tlsradar · HN

TLS Radar – Independent SSL/TLS Monitoring, Web and CLI and Claude

@Sentrint · X

Made Sentrint after seeing how many vibe-coded apps ship with RLS switched off. Point it at a GitHub repo and it finds open user tables, exposed keys and auth checks that only run in the browser. Free scan is the whole scan, no card.

@korisecurity · X

What we have now: Vibe coding -> Vibe testing -> Vibe marketing -> Vibe users -> Vibe subscriptions. You may do all but don't Vibe Secure! Scan for those open ports, missing DKIMs or CVEs. Use a professional tool

u/Background-Bed-8866 · Reddit

I built an AI back office that handles startup operations while I focus on shipping I build an AI back office for founders because I was tired of juggling 15 different SaaS tools for blogging, SEO, docs, analytics, customer support, and launches. Today I finally launched on Product Hunt. Happy to answer anything about the architecture, pricing, or why I chose specialized agents instead of one general assistant. try it out: Astrodesk submitted by /u/Background-Bed-8866 to r

u/bob__io · Reddit

What we learned from trying to turn vibe-coded prototypes into production SaaS applications Founder here. While developing MCPBackend, we noticed a major difference between generating a convincing application demo and building a maintainable SaaS product. AI coding tools are increasingly capable of generating interfaces, routes and even initial application logic. But a production application still needs: a reliable data model authentication and authorization backend validation

u/uwais_ish · Reddit

Three weeks to build an AI security scanner. The scanner was the easy part. Shipped RedFlag this month. Breakdown of where the time actually went, because it was nothing like I estimated. Stack: Next.js 16, Auth.js v5, MongoDB, Stripe, OpenAI. Deployed on Vercel. What I thought would be hard: getting an LLM to find real vulnerabilities. What was actually hard: getting it to stop finding fake ones. First working version flagged 200+ issues on a clean repo. Every one plausible, most of th

u/rontop151 · Reddit

I vibe-coded an anti-vibe-coding app. Yes. I used AI to build a whole academy that trains you to stop blindly shipping AI code. Five levels. Security quizzes. Badges. A streak. The whole “read the error before you panic” curriculum. It’s like building a gym while eating pizza on the treadmill. Play it here → https://videcodingacademy.web.app This post was also vibe-coded. Happy Vibe Coding 😂 submitted by /u/rontop151 to r/SideProject [link] [comments]

@StandaraAI · X

Willdom1986 · V2EX

多年前考过 CCNP 网络工程师，以前有一个很头疼的地方就是网络设备配置丢失引发的各种故障。后来越发觉得，网络设备的配置实际上是一个非常关键的数字资产。 为此，我利用周末时间开发了 XConf ( https://xconf.ai) 来解决这个问题。 产品主要就是想解决两个问题：**自动化的灾备高可用**，以及**端到端的安全**。 * **自动备份与灾备**：支持将配置定时备份到云端。如果网络断连了，探针会自动在本地离线队列里暂存配置，等连接恢复后自动重传。 * **端到端加密**：本地的 Go 探针是完全开源的，会自动在内存中对密码进行流式脱敏，并在上传前通过 AES-256-GCM 在本地加密。SaaS 后台拿到的只有密文，解密和版本比对（ Diff ）都完全在你的浏览器本地沙盒里通过 WebCrypto API 进行。 * **打磨版的配置对比 Diff**：我花了一些功夫打磨了浏览器端的配置版本对比功能，力求让日常比对的交互体验足够丝滑。 * **AI 安全基线审查**：系统集成了 AI 辅助的安全基线审查，可以一键检查和分析配置中的潜在风险。 因为目前完全是我利用业余时间（主要在周末）维护，所以确实没精力提供工作日的在线即时客服。大家使用过程中遇到任何 Bug ，欢迎随时去 GitHub 提 Issue ，我会在周末集中修复和跟进。 目前公测已开放，不需要邀请码即可注册，欢迎大家体验吐槽。 探针 agent 开源地址： https://github.com/willdom-lee/xconf-agent 官方网站： https://xconf.ai

@vaultdesk · X

jallmann · HN

> want without a PR process that requires hardware authentication or proof of presence Just curious, what do you use for this? I built OTP Guard [1] a few years ago for exactly this problem, although I haven't seen any alternatives in the space. Does GitHub have something built-in now? The original framing was more "local malware compromising your GitHub account" ... it never occurred to me that the malware could be a LLM. I really should update the page. [1] https://otpguard.com

@tugayakin34 · X

ThreatPort is an all-in-one Cyber Threat Intelligence & Attack Surface Management platform