@OGVeilScan · X

Getchowned · HN

The AI Lethal Trifecta

@UtibeAbasiJacob · X

Did you know most crypto losses are preventable? I just launched PathGuard a tool that scans every transaction for phishing, clipboard hacks, and simple typos before you send. Save your funds, stay safe. Try it here: 🛡️ #buildinpublic #BuildInPublic

u/danielbaker06072001 · Reddit

Most AI agent SaaS is just bad security with a nice dashboard Give a new employee access to Stripe, GitHub, Slack, and your CRM on day one, and you’d call it reckless. Give the same access to an AI agent, and we call it “autonomous.” That isn’t innovation. It’s skipping basic security because the demo looks cool. Full disclosure: I’m building TrustLoopGuard around this problem, so I’m obviously biased. While testing one MCP connection, I realized I had decided what the agent could a

@POONAMSING9999 · X

Forget this fight. The problem in AI is vibe coding security risk so i made vibe Guard ai that analysis user code and found out security risks. For the sake of humanity, to solve a painful problem I made this It had free version try now

@POONAMSING9999 · X

Technology is getting better everyday so the vibe coding but still people loosing money.🚀 Around 62% of vibecode is unsecure. I made VibeGuard that analysis code and check whether it is safe,ready to go,every error and what it can cause, many more...

jallmann · HN

> want without a PR process that requires hardware authentication or proof of presence Just curious, what do you use for this? I built OTP Guard [1] a few years ago for exactly this problem, although I haven't seen any alternatives in the space. Does GitHub have something built-in now? The original framing was more "local malware compromising your GitHub account" ... it never occurred to me that the malware could be a LLM. I really should update the page. [1] https://otpguard.com

@Privitly1 · X

privacy app that covers what similar apps miss for cheaper.

@IchMag17 · X

@BinaryScriptar · X

Introducing OtterKit. Always-on webhook endpoints and instant tunnels, built for developers and their AI agents. It started with a problem I kept hitting: every time my coding agent needed to test a Stripe or GitHub webhook, it had to open a tunnel. What OtterKit does • Permanent webhook URLs that answer senders 24/7 with the status, body and headers you choose, verify signatures on arrival (Stripe, GitHub, Shopify, Slack and 12 more), store full history, and forward matching events to your app, signed and retried • Instant HTTPS tunnels to any local port in one command, stable subdomains, auto stop, basic auth • Replay any captured request, edit the payload, re sign it, fire it at your local handler • Pulses: scheduled HTTP calls and dead man's switches with email alerts • Payload drift detection: baseline the JSON shape per event type, get emailed when a provider changes it • Custom domains ( and an email inbox on the same endpoint • A

u/swifi_ai · Reddit

After 10 years of keeping this idea alive, I finally launched my AI security platform to beta After more than 10 years of keeping this idea alive in one form or another, I finally pushed Swifi live to beta: https://swifi.ai Swifi is an AI-augmented application security platform. The goal: combine traditional security scanning with AI so teams can understand risk across code, vulnerabilities, and production context without stitching together a dozen disconnected tools. Why now? AI change

@rapidrewind0 · X

2nd link is still in development