Wisec

What it does

Software supply chain attacks are rising. Most teams scan for CVEs but ignore build integrity and provenance. Wisec fixes this: → ED25519 cryptographic signatures on every build → Immutable provenance on IPFS → Behavioral anomaly detection (new deps, unknown contributors, hardcoded secrets...) → Real-time risk scoring dashboard 🛠️ 1 agent. 1 line in your pipeline. No source code stored. 🇫🇷 Built by a solo DevOps engineer. 🎁 Free plan available - no credit card required.

Cryptographic notarization and supply chain anomaly detection for modern DevSecOps teams

Linked build chain + Ed25519 signatures, SLSA provenance and public Sigstore/Rekor timestamping. Eleven rules on every build, five of them calibrated on your project's own history: commit hours, contributors, build durations, change volume and known dependencies. Every project gets its own baseline. Automatic CycloneDX SBOM, signed and diffed - plus a signed VEX on each CVE's exploitability. One place to monitor and verify all your builds, dependencies, and certificates. Audit-ready evidence for NIS2, SOC2, CRA and ISO 27001, with Policy-as-Code gating. 100% EU data residency. Security is more than just scanning. You need verifiable, audit-ready cryptographic proof that your software hasn't…from wisec.io

• 
  Bytesafe2021 · bytesafe.dev · ▲66

  A better way to control your software supply chain

• 
  Arnica2022 · arnica.io · ▲97

  Behavior based software supply chain security

• 
  Tips to stay safe from NPM supply chain attacks2025 · github.com · ▲96

  Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

• 
  Trace-AIOct 2025 · trace-ai.dev · ▲146

  Know What You Ship. Secure What You Depend On.

• 
  Chainloop, A Software Supply Chain Attestation solution devs won't hate2023 · github.com · ▲45

  Hi, my name is Miguel and I am very happy to share what's been months worth of work :) The project has rough edges for sure, but any early feedback, comments or concerns are appreciated! === The Problem === You work on the Security and Operations (SecOps) team in charge of your organization's Software Supply Chain Security. You feel pretty good about the state of things already, your developer teams are signing their commits, deliverables, scanning for vulnerabilities,… Life is good! Then you realize that you are not compliant with the latest security requirements. You get referred to…

• 
  Cycode2022 · cycode.com · ▲68

  Complete software supply chain security

• 
  /dev/null▲481

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲341

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Lightfield▲901

  AI-native CRM that builds itself and does work for you

  AI · Mar 2026 · lightfield.app

• 
  Tobira.ai▲728

  A network where AI agents find deals for their humans

  AI · Mar 2026 · tobira.ai

• 
  Claude Import Memory▲716

  Switch from ChatGPT to Claude with import memory feature

  AI · Mar 2026 · claude.com

• 
  Littlebird▲709

  Littlebird remembers everything across your meetings, messages, docs, and apps, then takes action so you can recall any detail and never lose context.

  AI · Mar 2026 · littlebird.ai

• 
  Viktor.com▲702

  Your AI Coworker that proactively executes tasks

  AI · Mar 2026 · viktor.com

• 
  Jupid▲659

  File your taxes with Claude Code

  Commerce · Mar 2026 · jupid.com