
完整作品展
技术栈
23 projects


CanaryHub 实时监控应用和 API,故障时通过 Telegram 即时警报。
u/AgitatedLemon6836 · Reddit
I've got too many sites to monitor at this point I have been working on a bunch of different SAAS ideas at this point, some of them are just parked right now as I have decided to market others or have lost passion for the project. Its hard to check logs in a unified fashion for a bunch of different sites, I have backend's on Fly io, Heroku, Vercel, Hetzner and AWS (for varying reasons, some consulting, some work etc). just wanted like text message updates for things with a summary, like "3

为GitHub仓库运行安全审计,检测密钥泄露、认证问题和部署漏洞。
@emanueldev4 · X
Building Preflight a simple way to catch issues before your website goes live.

Tako 在 60 秒内扫描网页应用,发现泄露密钥和开放数据库等安全漏洞。
@guhanvenkaty · X
Tako's free preview is live: Paste your URL, get a security verdict on your vibe-coded app in 60s. Not an AI wrapper: it fires real requests and PROVES exposure, pulling data from your open DB with no login. Scanning puts you on the early-access waitlist.

由AI驱动的代码审查工具,在microVM中运行代码来捕获更多错误。
u/dumbfoundded · Reddit
Ito, AI Code Review that Runs Code I've been using AI code review tools but none of them actually run code so I built one: https://www.ito.ai/ The way it works is that it uses microVMs to spin up your environment with all of the services running. Then a bunch of AI agents go and test the application to collect runtime evidence. The result is you get test cases along with evidence about whether or not the test cases pass or fail. The runtime evidence can be videos, request/response curls, db

用 7 个扫描器扫描 Web 应用漏洞,获取 AI 修复建议和 PDF 报告。
@hexorasec · X
Paid Hexora accounts now get PDF security reports. Every finding with evidence, CVSS scores, remediation steps, and AI fix prompts, in a report you can hand to a client or keep for compliance. Live for Starter, Pro, and Max. #buildinpublic #vibecoding


为开发者和AI代理提供永久Webhook端点和即时HTTPS隧道。
@BinaryScriptar · X
Introducing OtterKit. Always-on webhook endpoints and instant tunnels, built for developers and their AI agents. It started with a problem I kept hitting: every time my coding agent needed to test a Stripe or GitHub webhook, it had to open a tunnel. What OtterKit does • Permanent webhook URLs that answer senders 24/7 with the status, body and headers you choose, verify signatures on arrival (Stripe, GitHub, Shopify, Slack and 12 more), store full history, and forward matching events to your app, signed and retried • Instant HTTPS tunnels to any local port in one command, stable subdomains, auto stop, basic auth • Replay any captured request, edit the payload, re sign it, fire it at your local handler • Pulses: scheduled HTTP calls and dead man's switches with email alerts • Payload drift detection: baseline the JSON shape per event type, get emailed when a provider changes it • Custom domains ( and an email inbox on the same endpoint • A

对你的网络应用和 API 运行真实漏洞测试,用完整证明展示每个安全发现。
@yedil_bek · X
Building RedRun - security testing that proves what it finds. Runs the real exploit + hands you the exact request/response: SQLi, IDOR, SSRF, XSS, JWT + AI prompt-injection. Zero false positives. Free scan → Active engine invite-only - DM for access code


检测LLM API是否被降智或偷换模型,一键跑6项探针得出结果
cocodot LLM 降智检测 — 免费的 LLM API「降智/偷换模型」在线检测:填入任意 OpenAI 兼容端点的 base_url 和临时 API Key,跑 6 项探针(模型声明、动态题、能力完整性等)生成分项报告;Key 仅用于当次检测、不落库不留存,检测方法[开源](https://github.com/cocodot2026/cocodot-llmprobe)