EDAMAME Security
Axios / LiteLLM hacks behavioral detector app for Mac/PC
EDAMAME Security launched on April 1, 2026 with 68 votes, #791 of 21,248 launches that month and more than 95% of that year's launches.
What it does
Runtime security for developers and AI agents. EDAMAME watches what code does on your machine — not what it claims to be. It detects credential harvesting, C2 beaconing, and temp-directory execution through behavioral invariants that hold across every supply chain attack variant. Four independent detection layers, 60-second cycles, zero configuration. Proven against Trivy, LiteLLM, and axios hacks. Free, open source, works on macOS/Windows/Linux.
Trust and security posture for AI agents and the machines they run on — verify every laptop, CI/CD runner and agent host, then bind access to that proof. No MDM
And give security leaders live control over agent blast radius. EDAMAME is the AI agent trust layer for every agent, on laptops, remote, or headless on CI/CD runners and servers: it proves security posture and runtime behavior from outside the agent, then binds access to code, secrets, production, and critical company resources to that proof. Humans, CI runners, and AI agents now participate in the same trust story. EDAMAME flips the model: workstations prove posture, hosts prove hardening, and AI agents prove runtime behavior — observed independently from outside the agent, at the endpoint boundary. Attack-pattern findings show when code starts touching credentials or sending data it…from edamame.tech
Does a similar job
all alternatives →
HackNotice Premium2019 · app.hacknotice.com · ▲69Real-time insights into potential breaches and data leaks
KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Automated red teaming for your LLM app2024 · promptfoo.dev · ▲23Hi HN, I built this open-source LLM red teaming tool based on my experience scaling LLMs at a big co to millions of users... and seeing all the bad things people did. How it works: - Uses an unaligned model to create toxic inputs - Runs these inputs through your app using different techniques: raw, prompt injection, and a chain-of-thought jailbreak that tries to re-frame the request to trick the LLM. - Probes a bunch of other failure cases (e.g. will your customer support bot recommend a competitor? Does it think it can process a refund when it can't? Will it leak your user's address?) -…
- OSOpen-source project that use LLM as deception system2025 · ▲10
Hello everyone I wanted to share a project I've been working on that I think you'll find really interesting. It's called Beelzebub, an open-source honeypot framework that uses LLMs to create incredibly realistic and dynamic deception environments. By integrating LLMs, it can mimic entire operating systems and interact with attackers in a super convincing way. Imagine an SSH honeypot where the LLM provides plausible responses to commands, even though nothing is actually executed on a real system. The goal is to keep attackers engaged for as long as possible, diverting them from your real…
- OVOnline Vulnerability Scanner for Ethereum Smart Contracts2017 · tool.smartdec.net · ▲16
More dev tools this month
the category →
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 20d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Product Hunt launch ↗
Launched alongside, April 2026
the whole month →
- AG
Thought the resources for GPU arch were lacking, so here we are
Life & fun · Apr 2026 · jaso1024.com
Built a ~9M param LLM from scratch to understand how they actually work. Vanilla transformer, 60K synthetic conversations, ~130 lines of PyTorch. Trains in 5 min on a free Colab T4. The fish thinks the meaning of life is food. Fork it and swap the personality for your own character.
AI · Apr 2026 · github.com
I made a laptop stand out of solid concrete, in the style of brutalist architecture, with themes of urbex and urban decay
Life & fun · Apr 2026 · sam-burns.com
With social media and now AI, its important to keep the indie web alive. There are many people who write frequently. Blogosphere tries to highlight them by fetching the recent posts from personal blogs across many categories. There are two versions: Minimal (HN-inspired, fast, static): https://text.blogosphere.app/ Non-minimal: https://blogosphere.app/ If you don't find your blog (or your favorite ones), please add them. I will review and approve it.
AI · Apr 2026 · text.blogosphere.app