Elara App
Hi HN! I’m the developer of Elara, a tool that automatically scans your code for security issues like misconfigurations, secrets, and risky packages, so you can focus on building without stressing about all this stuff. It’s designed to be simple and fast. I see so many people launching products online without even knowing what security risks they might have. If you’re a developer or into tech, you know how hard it is to keep systems safe. Yet shockingly it feels like nobody really cares. I want to help folks catch these issues early, before they get burned. Elara runs multiple security…
Elara App launched on July 14, 2025 with 15 votes, #939 of 9,223 launches that month and more than 75% of that year's launches. The site was not reachable when checked in September 2026.
What it does
Elara automatically detects security vulnerabilities in your code. Our AI-powered scanner integrates with GitHub, finds real threats, suggests fixes, and speaks developer language, not security jargon. Set up in minutes, secure your code continuously.
In the maker’s words, at launch
Hi HN! I’m the developer of Elara, a tool that automatically scans your code for security issues like misconfigurations, secrets, and risky packages, so you can focus on building without stressing about all this stuff. It’s designed to be simple and fast. I see so many people launching products online without even…
Does a similar job
all alternatives →
KastraJul 2026 · kastra.ai · ▲332Hi HN, Fernando and I built Kastra. Kastra intercepts AI agent tool calls and evaluates them against deterministic policies before they execute. We built this product to control pre- and post-inference workloads. This is aimed at developers using coding agents like Claude Code, Codex, Cursor, and OpenClaw. Kastra pushes an allow, hold, and deny decision before the action runs. You can build these policies in plain English from the web app. The interception engine evaluates the tools, targets, and parameters of every action at sub 1ms at a scale of billions of interceptions per day. We also…
ItoAug 2026 · ito.ai · ▲449I'm Evan and I made Ito.ai It's code review that actually runs your code. The result is that it finds more bugs with a smaller false positive rate. You get screenshots, videos, and run logs. I built Ito because manual verification sucks and I thought I could automate it. I've been a professional developer for 15 years and now more than ever, I'm just spending time making sure things work. I looked into all of the other agentic testing tools that click around a url you give them and frankly, they sucked. They just didn't work. I figured to be able to actually testing things you need to run…
Perfai SecurityJul 2026 · perfai.ai · ▲291Find & fix live vulnerabilities in Vibe Apps with 1-prompt.
- PSProactive Security Monitoring for GitHub Actions Workflows2024 · ▲32
Hey HN, it's Farrukh and Umar. We're building listen.dev–a tool for proactive security monitoring in GitHub Actions to secure software releases from supply chain threats. Why we built this: As friends and collaborators for over a decade, we've been working on various startup ideas in dev tools and infrastructure. In 2017, while building an ML ops toolkit on Kubernetes, we got hacked. During a pilot with a fintech customer, our cluster became victim to a crypto-jacking attack. As it turned out, a dependency in our container base image contained malware (a Monero miner) which triggered inside…
AttackerViewFeb 2026 · attackerview.com · ▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Appcan2025 · appcan.io · ▲7We’re building Appcan, a security testing platform. While running scans ourselves, we kept hitting the same problem: the reports were accurate, but hard to act on. Most scan outputs are long lists of findings with severity labels, but very little context. You still have to decide what actually matters, what to fix first, and what can wait. So we added an AI interpretation layer on top of existing scan results. Instead of just showing raw findings, the AI reads the report as a whole and produces a short, structured summary explaining what the real risks are, why they matter, and where to…
More dev tools this month
the category →
Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.
Dev tools · 20h ago · github.com
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 29d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 27d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 24d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 22d ago · talanoa.email
Source: Product Hunt launch ↗ · launch text quoted in part
Launched alongside, July 2025
the whole month →
Trickle - Magic Canvas ▲1,064Hey HN! Introducing Trickle Magic Canvas: the world’s first Agentic Canvas, where you can visually co-create apps and websites with AI, from idea to production. Why is a canvas better? Most AI tools today rely on linear chats or text prompts. We believe that limits creativity and clarity. Canvas changes the game. 1. Every version & page at a glance. Each page and sub-page lives on a timeline. You can quickly browse, edit, and preview progress like a living, visual document — no more digging through chat logs or scattered states. 2. The canvas is the context. Unlike linear chats, you can…
AI · 2025 · trickle.so
- TB
Life & fun · 2025 · trytender.app
Today marks ten years, 3653 consecutive days, of running at least one mile every day under the USRSA rules [1]. To celebrate, I built an interactive dashboard that turns a decade of GPX files into charts you can explore. Running has truly changed my life: I've made lifelong friends, explored beautiful places, and more importantly invested into my own health and fitness, which I'm starting to see the positive benefits as I get older. The stack is pretty simple: a NextJS app, with a Postgres database to keep all my running data, and all the stats are pre-computed and cached in Redis, so I…
Dev tools · 2025 · nodaysoff.run
Made this website as an exercise in vibe-coding and GCP. It was posted about a few times around the internet, on sites like Morning Brew (https://www.morningbrew.com/issues/business-buzzkill), MetaFilter (https://www.metafilter.com/209703/Draw-A-Fish), boingboing.net, etc. I think it's cute! I built a basic CNN trained against penises and swastikas, and then anything that doesn't hit the 63% confidence score gets sent to a mod queue, a vibe-coded fish-tinder…
AI · 2025 · drawafish.com
Hi HN - I made a site that takes a UK postcode, grabs the local MP's information and generates an AI mockup of what their ID might look like. It's a small, silly protest at the stupidity of the Online Safety Act that just came into force. edit - My open AI credits got hugged to death, please use a known postcode (like one from Kier Starmer's constituency, WC2B6NH) in the meantime.
AI · 2025 · use-their-id.com