nowfound

Dev tools · August 29, 2025

SecureAF

Don't get your knickers in a knot. We were surprised too. We are the team behind TideCloak which we shared on HN previously (https://news.ycombinator.com/item?id=42460131). This time we ran an experiment. What happens when you apply a fundamentally different security model to the worst possible development process? Behold... SecureAF https://secureaf.lovable.app/ Build video 6 mins https://youtu.be/tx5MsJ3jeQw The code and UI are questionable and the quality assurance is non-existent. But the security model holds by treating even us as malicious,…

SecureAF launched on August 29, 2025 with 7 votes, #3,174 of 8,530 launches that month. The site was still online in September 2026, 1 year on.

What it does

The code is rubbish. The UI questionable. QA nonexistent. But your data and identity are safe, locked with cryptographic keys no one, not hackers, vendors or even us, will ever hold.

A personal vault for notes and files, vibe coded. Locked by TideCloak with keys nobody will ever hold and zero knowledge password authentication.

In the maker’s words, at launch

Don't get your knickers in a knot. We were surprised too. We are the team behind TideCloak which we shared on HN previously (https://news.ycombinator.com/item?id=42460131). This time we ran an experiment. What happens when you apply a fundamentally different security model to the worst possible…

Does a similar job

all alternatives →
  • TideCloak – Decentralized IAM for security and user sovereignty2024 · github.com · ▲54

    Hey HN! After 6 years of R&D, our small team is excited to share our project TideCloak - an IAM designed to help developers move fast without worrying about catastrophic breaches or overpowered admins with keys to the kingdom. Traditional IAMs rely on centralized authority - admins, root certificates, and decryption keys - which create glaring vulnerabilities in a breach. To address this, we’ve integrated Keycloak (Red Hat’s IAM) with a decentralized key architecture powered by our (academically validated) Ineffable Cryptography. Here’s the idea: keys are split across a decentralized network…

  • keychains.devFeb 2026 · keychains.dev · ▲177

    Hi HN — I’m a heavy OpenClaw user and, like many others, I’ve been thinking about how to give these new “unleashed” agents secure access to my accounts. Agents need API access to be useful. But API keys are long-lived secrets. And agents are not secure environments. So I built something for myself that quickly turned into a product: keychains.dev. The idea is simple: agents never see raw credentials. With Keychains.dev: • Agents make API calls via a drop-in replacement for curl or JavaScript’s fetch() • They use template variable names instead of embedding credentials • The request is…

  • JR
    Just raised $17M for a no BS application security platform2024 · ▲15

    Hello Hacker News! We’re Willem, Roeland, Felix and Madeline from Aikido Security (https://aikido.dev/) We’re building a “no BS’ application security platform. It’s the platform we wish existed, but couldn’t find. Willem, our CTO had to manage (application) security at many of his previous startups, and honestly, hated it. Most security tools we had to use made us feel dumb. They were super complex and riddled with false positives. Their platform was behind the book a demo button. They had intransparent pricing models and honestly charged us way too much. We think most of…

  • AxKeyStoreFeb 2026 · github.com · ▲31

    Hi HN, I built AxKeyStore, an open-source CLI tool for managing secrets that uses your own private GitHub repository as encrypted storage. The idea is simple: → All encryption happens locally. → Secrets are stored as encrypted blobs in your private repo. → GitHub is treated as untrusted storage. → No plaintext secrets ever leave your machine. → No plaintext secrets are stored on disk. Most secret managers either require a hosted backend, a self-hosted server, or trusting a SaaS provider. I wanted something that: → Requires zero infrastructure → Uses tooling developers already have → Keeps…

  • Secure end-to-end client sessions and API calls using crypto key pairs2022 · github.com · ▲9

    Hello. I made this project as an experiment in using key cryptography for user identity in a client server model, and for some future peer to peer projects that I am working on. I am looking for feedback, please let me know what you think. Also, Merry Christmas to HN! :-)

  • An old school forum on an open protocol – your identity is a keypair22d ago · nostr-proto.org · ▲17

    This is a community forum for people who use, build, and run things on Nostr. Whether you are taking your first steps with keys and zaps, ship relays and clien…

More dev tools this month

the category →
  • /dev/null▲490

    a social network for devs

    Dev tools · 3d ago · dev-null.sh

  • open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 28d ago · github.com

  • Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 26d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 23d ago · openbot.run

  • Talanoa▲346

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 21d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 29d ago · corespeed.io

Source: Product Hunt launch ↗ · launch text quoted in part

Launched alongside, August 2025

the whole month →
  • Trace▲1,555

    Workflow Automations for the Human 👾 AI Workforce

    AI · 2025 · trace.so

  • I built the world's most impractical 1000-pixel display and anyone in the world can draw on it. It draws a single pixel at a time and takes 30-60 minutes to complete a single image. Anyone can participate in the project by voting for the next image to be drawn, and submitting images. https://kilopx.com/

    Work · 2025 · benholmen.com

  • Job boards are dead. Your network is alive

    AI · 2025 · contra.com

  • Kitten TTS is an open-source series of tiny and expressive text-to-speech models for on-device applications. We are excited to launch a preview of our smallest model, which is less than 25 MB. This model has 15M parameters. This release supports English text-to-speech applications in eight voices: four male and four female. The model is quantized to int8 + fp16, and it uses onnx for runtime. The model is designed to run literally anywhere eg. raspberry pi, low-end smartphones, wearables, browsers etc. No GPU required! We're releasing this to give early users a sense of the latency and voices…

    AI · 2025 · github.com

  • I was wondering how I can arrange objects along a spherical helix path, and read some articles on it. I ended up learning about parametric equations again, and make this visualization to document what I learned: https://visualrambling.space/moving-objects-in-3d/ feel free to visit and let me know what you think!

    Life & fun · 2025 · visualrambling.space

  • For HTML Day 2025 [1], I made a web service that displays the current sky at your approximate location as a CSS gradient. Colours are simulated on-demand using atmospheric absorption and scattering coefficients. Updates every minute, without the use of client-side JavaScript. Source code and additional information is available on GitHub: https://github.com/dnlzro/horizon [1] https://html.energy/html-day/2025/index.html

    Dev tools · 2025 · sky.dlazaro.ca