@Techretainer · X

manage your poultry farm, manage your water company and manage your hotel.

@yedil_bek · X

Building RedRun - security testing that proves what it finds. Runs the real exploit + hands you the exact request/response: SQLi, IDOR, SSRF, XSS, JWT + AI prompt-injection. Zero false positives. Free scan → Active engine invite-only - DM for access code

Koimiao · V2EX

做了个小工具，可以从各个维度评估一个 GitHub 项目，想请大家拍砖 找开源项目时，我们常常会先看 Star 、README 和最近一次提交。如果你是独立开发者，正在维护自己的开源项目，也想知道怎么让自己项目更健康、被更多人看见，第一步该从哪里做起？ 所以最近我做了一个小项目：TrustOSS http://trustoss.org 输入一个 GitHub 仓库链接，TrustOSS 会把这些公开信号整理成一份可读的仓库健康报告：活跃度、维护情况、社区、文档与成熟度评分；也可以进一步查看漏洞、CI 、真实依赖者、维护者集中度和 Star 异常情况。 想要评估一个开源项目，或者维护自己的开源项目，想知道短板在哪里，都可以直接试试（是免费的！

@tooltilities · X

@akshay_nocode · X

Not exactly — Sentry captures errors, BugOps acts on them. It reads the Sentry alert, checks recent commits, traces root cause, and opens a fix PR. Think Sentry as the sensor, BugOps as the on-call engineer that never sleeps.

u/uwais_ish · Reddit

Three weeks to build an AI security scanner. The scanner was the easy part. Shipped RedFlag this month. Breakdown of where the time actually went, because it was nothing like I estimated. Stack: Next.js 16, Auth.js v5, MongoDB, Stripe, OpenAI. Deployed on Vercel. What I thought would be hard: getting an LLM to find real vulnerabilities. What was actually hard: getting it to stop finding fake ones. First working version flagged 200+ issues on a clean repo. Every one plausible, most of th

lanyi96 · V2EX

新开发了一款网页小游戏-象棋(卧底版)-支持好友在线联机对战。  游戏网址: https://gameplayer2.com/xiangqi 规则如下: - 胜利条件和普通象棋一样：将死对方的将就算赢。 - 开局时，帅和士都公开明旗。其余 13 枚棋子盖住并重新打乱，其中混入 3 枚对方棋子作为卧底。 - 暗子还没翻开时，先听从它所在的一方。轮到你时，可以走一步棋，也可以用这一回合把自己控制的一枚暗子原地翻开。 - 所有暗子在翻开前都可以横走、竖走，每次最多 3 格，而且不能越过其他棋子。 - 暗子移动后还是暗子。只有它吃子、被吃，或者你主动选择翻开时，才会露出真正的棋子和颜色。 - 吃暗子时，如果吃子方也是暗子，两枚棋子会翻开再完成吃子。 - 如果翻出来的是对方棋子，它会立刻归对方控制。 - 翻开以后，棋子恢复原本的走法。 - 被将军时，可以用暗子挡

@BostonCrowd · X

Check out what I just built with Lovable!

@urti_luca · X

Sentris finds the exposures in your Supabase app before someone else does.

popkoren · HN

I've been working in cybersecurity for a while now, and I noticed there's a lack of security awareness in the world of AI-built websites. That's exactly why I built Rowly, which does: Scans your domain exactly the way a potential attacker would, from the outside. Organizes and explains every issue found in plain language, avoiding complicated tech jargon as much as possible. Gives you a fix for every issue (or for all issues at once) in the form of a prompt, so you can copy it straight into your

lby910722 · V2EX

做了一个免费的 Don't Wordle 反向 Wordle 小游戏 最近做了一个原生浏览器版的 Dont Wordle： https://dontwordle.app/ 玩法和 Wordle 反过来：不是尽快猜中隐藏单词，而是要在遵守每一轮颜色提示的前提下，尽量避免猜中答案。页面里有合法单词数量、Undo 、每日局、本地保存进度，不用登录。 技术上是原生页面里的小游戏组件，不是 iframe 。欢迎试试，有反馈也可以直接回帖。

@wraithnet0x · X

Hey developers! I just launched my agentic security scanner. This is not your basic code review that could be replaced by claude code or anything like that. It tests the live application and hand you the fix so you can secure it in time. Website: Demo⬇️