dgerken · HN

I rebuilt my 2000s polling site with an AI running the editorial desk

@jay_cobski · X

Awesome oil and gas safety audit tool -

@tobio_ojebiyi · X

@di_spivak · X

@yedil_bek · X

Building RedRun - security testing that proves what it finds. Runs the real exploit + hands you the exact request/response: SQLi, IDOR, SSRF, XSS, JWT + AI prompt-injection. Zero false positives. Free scan → Active engine invite-only - DM for access code

@StandaraAI · X

@Timemindai · X

@MrPenetratorTP · X

MrPenetrator helps businesses monitor their website’s trust, security and performance before problems affect their visitors.

@YashPatel_2607 · X

Building — paste any store URL, it scans your product listings for compliance violations (Prop 65, FDA, CPSIA, GPSR). Free, no signup. Most sellers don't know they're one missing warning label away from a $2,500/day fine.

u/danielbaker06072001 · Reddit

Most AI agent SaaS is just bad security with a nice dashboard Give a new employee access to Stripe, GitHub, Slack, and your CRM on day one, and you’d call it reckless. Give the same access to an AI agent, and we call it “autonomous.” That isn’t innovation. It’s skipping basic security because the demo looks cool. Full disclosure: I’m building TrustLoopGuard around this problem, so I’m obviously biased. While testing one MCP connection, I realized I had decided what the agent could a

u/uwais_ish · Reddit

Three weeks to build an AI security scanner. The scanner was the easy part. Shipped RedFlag this month. Breakdown of where the time actually went, because it was nothing like I estimated. Stack: Next.js 16, Auth.js v5, MongoDB, Stripe, OpenAI. Deployed on Vercel. What I thought would be hard: getting an LLM to find real vulnerabilities. What was actually hard: getting it to stop finding fake ones. First working version flagged 200+ issues on a clean repo. Every one plausible, most of th

@aryaan_sheth · X

- LLM security for small teams