@emanueldev4 · X

Building Preflight a simple way to catch issues before your website goes live.

@MrPenetratorTP · X

MrPenetrator helps businesses monitor their website’s trust, security and performance before problems affect their visitors.

@hexorasec · X

Paid Hexora accounts now get PDF security reports. Every finding with evidence, CVSS scores, remediation steps, and AI fix prompts, in a report you can hand to a client or keep for compliance. Live for Starter, Pro, and Max. #buildinpublic #vibecoding

u/Brief_Dust8845 · Reddit

I pivoted from my initial idea after realizing I was solving the right problem at the wrong time When I started building GaaS Guard, it was an AI governance tool for companies. The idea was to help organizations defend against prompt injection and unsafe AI interactions. It was technically interesting, and I still genuinely believe I was solving a real problem. The problem was, it just wasn’t selling—to be brutally honest. Here’s how I actually ended up pivoting. I started using a b

@GlenLouis08 · X

lets connect! building this

Nqspq

been building a security scanner for vibe-coded apps — it catches leaked API keys, open databases, logins you can bypass. tested it on a repo made for testing scanners. it caught everything — report below free if you want to check yours:

thfothijn · Product Hunt

OpzyAI Finds what your AI-built app leaks — your editor fixes it

@_b_meet · X

u/danielbaker06072001 · Reddit

Most AI agent SaaS is just bad security with a nice dashboard Give a new employee access to Stripe, GitHub, Slack, and your CRM on day one, and you’d call it reckless. Give the same access to an AI agent, and we call it “autonomous.” That isn’t innovation. It’s skipping basic security because the demo looks cool. Full disclosure: I’m building TrustLoopGuard around this problem, so I’m obviously biased. While testing one MCP connection, I realized I had decided what the agent could a

u/uwais_ish · Reddit

Three weeks to build an AI security scanner. The scanner was the easy part. Shipped RedFlag this month. Breakdown of where the time actually went, because it was nothing like I estimated. Stack: Next.js 16, Auth.js v5, MongoDB, Stripe, OpenAI. Deployed on Vercel. What I thought would be hard: getting an LLM to find real vulnerabilities. What was actually hard: getting it to stop finding fake ones. First working version flagged 200+ issues on a clean repo. Every one plausible, most of th

@GetPrbl · X

@di_spivak · X