shipping. We own the test, the findings, and the fix list. Get the report procurement needs to clear the security review. We attack the AI features enterprise buyers actually ask about. For the businesses, startups, folks out there needing cybersecurity, pen tests, SOC II, .. checkout and follow @appsecinsights . Founders in NYC are super smart. Can save you money and help you out. They do $1 Pen tests and post about cybersec on their feed/substack “ You showed up and got the job done in a…from artoo.love

Does a similar job

all alternatives →
  • Upsolve Row-Level Security15d ago · upsolve.ai · ▲90

    Data permissions your AI agent can't talk its way past

  • TrueFoundry AI GatewayDec 2025 · truefoundry.com · ▲315

    Many teams connecting LLMs to external tools eventually encounter the same architectural issue: as more tools and agents are added, the integration pattern becomes an N×M mesh of direct connections. Each agent implements its own auth, retries, rate limiting, and logging; each tool needs credentials distributed to multiple places and observability becomes fragmented. We built LLM gateway with this goal to provide a single place to manage authentication, authorization, routing, and observability for MCP servers, with a path toward a more general agent-gateway architecture in the future. The…

  • Confident AI2024 · confident-ai.com · ▲86

    all-in-one LLM evaluation platform

  • Open-Source Gateway to Stop Tool-Abusing Prompt Injections2025 · archestra.ai · ▲9

    Hi HN, Matvey, Ildar, Joey, and Dominik here. If you're building LLM agents that use tools, you're probably worried about prompt injection attacks that can hijack those tools. We were too, and found that solutions like prompt-based filtering or secondary "guard" LLMs can be unreliable. Our thesis is that agent security should be handled at the network level between the agent and the LLM, just like a traditional web application firewall. So we built Archestra Platform: an open-source gateway that acts as a secure proxy for your AI agents. It's designed to be a deterministic firewall against…

  • I built a firewall for agents because prompt engineering isn't securityJan 2026 · github.com · ▲7

    Hi HN, I’m the creator of Cordum. I’ve been working in DevOps and infrastructure for years (currently in the fintech/security space), and as I started playing with AI agents, I noticed a scary pattern. Most "safety" mechanisms rely on system prompts ("Please don't do X") or flimsy Python logic inside the agent itself. If we treat agents as autonomous employees, giving them root access and hoping they listen to instructions felt insane to me. I wanted a way to enforce hard constraints that the LLM cannot override, no matter how "jailbroken" it gets. So I built Cordum. It’s an open-source…

  • Open-Source tool for automatic MCP API on top of your database for LLMs2025 · github.com · ▲5

    We’re building an open-source tool that makes it easy to expose secure, LLM-optimized APIs on top of your structured data—without manually designing endpoints or worrying about compliance. AI agents and LLM-powered applications need structured access to data, but traditional APIs and databases weren’t built with AI workloads in mind. Our tool automatically generates APIs that: - Filter out PII & sensitive data to comply with GDPR, CPRA, SOC 2, and other regulations. - Provide traceability & auditing, so AI apps aren’t black boxes, and security teams stay in control. - Optimize for AI…

More ai this month

the category →
  • Video model that turns script into viral social media videos

    AI · 18d ago · spira.ai

  • The browser where Claude Code and Codex work beside you

    AI · 17d ago · rill.love

  • Kolibri is Aleph Alpha

    AI · 19d ago · tej.as

  • Paintings by AI models: programs run through a simulation of oil paint.

    AI · 21d ago · stillwet.art

  • A real-time world model you can explore and change

    AI · 29d ago · world.pixverse.video

  • Hemory▲381

    Keep listening. Searchable memory for your AI agents.

    AI · 30d ago · hemory.com

Source: Product Hunt launch ↗

Launched alongside, October 2025

the whole month →
  • Our first coding model and new interface for agents

    AI · Oct 2025 · cursor.com

  • Flask▲806

    Notion + Loom, for video collaboration.

    AI · 2025 · flask.do

  • I went down the rabbit hole on a side project and ended up building this: Strange Attractors(https://blog.shashanktomar.com/posts/strange-attractors). It’s built with three.js. Working on it reminded me of the little "maths for fun" exercises I used to do while learning programming in early days. Just trying things out, getting fascinated and geeky, and being surprised by the results. I spent way too much time on this, but it was extreme fun. My favorite part: someone pointed me to the Simone Attractor on Threads. It is a 2D attractor and I asked GPT to extrapolate it to…

    AI · Oct 2025 · blog.shashanktomar.com

  • Orchestra▲793

    A chat-centric workspace for builders and modern teams

    Work · 2025 · orch.so

  • Hey all, I built this. It’s not trying to capture every autistic experience (that’d be impossible). It’s based on my own lived experience as well as that of friends on the spectrum. I'm trying to give people a feel for what masking, decision fatigue, and burnout can look like day-to-day. That’s hard to explain in words, but easier to show through choices and stats. I'm not trying to "define autism". I’ve gotten good feedback here about resilience, meds, and difficulty tuning. I’ll keep tweaking it. If even a few people walk away thinking, "ah, maybe that’s why my coworker struggles in those…

    Life & fun · 2025 · autism-simulator.vercel.app

  • Director▲768

    Lovable for web automation

    AI · 2025 · director.ai