开发者工具1 month ago
Secra - The security layer every AI agent needs
Secra是检测AI代理的提示注入、角色劫持和数据泄露的安全中间件。
@SecraHQ · X
完整作品展
技术栈
10 projects
Secra是检测AI代理的提示注入、角色劫持和数据泄露的安全中间件。
@SecraHQ · X
在攻击者利用前，发现你的 external attack surface 中的风险。
@OGVeilScan · X
使用AI增强的安全分析扫描代码和应用漏洞。
u/swifi_ai · Reddit
After 10 years of keeping this idea alive, I finally launched my AI security platform to beta After more than 10 years of keeping this idea alive in one form or another, I finally pushed Swifi live to beta: https://swifi.ai Swifi is an AI-augmented application security platform. The goal: combine traditional security scanning with AI so teams can understand risk across code, vulnerabilities, and production context without stitching together a dozen disconnected tools. Why now? AI change
Lumbox为AI代理提供邮箱、登录自动化、OTP和加密凭证API。
u/kumard3 · Reddit
shipped delivered/bounced/replied webhooks, and deliberately left out open-pixel tracking an agent that sends mail needs to know what happened to it. i had delivery and bounce events sitting in the database the whole time, they just never got delivered anywhere useful, so an agent sending mail had no way to react to a bounce or know if anyone replied. shipped webhooks for the real lifecycle: delivered, bounced, complained, replied. an email.replied event fires specifically when an inbound
监控外部攻击面、检测子域名暴露、自动映射 CVE 威胁。
@tugayakin34 · X
ThreatPort is an all-in-one Cyber Threat Intelligence & Attack Surface Management platform
监控 SSL 证书和网站安全，包含自动续期检测、安全头部监控和 DNS 健康检查。
@di_spivak · X
Investigate wallets, tokens, transactions, approvals, and smart contracts with evidence-led Web3 security tools, blockchain research, and connected intelligence.
@ceotokentoolhub · X
Scaling @TokenToolHub
使用硬件认证和OTP保护GitHub拉取请求。
jallmann · HN
> want without a PR process that requires hardware authentication or proof of presence Just curious, what do you use for this? I built OTP Guard [1] a few years ago for exactly this problem, although I haven't seen any alternatives in the space. Does GitHub have something built-in now? The original framing was more "local malware compromising your GitHub account" ... it never occurred to me that the malware could be a LLM. I really should update the page. [1] https://otpguard.com
审计AI应用的安全漏洞，获取完整检测报告。
u/mrtrly · Reddit
I asked ChatGPT 20 different ways who could fix a half-built app. It never named my company once. I do codebase rescue for founders in exactly that spot, so that one stung. There are already plenty of tools that measure this kind of AI visibility, a CDN even ships one free, so I built mine mostly to see my own number, and it confirmed the bad news: near zero. The measuring turned out to be the easy part. What none of the tools do, and what I actually care about, is the fix: getting the mode
