The full gallery
Tech stack
24 projects
SecureWatch - Free website security scanner with 75+ vulnerability tests, WAF protection, SSL monitoring, and real-time alerts.
@rapidrewind0 · X
2nd link is still in development
Monitor website uptime, SSL certificates, and DNS from a centralized dashboard with alerts to Slack, email, and SMS.
@adambalee · X
Built Sentinel 👋 Instant free URL check on the homepage. Every free account also includes 1 public status page, even for commercial use.
Secure GitHub pull requests with hardware authentication and OTP verification.
jallmann · HN
> want without a PR process that requires hardware authentication or proof of presence Just curious, what do you use for this? I built OTP Guard [1] a few years ago for exactly this problem, although I haven't seen any alternatives in the space. Does GitHub have something built-in now? The original framing was more "local malware compromising your GitHub account" ... it never occurred to me that the malware could be a LLM. I really should update the page. [1] https://otpguard.com
Drag files to deploy static websites with instant HTTPS and analytics.
@kanshan_ai · X
我自己也做了一个 丢给AI就能自动发布
Free SAST, DAST, and infrastructure vulnerability scanning with automated CMMC, HIPAA, SOC2, and ISO27001 compliance reports. Built for developers, security teams, and MSPs.
@AuditBastion · X
Built something worth testing? Scan it with
Set up uptime, API, SSL, domain, scheduler, and heartbeat monitoring from Claude or Codex, then investigate failures with evidence through Peeko MCP.
@ktat93 · X
A lot of things actually: 1. (qrcode generator - $120mrr) 2. (analytics soon + monitoring) 3. 4. (~10k visitors)
Organize compliance controls, policies, and evidence to prepare for audits.
@KeelGRC · X
just launched this week. It’s an SMB-friendly GRC and compliance application.
Free local-first API client for HTTP, WebSocket, GraphQL, gRPC, MQTT, and more. No account or cloud required.
@HalxDocs · X
Reqit—a fast, local-first API client for developers.
Grade a domain's email protection: check SPF, DKIM, DMARC, and MX records in your browser.
@domainfyrbrand · X
Proof there's a real person behind an account or action.
@getanchorid · X
PathGuard checks every crypto transaction for scam addresses, clipboard hijacks, and decimal mistakes — before you hit send. Free on Telegram, with an API for wallets and exchanges
@UtibeAbasiJacob · X
Did you know most crypto losses are preventable? I just launched PathGuard a tool that scans every transaction for phishing, clipboard hacks, and simple typos before you send. Save your funds, stay safe. Try it here: 🛡️ #buildinpublic #BuildInPublic
Permanent webhook endpoints and instant HTTPS tunnels for developers and AI agents.
@BinaryScriptar · X
Introducing OtterKit. Always-on webhook endpoints and instant tunnels, built for developers and their AI agents. It started with a problem I kept hitting: every time my coding agent needed to test a Stripe or GitHub webhook, it had to open a tunnel. What OtterKit does • Permanent webhook URLs that answer senders 24/7 with the status, body and headers you choose, verify signatures on arrival (Stripe, GitHub, Shopify, Slack and 12 more), store full history, and forward matching events to your app, signed and retried • Instant HTTPS tunnels to any local port in one command, stable subdomains, auto stop, basic auth • Replay any captured request, edit the payload, re sign it, fire it at your local handler • Pulses: scheduled HTTP calls and dead man's switches with email alerts • Payload drift detection: baseline the JSON shape per event type, get emailed when a provider changes it • Custom domains ( and an email inbox on the same endpoint • A
