Vigil
API Security and Compliance
What it does
A minimal PII-safe proxy on AWS (API Gateway + Lambda) using the Serverless Framework. It redacts emails & SSNs from request bodies and (optionally) tests Postgres connectivity.
Does a similar job
all alternatives →
- LPLocal Privacy Firewall-blocks PII and secrets before ChatGPT sees themDec 2025 · github.com · ▲111
OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…
- IVI've developed an open-source proxy server for front end applications2024 · github.com · ▲11
Hey Everyone! I’ve recently been working on an open-source proxy server to help front end applications securely access third party APIs that require confidential API keys without the need to create your own backend. I would love to get some feedback and hear what you think!
- IVI've built Routify, a global serverless API gateway2024 · routify.to · ▲8
Hello HN, for the past couple of months I've been working on Routify and wanted to share the progress made so far and hopefully get your opinion/feedback on it. Routify is a global serverless API gateway which handles routing, authentication, rate limiting, load balancing, monitoring, transformation etc (with more coming soon). Routify makes it easier to manage and secure public APIs. It's distributed across many regions globally and acts as a proxy between your clients and your services. You can configure it through the interface in a matter of minutes (no code required). There are…
- OSOpenapi.security, a fast security checker for REST-based API2023 · openapi.security · ▲15
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
More dev tools this month
the category →
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
Open-source GTM skills for technical founders
Dev tools · 30d ago · gtmcofounder.com
Launched alongside, November 2025
the whole month →
- IB
Life & fun · Nov 2025 · bitsnpieces.dev
- BBoing▲782
Life & fun · Nov 2025 · boing.greg.technology