Talon - Security for Vibe Coded Apps
Find your app's security blind spots before attackers do
What it does
I've seen too many stories of founders discovering their Stripe keys were public for months, or their Firebase database was wide open. The cleanup is expensive and embarrassing. I built Talon partly to help other founders catch this stuff early, and partly as a forcing function for myself. When you build the tool, you can't ignore the findings. If you shipped something recently with Lovable, Bolt, Cursor, or just moved fast and didn't think about security, run the free scan. Takes 30 seconds.
Does the same job
all alternatives →- SIShadow IT Scan – Uncover SaaS Apps, Users and Risky OAuth Scopes2024 · accessowl.io · ▲69
Hey HN, TL;DR: We’ve launched a free version of our Shadow IT scanner to identify which SaaS apps are used in your company, who uses them, and if they have high-risk OAuth scopes. Philip and I went through YC with AccessOwl in 2022. We started the company because, in our previous roles, we struggled to track all the SaaS apps, users, and granted OAuth scopes. The Shadow IT scanner started as a small feature within AccessOwl, which manages SaaS vendors and user accounts centrally. But a standalone scanner would have made our lives so much easier in our previous roles. So, we thought, why not…
Vibesecur — Launching SoonMay 2026 · vibesecur.com · ▲2Security scanner for Lovable, Cursor & Bolt apps
Lazy Guard - Simple Website SecurityMar 2026 · lazyguard.com · ▲1Find Your Projects Security Vulnerabilities in <60 Seconds
More ai this month
the category →
I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.
AI · 17d ago · simedw.com
Astute▲585Automate your B2B brand going viral, with new media creators
AI · 18d ago · company-app.joinastute.com
Hey HN, Henry from Cactus here! We previously released Cactus Needle, a 14MB agentic LLM for tool call, device use, and structured extraction for phones, wearables, smart homes, small robots and microcontrollers. We got really great feedback here, and have now incorporated the suggestions to release Needle 2. The whole model is a single 14MB binary that runs a full session in 28MB of RAM; 45m parameters at 2bit compression. Needle hits 500 tokens/sec decode speed on a Raspberry Pi 5, sits between 400-1,500 tokens/sec on VR devices like Meta Quest 3S and Apple Vision Pro, and ranges…
AI · 27d ago · cactuscompute.com
Launched alongside, March 2026
the whole month →
Switch from ChatGPT to Claude with import memory feature
AI · Mar 2026 · claude.com
