Kekkai – a simple, fast file integrity monitoring tool in Go

In plain words

Kekkai is a file integrity monitoring tool built in Go for detecting unauthorized code modifications in production environments. It records file content hashes during deployment and verifies them later to catch tampering from attacks like OS command injection. Designed for web applications on AWS EC2, it checks only file content rather than metadata to avoid false positives, includes symlink protection, and stores verification data securely in S3 with restricted access permissions. The tool runs as a single Go binary with minimal dependencies.

written from the facts on this page · September 2026

From the sources

A lightweight Go tool for detecting file tampering by comparing content-based hashes stored securely in S3. - catatsuy/kekkai

In the maker’s words, at launch

I built a tool called *Kekkai* for file integrity monitoring in production environments. It records file hashes during deployment and later verifies them to detect unauthorized modifications (e.g. from OS command injection or tampering). Why it matters: * Many web apps (PHP, Ruby, Python, etc.) on AWS EC2 need a…

• 
  KloudMate2023 · kloudmate.com · ▲279

  Logs, metrics, and traces in one platform. KloudMate helps engineers find and fix issues fast. Ask the built-in AI assistant to help track down the cause.

• KI
  Kexa.io – Open-Source IT Security and Compliance Verification2025 · ▲81

  Hi HN, We're building Kexa.io (https://github.com/kexa-io/Kexa), an open-source tool developed in France (incubated at Euratech Cyber Campus) to help teams automate the often tedious process of verifying IT security and compliance. Keeping track of configurations across diverse assets (servers, K8s, cloud resources) and ensuring they meet security baselines (like CIS benchmarks, etc.) manually is challenging and error-prone. Our goal with the open-source core is to provide a straightforward way to define checks, scan your assets, and get clear reports on your security…

• KI
  Kekkai – Interactive security triage in the terminalFeb 2026 · ▲6

  Hey HN, As an AppSec engineer, I’ve spent a lot of time running and tunning open-source security scanners like Trivy, Semgrep, Gitleaks and Dojo. What I have found is that running them is easy, reviewing the results, not so much. Each tool outputs different JSON, false positives pile up, and CI either becomes noisy or blocks everything. So I built Kekkai (formerly Hokage), a small open-source CLI that wraps these scanners and focuses specifically on human triage. Kekkai runs the scanners in isolated Docker containers, normalizes their outputs into a single format, and provides an interactive…

• 
  I built an open-source data pipeline tool in Go2024 · github.com · ▲200

  Every data pipeline job I had to tackle required quite a few components to set up: - One tool to ingest data - Another one to transform it - If you wanted to run Python, set up an orchestrator - If you need to check the data, a data quality tool Let alone this being hard to set up and taking time, it is also pretty high-maintenance. I had to do a lot of infra work, and while this being billable hours for me I didn’t enjoy the work at all. For some parts of it, there were nice solutions like dbt, but in the end for an end-to-end workflow, it didn’t work. That’s why I decided to build an…

• 
  KEKKAI 結界2022 · chromewebstore.google.com · ▲6

  Web3 Wallet Security Plugin

• 
  Gonzo – A Go-based TUI for log analysis (OpenTelemetry/OTLP support)2025 · github.com · ▲74

  We built Gonzo to make log analysis faster and friendlier in the terminal. Think of it like k9s for logs — a TUI that can ingest JSON, text, or OpenTelemetry (OTLP) logs, highlight and boil up patterns, and even run AI models locally or via API to summarize logs. We’re still iterating, so ideas and contributions are welcome!

• 
  Run full iOS 16.5 firmware on Android Devices▲518

  Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.

  Dev tools · 2d ago · github.com

• 
  /dev/null▲492

  a social network for devs

  Dev tools · 5d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 30d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 25d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 22d ago · talanoa.email

• 
  YouMind▲1,223

  The first AI creation studio where learning meets writing

  AI · 2025 · youmind.com

• 
  A store that generates products from anything you type in search▲1,184

  The site hit #1 on HN about a year ago. Got enough traffic that I turned it into a proper API. What's there: - REST API — 35k products, manually filterable by category, free key, 60 req/min - CLI — npx anycrap random -c food - faker.js plugin — bundled, no API call, works offline - HuggingFace dataset — full 35k rows for ML/training https://anycrap.shop/developers

  AI · 2025 · anycrap.shop

• 
  Term.everything – Run any GUI app in the terminal▲1,094

  I made a built-from scratch Wayland Compositor to display any GUI app* in the terminal! I think there is a lot of unexplored potential in custom Wayland compositors, a lot of really cool things you can embed existing applications into! So, I started with embedding apps into the terminal because that is the easiest input/output (output is just utf-8 and I use the great `chafa` library for that, and I just read from stdin for the input). If you have any other ideas for cool Wayland compositors, let me know. I purposedly wrote 80% the app in Typescript to appeal to the most developers and…

  Dev tools · 2025 · github.com

• IR
  I recreated Windows XP as my portfolio▲1,032

  Years ago I stumbled across a basic version of this concept and it stuck with me. I knew if I was ever going to take on such a project, it would need to be flawless, but without coding experience it was just another idea that would never happen. By the end of 2024, as AI coding tools exploded everywhere, I finally had a way to make it real. I started from zero knowledge and spent months collaborating with AI agents as a learning experience. Every pixel and every function went through me. The AI translated what I asked for into code, but every decision was human. I didn't use existing OS…

  AI · 2025 · mitchivin.com

• 
  Ada▲910

  Your own AI data analyst

  AI · 2025 · ada.im

• 
  VidAU - AI Video▲868

  Turn Product Images into Scroll-Stopping Video Ads

  Growth · 2025 · vidau.ai