DEV TRENDS / CATEGORY
2026年10月21日 – 2026年10月27日 内首次发现的 246 个新项目，已跨 8 个来源去重。
2026年8月5日 – 2026年10月27日 内首次发现 2358 个项目
Paste your app's URL and get an A–F security grade in a minute: leaked API keys, open Supabase tables, publicenv files. Each problem comes with a plain-English fix and a prompt for Lovable, Bolt or Cursor. Free tools: API key checker, RLS generator.
原文按用量计费的 AI 模型网关，一个 Key 双协议通用：Claude Code 设置 ANTHROPIC_BASE_URL、OpenAI SDK 改 base_url 即可接入，价格公开、每笔请求成本可查，支持组织内多发 Key 与用量审计、多上游自动故障转移；名字与 logo 源自 HTTP 彩蛋 418 I'm a teapot
Autonomous, always-on Home Network Sentinel & Canary Honeypot for under $4 on ESP8266
原文Hey Product Hunt 👋 I built UptimePilot after getting woken up too many times by “site down” alerts that turned out to be a network blip near the monitoring server. What you can monitor: • HTTP and API endpoints (method, status, keyword, headers, body) • SSL certificate and domain expiry • DNS records • Ping and TCP ports • Cron jobs via heartbeats: we alert you if your job is late Also included: alert routing, maintenance windows so deploys don’t page anyone, team roles and audit logs.
原文AISG scans the app AI writes for you: leaked keys, unsafe patterns, vulnerable dependencies. 26 sensors, core scans run locally so your source never leaves your machine. Findings are indications that need human review — not a penetration test
原文Your customers now ask AI before they search. Answerkin shows whether Gemini recommends your business or a competitor for the questions they actually ask, which websites it trusts, and what to fix so you show up on Google and in AI answers. Every week: Gemini checks with Google Search grounding, an SEO audit with speed and AI-crawler checks, AI-written fixes and an email report. Built for small businesses and agencies. From $12 a month.
原文Built by a 23-year network architect, NetKit combines real-world enterprise experience with AI speed. • 100% Free & Zero Friction: Web suite live at netkit.ccie13192.com. No registration, no paywalls, no trackers. • Built for Field Ops: IP planning, security audits, and field diagnostics. • Native Companion App (Coming Soon!): NetSmith for iOS is currently under Apple App Store review!
原文TurniSmart builds a month of staff shifts in one click, respecting roles, certificates, leave, rest rules and contracted hours. When someone is missing it ranks who can cover and opens a ready WhatsApp message. Also: licence and certificate expiry alerts, fleet mileage and maintenance, start-of-shift checklists, payroll-ready hour reports and a personal area where each employee sees only their shifts. For restaurants, hotels, cleaning, security, care homes and transport.
原文Humanbound continuously tests AI agents and chatbots with adversarial attacks, tags findings to OWASP LLM and Agentic Top 10, and scores security posture.
原文SecurityX is a beginner-friendly cybersecurity learning platform built to make security concepts more practical, interactive, and approachable. It brings together learning modules, quizzes, CyberDojo challenges, learner progress tracking, AI-assisted explanations, and safe OSINT learning simulations in one platform. SecurityX is designed for students and beginners who want to explore cybersecurity through hands-on learning—not as a replacement for professional security tools.
原文Pandora’s box is an essential trove of tools and resources to tackle security challenges, explore technologies, manage systems, and bring projects to life.
原文Free up space, uninstall apps with their leftovers, find duplicates and check your Mac's security. Everything goes to the Trash first and comes back with one click. No account, no tracking: nothing about your files ever leaves your Mac.
原文halofort is a unified endpoint management and Zero Trust security platform that simplifies device management, identity, access, patch management, and compliance from one console.
原文Agent Index is a free, sourced directory of about 404 AI agents for compliance, security, risk and business operations, plus about 483 independently verified audit firms (SOC 2, ISO 27001, PCI DSS, HITRUST, CERT-In and more). Compare tools side by side, filter by framework, region and integration, and find auditors by country and city. Not a ranking.
原文LFG turns Claude Code into an engineering pipeline you direct instead of type into. Describe a change in one sentence and specialist agents plan it, build it test-first, and check it with lint, types, tests, security scans and an expert review. You review by talking to the diff, see what a senior engineer would ask, and decide what ships. It runs on your machine, never pushes or reads your secrets, and is free and open source.
原文产品页（逐阶段导览）： MakeMovie 是一个 Apache-2.0 开源、可自托管的 AI 影视制作平台：上传一段小说原文或故事设定，自动完成剧本改编 → 分镜 → 角色/场景/道具定妆 → 首帧 → 图生视频 → AI 配音 → 配乐 → 合成母带 → 质检审计 → 交付，每一步可查看、可编辑、可追溯到产生它的那次模型调用。 交付不止成片：同时产出 SRT 字幕与 EDL / FCPXML / OTIO 剪辑清单，可直接在 Premiere Pro / DaVinci Resolve 继续精剪 模型可插拔：OpenAI / Anthropic / Google / 阿里百炼 / 可灵 / 火山 Seedance / 任意 OpenAI 兼容端点，九个能力槽位一键补齐 支持短剧 / 电视剧 / 电影三种项目形态，整本小说自动拆章分集（上限 100 万字符） 声音链完整：本地内嵌 Qwen3-TTS（MLX）音色克隆配音、逐镜氛围声、配乐与声音工坊降噪 每一帧都有账：任务幂等可恢复、逐镜质检问题队列、按物理量记账的用量台账 Docker 一条命令自托管，内置示例项目零 API key 试跑 技术栈：TypeScript monorepo（Next.js + Fastify + Prisma/PostgreSQL + BullMQ + FFmpeg）。
自托管零信任远程运维平台。单个 Go 二进制 Relay + 一行命令安装的 Agent + 50+ 命令 CLI，通过反向 WebSocket 穿透 NAT——被控端零入站端口。mTLS + 内置 CA + 多租户 RBAC + 防篡改审计 hash chain，并为 AI 代理提供规则门禁（自动化操作前必须先读项目运维规则并携带内容指纹 ack）。
Built inside a working coworking space in Hyderabad and used there every day. It handles how Indian operators actually work: rent collected on WhatsApp and UPI with Pay Now links, security deposits and notice periods, GST invoices per centre, leave-and-licence agreements signed online, and enquiries that arrive by phone. Every plan has every feature, unlimited staff, from INR 1,999 a month.
原文NetPayMeter shows what actually lands in your bank account. Enter a salary or hourly wage, pick your state, and see take-home pay after federal income tax, Social Security, Medicare and state tax, on 2026 rates. It covers all 50 states and DC, plus salary-to-hourly, overtime, W-4, 1099 and self-employment tax calculators. No signup, nothing stored. Bloggers and HR teams can embed any calculator for free with one snippet.
原文Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
原文PelSure is a 100% offline desktop broker management suite for Windows. It lets independent insurance agencies manage client books on local SQLite, run multi-carrier quote comparisons, audit coverage gaps with local on-device AI, and dispatch renewal schedules via WhatsApp with zero cloud data leaks and zero seat fees.
原文Run a free GEO audit to see how ready your website is for ChatGPT, Gemini and Google AI results. Measure your AI visibility and uncover your SEO gaps.
原文Free Chrome extension for apps built with Lovable, Bolt, Replit, Cursor or v0. On a site you own, one click checks HTTPS, security headers, keys in public JS, source maps andenv/.git. Read-only, no tracking, fixes in plain words.
原文SAAS Minimalist helps you stop losing support messages and replying slowly by turning website chats into organized tickets in a shared inbox, with a searchable knowledge base to reduce repeats and optional AI draft replies to speed up responses. Built for SaaS founders, startups, and agencies. Key features: white‑label widget, ticket workflow, assignments/status, KB + search, audit/security, mock billing + optional Stripe, Next.js + Prisma + SQLite.
原文Built with Lovable, Bolt, Replit, Cursor, v0, Claude or ChatGPT? Paste your live URL. In under a minute VibePatrol looks for leaked API keys in your page and JS, an exposed Supabase service_role key, exposed files likeenv andgit, public source maps, missing security headers and risky CORS. Plain-English results. Full report $9 one-time, or 10 for $29.
原文GitHub: （ Apache-2.0 ，Swift 6 / macOS 14+） macOS 清理工具，两个不一样的地方： 1 ）内置一个 Codex 级的 agent 。你说"清理浏览器缓存"，它先扫描给你看，等你批准才删。 沙箱、审批策略、补丁应用、会话恢复都是自己实现的；另外提供 23 个工具的 MCP 服务器， Claude Code / Cursor 可以直接调用同一套清理能力。 2 ）交互层是只 3D 桌宠（ SceneKit 程序化生成，没有 WebView 、没有 Electron ）， AI 要删东西时头顶弹批准卡，结果进气泡。 安全上比较较真：只删家目录、25 类保护路径、白名单命中及其子树永不触碰、 删除前二次校验、逐路径审计； AI 每次删除都要审批，MCP 要 confirmed + token ， HTTP 只绑 127.0.0.1 。 11 个模块：清理 / 卸载 / 优化 / 启动项 / 分析 / 状态 / 项目清理 / 瘦身 / 历史 / 设置 / 总览。 限制说在前面：AI 要自己的 API key ；瘦身仅 Apple Silicon ；系统级操作要管理员密码； 上不了 App Store ；没有 dmg ，源码构建；只在我这台 Intel Mac 验证过（ arm64 交叉编译通过）。 试一下： git clone && cd Moppet && swift build .build/debug/Moppet 不想开 GUI 就跑自测（ 133 项断言，1.4 秒，不删任何文件）： swift run Moppet --smoke 想听意见：AI 有删除权但每一步都要点头，这个颗粒度合适吗？ 觉得有用的话求个 star 。
KageX is an offensive AI security company. Our flagship FreakLabs teaches AI red teaming by doing, with 20 hands-on labs against live chatbots, RAG systems and agents, a 9-level course and a verifiable AI Red Teamer certificate. There is a free tier, a free CTF called SentinelGoat, and open-source tools for testing your own AI apps. Built for pentesters, security engineers and developers shipping LLM features.
原文RankinSEO writes and publishes SEO-optimized articles for plumbers, electricians, roofers, and HVAC companies. Includes domain audits, keyword tracking, and a free SEO audit tool. Plans from $49/month, 14-day free trial.
原文前言 适用于市面上的 079/083 版本冒险岛（国服怀旧服,MapleStory Classic World..., 只要是冒险岛差不多类型的，按道理都可以） 仅记录和分享 完成功能 [x] 角色识别 [x] 怪物识别 [x] 地图圈选 + 地图绘制（路线录制） [x] hpmp自动识别回复 [x] 自动打怪（走路、攻击、技能） [x] 告警（测谎报警） [ ] 客户端化 演示视频
Looking for reliable ISO Certification in India? Get expert assistance with ISO 9001, ISO 14001, ISO 45001, ISO 27001 and other ISO standards. Get ISO Certificate provides support for documentation, implementation, audit preparation and certification processes. Start your ISO Certification in India journey today. #ISOCertificationInIndia #GetISOCertificate #ISOCertification #ISO9001 #ISO27001 #ISOCertificateOnline
原文Stop leaking confidential code and specs to cloud AI wrappers. PromptForge is an offline desktop prompt compiler for Windows that deterministically locks your exact budgets, options, and constraints. Key Highlights: • Dual-Engine: Sub-2ms rule pass + on-device Qwen2.5 SLM • Invariant Locking: Zero hallucinated figures or assumptions • 8-Point Real-Time Quality Audit & Offline OCR scanner • 1-Click Adapters: Cursor, Claude, ChatGPT, Perplexity • 100% Offline: Zero data leaks, zero API fees.
原文FastHook has grown from webhook infrastructure into app workflow automation. Describe a process in AI Builder, review the generated draft, and connect the fields before activation. This saves Gmail attachments to Google Drive folders by sender and date, then sends their links to Telegram. Inspect each step’s inputs, outputs, and errors in Workflow Audit.
原文Pick one starting point and BurnRateIQ builds your whole financial model at once: connect QuickBooks or Xero, upload your financial statements or an existing spreadsheet model, or answer three questions. Anything missing comes from sourced benchmarks for companies at your stage, marked for you to check. Connect billing and payroll later to sharpen it. See your runway, burn multiple and MRR by plan, when to raise and how much, and export a live-formula Excel model investors can audit.
原文Hosted, white-label SMM panel platform. Your brand, domain, providers and gateways; we run servers, updates and security. A flat-priced PerfectPanel alternative: $19–79/mo, unlimited orders, Telegram Mini App, 60 currencies. 3 days free, then $1.
原文Agencies won SEO deals with keyword data. AI search gave them nothing to show a client. Now it does. Enter any domain, pick ChatGPT, Gemini, Perplexity, AI Mode or AI Overviews and a country. In about 4 minutes you get an AI answer audit: what the engine says about the brand, which pages it trusts, and a ranked fix list. Add your logo and name, and the PDF and booking link are yours. Free, no account.
原文Free audit that shows how ChatGPT, Perplexity and Claude reach, read and buy from your store. On Shopify, the Neryn app then fixes product titles, categories, options, descriptions and image alt text, only after you approve each change. For what only you know, like barcodes, it asks you. Free plan to start; paid plans add scheduled scans and more fixes.
原文Cyber security and ethical hacking, written from practice by Gregory Towns — the tools and techniques practitioners actually use, and what each one is for.
原文ChurnDetective turns customer data into churn analysis. Upload CSV/JSON with three columns: customer_id, mrr, joined_at. Get risk scores per customer, MRR at risk, segments, prioritized actions and a downloadable PDF report. Try free first with the dataset (60 synthetic customers). Buy Audit: one-time $1,500 USD, excludes VAT. Monitor $750/mo: coming soon, not yet available. Not legal, tax or audit advice.
原文Go Head-to-Head with a named competitor (SWOT, pricing intel, messaging gaps), then let Competitor Radar watch them for you automatically. Geo Scan tracks whether ChatGPT, Claude, Gemini, Perplexity and Copilot actually cite your brand. Brand Deep Dive ranks your whole site weakest-to-strongest; Post-Publish Audit catches live drift; Asset Audit checks drafts before they ship.
原文Agent Payment Node 是用 TypeScript 编写的本地支付运行时，通过 CLI 和 stdio MCP 供 AI 代理检查 x402 报价、准备有界支付并查询状态与收据。仅支持 Apple Silicon macOS 和 Node 24；直接转账和 EVM 签名需前台所有者批准，Solana exact x402 可按所有者接纳的策略运行。软件免费，链上和服务商费用另计。 亮点 将报价检查、有界准备、操作状态/收据和恢复路径组合为本地代理工具，适合研究 MCP 工具接口、支付状态机及所有者授权边界。 这是 Nuanu AI 的 MIT 开源项目，本次代表 Nuanu AI 自荐。具备资金操作能力；本地软件托管、错误策略和主机失陷仍有风险。没有声称独立安全审计、当前客户端兼容性复测或生产使用证明。 已按要求在 HelloGitHub 网站用完整 GitHub URL 搜索；匿名搜索没有展示匹配结果，但提示登录才能查看更多。另检查了当前完整仓库的 263 个文本文件（含 253 个 content 文件）及开放/关闭 issue/PR 历史，未发现 APN 名称、slug 或 Nuanu。
AuditCRO is an AI that audits your Shopify store like a CRO expert would. Paste your store URL (no admin access, nothing to install) and in about a minute it checks 262 conversion points across 8 page types. You get a score for every page, leaks ranked by priority with a clear fix for each, a page-by-page comparison with your competitors, and A/B test ideas. See a full audit on Allbirds before signing up.
原文Delitech Smart Home makes home security simpler with smart video doorbells designed for everyday households. Monitor your front door, see visitors in real time, communicate through two-way audio, and receive motion alerts from your phone. With HD video, night vision, wireless installation, and flexible storage options, Delitech helps you stay connected to your home whether you're inside or away.
原文Secure sign-in for your security workforce: manage guards, rosters, attendance and payroll from one account.
原文给 AI agent 做了个 MCP 执法网关（ Rust ），核心问题：当两个决策模型对同一件事给出不同判断时，怎么安全处理？ 实测：同一个越权场景（ coding agent 试图 merge 夹带无关变更的 PR ）： - Jev 给 0.94 置信度 → 准入层 Accept → 授权挂起 → DENY - d3 （ vLLM SR ）给 0.70 → Hold → 什么都不改 → ALLOW 两个都对。分歧不是 bug ，是校准本性（ d3 ECE 4.3 vs Jev 8.0 ）。治理层的价值在于让分歧安全。 网关做的事：每个 tools/call 先过 r2r_decide 门控，ALLOW 转发上游，DENY 返回 isError + 证据文本（相位 + 规则 + 事件 ID ），全程审计到 EventStore 。 零 API key 复现： cargo run -- fixture cargo run -- fixture --provider d3 GitHub: （ Apache-2.0, v0.2.0 ）
Enhance your home with uPVC sliding sash windows from Warwick Glass. Combining classic timber-inspired styling with modern energy efficiency, security and low maintenance, our windows are available in a range of colours, finishes and glazing options. Professionally installed across Warwickshire, they bring timeless character and lasting practicality to traditional and contemporary homes.
原文Delitech Smart Wireless Video Doorbell offers 3MP HD view, 24/7 live monitoring, motion alerts, and two-way audio for complete smart home security.
原文Discover, classify, and protect sensitive data across cloud, databases, SaaS and storage with Cytrusst DSPM. Continuous visibility into your data security posture.
原文Stop rewriting the same security answers. RFP Copilot Portal is a premium, ready-to-run webapp codebase for founders, sales/security teams, and agencies to manage RFPs & security questionnaires: reusable answers, evidence attachments, review workflow, audit trail, and one‑click export pack. Use it for personal ops or ship it as your own software product. Keywords: security questionnaire automation, RFP response software, vendor risk, SOC2, answer library.
原文AI agents that audit your code for security vulnerabilities, on your Claude or ChatGPT subscription or on local models with Ollama. Based on Strix. Join the open beta.
原文Security and GDPR checks inside Claude Code, Cursor and Codex. Find leaked secrets and RLS gaps, then verify every fix. Your code stays on your machine.
原文CREWBOARD solves the challenges of manual guard scheduling, inaccurate attendance tracking, payroll errors, SIA license compliance, and inefficient site management. It replaces spreadsheets, paperwork, and disconnected systems with one centralized platform, helping security companies save time, reduce operational costs, improve workforce accountability, and manage multiple sites efficiently.
原文Scan your website for SEO, performance, accessibility, and security issues. Get a free AI-powered website audit with instant fixes and competitor insights.
原文Inspect any live website like a design file. Explore styles, edit elements in place, audit UX and accessibility, and turn your changes into actionable context for your coding agent. All from a free Chrome extension.
原文Your AI writes the code. Sage 7 makes sure it builds the right thing: map the whole product, brief Lovable, Cursor or Claude Code with living context, and audit every push against the plan.
原文FixLetter turns a frustrating problem into a polished, ready-to-send letter. Pick from 22 letter types (billing errors, medical bills, credit report errors, security deposits, flight refunds, parking fines and more), answer a few questions, choose a polite or firm tone, and download it as PDF, Word or text. Preview your letter before you pay; resignation, raise and severance letters cost nothing.
原文Keep your important information organized in Security Vault. Save and manage your passwords, generate strong passwords, and keep backup or recovery codes in one place. Add private Secure Notes for information you want to remember. Store images, PDFs and text files as encrypted Secure Files. You can preview supported files in the app without saving a separate copy to your device. Use Money Ledger to track money you have lent or borrowed.
原文我是 Gangmu（纲目）的发起人。它是一个面向嵌入式 C/C++ 的开源组件识别和 SBOM 工具。 芯片 SDK 中的第三方库经常被复制、改名或做厂商修改，源码目录中存在的代码也未必进入最终固件。Gangmu 使用社区维护的规则识别组件，可结合 compilecommands.json 和链接器 map 补充构建证据，区分源码存在、编译和链接信息，输出 CycloneDX/SPDX。 仓库提供对 GmSSL 改名、删除版本信息及修改源码的受控示例，供读者查看和复现。希望收集更多公开 SDK 的识别反馈与规则贡献。 工具采用 Apache-2.0，独立规则库采用 CDLA-Permissive-2.0。适合嵌入式开发、固件交付和软件供应链安全相关读者。 联系：64031875@qq.com
Paste a link to your app or Telegram bot (beta). In about a minute: a launch-readiness score across 7 areas — security, payments, SEO, speed, design, legal, API costs — and a ready fix prompt for Lovable, Bolt, Cursor or Replit. Free scan.
原文EasyIncomeDocs creates accurate pay stubs, voided checks, W-2s, 1099s and income letters in minutes. Pay stubs calculate federal, Social Security, Medicare and state tax for all 50 states, with year-to-date totals that carry across stubs. Voided checks take a short 4-step form, and you pick your design after you pay. Instant PDF downloads, a 30-day money-back guarantee, plus free templates and calculators with no sign-up.
原文Shift Worker Calendar is built for nurses, factory crews, security teams and anyone on a rotation. Pick a pattern like 4-on-4-off, Pitman, DuPont, Continental, 24/48 or your own cycle, set its start day, and see your schedule in month, week or year view. Record swaps, leave and holidays without breaking the rotation, set alarms that ring only on working days, and log hours and overtime. No account needed.
原文Fortega Inc. is a Toronto-based electronic security company serving homes and businesses of every size across Canada. We specialize in professionally installed CCTV camera systems, access control, intrusion alarm systems, smart building automation, and 24/7 alarm and remote video monitoring with alarm response. Every project is delivered end to end, from site assessment and system design through professional installation, ongoing monitoring and lifecycle support, under one accountable team.
原文AI Shopify store analyzer: an annotated audit of your storefront with buyer-persona simulations and a 7-day Meta Ads campaign scenario modeler.
原文npm audit flags dozens of "high" issues; most can't hurt you. iamsecure scans your full dependency tree (npm, yarn, pnpm, Composer, Python) plus your own code, then ranks everything by real risk: where it runs (server, browser or dev-only), whether your code calls the vulnerable function, and whether it's exploited in the wild. You get a plain-language fix list with exact commands, a local dashboard, SARIF for CI and optional AI review. Zero dependencies, free, MIT.
原文暂无项目介绍。
OrqLabs is a no-code platform where 22 specialist AI agents (Claude & OpenAI) create social content, answer customers 24/7 on WhatsApp and Telegram, find and score leads, audit SEO and rewrite your strategy from real GA4 data. Every publish or outreach step waits for your approval, and every AI call is metered against a monthly budget cap you can't exceed. 109 templates, 75 integrations, works inside Claude and ChatGPT via MCP. Free plan, no credit card.
原文Most lead databases sell stale 6-month lists. The Gist Lead Radar monitors live SSL logs to spot new Shopify & WooCommerce stores minutes after launch. • Day-0 discovery: Pitch before competitors know they exist. • Gap audit: Spot slow TTFB, missing DMARC & pixels. • 1-Click AI Pitches: Personalized Email, WhatsApp & Call scripts. • Verified Data: Direct founder emails & phones with CSV export. Built for agencies, freelancers & sales teams to close fresh e-commerce clients.
原文做独立产品的人常把网站提交到导航站、awesome 列表和客座文章站换外链，可网上流传的外链清单里混着已经停放的域名、明码标价卖 dofollow 的站，还有同一个人运营的站群。backlink-guard 在你提交之前逐个检查这些站：读它们自己的页面，对照 Google 的链接垃圾政策，给出跳过、先看看、只免费提交、价值低、可以提交五种建议，并附上原文证据；链接上线后再核实它是否真的传权重、放在页面哪里。适合做 SEO、发产品、维护开源项目的人。 亮点 不帮你多发外链，而是告诉你哪里别发：停放或过期的域名、出售传权重链接、要求回链、外链指向博彩站、共用一套页面模板或同一个统计账号的站群都会被标出来，每条结论都带页面原文或数字，可以自己核对。 不配任何 key 也能免费跑页面检查；配上自己的 Glasser 或 AIsa key 再加评分、访问量、垃圾分和 Google 搜索历史，一次查三十个站约 $0.46；在 agent 里用时，每次付费调用前都会先报价、等你同意。 在 100 个它没见过的站上验证过：Ahrefs 标为垃圾的 40 个站里，37 个没有被给出「可以提交」。 除了投稿前的检查，还能体检自己的外链画像，找出指向 404 页面的外链并建议 301，找出链向竞品却没链向你的站，看 Google AI 概览和 AI 助手在你的关键词上引用了谁。 命令行、Agent Skill、Claude Code 插件和 MCP 服务器四种用法；纯 Python、无依赖、MIT 开源，它自己从不替你提交任何东西。
Enterprise Zero-Trust Security, Cascading Delegation, Human Approvals & Verifiable Audit Infrastructure for Autonomous AI Agents
原文Explore a Document Management System for Pharmaceutical Industry built for GxP compliance, 21 CFR Part 11, secure workflows, and audit readiness.
原文ShieldPress is an all-in-one website, VPS, and server monitoring and security platform. Monitor uptime, SSL certificates, domains, and server performance 24/7 from a single dashboard. Get instant alerts when issues arise, detect potential threats, and stay ahead of downtime. Built for developers, agencies, and businesses, ShieldPress makes infrastructure monitoring simple, proactive, and reliable—so you can focus on building while we keep watch.
原文An AI website and app builder. Every build runs five steps: the Architect, an AI model, plans the site from one sentence; the Designer and Builder, a deterministic design engine, build it to one design system; the Critic and Sentinel run a design lint and a security scan. The result exports as a single HTML file or a Next.js app.
原文Free, privacy-friendly browser tools for router setup, public IP checks, CGNAT detection, subnet planning, DHCP validation, Wi-Fi analysis, DNS, and network security. No registration required.
原文AnarqOut helps you stay safer online by intercepting suspicious links during browsing, before you click. Analyze potentially dangerous URLs, detect phishing warning signs, and make more informed decisions before opening a link. Available as a browser extension and an Android app, AnarqOut puts security awareness where it matters most: before the click.
原文VibeGuard is an AST-based security auditing tool designed specifically for AI-generated code. As developers increasingly rely on AI coding assistants (like Cursor, Copilot, and Claude), maintaining code quality and security becomes a major challenge. VibeGuard scans your codebase locally using advanced Abstract Syntax Tree analysis with zero code retention, ensuring your IP and sensitive data never leave your machine while catching vulnerabilities, secret leaks, and bad patterns before you ship.
原文A free index of the official MCP registry. Each tool is sorted by what it does: reads, changes things, can't be undone, or deletes or cancels. Paste your MCP config to audit it, pin a lockfile that fails CI when tools change, and follow change feeds.
原文SEO Wins is a free SEO audit tool. Check any URL for a page score, prioritised fixes, keyword placement, AI search readiness and a PDF report. No sign-up.
原文MockMini is a native Swift proxy core for macOS, meant as a lightweight sing-box alternative that stays small enough to audit end to end (~2,600 lines). It speaks Shadowsocks (AEAD), VMess, Trojan and VLESS over TCP/WS/TLS, ships as a Swift package, and is open source under Apache-2.0. It powers the native VPN in the WLSA Plus macOS client.
原文Tutorials, interview preparation and practical guides on programming (JavaScript, Python, React, Node.js), AI, DevOps, databases and cyber security.
原文Enterprise AI for the 80–90% of organisations it prices out. AXXESS is a company brain for small businesses, clinics, schools and nonprofits: it remembers everything scattered across WhatsApp, email and docs, and AI agents act on it, with humans approving what matters. Features: company memory, AI agents and an AI phone operator, CRM, tasks, approvals and audit trails. On web, Android and iOS.
原文Data Rooms 2.0: launch a secure data room in under 60 seconds. Encrypted, fully certified, with file permissions, built-in Q&A, a full audit log and analytics. White-label it on your domain, or let agents run it via API, CLI and MCP.
原文Live in production - autonomous penetration testing for bug bounty hunters, pentesters, security engineers, and C-suite executives. Get your applications tested. Contact us for more details.
原文A free, permission-first website security check that reports known critical vulnerabilities and misconfigurations in plain English, with the fix for each.
原文A native Mac text editor for developers, security professionals, and power users. 50+ languages. Multi-tab. Fully offline. One purchase — no subscription, no account, no telemetry.
原文SILDA sits between your OT devices and IT network, inspecting every packet inline without agents or hardware appliances. It detects threats per-asset using online ML, maps them to MITRE ATT&CK for ICS, and generates cryptographic audit chains for NIS2 and IEC 62443 compliance, all without cloud dependency or touching a single PLC or controller. Built for manufacturing, energy, water, and oil and gas.
原文A WordPress plugin that scans your own site for injected-script malware: fake ClickFix verification boxes, EtherHiding blockchain loaders, web shells, PHP hidden in uploads, new administrators and changed core files. The scan is read-only and sends no site files anywhere. A filter strips known loader scripts from your pages, and a Content-Security-Policy starts in report-only mode until its log is clean.
原文Check whether AI assistants can find and correctly understand a website, audit 12 technical AI-readiness signals, and get three prioritized fixes.
原文SecureMID helps teams assess the security of AI agents and identify potential weaknesses before deployment. Built for AI developers, security researchers, and teams working to build safer AI systems. Explore our platform, evaluate your workflows, and help shape the future of AI agent security.
原文我平时做制造贸易相关业务，要接订单、安排送货、月底对账。借助 AI 编程工具，我把这些流程做成了 FactoryFlow（交有数），现以 MIT 许可证开源，提供 Windows 开发者预览版。 GitHub 、说明和演示 · Windows 预览版下载 目前围绕三个环节： 录单：可以从第一张订单开始，客户和物料资料逐步整理；图片、PDF 的本地 OCR 结果需要人工核对后确认。 分批送货：按订单行记录已交、待交和各自单位。送货录错可以作废，恢复待交数量并保留原记录。 对账：记录客户反馈、部分认可、本期正式结算和跨月承接，保留历史凭证。 数据保存在本机，核心业务与本地 OCR 可以离线运行。使用 React / TypeScript、Python / FastAPI 和 PostgreSQL；数量与金额采用精确小数，业务动作保留审计记录。 合成数据示例：120 件已交 30 件、剩 90 件；35.5 千克已交 10.25 千克、剩 25.25 千克。 当前公开包为 v0.1.0-preview.1，仅支持 Windows 10/11 x64、单机及人民币业务，尚不包含库存、付款、多币种和海外税务。代码、测试及文档有 AI 编程工具深度参与，我负责需求、业务规则和流程核对。 公开包完成过合成数据流程及备份恢复检查，仍不等于长期生产验证；OCR 可能漏行或识别错误。请在独立试用目录使用合成样例，不要放入唯一一份真实业务数据，预览版之间暂不保证直接沿用旧数据。 欢迎做过跟单、送货、对账或业务系统的朋友试用，指出缺少的业务情况和不顺手的操作。
Introducing Wortex Mainnet: Redefining Layer-1 Infrastructure with Zero-Dependency Standards 🧠⚡ As decentralized systems scale, infrastructure security can no longer rely on bloated supply chains and third-party dependencies. At Wortex Mainnet, we are building a next-generation Layer-1 protocol designed for absolute mathematical determinism, high finality, and enterprise-grade resilience. 🔗 Explore our live global portal:
原文Check how well ChatGPT, Gemini, Perplexity, Claude and Copilot can reach, understand and cite your website. Get a free GEO Score (0-100) and your top 3 problems in minutes, no account. Full report with copy-ready fixes: EUR 0.99.
原文Build, manage and audit your Records of Processing Activities (ROPA). Connect processing activities with DPIA, consent, DSR & DSPM for privacy governance.
原文Desktop DAST scanner for web applications and REST APIs, with comprehensive vulnerability coverage, on-device AI triage and audit-ready compliance reports. Every scan runs locally.
原文Neurion brings AI chat, project coding, browser automation and security tools into one Windows desktop workspace. Choose Neurion Fast or Neurion Pro and work with your files, custom agents and connected tools. Account and paid subscription required.
原文Is your website really visible on Google and AI search engines? Niora helps businesses analyze and improve their online visibility. With Niora Index™, get a free website audit in seconds, without registration. 🔎 Google SEO analysis 🤖 AI search visibility ⚡ Website performance 🎯 Actionable recommendations Niora also offers website creation, redesign, SEO optimization and custom web apps, combining AI efficiency with human expertise. 🇫🇷 Built in France.
原文reVault is a new, secure-by-default archive format called a lockbox, designed to be simple to use. I've been working on reVault for about 2 years. It was originally written in Dart, but with the improvements in AI, I decided to port it to Rust using AI. It's now in beta, so I'm looking for feedback, particularly around the different language bindings. A lockbox is encrypted, signed and compressed by default. Each can be disabled selectively. - Hybrid post-quantum or passphrase encryption, including metadata. - Zstd compression. - Pure Rust libraries wherever possible. We intend to phase out remaining C code as alternatives become available. The project has been scanned using OpenAI's Daybreak cyber security tools. The manual is a work in progress: https://docs.revault.onepub.dev/ reVault supports Linux, macOS and Windows, x64 and arm64, plus Wasm. The core is Rust, with bindings for C/C++, Java, Dart, Python, Ruby, JS/TypeScript, Go, C#, Kotlin, Lua, PHP and Swift. Within a lockbox you can store: - Files, directories, permissions and symlinks. - Variables. - Forms. Variables, forms and the lockbox itself can have descriptions. reVault uses a portable vault (just another lockbox with structured content) to hold your keys, contacts' keys, lockbox aliases and form definitions. It ties into your platform's secure store, so logging into your desktop unlocks your vault. You don't have to enter a passphrase every time you access a lockbox. You can disable this. There are lots of shortcuts. Creating a lockbox stores an alias in your vault, based on its filename or a name you choose: lbx create /some/path/mybox.lbox lbx mybox open --duration 1h lbx mybox var set KEY VALUE Set a default lockbox and you can leave its name out: lbx session default mybox lbx var get KEY You can mirror a directory tree into a lockbox and update it when the directory changes: lbx store.lbox mirrors project create --from ./project --to /projects/project lbx store.lbox mirrors update The API lets you read, write and seek within files without extracting them to the filesystem. Each lockbox has a table of contents, so extracting a single file from a multi-gigabyte lockbox is fast. Recovery Updates are transactional, with automatic rollback for failed updates. The format is designed for recovery: content is stored in pages, allowing unaffected content to be recovered if part of a lockbox is corrupted. Sharing An encrypted lockbox is more useful if you can share it. reVault has an open-source keyserver for exchanging public keys, with validation through a second trusted channel. It's still experimental. OnePub has donated a server to run a single keyserver. If you're interested in donating resources, I'd like to bring up a second redundant server. It's pure Rust, uses under 100 MB RSS and supports rate limits. To publish your default profile's public key: lbx vault profiles email you@example.com lbx vault profiles publish Give the publish code to your contact. They can import your key: lbx vault contacts receive <publish-code> <contact-name> Display your profile's fingerprint and exchange it through a second trusted channel: lbx vault profiles fingerprint Repeat the process in the opposite direction to get their key. Once you have it, grant them access to your default lockbox: lbx access grant alice You can then email the encrypted lockbox to Alice. To install the CLI and get started: cargo install revault_cli lbx vault init lbx completion install Completion installation detects your shell. To diagnose issues: lbx doctor The language bindings are published to their respective package repositories. I'm looking for constructive criticism of the project on its own merits, particularly the APIs and language bindings. I'm not interested in a debate about using AI.
原文Upload an export from Nessus, Qualys, Rapid7, Greenbone/OpenVAS, Nuclei or another vulnerability scanner, or connect Microsoft Defender. Scan Hub ranks every finding by real-world exploitation (CISA KEV, EPSS) and writes a branded, plain-English report your client can act on. Built for MSPs, MSSPs and consultants. Free pre-flight check, no account needed. First 3 reports free.
原文Open-source agentic security operations platform:
原文ShipJasoos checks your Shiprocket, Delhivery and XpressBees freight invoices and COD remittances against your orders. It flags weight errors, duplicate charges, wrong RTO fees and unpaid COD, so you know what to dispute. First audit free.
原文Karma Pro is an open source macOS application that functions as a code security review tool. It performs static analysis on source code across 14 programming languages, using four independent engines, an AST parser, a heuristic engine,AI security scanning and a Bayesian classifier trained on patch files. It generates various types of diagrams and analyses, including dataflow graphs, control flow charts, reachability analysis etc. It can monitor repositories and scan pull requests when requested.
原文An Agent Skill that teaches AI coding agents to write, review, tune, and convert YARA-L 2.0 detection rules for Google Security Operations (SecOps, formerly Chronicle).
原文Free 5-dimension SEO audit in about 60 seconds, no signup. Connect WordPress and Search Console: HitMind proposes topics, writes drafts from your brand facts, scores each one, and sends them to WordPress as drafts. First 3 articles free.
原文America's Paycheck shows what you take home from each paycheck in 2026. Enter a salary or hourly wage and see federal income tax, Social Security, Medicare, state income tax, local taxes where they apply and state deductions such as disability insurance and paid leave. Every rate comes from IRS Publication 15-T or the state's own withholding instructions, and each page links to its sources. Free, no sign-up, and the calculators run in your browser.
原文Aluminium doors crafted with slim profiles and solid construction, delivering dependable security, smooth operation, and long-term performance for modern buildings.
原文AI Rank Inspector is a free, comprehensive Chrome extension and web audit platform designed for modern Search Engine Optimization (SEO), Answer Engine Optimization (AEO), and Generative Engine Optimization (GEO). It delivers instant, deep technical audits, LLM visibility scoring, and actionable recommendations to help websites rank across Google, ChatGPT, Perplexity, and Claude search engines. Zero bloat, instant on-page insights, and complete competitor analysis.
原文DiscoverMSPs provides B2B technology data and market intelligence for sales, marketing and research teams. Explore cybersecurity software users email list resources to identify companies using network security, endpoint protection, identity management and cloud security solutions. Our services support prospect discovery, technology adoption research, market segmentation, CRM data enrichment and targeted B2B outreach.
原文Scaminal is an advanced website scam detection and trust analysis platform. Enter any website URL to inspect security signals, scam indicators, domain age, TLS certificates, and trust scores.
原文GTmetrix.in is a high-speed telemetry engine for modern web apps. Benchmark TTFB, Core Web Vitals, and Edge caching in seconds, and generate ready-to-pitch 8-slide & 15-slide PDF audit decks to help agencies win web design & optimization clients.
原文Relvato opens your site in a real browser and runs monitors on what visitors rely on: checkout, login, forms, uptime, security, speed and SEO. Paid plans run them again after every GitHub commit, WordPress, plugin or theme update. Free plan for one site.
原文Prioritize critical vulnerabilities with Cytrusst RBVM. Centralize data from Nessus and Qualys, score risk and continuously monitor your security posture.
原文HyperLevel replaces the tools solopreneurs and agencies rent for hundreds a month: CRM, funnels, inbox, automations, courses, helpdesk and invoices – in one app. Self-host free (AGPL), unlimited users, 0 € per seat. Via MCP (340+ tools) or the REST API, your agents and scripts run it – with the same permissions, audit log and undo as your team. Every module is open and built to be modified: fork it, extend it, send a PR – contributions are very welcome.
原文h5i is a Rust web framework built on Axum that brings formal verification with Lean 4 into everyday web development, alongside integrated red-teaming and CI/CD tools. It's designed for Rust developers and teams building AI-generated or security-critical applications. As AI makes coding faster, ensuring correctness becomes increasingly important. h5i helps developers prove critical properties and discover vulnerabilities that traditional testing alone might miss.
原文Advanced SEO Audit, Content Ripper, Schema Generator, Link Checker & Competitor Spy with White-Label PDF Reports.
原文Project URL Category Rust Project Title Borg: a self-healing personal AI assistant in Rust Project Borg is a personal AI assistant you run on your own machine. Reach Borg from the terminal, the desktop app, or Telegram, Slack, Discord, Signal, WhatsApp, and iMessage. Borg remembers across sessions, runs scheduled tasks, and connects to MCP servers. Highlights Self-healing: a supervisor restarts crashed subsystems, and a nightly sweep fixes stalled tasks with no LLM call Keeps working through outages with API key rotation and provider failover Sandbox on by default, and file tools block ~/.ssh, ~/.aws, and .env Native Rust binaries with a one-command install /migrate imports an OpenClaw or Hermes Agent setup Example Code sh curl -fsSL | bash borg or Videos
原文Apps built with Claude Code, Cursor or Codex run and look finished, but nobody has read what the agent wrote. Paste one line into your agent and it checks its own code as it writes. Every scan covers security (secrets, auth, packages) and code health, with one ranked report in under 2 minutes. Vibe X-Ray sends only the files a change touches, so prompts use fewer tokens. Every push is checked, and your live site is watched for speed on a phone and uptime around the clock.
原文Bundle is a free, open source growing toolkit of multiple tools for PDFs, images, code and text, plus generators like QR codes. Every tool runs entirely in your browser, so your files are never uploaded and nothing leaves your device. A strict content security policy enforces this, not just a promise. No sign-up, no ads, no tracking, no cookies. Built with Astro, Svelte and WebAssembly. MIT licensed.
原文A vendor-neutral coordination layer for teams' AI coding agents: shared awareness, conflict detection before code is written, policy enforcement through agent hooks, and an audit trail.
原文Trade 1000+ instruments including currencies, stocks, indices, commodities, ETFs, and crypto CFDs with raw spreads from 0.0 pips, sub-10ms execution, and enterprise-grade security. Awarded Best Trading Platform at Investment Expo Dubai 2025.
原文A native Mac app for your software inventory, updates, security, permissions, and background processes. $9.99, once.
原文Same cards, same power-ups – who's the better tactician? In Verty3 every item you bring (Oracle, Audit, Time Plow) is mirrored: your opponent gets it free, and you get theirs. Money never wins – timing does. Then pick your path: clear columns to win, collect stars for your card collection, or build card streets for kilometers. Your opponent chooses too. Each tactic has its own leaderboard. Solo vs. bots or live online. Free in browser, on iPhone, iPad and Mac. No ads, no email.
原文One self-hosted console for Kafka, Redis, RabbitMQ and Apache Artemis: one permission model for every team, production guardrails and a tamper-evident audit trail. Kafka is free in Community.
原文WPAForge 是一个跑在安卓手机上的 WPA/WPA2 弱口令审计工具，开源（Apache-2.0），需要 Root。 它不翻几百万条的通用字典，而是按目标路由器的 SSID 现场派生候选——比如路由器叫 FASTE972，它就先生成 FASTE972、faste972、97297297、e9721188 这些，几百条覆盖常见命名习惯，再按目标特征排序，最可能的排最前。命中通常发生在第几十条，而不是第几万条。 每条候选都真的向目标 AP 发一次关联请求，不模拟、不猜测；判定只认一种证据：4-Way Handshake 完成，且 SSID、supplicant 状态、IP 三条同源于同一条记录，所以不会有“假成功”。 其他：进度实时存盘、中断能接着跑、锁屏继续；多目标后台队列；内置 IEEE OUI 表（15913 条），列表里直接显示水星 / 中兴 / 腾达 / 迅捷等厂商名。 要求：Android 8.0+、Root。适用范围仅限你自己拥有或已获明确授权的网络——对自家路由器是排查弱口令，对别人的网就是违法，这条边界很清楚。 亮点 1. 不用电脑、不用外置网卡、不用 Termux —— 安卓原生，一台 Root 手机跑完全流程。传统路子要笔记本 + 支持监听模式的网卡 + Kali，这套只要一个 APK。 2. 按目标 SSID / BSSID 现场派生候选，而不是翻大字典。派生维度：SSID 原文与大小写变形、里面数字串的重复与加后缀、去掉分隔符的合并串、SSID 与高频数字的多种拼接、BSSID 尾号族，再叠通用弱口令与厂商规则。几百条排在队列最前面，通常第几十条就命中。 3. 判定链只认一种证据：SSID 逐字相等 + supplicant COMPLETED + 有效 IP。而且刻意不让 netId 参与判定 —— 早期把它当否决条件时出过真实事故：密码是对的、系统确实连上了，却因为 netId 时序对不上而整段跳过成功判断。netId 现在只作为证据强度标注。宁可报「不确定」，也不报假成功。 4. 断点续跑 + 后台队列 + 锁屏继续。进度实时存盘，多目标排队自动跑，每项可单独暂停。 5. 内置 IEEE OUI 表 15913 条，扫描列表直接显示「水星 / 中兴 / 腾达 / 迅捷 / 四川天邑康和」，随机化 MAC 单独标注，不和「未收录」混着显示。 6. 核心判定与派生全是纯逻辑，不依赖 Android —— 可以离线跑单测。 7. Apache-2.0，无广告、无内购、不上传任何数据。
In-depth technical SEO and GEO audit with evidence for every issue. 320+ checks for Google, Bing and AI search. PDF report and a fix task for developers.
原文Niyoos sits between your AI agents and LLM providers (OpenAI, Anthropic, Gemini) as a proxy, so it can enforce — not just watch: a tamper-proof audit log, real-time cost tracking per agent, an instant kill switch, and drift alerts when behavior changes. Works with n8n, Zapier, Make, or custom code — point your agent at Niyoos, nothing else changes.
原文Security scanners produce 80-90% false positives. Engineers stop looking. Real vulns hide in the noise. Sieve is an ML filter trained on 1,442 labeled findings across 26 repos. It scores each Semgrep finding and posts only the real ones as a PR comment. - 95% precision on unseen repos - 4 lines of YAML, zero config - Learns from feedback - Open source (Apache 2.0)
原文A Deterministic Security Runtime for LLM Agents on MPI and Batch-Scheduled HPC Systems: Consensus-Governed, Hardware-Rooted Supervision of Every Rank
原文A Discord application for moderation, security, support, automation and community management.
原文A website audit written for founders, not developers. Enter your URL and we check every page, then give you an A–F grade, scores for six things that matter to the business (getting enquiries, mobile speed, Google, brand, AI assistants, risk), the problems costing you most with what to ask your team, an estimate of what they cost you each month in your currency, and a side-by-side comparison with your competitors. Free.
原文GitHub Dashboard shows what needs attention across your repositories: failing workflows, security alerts, review requests, and stale issues or PRs. Free and open source. Runs in your browser and reads data directly from GitHub.
原文Plango is a Mac native security suite for anyone running AI coding tools. It works by running a custom local security model that evaluates threats against the lethal trifecta (data access, communication, exposure). Some cool features: - Restrict Agent access by type of data (ssh keys, env files) or finder tags (finally a good reason to use the color tags in finder). - On device security model, but can switch to another local agent or bring your own key. - Review your Mac's privacy and access, apps, startup & extensions. - Automatically move env secrets into keychain. - Network blocks/allow lists, see what apps and agents are accessing. Stop them from data exfil. - Check skills and plugins for bad behavior. - Create custom rules for all of these things. - Log every action, request, block etc in an easy dashboard. - Vuln scan of all projects on your Mac. About us: I'm Fred, long term hacker first time shower. My co-founder Rich and I care about privacy, security and believe that AI software development is the future. We have two decades of combined experience in cyber, NLP and AI and are working on this tool full time. Given how fast cyber is evolving we're pushing changes to this on a daily basis. Please download and trial for free! We're here to answer any questions about the app or cyber/AI.
原文Secure your Mac while building with AI. Plango monitors AI coding agents, protects sensitive files and secrets, blocks suspicious network activity, scans projects for vulnerabilities, and gives you control over what your agents can access. Powered by an on-device AI security model. Private by default.
原文最近做了一个 PHP2Shell 应急辅助网站，把公开响应头检查、PHP 版本比较和临时缓解配置整理到了一起，想分享给有 PHP 网站需要维护的朋友。 目前主要有几个功能： - 输入公开域名，查看响应头是否暴露 PHP 版本，以及是否存在 PHP 、Laravel 、WordPress 等相关线索。 - 识别 Cloudflare 、Sucuri 、Akamai 、CloudFront 等边缘服务的公开标记。 - 手动输入实际 PHP 版本，核对修复版本门槛，并查看不同部署环境的配置示例。 - 提供 php.ini 、Nginx 、Apache 、Cloudflare WAF 、ModSecurity 、Docker/K8s 的配置引导。 想先把检测边界讲清楚：**它检查的是公开响应头，结果只能作为排查线索。** 对目标网站只发送普通 HEAD 请求，遇到明确不支持 HEAD 的响应时才回退 GET ，不发送漏洞利用载荷或 multipart POST ，也不跟随重定向。 响应头可能被隐藏、修改或缓存，因此： - 没有发现 PHP 特征，不能证明网站没有使用 PHP 。 - 显示的版本达到修复门槛，不能确认实际软件包和所有 Web worker 都已更新。 - 发现 Cloudflare 等标记，不能确认 WAF 已启用，更不能确认规则能够覆盖相关攻击。 - 外部检查无法读取内部 php.ini ，也无法确认网站此前是否遭到入侵。 另外，页面里刻意区分了**临时缓解和完整修复**。 INI 配置和 WAF 规则可以在适用条件下降低部分攻击路径的风险，但不能当成完整修复。完整修复仍需要应用官方修复版本或经厂商确认的安全补丁，并验证实际处理 Web 请求的 PHP 实例和 worker 都已经使用修复后的构建。CLI 的 `php -v` 也可能与网站实际运行的 PHP 不同。 配置生成前需要重新确认版本、部署方式和适用前提，响应头里的版本不会自动被当成已经核实的服务器环境。 网站目前支持英语、日语、德语、西班牙语和葡萄牙语。欢迎大家试用，尤其想听听：结果说明是否容易理解、配置引导有没有遗漏，以及哪些措辞可能让人误以为“检查通过就代表安全”。
Security and compliance monitoring that audits no-code and AI-built apps for exposed keys, open database rules, and missing regulatory requirements.
原文AI-powered cloud security and cost optimization for AWS, Azure, Google Cloud and Kubernetes. Automatically discovers cloud security risks, identifies wasted infrastructure spending and delivers actionable remediation recommendations that a human approves before anything changes.
原文MeshLive 是一款 GPLv3 开源 Android 应用，使用手机蓝牙完成离线语音/视频通话及直播。附近手机可转发直播，无需账号、SIM 卡或服务器，适合探索户外、会场等没有网络时的本地通信。项目仍处于测试阶段，采用自定义协议，尚未经过独立安全审计；使用了大量 AI 辅助开发，由人类维护者主导。 亮点 同时探索离线语音/视频通话与可转发的直播，使用手机蓝牙，不依赖额外无线电硬件。 可以阅读完整的 Android 实现、协议说明及公开测试数据，了解发现、连接、媒体传输和中继的工程取舍。 已有可下载 APK，Android 10+。每跳会增加延迟，蓝牙带宽和手机兼容性有限，不承诺无限距离或匿名性。 维护者本人自荐。邻近无线活动和部分发现元数据仍可被观察；不应作为高风险或生命安全通信的保障。
GroundTruth OSINT is a free live dashboard that watches 180+ public feeds (international newswires, official releases, specialist security publications) and clusters the day's reporting into the most significant global events on a 3D globe. Every event shows left, center, and right coverage side by side, with a triage queue, per-event market impact, satellite imagery, and a free daily morning brief. Free public API and MCP access, no key required. No account, no paywall, no tiers.
原文一个检测、查看 HTTPS 证书信息的命令行工具。
Build an Apachehtaccess file without memorizing rewrite syntax. Add 301/302 redirects, force HTTPS, and choose www or non-www. Removephp orhtml extensions, or write custom rewrite rules. Boost speed with GZIP and browser caching. Improve security with security headers, hotlink protection, SQL injection blocking and IP blocking. Password-protect folders, set custom error pages (400 to 503), and start fast with one-click presets. Copy or download. No signup.
原文Blockchain wallet security - real-time threat detection, URL screening, wallet scanning, and smart contract simulation. Wallet agnostic and coverage on 20+ chains. Beta testing now, vault deployments on testnet. No contracts deployed until audited. Kanshi is dedicating a majority of revenue to non-profit victim assistance enforced on-chain at subscription. Protecting users and assisting those left unprotected in the past.
原文Microsoft (Oct 19, 2026) announced Guardian Agents that "watch and moderate every action of every agent, before it happens, 24/7" — but published no implementation. Watchdog is the drill kit: a FastAPI guardian that scores every agent action and routes it to ALLOW, STEP-UP, HOLD-FOR-HUMAN, or HALT-AND-ISOLATE. Policy template, runbook, identity registry, risk rubric, containment playbook included. 17 tests passing. Not cost routing, not an audit — runtime supervision by safety.
原文Give it a domain and it hands back the company's brand: logos for light and dark (SVG first), HEX colors by role, and the fonts the site really loads. Go deeper for 21 sections: the design as a DESIGN.md, the voice as a brand.md, plus pricing, products, competitors, open roles, contacts and investors. Even its email security. Anything we read off a page comes with the exact quote and its URL. No quote, no fact. Call it over REST or MCP. 50 lookups free, then $39 for 10k a month.
原文Tired of the agency carousel? The SearchFuel Agency Exit Sprint gives business owners 1-on-1 support to take back control of their marketing. We set up your website, Google Ads account, and conversion tracking, then teach you to run it yourself through live workshops and a full training library for you or your team. No more hand-offs or starting over with a new agency. Spots are limited. Let’s chat for a free audit.
原文Quezzt turns any procedure into a workflow your team actually follows — not a doc that collects dust. Build it once with instructions, yes/no confirms, inputs, and branching choices. Then run it step by step: can't skip without a reason, can't forget what's next. Works for IT support, onboarding, incident response, dispatch — any process that must happen the same way every time. Every run leaves an audit trail automatically. Free forever: 1 org, 1 admin, 1 workflow, no credit card.
原文Accesstive Free Accessibility Checker helps you identify accessibility issues, understand potential legal risk, and know what to fix first. Start with a free Instant Scan, then choose a Live Audit or Human Expert Audit for deeper evaluation. Measure your website against WCAG 2.2, ADA Title III (US), EAA (EU), and BITV 2.0 (Germany), identify barriers affecting people across 9+ disability groups, and download a professional accessibility report with prioritized recommendations.
原文30 individually Designed Human-Built Apps—NOT AI templates. Ex Vodafone R&D Engineer with 25 years in Making Full Stack APPS with Corporate Security. Get A complete e-commerce business, already built and ready to customise. Get your storefront, product catalogue, shopping cart, Stripe checkout, Google sign-in and admin tools. Connect three accounts - your database, Google sign-in and Stripe — and follow our step-by-step Unstuck Videos to get set up. Own the code, Pay Once, and get setup support.
原文BOKI 是一套离线优先的开源财务软件，前端 Vue 3 + 后端 NestJS + SQLite 单文件数据库，单命令启动、开箱即用。在云端记账簿数据泄露频发的当下，它走另一条路：没有云端、没有第三方 SDK、没有任何埋点与遥测——全部账务数据就是本机一个 financial.db 文件，备份是拷贝目录，迁移是搬文件夹，数据主权 100% 在用户手里。 内核只保留记账必需的复式记账引擎（科目、凭证、期初、公司上下文），借贷必相等由后端强校验；其余能力全部插件化（官方插件 14 个），不装的插件在界面上不留痕迹。 核心特性： 🧾 复式记账内核：科目 / 凭证 / 期初 / 多公司上下文，借贷必相等前后端双重强校验，已审核凭证禁止改动 📊 报表可审计：资产负债表、利润表（本期+本年累计）、科目余额表、试算平衡表、票据台账、现金流简表、费用结构分析 🔐 权限与多公司：JWT 登录 + RBAC（菜单级 + 操作级），一个账号管理多家记账公司，数据完全隔离 🗄 数据离线：SQLite 单文件（WAL 模式），一键备份/恢复，无任何外部服务依赖 🎤 语音识别离线：sherpa-onnx 本地流式中文 ASR（zipformer int8），音频不上传 🤖 大模型可选离线：内置 Ollama / llama.cpp / vLLM 本地模型预设（OpenAI 兼容协议、无需 API Key），也可切换云端模型 🧩 插件化：想要什么装什么，卸载不留痕迹 技术亮点： 复式记账引擎与权限模型在服务端强校验，不依赖前端约束 本地模型自动降级：模型缺失时服务照常启动，仅相关功能提示未就绪（/api/ocr/status 可查） 许可：内核 AGPL-3.0，官方插件 Apache-2.0 平台：Windows / macOS / Linux 适合对象：个人与小团队的记账、代理记账/财务工作室的私有化部署、对数据隐私敏感的任何记账场景。 项目正在寻找第一批真实用户，任何反馈（尤其是报表与记账流程上的"不顺手"）都非常欢迎，可以直接提 issue。如果觉得有价值，欢迎点个 Star 支持开源维护者 🙏
Hi HN, I've been working on Orbit, a macOS app that keeps your repos, tasks, notes, assets and docs together. I'm usually juggling a few side projects and forgetting where I left off. I also didn't like having to bounce between Obsidian, Trello and Google Drive to find everything. I wanted somewhere to keep all that stuff with the project, so coming back to it was a bit easier It checks your project's dependencies for outdated packages and known security advisories which was super important for me as I have a tonne of old projects that I haven't touched in a while It's all stored locally on your Mac and there's MCP support too, so an AI client can read the project info and update tasks and docs Give it a try and let me know what you think: orbitdesktop.com (Windows support is coming soon!)
原文Unlike generic HR platforms, Security Plus HRMS is purpose-built for security and facility management firms to handle complex field operations. What Makes It Stand Out: • Multi-Site Attendance: Real-time, geo-tagged shift tracking across remote client sites. • Custom Billing & Payroll: Automated site-wise billing, complex OT, ESI/PF compliance, and NEFT payout generation. • Asset & License Control: Automated PSARA/gun license expiry alerts and uniform inventory tied to salary deductions.
原文AuditCRO is an AI that audits your Shopify store like a CRO expert would. Paste your store URL (no admin access, nothing to install) and in about a minute it checks 262 conversion points across 8 page types. You get a score for every page, leaks ranked by priority with a clear fix for each, a page-by-page comparison with your competitors, and A/B test ideas. See a full audit on Allbirds before signing up.
原文Traffic Watcher for Liferay DXP is a lightweight, production-ready security monitoring module designed to detect suspicious anonymous traffic patterns and potential DDoS attempts in real-time. Built specifically for Liferay DXP 7.4+, this module continuously monitors requests and instantly alerts administrators when configurable traffic thresholds are exceeded, helping organizations respond to threats before they escalate.
原文Your next crypto venture could start with one meme. Turn your concept into a market-ready digital asset with Meme Coin Development focused on token architecture, smart contract implementation, security, and launch planning. Build a coin around your brand, community, and business model with a solid foundation for entering the Web3 market.
原文我是 SlopSquat 的作者，提交给周刊编辑筛选。
Stop losing high-ticket B2B deals to slow emails and expensive $100/mo SaaS tools like PandaDoc. Proposa turns WooCommerce into a 100% self-hosted B2B quotation powerhouse. Build interactive proposals with dynamic volume tiers and optional add-ons, collect legally binding digital signatures with SHA-256 cryptographic audit trails, and convert accepted contracts into paid WooCommerce HPOS orders in 1 click. Zero monthly fees, unlimited seats, total data ownership.
原文免安装合成报告预览： 维护者自荐。Candle Audit Kit 是一个 MIT 许可的 Python 本机命令行工具，面向研究人员与数据工程师，在研究或回测前检查本地 OKX OHLCV 输入。 主要功能： 检查 K 线缺漏、重复、时间窗口、已收盘状态和数量单位。 将 CSV 与原始原生 JSON 响应逐字段对账，保留原始十进制字符串。 保存不可变数据快照、Parquet 数据和来源哈希，并生成中英文 HTML 报告与 JSON 证据。 可以先直接打开预览，查看固定的合成样例；预览没有文件上传功能。实际稽核在本机运行。安装当前源码后，可以使用 candle-audit --root data/demo --language en 复现英文示例。 项目仍属预发布阶段，支持 CPython 3.11–3.14、macOS/Linux。示例数据全部是合成的，不连接交易账户、不执行交易。一致性检查通过并不能证明文件来自真实交易所，也不代表收益或投资建议。
RankPro is a 100% free, real-time SEO intelligence suite designed for indie hackers, bloggers, and SEO professionals. Track real-time Google keyword rankings across countries, audit site health for Core Web Vitals, and uncover keyword search volumes—all without expensive subscriptions or API limits.
原文Odin v1 is an AI model API built for security work, where general-purpose models often refuse legitimate tasks like exploit analysis for detections, YARA/Sigma drafting and CTF payloads. It works with OpenAI Chat Completions, OpenAI Responses and Anthropic Messages, so it plugs into Claude Code, Cursor and Codex with just a base URL and key. Prompts and completions are not stored. Prepaid credits, no subscription, no expiry.
原文Code review catches what’s wrong in a diff. Heal catches what breaks when the app runs. Heal learns how to run your application, builds a production-like sandbox with external services stubbed, then hunts for bugs, performance regressions, and runtime vulnerabilities users would hit. It reproduces every defect before reporting it, so you get real bugs to fix, not a backlog of AI-generated suspicions.
原文Paycheck Pulse is a free take-home pay calculator for US employees: enter your gross pay and see your exact federal, state and FICA deductions and real take-home pay for all 50 states, using 2026 tax figures. The site also publishes free paycheck and tax guides (bonuses, overtime, three-paycheck months, Social Security COLA, state-by-state take-home breakdowns).
原文You built an app with Lovable, Bolt, Replit, v0 or Claude Code, and now people depend on it. BWorlds reviews it the way a senior engineer would: security, reliability, data, performance, costs, code quality. Then it watches the app 24/7 and sends you one email each morning with what happened overnight and a fix you paste into the tool you build with. Once you publish, it checks the fix landed. The free plan covers the full audit and monitoring on as many apps as you like. No credit card.
原文AI accounting SAAS with click invoice to update accounting work Risk alerts and AI suggestions to to mitigate them. AI customer support and and AI ticket resolution. Self healing software. ACID Integer- paise double entry code, Tamper evident WORM audit trail.AI financial co pilot on deterministic tax rules AI sentinel flags duplicate invoices etc. Software built on ISO/ IEC 27001:2022 ISMS Framework documented (93 controls and SOA)
原文9 audit-ready GDPR & UK-GDPR frameworks for B2B SaaS: Article 30 RoPA, Executable DPA, DPIA, and 72-Hour Breach Protocol. Save $10k+ in legal fees. Plain English, zero subscriptions.
原文Coordinate tasks, projects, meetings and follow-ups. AI proposes, you approveTOBENI AI brings tasks, projects, meetings and follow-ups into one workspace. It helps teams organize work, prioritize next steps and review proposed actions before approving them. With team roles and an audit trail, TOBENI AI helps businesses stay organized while keeping people in control. AI that asks before it acts..
原文Type your website and answer three yes-or-no questions. In about a minute you get a Betterlane Score out of 100 and a report of where customers slip away: the hours nobody answers, how people can reach you, phone speed and the next step. Free, no sign-up.
原文VerbatimIQ Analyze turns thousands of open-ended responses into clear themes, sentiment and trends. Ask questions in plain English, get evidence-backed answers, and export board-ready reports — built with enterprise-grade security.
原文Project URL Category JS Project Title A zero dependency Node script that flags install hooks and risky code in a before your first npm install Project Run it on a you did not write, like a take-home test from a recruiter, before npm install. It lists preinstall, install, postinstall and prepare hooks and flags shell execution, runtime base64 decoding, curl pipes and credential paths. Highlights One file, no dependencies, no network access, read only: it never runs the code it checks. Built for a real attack: fake recruiter take-home repos that hide the payload in an install hook. Clear exit codes (1 flagged, 0 clean, 2 unreadable) and a self test, easy to drop into CI. Honest about limits: a clean result is not proof of safety, and the README says what it cannot catch. MIT licensed. Good first issues are open (JSON output, TypeScript files, git URL dependencies). Example Code markdown curl -O node audit.js ./take-home-task ! package.json: postinstall hook runs: node scripts/setup.js ! scripts/setup.js: runs shell commands ! scripts/setup.js: decodes base64 at runtime ! scripts/setup.js: pipes a download into a shell 4 finding(s). Read them before you run npm install. or Videos
原文HTTP and HTTPS debugging proxy and HAR analyzer for troubleshooting web sessions: CAS and SSO login, cookies, security context, timing and load balancing.
原文Most payment fee calculators are clunky, loaded with ads, and run outdated rates. VendorCalcs is an ad-free, zero-latency payment fee auditor for founders, sellers & freelancers. What makes it stand out: • Reverse Invoice Gross-Up: Calculate the exact amount to bill to hit your net target • Refund Loss Audit: See how much unrefunded fees bleed your margins on returns • 19 platforms (Stripe, PayPal, Shopify, LemonSqueezy, Etsy) across 5 countries • Zero ads, no sign-ups, 100% free
原文SecMentor is an all-in-one cybersecurity learning and career platform built for aspiring security professionals. Explore hands-on CTF challenges, discover competitions around the world through our interactive CTF Globe, follow structured learning paths, find cybersecurity jobs and internships, and access AI-powered mentorship. Whether you're starting in cybersecurity or building advanced skills, SecMentor helps you learn by doing and take the next step in your career.
原文OhShit! turns public security advisories and breach reports into a feed developers can act on. Each incident has a severity level, affected products, source links and a cleanup checklist. Check supported runtime versions, or follow incidents through RSS, a free JSON API and an MCP server. The code and incident data are open source.
原文Hi All. A coworker and I (and AI) built this python script that checks HTTP response headers for indicators that the site is using a version of PHP that's vulnerable to PHP2Shell (CVE-2026-109618, CVE-2026-109619). It's an asynchronous HTTP/HTTPS header inspection tool that fingerprints PHP and compares the version against the PHP2Shell fixed releases. Obviously this isn't a foolproof way of knowing if a host is vulnerable (See Security disclaimer in README.md), but it's at least good at finding hosts in your environment that are advertising to the internet that they are using a vulnerable version of PHP. My first time submitting to HN - please be merciful. Now accepting feedback, suggestions, and constructive criticism.
原文Vulnify decides each sensitive AI agent action before it runs: ALLOW, REVIEW or BLOCK, with a 0-100 score, the reasons and a hash-chained audit log. Node and Python SDKs, monitor mode, fail closed by default. The Developer plan is free.
原文是什么：现在 ChatGPT、Perplexity、Google 都在给用户推荐商品，今年 Shopify 还向浏览器里的 AI Agent 开放了结账。但 AI 能不能真的读懂你的商品、找到购买按钮，取决于店铺页面本身。这个网站就是按 AI 的视角去扫你的店。 免费检测（不用注册、不留邮箱，约 3 秒出结果）： robots.txt 有没有把 ChatGPT、Perplexity 的爬虫挡在外面 有没有给 AI 看的 llms.txt 商品页有没有机器可读的价格和库存数据 需要的话也有 $29 的完整版：扫最多 8 个页面，给评分和按优先级排的修复清单，附可直接粘贴的 Shopify 代码，约 10 分钟发到邮箱。不用装插件，也不需要后台权限，只看公开页面。 适合：做独立站 / Shopify 出海的卖家。目前只支持 Shopify，网站为英文。
DoneMark provides human accountability for AI-generated code. Run your favorite coding agents (Cursor, Claude Code, Devin), while DoneMark generates cryptographic audit trails and 4 automated proofs per line to let you sign off on intent without breaking production.
原文A free five-minute AI pre-audit. Get a verdict on screen, a scored report by email, and the open questions to settle before you commit a budget.
原文BlogSpeed researches live Google, Trends and Search Console data, then writes and publishes cited, SEO & AEO-optimised blog posts to your site on autopilot. Blogspeed also gives you deep dive analytics on your current performance, helps you create trackable backlinks and find relevant prospects, runs audit on your current website and suggest you exact fixes that needs to be made PS. also connects to your google search console for more insights.
原文White-label SEO reports for small agencies. Every audit problem becomes a task that closes itself when a re-check confirms the fix, so the report shows clients what you changed. Rank tracking, AI search visibility and a client portal. From £59/month, with a 7-day free trial and no card needed.
原文Fixentrix eSign makes collecting legally binding digital signatures simple, quick, and hassle-free. Upload documents, drag and drop signature fields, send to multiple recipients, and track completion status with complete audit trails. Built for businesses, freelancers, and agile teams who need streamlined document turnaround without complex enterprise overhead.
原文Gain complete hybrid IT asset visibility with Agentless Asset Discovery—monitor hardware, software, cloud inventory, and security vulnerabilities in one platform. Eliminate blind spots, simplify asset management, and make faster, more informed IT decisions.
原文30 separate Apify Actors by one maker. Five new utilities compare sitemap snapshots, check security-header presence, flag limited OpenAPI changes, deduplicate CSV/JSON and extract static HTML tables. Also includes catalog, job and public-data tools. Each has its own usage-based price. GitHub examples now flag partial or unverified results. Not one platform or subscription; no coverage or security guarantees.
原文推荐 JeasonKim 的开源工具「墨鱼排版」。我是作者的支持者，不是开发者；这次让 Agent 用公开样文做了网页实测。 适合平时用 Markdown 写文章、想先预览公众号排版的人。我们验证了标题、列表、引用和加粗的网页预览，并对比了「蓝调卡片」「清爽正文」两种主题，同一段文字能切换成不同版式。 公众号后台粘贴效果还没有验证，也没有做隐私网络审计；建议先拿一段非敏感短文试用。
NO HASSLE <> NO SIGN UP <> NO EMAIL <> NO DELAY The best priced and most easy to use audit tool on the web. includes everything included in free audits plus more includig descriptors and instructions on fixes. Its shows were flow is block, which links are most used, which websites the visitors came from and all website Security issues and perdormace issues? Was there a failed payment? suspevt someone messing with your network or site? find out what your competitions site does better TRY NOW
原文Explore federal ADA, Fair Housing Act, and state, county, and city accessibility rules — each local one checked against its official source — and audit spaces on-site.
原文Spiti Floors offers premium 3 BHK independent floors in Sector 99A, Gurgaon, inside the gated Spiti Greenwood Estate township. Just a minute from Dwarka Expressway, the low-rise homes are built on 179 sq yd plots with basement and terrace options, plus a clubhouse, parks, a shopping complex and 24x7 security. Enjoy space, privacy and quick access to Delhi and IGI Airport. Book a site visit at spitifloors.co.in.
原文Most ai builders will make the website for you, and design it so well you'll ship without even thinking about the data leaks and security vulnerabilities. AnchorSphere solves this problem --- security and privacy are prioritised. While we dont guarantee 100% that the code will be secure, it is a best effort mitigation of one of the most important problems and AI web development.
原文Choose where to study, see what universities expect, and know exactly what to do next.High school planning is an engineering challenge, not an essay crisis. 8 Pillars is now live—the decision infrastructure tool replacing 20-tab guesswork with deterministic data. Audit course prerequisites across 8 global destinations, catch Grade 8–10 curriculum lockouts before options freeze, strip out commercial extracurricular fluff, and model real degree ROI and work-visa pathways. Stop guessing.
原文Seven focused checks for website health, technical SEO, passive security, code reliability, performance, accessibility and APIs. Start with a bounded free preview, then choose a one-time report from $9 or four bounded monthly runs. Reports include evidence and practical next steps. Website Complete bundles five website tools for $49 once or $79/month for one verified domain. Main Zof platform for team verification and production controls: zof.ai (separate plans).
原文Type your address. In about 90 seconds ShieldWave runs 20+ outside checks and shows your score and the most serious problems in plain language. The full report adds a fix list sorted by urgency and a brief to send your developer. Free check, no account, no password. A full report for one site is $9 once. Pro is $12 a month for up to 25 sites with scheduled scans and alerts. Plus a free WordPress plugin, Ensomedia Security, with 24 checks from inside, two-factor login included.
原文Every other blocker has an off switch, and at 1am you find it. Pawl has no unlock button: blocking any app or site is instant, but opening it needs a physical security key (any FIDO2 key) in hand, plus a 15-minute wait. Keep the key in a drawer, or give it to someone you trust. No account, no server, no tracking, open source. Free, with optional Pro for schedules and reports. Built by an indie dev who blocks his own Polymarket with it.
原文Featuring a Windows desktop app designed to provide candidates with an authentic, exam-accurate environment for IELTS Writing Task 1 and Task 2 preparation. It includes built-in Cambridge practice prompts, custom exam timers, an instant local forensic audit engine for band score estimations, and Google Gemini AI integration for professional feedback. Additionally, featuring a topic logic and vocabulary booster across mutiple subjects, live informal word replacements and PDF report exports.
原文AgentTrust OS is the runtime trust layer for AI agents. It sits between an agent's decision and the business action that follows: certify agents before they ship, check every execution in real time (approve, retry, escalate or block in under 20 ms, no LLM needed), and keep a tamper-evident audit trail. Wrap an existing agent with one decorator. Data can stay inside your network. Built for developers shipping agents and for security and compliance teams who must prove those agents behaved.
原文连镜把 AI 视觉创作从一次性的对话框搬到无限画布：文本、图片、视频、音频作为节点互相连线，上游产物直接成为下游的参考素材，首帧、镜头和成片可以在同一条流程里反复调整。支持接入多家模型供应商，可 Docker 私有部署 亮点 画布式工作流：每次生成的产物都留在图上，改上游即重跑下游，不再是排队等一次结果 3D 导演台：用人台、道具和多机位搭构图，导出机位首帧和视频回填画布 画布 Agent：用对话创建、编辑、排列节点，改动可撤销，可导入技能包 插件化模型接入：每家供应商协议是一个 JS 插件，跑在隔离进程里；内置 OpenAI、Anthropic、Google、豆包、阿里百炼、可灵、即梦、Vidu、海螺、Sora，也支持上传自定义插件 完整的自建能力：渠道与模型校验、积分结算、支付、使用记录与审计，密钥加密保存、只写不读 素材存储可切换：本地磁盘，或把阿里云 OSS、腾讯云 COS、AWS S3、Cloudflare R2 设为默认存储 Go + React，Docker 一条命令部署，MIT 协议
MLM Software Development helps businesses manage multi level marketing operations with tools for distributor management, commission calculations, genealogy tracking, sales monitoring, and performance reports. A well designed MLM platform supports multiple compensation plans and provides insights into network activities. With scalable architecture and security focused features, MLM software simplifies daily operations and helps businesses manage growing distributor networks efficiently.
原文A central, community-maintained tracker of recent cybersecurity and AI incidents: data breaches, backdoored npm and PyPI packages, exploited vulnerabilities. Every entry linked to its source and labelled by evidence.
原文Most agent testing either traces failures after customers hit them, or makes you hand-write every test and let an LLM guess if it passed. ClientCoded generates adversarial tests and knows the correct answer, scoring against computed ground truth with SQL, not opinion. It catches failures before production, monitors every live conversation with Slack alerts, and turns real production failures into new regression tests automatically. Connect in minutes with one webhook. First audit free.
原文Sprintel.ai combines website uptime monitoring with comprehensive website audits in one platform. Monitor uptime every 60 seconds and identify SEO, AI search (AEO/GEO), security, accessibility, and technical issues through a 45+ point audit. Prioritized recommendations help teams address problems efficiently. Agencies benefit from white-label reports and public status pages, while businesses and enterprises gain better visibility into website health. Includes a 14-day free trial.
原文Most note apps ask for an account and keep a copy of your notes on their servers. Coffre doesn't. Notes, tasks and scanned documents stay on your phone, encrypted with AES-256 — the key lives in your phone's security chip and never leaves it. No account. No analytics, no ads. Android's own backup is disabled, so your notes don't even land in your Drive. Scan a document and the text is read on the device, searchable seconds later. Or dictate instead of typing.
原文Lodone brings WordPress backups, cookie consent, security monitoring, image optimization and SEO/GEO maintenance into one dashboard. Schedule backups to your own Dropbox or Nextcloud, review security findings, optimize images and follow a monthly improvement plan. Connect Google Search Console for real search performance data.
原文Check any page for WCAG 2.2 accessibility issues and Google PageSpeed scores in one click, with each issue highlighted on the page and a fix for it. Free for single pages; Pro adds 100-page sweeps, PDF/CSV/JSON reports and history. On Chrome, Edge and Apify.
原文Radly is a bipartite AST and blast radius engine for ML & scientific code. Standard tests only check if code runs—not if your research claims still hold. Radly maps code symbols directly to paper equations, sections, and benchmark tables. When you modify code, Radly computes the exact blast radius: pinpointing invalidated equations, impacted claims, and risk levels before you merge. Features: • Code-to-paper AST graph • Risk scoring & impacted claim detector • Exportable audit reports
原文Hearth is a free desktop chat app for Windows, built for communities, friend groups and gaming or study groups. Servers with text and voice channels, DMs and friend requests, one-to-one calls with camera and screen share, reactions, replies, threads, polls, link previews, roles and permissions, AutoMod, audit log, forum channels, reminders and an in-app updater. Installer or portable exe. Not code-signed yet, so SmartScreen warns on first run (More info, Run anyway).
原文Pricing software for owner-operators in pressure washing, catering, lawn care, general labor, security and mechanic work.
原文Relayyed streamlines client feedback for recurring video work. Creators upload each month’s videos to a persistent project link, and clients leave frame-accurate comments without creating an account. Approvals are recorded with name, date, and version so you maintain a clear audit trail. Built for monthly retainers, it keeps everything organized by month and makes it easy to show what was delivered, what changed, and when each cut was approved.
原文VibeShield brings security, accessibility, SEO & AEO, and bundle & tech audits into one report for AI-built apps. Review evidence, coverage notes and AI-ready fix prompts, then deploy and re-scan. Try a limited security scan without signup; a free account unlocks all four audit tools. Paid plans add monitoring, exports, verified active checks and GitHub source checks.
原文CISO Lead’s CISO-as-a-Service provides on-demand cybersecurity leadership and strategy for organizations without a full-time CISO. The service covers comprehensive risk assessments, security governance, cloud security optimization (AWS, M365, Google Workspace), and incident response planning. It also ensures compliance with regulations like GDPR and ISO 27001, while boosting workforce resilience through employee security awareness training, phishing simulations, and regular executive reporting.
原文After Click offers free website checks: an SEO audit with a ranked fix list, an AI crawler check that shows which AI crawlers your robots.txt blocks, and an llms.txt checker. No sign-up. Built in India by a marketing growth company with an agency and a connected suite of marketing software in planning.
原文I have been self-hosting for 10 years, and "family hosting" for 2. The number of attacks my servers get has increased by 3x since May of this year. Now personally, I don't like hiding behind Cloudflare because I don't want them to be a SPOF, but it was becoming a bit too scary to just be open to the web. Because it is a family cloud, it can't hide behind a VPN, it has to support devices like TV sticks that can't connect properly over VPN. It has to support HTTPS. So I put together a Rust/Ratatui TUI+cron/CLI that manages my second line of defense: firewall and HTTP server. I run a reverse Nginx proxy in front of apps like Nextcloud, and a nftables firewall with SSH as my admin tunnel. It does several things: 1) It allows me to block entire segments, countries, datacenter IP ranges, TOR exit nodes etc... 2) It allows me to block specific bots: search bots, AI bots, security scanners 3) It does dynamic blocking too, looking at the logs to spot bad behavior and block it. I used to run fail2ban for SSH for example, but a centralized UI for both SSH and HTTP(S) is nicer IMHO. So if this is useful to anyone else, feel free. It's AGPL v3. In my experience, geoblocking is the biggest win, reducing the attacks by 30x. AI Disclosure: I use AI assisted development. I follow Linus Torvalds and Bob Martin model, with using AI as a tool and verifying the result.
原文Built your app with Lovable? Add its URL, connect the GitHub or drop the ZIP export, and get prioritized findings on security, scalability, running costs, code quality and visibility, each with a fix prompt. Optional: an agent tests your live app. Free.
原文AI-FW sits between your AI agents and LLM backends, inspecting every prompt and response — blocking prompt injection and jailbreaks, masking PII, enforcing policy, routing between models, and keeping a full audit trail. Self-hosted. Free Community Edition with 100M tokens/month.
原文A rent agreement with Aadhaar e-sign simplifies the documentation process for landlords and tenants by allowing digital signing without printing physical copies. Creating an online rent agreement in Delhi involves recording the rental amount, security deposit, tenancy duration, notice period and responsibilities of both parties. Law At Ease provides an online process for preparing rental documents, with applicable stamp duty and registration requirements considered separately.
原文Unlike complex enterprise tools, Orb44 is built for founders and developers. We combine an agentless external AI scanner (zero logs, no root) with an internal 'Watch Satellite' to monitor your VPS pulse. What truly stands out is our hybrid approach: we don't just dump generic alerts on you. Our AI provides step-by-step remediation, and our team of human cybersecurity experts is available to help you fix the vulnerabilities hands-on. Test 1 domain completely free.
原文Arva SEO helps business owners find their next SEO step. Audit your public website, research keywords, plan and improve content, and track progress in one workspace. Works across website platforms, with an optional WordPress Connector for health checks, SEO titles, meta descriptions and drafts. Connect Claude, ChatGPT, Gemini or Grok through MCP, or invite a specialist to selected websites. Start free with your first website.
原文We’re launching Kimpa, a security-first, privacy-focused business email and workspace for modern businesses. Mail, calendars, contacts, documents, spreadsheets, presentations and team collaboration come together in one connected platform. MCP support lets teams connect compatible AI assistants and agents to their tools while keeping greater control over business information. We’d love your feedback on building a more secure, private way to work.
原文Audit your website for SEO, answer engines, and AI search. Get prioritized fixes, actionable recommendations, and code suggestions to improve your website's discoverability.
原文IP Raccoon tells you in one lookup whether an IP is a real visitor, a bot, a VPN, or a proxy. Built by the team at Opticks Security.
原文Scan your Lovable, Bolt, Replit, Cursor, v0 or Vercel app for exposed API keys, missing security headers, Supabase RLS gaps and SEO issues. Free score.
原文I made Agentless server management GUI over plain SSH. In Litedeck, we can show and download file, service, docker container, terminal and security, and resource monitoring. Because, I have some Raspberry pi4, mini pc(N97, N100), jetson nano but cockpit or other app install in the server, but I don't want that. My servers haven't lot of resource. so I made litedeck. And Claude or Codex install in server is heavy too. AI can connect to ssh but, I want to watch what AI's do. So I make to tracking AI and show graph view using my Litedeck mcp.
原文Practise production incidents without risking a real application. Investigate Linux, deployments, databases, networking, and security through simulated services. Read logs, connect to hosts, edit configuration files, and verify your repair. Choose timed challenges or practise at your own pace. No installation or account needed to start.
原文Profiteer is an AI research toolkit for dropshippers and ecommerce sellers, four tools in one place: ProductRank: rising TikTok Shop products, ranked by measured units sold per day TrendTracker: watches your niche, products and competitors, sends a report every Monday FindYourAngle: marketing angles and copy from any product link StoreAudit: an AI audit of your store with prioritized fixes Paste your store URL on the homepage for a free audit, no signup needed.
原文Syncplify Server is an enterprise SFTP and managed file transfer solution with a zero CVE record since launch. Built for regulated industries where security isn’t optional. AI-powered threat detection, post-quantum encryption, HIPAA and GDPR compliance, Windows and Linux support, granular access controls, and high availability.
原文Ganymede 1.1 is a free LLM for reviewing code and finding security bugs. It reads up to 1M tokens, so a whole fits in one prompt. Use it in the browser or through an OpenAI-compatible API in tools like Cline, Continue, opencode or Kilo Code.
原文System Pulse: a native dockable desktop task manager and system monitor built with Rust and GPUI-Kit that supports GPUs and integrated display adapters for Linux, Windows and Mac. The installers are signed so there is no security warnign during install.
原文Listing Watch monitors your Google Business Profile daily and catches listing errors — wrong hours, missing info — before they cost you customers. Free verified audit, then $99/mo monitoring.
原文Hello HN! Today I am presenting you with Peras, the tool which governs your Claude Code and Codex usage, and enforces limits. I built it because I got tired of constantly having to spam /usage to check my usage, and decide if a task is worth risking the agent running out mid-task. Peras enforces a limit with 2 main tiers. At 75% weekly usage you will get a notification, and at 90% Peras will automatically pause the agent. These limits are the default and they are customizable to your own liking. You may ask "how does it know my usage in Claude Code or Codex?" Well, it's pretty simple. Peras gets the Claude Code usage % from the status line, and Codex's one comes from its local app-server. The "pause" Peras executes is a hook that refuses the agent's tool calls and ends its turn. A new feature I implemented is one that makes agents aware of their own usage. When you send your prompt, Peras attaches the usage %. It sends it at the start of the session, then again at 50, 75, 90 and 100%, or if a reset is coming in 30 minutes, so the agent can hurry up and actually capitalize on the remaining usage, if any. Just to clarify, this feature is informational and the pause is what enforces the limit. Before I switched to native SwiftUI, I used SwiftBar. The problem was that for the mascots patrolling their usage bars, I had to re-encode every menu image 8 times a second! There was also stuff SwiftBar wasn't capable of, like the menu being able to appear over fullscreen apps, pinning it as a floating panel, etc. What is the difference between the free and paid version? Well, it is MIT, first of all. The CLI, the hooks, the SwiftBar menu, and the app's source are all on GitHub, but building the app needs macOS 13+, Node 18+, "xcode-select --install" and then finally "npm run build:app". The €4.99 buys you a signed copy which is notarized by Apple, with updates included. The guard works with no menu at all. To install, just run: npx peras-cli setup npx peras-cli codex setup And now we get to the limits part. For now it's subscription plans only, and when running "claude -p", the pause uses the last interactive reading, so it can come late. Also I feel I have to mention that the guard rail is not a security boundary. It runs inside the agent. The menu is macOS only. The CLI and hooks pass tests on Linux in CI, but I don't use them there day-to-day. Last thing before I end this post, I would really appreciate feedback from you, whether install worked for Codex users, whether you have encountered any bugs, or whatever you feel like sharing.
原文ParcelAudit finds UPS and FedEx billing errors (overbilled weight, invalid surcharges, duplicates, late deliveries) and disputes them for you. Nothing upfront, every finding shown line by line. Prefer DIY? Flat plans from $59/mo. First audit free.
原文Look up health and ownership for 48,000+ MCP servers, or audit your whole MCP config in one call. Every claim links to public evidence. Free 10/day. REST and MCP for agents.
原文What makes Lex Extract stand out: 1. 🔒 True Zero-Access Privacy: Unlike many AI tools that log data, our unique security architecture ensures nobody—not even us as developers—can access your documents. 2. 📊 Actionable Excel Reports: We don’t just summarize; we export structured Excel & high-risk reports linked directly to the exact contract page and language. 3. 🛠️ Solo-Built via Vibe Coding: Built entirely by a non-coder using autonomous AI agents.
原文Cross-client AI memory hub with bi-temporal governance, supersession chains, hash-chain audit, and 9 MCP tools. One SQLite shared by all agents via file-level pointers. Local-first, zero cloud.
原文Free, plain-English launch and security check for apps built with Lovable, Bolt, Cursor and Supabase.
原文Paste any token contract address to instantly run a full AI security audit across 30+ EVM networks like Base, BSC, and Ethereum. Catch honeypots, unlocked LP, and concentrated dev risk in 2 seconds, or launch tokens with built-in safety.
原文# clover 三叶草邮局 🍀 在自己的服务器上搭建邮件服务，通过 Web 面板管理域名、邮箱和转发规则。 ## 三步开邮局： 1.接入 cloudflare token; 2.面板一键安装邮件服务器 TLS ； 3.点击创建邮箱。 ## 全程可视化，傻瓜配置，5 分钟创建强大易用的个人邮局。 ## 功能特色 - **可视化管理**：集中管理多个域名、邮箱账户、密码和邮件转发，支持别名、前缀匹配与 Catch-all 。 - **Cloudflare DNS 自动配置**：导入域名，一键生成并推送 MX 、SPF 、DKIM 、DMARC 等邮件记录，也可导出后手动配置。 - **Roundcube Webmail**：从面板选择邮箱，在新标签页免密进入；使用原生搜索、星标、文件夹、编辑器和通讯录。 - **兼容邮件客户端**：支持 IMAP 、POP3 、SMTP 和 ManageSieve ，可使用 Thunderbird 、Foxmail 、Apple Mail 等客户端。 - **全局邮箱设置**：统一管理协议开关、远程图片策略及附件上限；附件默认 100 MB ，可设置为无限额。 - **证书与运维**：支持 HTTPS 、邮件 TLS 证书管理和自动续期，提供环境检查、反垃圾统计、邮件队列、日志及备份入口。 - **账户安全与 API**：单管理员管理，支持两步验证、Passkey 、API Token 和审计日志。 ## 安装准备 - Debian 11–13 或 Ubuntu 22.04+ 服务器；默认发布镜像支持 **amd64**。 - 最低配置：**1 vCPU 、2 GB 内存**；推荐配置：**2 vCPU 、4 GB 内存**。 - 准备一个面板域名和邮件域名，将面板域名的 A 记录指向服务器公网 IP 。 - 公网开放 **80 、443 、25**；邮件客户端按需开放 **465 、587 、993**，POP3S 使用 **995**。 - 确认服务器提供商允许邮件收发，并支持设置 PTR/rDNS 。 安装器可安装 Docker ；已有受支持的宿主机 Caddy 或 Nginx 时，可共享 Web 入口。 ## 快速安装 推荐使用一键安装： ```bash curl -fsSL -o /tmp/clover-bootstrap.sh bash /tmp/clover-bootstrap.sh ``` 也可克隆仓库后安装： ```bash git clone clover cd clover bash install.sh ``` 按提示填写面板域名。首次安装会在终端显示随机生成的管理员账号和密码，请保存后登录面板。 ### Docker Compose 安装 适合已安装 Docker 和 Compose v2 、可独占 80/443 等所需端口的 Linux 服务器。以 root 在服务器操作： ```bash git clone clover cd clover cp .env.example .env nano .env ``` 将 `PANEL_HOSTNAME`、`MAIL_DOMAIN`、`MAIL_HOSTNAME` 和 `ACME_EMAIL` 改为自己的域名和邮箱；可同时填写 `CLOVER_VPS_IP`、调整时区及其他参数。首次安装的密钥项保留模板值或留空即可，初始化会自动生成。 保存后运行一条命令完成安装： ```bash CLOVER_HOME="$PWD" docker compose --profile install run --rm installer ``` Compose 初始化会生成密钥、准备邮件 TLS 、启动服务、创建管理员并安装 `clover` 快捷命令。管理员凭据显示在终端；已有数据和管理员会保留。后续可直接用 `docker compose up -d` 启动服务。已有宿主机 Nginx/Caddy 需共享端口时，请使用上方推荐的安装器。 ## 开始使用 1. **环境配置**：连接 Cloudflare ，选择邮件域名并设置邮件主机名，生成和推送 DNS 记录。 2. **检查环境**：检查 DNS 、端口及 TLS 证书；为邮件主机申请证书，并在服务器提供商处设置 PTR/rDNS 。 3. **邮箱账户**：创建邮箱及密码；需要转发时，在“别名与转发”中添加规则。 4. **Webmail**：选择邮箱并点击“进入 Roundcube”，或按客户端配置指南连接邮件客户端。 Cloudflare Token 需要目标域名的区域读取及 DNS 编辑权限。邮件主机的 A 记录应设为 **DNS only**。 首次邮件证书可能为自签证书，请在连接客户端前申请可信证书。邮件能否送达还取决于服务器 IP 信誉、PTR 和收件方策略。 ## 更新与日常管理 在服务器输入 `clover` 打开管理菜单，或直接运行： ```bash clover status # 查看服务状态 clover update # 更新 clover logs # 查看日志 clover backup # 备份面板数据库与邮件配置 clover admin list # 查看管理员 ``` 更新会保留配置和 Docker 数据卷。 管理员密码遗失时，在服务器运行 `clover admin reset `。 ## 数据与安全 - 邮件与配置保存在服务器的 Docker 数据卷中； Roundcube 的通讯录和偏好独立保存。 - `.env` 含服务密钥，请妥善保管，不要公开上传。 - 面板仅有一个管理员；免密 Webmail 入口允许管理员进入所选邮箱。 ## 许可证 Clover 采用 AGPL-3.0-or-later ，具体条款及来源声明见仓库中的 LICENSE 和 NOTICE 。 Roundcube 、docker-mailserver 等第三方组件遵循各自的开源许可证。
Seal is an iPhone app for the letters and passwords your family will need after you die. Write envelopes for the people you love, seal them with real cryptography (no backend, no account, open source), and they open automatically after a long silence from you. New in 1.2: your family doesn't need an iPhone anymore. Anyone holding the security key can open their envelopes from any browser at sealmessenger.com. Free to try, $29.99 lifetime.
原文22 focused audits for Swift and SwiftUI apps. Fill in your project once and every prompt updates. Copy an audit into a fresh Claude Code session with a Swift agent skill, then mark it done once you've triaged what it finds. They cover concurrency, security, architecture, performance, accessibility, Liquid Glass, testing, interface copy and more. Most ask for findings by file and line, with a fix for each. Free and open source (MIT). Your project details stay in your browser.
原文Live on-chain data for Base Mainnet — gas, DEX arbitrage, whale tracking, Aave flash loans & liquidation, token security, contract profiling. Pay per call in USDC via x402. No API key, no subscription. MCP server included.
原文换一个关键词或分类试试。
