开发者工具3 hours ago
Preflight - Launch security checks for AI-built SaaS apps
为GitHub仓库运行安全审计，检测密钥泄露、认证问题和部署漏洞。
@emanueldev4 · X
Building Preflight a simple way to catch issues before your website goes live.
完整作品展
技术栈
28 projects
为GitHub仓库运行安全审计，检测密钥泄露、认证问题和部署漏洞。
@emanueldev4 · X
Building Preflight a simple way to catch issues before your website goes live.
扫描你的应用中泄露的API密钥、开放数据库和身份验证绕过。
@Nqspq · X
been building a security scanner for vibe-coded apps — it catches leaked API keys, open databases, logins you can bypass. tested it on a repo made for testing scanners. it caught everything — report below free if you want to check yours:
Tako 在 60 秒内扫描网页应用，发现泄露密钥和开放数据库等安全漏洞。
@guhanvenkaty · X
Tako's free preview is live: Paste your URL, get a security verdict on your vibe-coded app in 60s. Not an AI wrapper: it fires real requests and PROVES exposure, pulling data from your open DB with no login. Scanning puts you on the early-access waitlist.
Mitsumono用AI扫描网站漏洞并快速生成修复建议。
@wraithnet0x · X
Hey developers! I just launched my agentic security scanner. This is not your basic code review that could be replaced by claude code or anything like that. It tests the live application and hand you the fix so you can secure it in time. Website: Demo⬇️
用 7 个扫描器扫描 Web 应用漏洞，获取 AI 修复建议和 PDF 报告。
@hexorasec · X
Paid Hexora accounts now get PDF security reports. Every finding with evidence, CVSS scores, remediation steps, and AI fix prompts, in a report you can hand to a client or keep for compliance. Live for Starter, Pro, and Max. #buildinpublic #vibecoding
用对抗测试检查LLM端点安全，获取OWASP审计报告。
@aryaan_sheth · X
- LLM security for small teams
简历检查和AI职业测试工具，评分您的工作安全指数及自动化风险。
@_b_meet · X
对你的网络应用和 API 运行真实漏洞测试，用完整证明展示每个安全发现。
@yedil_bek · X
Building RedRun - security testing that proves what it finds. Runs the real exploit + hands you the exact request/response: SQLi, IDOR, SSRF, XSS, JWT + AI prompt-injection. Zero false positives. Free scan → Active engine invite-only - DM for access code
AI 应用安全扫描器，检测泄露的密钥和配置问题。
thfothijn · Product Hunt
OpzyAI Finds what your AI-built app leaks — your editor fixes it
输入公司网址分析 WHOIS、SSL 等信号来生成信任评分。
@CoderJiii · X
🚀 Just launched Veris — a platform that helps verify company legitimacy using WHOIS, SSL, website, contact, social, and legal checks to generate a Trust Score & Risk Level. 🌐 #BuildInPublic #OpenSource #FullStack #React #NodeJS
Vulnsy是为安全团队提供的渗透测试报告平台，可10倍快速交付客户报告。
@TurvSec · X
粘贴 GitHub 仓库扫描安全漏洞，自动修复代码问题。
u/Still_Amphibian545 · Reddit
almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex