Doberman

What it does

Doberman is an open-source, runtime security layer for AI coding agents. It sits between the agent and its tools and gives every action a PASS, AUTH or BLOCK verdict before it runs. A deterministic core catches known dangerous behavior, while an adaptive layer learns what’s normal for you and raises risk when something looks off. It fails closed and learning is raise-only. Works with Claude Code, Codex, OpenClaw and MCP clients like Cursor.

Open-source AI agent security. Doberman gates every tool call from Claude Code, Codex, or any MCP agent with a PASS / AUTH / BLOCK verdict before it runs.

Doberman sits between your AI coding agent and its tools as a transparent Model Context Protocol (MCP) proxy, turning every action into PASS / AUTH / BLOCK before it runs. Prompt injection, tool poisoning, and data exfiltration all end in a tool call. Doberman is the code that call has to pass through. Any error, uncertainty, or unhandled case denies the action. Every path to a tool runs through the decision engine. Guardrails and adaptive learning can auto- tighten , never silently loosen. Every weakening requires explicit, 2FA-gated, audited human approval. Hard blocks are identical in every mode : secret exfiltration, destructive commands, role-boundary violations. The dial moves only…from trydoberman.dev

• 
  Doberman: The AI watchdog that stops Claude from deleting your database19d ago · github.com · ▲9

  Landing Page: https://www.trydoberman.dev/ The Problem: AI guardrails only protect against 89% of dangerous commands. This may seem pretty good until you think of it as a lock that lets 1 in 9 intruders in. What is Doberman: Doberman is a two layer security system wrapped around your LLM monitoring every input, output and tool call. The first layer is deterministic based on state of the art security guidelines, the second layer is dynamic, learning from your use and personal preferences. How is Doberman different: It is a dynamic two-layer security system that sits at runtime…

• 
  HOL GuardJul 2026 · ▲106

  The 1st Firewall for AI Agents

• 
  Masko CodeMar 2026 · ▲200

  A mascot that watches Claude Code for you

• 
  ClawSecureMay 2026 · ▲247

  The AI-Powered Antivirus for AI Agents

• 
  doXmindFeb 2026 · ▲79

  AI editor with agents: legal research, data analysis & more

• 
  CtrlAIMar 2026 · ▲104

  Transparent proxy that secures AI agents with guardrails

• 
  I trained a 125M model to autocomplete piano on-device▲598

  I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.

  AI · 16d ago · simedw.com

• 
  Astute▲585

  Automate your B2B brand going viral, with new media creators

  AI · 18d ago · company-app.joinastute.com

• 
  Grok Bot▲547

  AI teammates that you can give real work to

  AI · 25d ago · x.ai

• 
  Needle2: 14MB agentic LLM for phones, wearables, smart home and robots▲537

  Hey HN, Henry from Cactus here! We previously released Cactus Needle, a 14MB agentic LLM for tool call, device use, and structured extraction for phones, wearables, smart homes, small robots and microcontrollers. We got really great feedback here, and have now incorporated the suggestions to release Needle 2. The whole model is a single 14MB binary that runs a full session in 28MB of RAM; 45m parameters at 2bit compression. Needle hits 500 tokens/sec decode speed on a Raspberry Pi 5, sits between 400-1,500 tokens/sec on VR devices like Meta Quest 3S and Apple Vision Pro, and ranges…

  AI · 26d ago · cactuscompute.com

• 
  Coldtea.ai▲512

  Make your software self-driving

  AI · 30d ago · coldtea.ai

• 
  Soloop▲472

  Approval-first Agent OS for solo founders

  AI · 30d ago · soloop.io

• 
  Open-Source eInk Bike Computer▲375

  OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.

  Dev tools · 1d ago · opentrailpaper.com

• 
  Running 104GB Qwen3.8-Flash-Next on 48GB Mac with at ~12 tok/s▲237

  Run Qwen3.8-Flash-Next (125B MoE, 104 GB at 4-bit) on Macs with a fraction of that RAM by streaming experts from SSD. MLX + Swift, Ollama-compatible API. - carloslfu/slotstream

  Dev tools · 4d ago · github.com

• 
  TERMy – A fast terminal assistant that does not use LLMs▲182

  NPC-Forge is a framework for building conversational agents that run on the CPU without relying on machine learning or LLMs. - NPC-Forge/docs/development.md at main · gioblu/NPC-Forge

  AI · 2d ago · github.com

• 
  Weedout – Safari extension that hides YouTube AI-labeled videos▲182

  Weedout is a Safari extension that filters out videos YouTube labels as “Made with AI”.

  AI · 4d ago · masteranza.github.io

• 
  HN Match Maker – Matching "Who Wants to Be Hired?" With "Who's Hiring?"▲123

  Find your next hire or your next role from Hacker News monthly threads. AI-powered matching between candidates and job postings.

  AI · 4d ago · hnmatchmaker.com

• 
  OwnTime – a chess clock for your day's priorities▲110

  I made OwnTime to balance between competing priorities in my life. The idea is based on two main influences: the concept of "roles" from "The 5 Choices" (2015), and my repeated failure to effectively implement time blocking due to the necessary flexibility in my role. The app allows you to define time budgets, which are not much more than a few mutually exclusive countdown timers. The UX is essentially that of a chess clock for an arbitrary number of players with configurable time. The whole point of the app is to kick you out of the running role/priority when its time is up. One…

  Life & fun · 4d ago · owntime.app