The full gallery
Tech stack
20 projects
Autonomous DMARC, SPF, and DKIM configuration to prevent domain impersonation and protect email deliverability.
@okamigenshin · X
Try Authex, for securing your domain and email autonomously.
Protect your email and calendar by requiring unknown senders to solve a CAPTCHA or pay a fee.
felixdoerp · HN
Hi HN, The one thing AI reliably does is generate noise. Half the tools I see launch are just machines for producing more noise across more channels. And people are starting to see this in the form of emails in their inboxes as spam filters are struggling. There used to be a useful signal in email: the effort a sender put into customizing a message was a rough proxy for how relevant it actually was. AI killed that. Now it's customized slop with the appearance of effort with none of the cost. It is painful that the open internet / open channels have been abused like this. Captchainbox applies the idea of proof-of-work to email. If a sender is willing to do a bit of work to reach you, the message is more likely to be worth your time and the sender more likely to be real. The work is a traditional captcha. You can also set a pay-to-deliver amount if you want more friction. The proceeds of the delivery payment after transaction costs go to the Internet Archive and the EFF. The tool curr
Paste your URL to get security findings for web apps explained in plain English
@luqmandv · X
I built a free security scanner for vibe-coded apps. You shipped with Cursor, Bolt, or Lovable. But did you check if it's actually safe? Paste your URL → get a plain English security report in 30 seconds. No setup! 👉 #buildinpublic #vibecode
Free website security scanner checking SSL, headers, and compliance for instant trust scores and AI-guided fixes.
@MrPenetratorTP · X
MrPenetrator helps businesses monitor their website’s trust, security and performance before problems affect their visitors.
Create email aliases that forward to your inbox, keeping your real address private.
@me_jaythorat · X
lets you create email aliases on a free shared domain or your own custom domain, like [email protected]. Send and receive mail from them without ever leaving your primary mailbox and without revealing your real identity in case where you dont want to share your real email.
Monitor SSL certificates and website security with continuous checks for renewal, headers, and DNS.
@di_spivak · X
Detect Claude account ban risk and verify environment IP purity.
yacuo · GitHub
check-cc https://checkcc.org 是一个 Claude 运行环境检测与账号风险分析工具，面向正在注册 Claude 账号、订阅 Claude Pro、申请 Claude API、使用 Claude Code，或担心 Claude 封号、账号受限、订阅失败的用户。
Scans live web apps for security vulnerabilities like exposed keys and open databases in 60 seconds.
@guhanvenkaty · X
Tako's free preview is live: Paste your URL, get a security verdict on your vibe-coded app in 60s. Not an AI wrapper: it fires real requests and PROVES exposure, pulling data from your open DB with no login. Scanning puts you on the early-access waitlist.
AI contract reviewer that flags risks and tracks signatures directly from your inbox.
@raeezatameez · X
dropping mine - would love your take!
Automated security audits for GitHub repositories to catch secrets, auth issues, and deployment problems.
@emanueldev4 · X
Building Preflight a simple way to catch issues before your website goes live.
Scan web apps for security vulnerabilities with 7 scanners and receive AI fix prompts and PDF reports.
@hexorasec · X
Paid Hexora accounts now get PDF security reports. Every finding with evidence, CVSS scores, remediation steps, and AI fix prompts, in a report you can hand to a client or keep for compliance. Live for Starter, Pro, and Max. #buildinpublic #vibecoding
Check AI agent outputs and actions against your policies before execution; get allow, block, rewrite, or escalate decisions.
u/danielbaker06072001 · Reddit
Most AI agent SaaS is just bad security with a nice dashboard Give a new employee access to Stripe, GitHub, Slack, and your CRM on day one, and you’d call it reckless. Give the same access to an AI agent, and we call it “autonomous.” That isn’t innovation. It’s skipping basic security because the demo looks cool. Full disclosure: I’m building TrustLoopGuard around this problem, so I’m obviously biased. While testing one MCP connection, I realized I had decided what the agent could a
