AgentGuard
Stop losing enterprise deals to AI security reviews. Production prompt injection defense specs, auditor-vetted ISO 42001 & SOC 2 answer templates, and an open-source test runner for autonomous AI agent builders.
原文
1
DEV TRENDS / CATEGORY
业务场景 · 安全与测试
2026年10月22日 – 2026年10月28日 内首次发现的 249 个新项目，已跨 8 个来源去重。
2026年8月6日 – 2026年10月28日 内首次发现 2362 个项目
DTDevTrends 归类原始项目或来源原始标签
249 个新项目8 个来源
—
Zro: Uncensored Security Models
Security research often involves questions that general-purpose models refuse Meet Dolly 1 Security and Dolly 2 Security, uncensored variants of GLM-5.3 Flash and GLM-5.3 for defensive testing and red-team workflows. Run them through the Zro API or CLI with zero request retention. Since our July launch, we’ve also added new models, agent integrations, yearly plans, and referrals.
原文104
—
The Knockout Question Audit
Stop optimizing the wrong thing in your job search. Most job search advice is built on unverified myths: that robots scan your resume for keywords, that 75%...
原文1
Resume Claim Guard
Project URL Category Other Project Title Resume Claim Guard: an agent skill that stops hallucinated resume claims Project An open-source agent skill (SKILL.md) for Claude Code and AI coding agents that enforces a strict 4-step resume workflow: anchor every claim to a verified fact base, audit metrics against exaggeration, and generate bilingual role-aligned bullets. MIT licensed. Homepage: Highlights Prevents hallucinated resume claims by binding each bullet to a verified fact base, and shows changes as yellow-highlight diffs so you can review every edit. Bilingual output, usable for interview prep too. Example Code markdown or Videos
原文
0
FastAPI Supabase Starter
A FastAPI + React SaaS starter on Supabase: sign-in, teams, roles, API keys, Stripe and Razorpay payments, a Gemini assistant and an MCP server. Postgres row-level security guards every table, even for API keys and AI clients. From ₹1,999, one-time.
原文2
NoVul – Open-source Mac app to Find and fix vulnerabilities on your Mac
Since everyone and their agents are building apps, there is not time to stop and search for vulnerabilities on our machine. Built an open source tool that monitors new vulnerabilities every 15 mins and lets you or your agent know on what to fix.
原文—
fixdossier
fixdossier is a zero-dependency MIT GitHub Action that collects releases, tags, GHSA advisories, Dependabot/Renovate PRs, and security commits into a dated SECURITY-RECORD.md, JSON (fixdossier/v1), and SUPPORT.md policy ahead of EU PLD (Dec 2026), CRA (Dec 2027), and enterprise security reviews. Need human sign-off & signed exports? fixdossier Pro ingests runs via GitHub Actions OIDC (zero secrets stored) and exports Ed25519-signed PDF + ZIP Evidence Packs.
原文1
FrostLock
FrostLock temporarily blocks keyboard and mouse input on Windows, so you can clean your keyboard or prevent accidental input while away from your PC. This can also be used for security purposes. Choose Gentle, Strict, Hard, PIN, or USB key mode, with timed freezes, a lock-screen overlay, configurable hotkeys, and recovery options.
原文1
SEORankPro
Free enterprise technical SEO & tracking tag audit tool. Instantly audit GA4, Google Ads, GTM tags, Core Web Vitals (LCP, CLS, INP), redirect chains, SSL, and DNS health.
原文1
PromoPilot
New since our 2025 launch: SEO Radar connects to Search Console, finds pages ranking 4–20 and estimates the clicks (and, with GA4, the revenue) they miss, plus your visibility in ChatGPT, Gemini, Perplexity and Claude. Cascade (tiered) link building now reports whether Google indexed every placement. Also: site audit (first 100 pages free), daily rank tracking and 85+ free SEO tools. Pay-as-you-go, no subscription required.
原文2
Bazi Time Audit Kit
A dependency-free JavaScript checker, synthetic DST fixtures and an audit checklist for Four Pillars tools. Resolve a local birth minute to zero, one or two UTC candidates. Includes regression tests and primary sources. MIT licensed; no real birth data or network calls. Not a Bazi calculation engine.
原文1
CiteScan
AI visibility audit: CiteScan tests whether ChatGPT, Perplexity, Gemini and Claude cite your website — 15 buyer-intent queries per engine — and delivers a prioritized action plan within 24 h. Free instant technical scan; full audit from €39, one-time payment, 7-day money-back guarantee.
原文2
Vivint
Vivint is a home security and smart home company that provides professionally installed security systems, home automation, and 24/7 alarm monitoring from U.S. based reps.
原文1
CSP Evaluator API
Statically evaluates a Content Security Policy against W3C CSP Level 3 and returns one graded JSON report. GET /v1/check fetches a page and reads the Content-Security-Policy and Report-Only headers plus meta tags; POST /v1/validate takes policy text directly. Returns a verdict (enforced, report_only, no_csp, ineffective), scriptProtection (strict, allowlist, none, unknown) and issues with stable codes and spec links. A static assessment, not proof of safety.
原文1
Shufler: 3D gaming harness around your coding harness and dev pipeline
Hi HN. Greg here. I've been a full stack engineer for 20 years. Now all I do is shuffle messages between users, my agent fleet, our dev pipeline.. back and forth. I miss coding, solving problems, reasoning, and having an understanding and a mental model of all the work I'm juggling. But this is the job now, and there's no going back. I don't exactly feel like a 10x engineer yet, but I am for sure a 10-tab engineer. I built (er, Claude built) Shufler to lean into my new reality. If the job is basically to shuffle things through a pipeline, why not have it be more fun. Each row on the 3D gameboard is one of your existing terminal sessions. The columns are the steps your work moves through: Brainstorm, Plan, Build, QA, Review, Merge, Deploy. Your shipped PRs get stored in a warehouse/depot. The main things flowing across the board are your issues and PRs: each one rides along its session/row as it moves through review, CI and merge, and anything waiting on you turns red. I tend to manage several PRs within each Claude/Codex session, and this makes it easier for me to hold onto a mental model of where everything is. It's also made daily standups much easier to read-out. I created a few skins/themes like a casino, a theme park, sky islands, a starship and a factory, because.. of course. MacOS, works with Claude Code and Codex CLI, and cmux and iTerm (tmux should work, but I haven't tested it). It doesn't try to replace anything you already use.. just makes the orchestration more fun. You can still shift focus over to your terminal sessions when needed, use your existing skills, MCP servers, etc. There's a 3D library-building in each skin where you can specify your markdown/context folders or files, and then drag and drop to check them out by your rows/sessions. I tried to be thoughtful on security, following patterns that I consider at work. No telemetry, and the only outside calls are your own gh calls to GitHub. Daemon only listens on localhost, and every action shows its command before it runs. MCP server is opt-in, and sending to other sessions is off by default; if you turn it on, every send is a preview plus a separate confirm you approve. Details are in the README's #safety-and-privacy, and the MCP threat model (including what it doesn't protect against) is in docs/MCP.md. To report a security issue privately (or contributions to improve), see SECURITY.md. with mock data, nothing to install at https://shufler.app at https://github.com/jgrichardson/shufler (MIT)
原文—
GoAdmio
GoAdmio Features: Server management (root access, Apache/PHP/DNS/FTP config, real-time monitoring, MultiPHP, backups, CSF firewall, IP blocker, SSL/Let's Encrypt, ModSecurity, 2FA, PHP-FPM/suExec, SSH control, security advisor) · Account & resource management (create/modify accounts, CPU/RAM/IO limits, suspension, quotas, bandwidth) · Networking & DNS (DNS cluster, nameservers, IPv6, zone editor) · User panel: domains/subdomains/aliases, file manager, FTP, backup wizard, snapshots
原文1
Website Health Check & Audit
Enter any website address and get a plain-language health report in about a minute: speed on mobile and desktop (Google PageSpeed/Lighthouse), SEO basics, accessibility, mobile-friendliness and basic security (HTTPS, HSTS, CSP, outdated JS libraries), plus detected technology and a prioritised fix list. Free, no sign-up, works for WordPress, Drupal and custom sites. We only read public pages, like a regular visitor.
原文2
WebOptiva
AI-powered website intelligence for performance, technical SEO, AI search (GEO), image optimization, accessibility, and managed security.
原文1
catalogaudit
Free Shopify catalog audit: see how Google Shopping and AI shopping agents like ChatGPT read your products, and get your five worst products fixed.
原文1
Hashling
Free, open-source security for your Mac. See what Claude Code, Codex and Cursor are allowed to do, check texts for scams, and ask your own AI (or one running fully on your Mac) "am I safe?". Plain words, and nothing changes without your Touch ID.
原文2
PlainWISP
PlainWISP helps U.S. tax preparers and small firms draft a written information security plan in the browser. No account. Draft free; a license unlocks Word and PDF. One-time Solo $149 / Firm $299 / Multi-office $599, with 12 months of updates. Your answers stay on your device.
原文1
Alertify
Alertify turns notifications from the apps you choose into a full-screen alarm that rings through silent mode and Do Not Disturb. Keep your phone quiet for sleep or meetings and still get woken by what matters: family, a client, an on-call incident or a security camera. Add keywords so only matching messages ring. Notification content never leaves your phone. Free for one app, Pro is a one-time purchase.
原文1
SnapFire FSR: Full Stack Web Apps Served via Rust IR Engine
SnapFire FSR is a full stack runtime that lets frontend teams write typescript and have it served via Rust. At my current workplace (10M+ DAUs), all we want to do was render composed strings from the backend to a browser using Typescript. Since Node 0.x (went I started with Node), things have changed, freedoms taken away and now security teams recommend to wrap your Node server instance with a sidecar or else your Node project will be blocked. SnapFire FSR changes that for us, no more sidecars. The idea is, you don't need a general purpose VM to compose a web page. Most complex transformations and communications are done by our services anyway. When you need complex computation done without a service then create native Rust functions and call it via Typescript. There is a long list of ideas from my past experience with frontend and backend that contributed to SnapFire FSR. In the end, FSR answers my question "Can we specialize our web applications to our full stack needs and security concerns?"
原文—
TinyToolStudio
TinyToolStudio (Tiny Tool Studio) — 45+ free browser-based tools for text, calculations, security, fitness and more. Word counter, GST calculator, secret message encryptor, income tax calculator and 40+ more. No signup, no login, runs entirely in your browser.
原文6
ClarityCrawl
Your website may look perfect, but hidden issues could affect SEO, performance, and visibility. 🔍 **ClarityCrawl** uses AI-powered diagnostics to uncover technical SEO, indexing, accessibility, security, and AI crawler issues. 🎯 Prioritize findings by impact. 🛠️ Get clear explanations and copy-ready fixes. ✅ Review and export an Approved Fix Pack. 📊 Track improvements across audits. 🆓 Explore free diagnostic tools. **Find issues. Understand them. Fix with confidence.**
原文2
BotGauge
AI agents don't just generate answers anymore. They take actions, call tools, and access real data. BotGauge helps engineering teams find where agents break before users do. Run adaptive red-team attacks and evals, catch security and behavioral failures, and replay every issue with full traces. Turn failures into regression tests, continuously retest as your agents evolve, and monitor their behavior in production. One reliability layer from development to deployment.
原文205
SetRepo
Security scans for AI-built apps. Connect a or upload a zip and get a ranked list of issues with exact fixes in minutes.
原文1
iGentrix
iGentrix is the AI agent platform that proves an agent works before it goes live. A built-in launch check runs about 30 realistic customer questions and about 20 attacks in a safe sandbox, then scores accuracy, security and coverage and shows how to fix each failure. Then one agent serves WhatsApp, web chat, email, Messenger, Instagram and Telegram, with a team inbox, lead capture and automations included.
原文2
VulnGPT
VulnGPT helps security teams and developers test web applications for vulnerabilities beyond the obvious. Built by NovaSecLabs, it focuses on authenticated testing, authorization flaws, multi-step workflows, and business-logic vulnerabilities—helping teams investigate how application behavior and access controls can fail across real user journeys.
原文1
SEOLZ
SEOLZ finds what's costing you across six surfaces — SEO, accessibility, security, AI visibility, tags and site health — with platform-specific fixes.
原文1
In-repo delivery board: stages, handoffs, soft WIP, weekly report, Timeline
Project URL Category JS Project Title In-repo delivery board: stages, handoffs, soft WIP, weekly report, Timeline Project Open-source delivery board that stores stages, owners, handoffs, and soft WIP limits in a git-tracked file. Includes a weekly Markdown client report and a local kanban plus calendar Timeline UI. Runs standalone via npx or as a DeepSeek Harness plugin. Aimed at keeping delivery context next to the code rather than only in SaaS boards. Highlights Delivery state lives in the (delivery.json) and is reviewable in PRs Automatic handoff audit when cards change stage; soft WIP limits warn without blocking Weekly Markdown report (shipped / handoffs / risks) plus local editable board and calendar Timeline Standalone CLI: npx jerryxff26-alt/dsh-delivery-board — no SaaS account required Example Code bash npx jerryxff26-alt/dsh-delivery-board init '{"customer":"ACME","template":"governance"}' npx jerryxff26-alt/dsh-delivery-board card '{"title":"API integration","stage":"analyze","owner":"Ada"}' npx jerryxff26-alt/dsh-delivery-board open npx jerryxff26-alt/dsh-delivery-board weekly or Videos GIF in
原文4
dev-utility APIs
19 production APIs on one free-tier VPS, fronted by RapidAPI: a passive website security scanner with a 0-100 score, DNS and email security checks, subdomain mapping, scan history with change diffs, and PRO batch deep scans; an AI email writer, background remover, screenshot & PDF tools, speech-to-text, OCR, translation, validators (email, phone, postal, VAT & IBAN, domain), geocoding, holidays, and live prices. Every API has a free plan - keys in one minute via RapidAPI.
原文1
WSYD Website Doctor
WSYD scans your website for availability, security, performance, technical SEO and AI visibility (GEO), then turns the findings into a prioritised, plain-language action plan: why each issue matters and how to fix it. It also tracks which sources AI assistants cite on your topics. Free scan, no credit card. Monitoring every 5 minutes with email alerts from €9/month, up to 30 sites for agencies.
原文1
Self-diagnosis of vulnerabilities such as PHP2Shell via IP/Domain
You can check for server or web vulnerabilities—including issues like PHP2Shell, React2Shell, and GitLab RCE—by entering an IP address, domain, or URL. Although the site is in Korean, it should be easy to use.
原文—
ReguLattice AI Governance Platform
ReguLattice is an AI-native governance platform that helps organizations discover, assess, govern, monitor, and improve AI systems and AI agents. It finds shadow AI, keeps people in charge of high-risk AI decisions, and maintains live, audit-ready evidence mapped to ISO/IEC 42001, the NIST AI RMF and the EU AI Act.
原文2
Aident Loadout：让多个 AI Agent 共用一套应用连接和 Skills
同时用好几个 Agent 时，每个都要单独配 MCP、API Key 和授权，很麻烦。Loadout 提供一个远程 MCP 服务器（ npm CLI（@aident-ai/cli）和一个开源 Skill，Agent 按需求搜索应用动作、读取实时 schema 再执行；另外内置 400+ 个现成的 Skills（调研、内容、运营等）。OAuth 在浏览器里授权，API Key 保存在 Aident Vault 里不交给模型，每次调用都会记录在审计日志里，并显示花费。可以免费按量付费开始使用。 我是 Aident 团队成员，本帖为自荐。
7
SidekickAI Security
Erkenne synthetische Medien, überwache sicherheitsrelevante Events und bringe KI-gestützte Bedrohungserkennung in deine Workflows – in einer zentralen Security-Workspace-Demo.
原文1
LeakPatrol
Paste your app's URL and get an A–F security grade in a minute: leaked API keys, open Supabase tables, publicenv files. Each problem comes with a plain-English fix and a prompt for Lovable, Bolt or Cursor. Free tools: API key checker, RLS generator.
原文1
TeapotRouter
按用量计费的 AI 模型网关，一个 Key 双协议通用：Claude Code 设置 ANTHROPIC_BASE_URL、OpenAI SDK 改 base_url 即可接入，价格公开、每笔请求成本可查，支持组织内多发 Key 与用量审计、多上游自动故障转移；名字与 logo 源自 HTTP 彩蛋 418 I'm a teapot
—
ESP-Watchtower – $3 ESP8266 Home Network Sentinel and Canary Honeypot
Autonomous, always-on Home Network Sentinel & Canary Honeypot for under $4 on ESP8266
原文15
1
UptimePilot
Hey Product Hunt 👋 I built UptimePilot after getting woken up too many times by “site down” alerts that turned out to be a network blip near the monitoring server. What you can monitor: • HTTP and API endpoints (method, status, keyword, headers, body) • SSL certificate and domain expiry • DNS records • Ping and TCP ports • Cron jobs via heartbeats: we alert you if your job is late Also included: alert routing, maintenance windows so deploys don’t page anyone, team roles and audit logs.
原文1
AISG — Security Check for Vibe Coding
AISG scans the app AI writes for you: leaked keys, unsafe patterns, vulnerable dependencies. 26 sensors, core scans run locally so your source never leaves your machine. Findings are indications that need human review — not a penetration test
原文1
Answerkin
Your customers now ask AI before they search. Answerkin shows whether Gemini recommends your business or a competitor for the questions they actually ask, which websites it trusts, and what to fix so you show up on Google and in AI answers. Every week: Gemini checks with Google Search grounding, an SEO audit with speed and AI-crawler checks, AI-written fixes and an email report. Built for small businesses and agencies. From $12 a month.
原文2
NetKit Tools
Built by a 23-year network architect, NetKit combines real-world enterprise experience with AI speed. • 100% Free & Zero Friction: Web suite live at netkit.ccie13192.com. No registration, no paywalls, no trackers. • Built for Field Ops: IP planning, security audits, and field diagnostics. • Native Companion App (Coming Soon!): NetSmith for iOS is currently under Apple App Store review!
原文1
TurniSmart
TurniSmart builds a month of staff shifts in one click, respecting roles, certificates, leave, rest rules and contracted hours. When someone is missing it ranks who can cover and opens a ready WhatsApp message. Also: licence and certificate expiry alerts, fleet mileage and maintenance, start-of-shift checklists, payroll-ready hour reports and a personal area where each employee sees only their shifts. For restaurants, hotels, cleaning, security, care homes and transport.
原文1
Humanbound
Humanbound continuously tests AI agents and chatbots with adversarial attacks, tags findings to OWASP LLM and Agentic Top 10, and scores security posture.
原文1
SecurityX
SecurityX is a beginner-friendly cybersecurity learning platform built to make security concepts more practical, interactive, and approachable. It brings together learning modules, quizzes, CyberDojo challenges, learner progress tracking, AI-assisted explanations, and safe OSINT learning simulations in one platform. SecurityX is designed for students and beginners who want to explore cybersecurity through hands-on learning—not as a replacement for professional security tools.
原文2
Pandora's box
Pandora’s box is an essential trove of tools and resources to tackle security challenges, explore technologies, manage systems, and bring projects to life.
原文2
Nexus Clean
Free up space, uninstall apps with their leftovers, find duplicates and check your Mac's security. Everything goes to the Trash first and comes back with one click. No account, no tracking: nothing about your files ever leaves your Mac.
原文1
halofort
halofort is a unified endpoint management and Zero Trust security platform that simplifies device management, identity, access, patch management, and compliance from one console.
原文1
Agent Index
Agent Index is a free, sourced directory of about 404 AI agents for compliance, security, risk and business operations, plus about 483 independently verified audit firms (SOC 2, ISO 27001, PCI DSS, HITRUST, CERT-In and more). Compare tools side by side, filter by framework, region and integration, and find auditors by country and city. Not a ranking.
原文1
lfg
LFG turns Claude Code into an engineering pipeline you direct instead of type into. Describe a change in one sentence and specialist agents plan it, build it test-first, and check it with lint, types, tests, security scans and an expert review. You review by talking to the diff, see what a senior engineer would ask, and decide what ships. It runs on your machine, never pushes or reads your secrets, and is free and open source.
原文2
MakeMovie：开源 AI 影视生产线，从一段文字到一部成片
产品页（逐阶段导览）： MakeMovie 是一个 Apache-2.0 开源、可自托管的 AI 影视制作平台：上传一段小说原文或故事设定，自动完成剧本改编 → 分镜 → 角色/场景/道具定妆 → 首帧 → 图生视频 → AI 配音 → 配乐 → 合成母带 → 质检审计 → 交付，每一步可查看、可编辑、可追溯到产生它的那次模型调用。 交付不止成片：同时产出 SRT 字幕与 EDL / FCPXML / OTIO 剪辑清单，可直接在 Premiere Pro / DaVinci Resolve 继续精剪 模型可插拔：OpenAI / Anthropic / Google / 阿里百炼 / 可灵 / 火山 Seedance / 任意 OpenAI 兼容端点，九个能力槽位一键补齐 支持短剧 / 电视剧 / 电影三种项目形态，整本小说自动拆章分集（上限 100 万字符） 声音链完整：本地内嵌 Qwen3-TTS（MLX）音色克隆配音、逐镜氛围声、配乐与声音工坊降噪 每一帧都有账：任务幂等可恢复、逐镜质检问题队列、按物理量记账的用量台账 Docker 一条命令自托管，内置示例项目零 API key 试跑 技术栈：TypeScript monorepo（Next.js + Fastify + Prisma/PostgreSQL + BullMQ + FFmpeg）。
9
Reins —— 自托管零信任远程运维平台
自托管零信任远程运维平台。单个 Go 二进制 Relay + 一行命令安装的 Agent + 50+ 命令 CLI，通过反向 WebSocket 穿透 NAT——被控端零入站端口。mTLS + 内置 CA + 多租户 RBAC + 防篡改审计 hash chain，并为 AI 代理提供规则门禁（自动化操作前必须先读项目运维规则并携带内容指纹 ack）。
2
Coworking OS
Built inside a working coworking space in Hyderabad and used there every day. It handles how Indian operators actually work: rent collected on WhatsApp and UPI with Pay Now links, security deposits and notice periods, GST invoices per centre, leave-and-licence agreements signed online, and enquiries that arrive by phone. Every plan has every feature, unlimited staff, from INR 1,999 a month.
原文1
NetPayMeter
NetPayMeter shows what actually lands in your bank account. Enter a salary or hourly wage, pick your state, and see take-home pay after federal income tax, Social Security, Medicare and state tax, on 2026 rates. It covers all 50 states and DC, plus salary-to-hourly, overtime, W-4, 1099 and self-employment tax calculators. No signup, nothing stored. Bloggers and HR teams can embed any calculator for free with one snippet.
原文1
1
1
NVIDIA / SkillSpector
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
原文2.2万
PelSure
PelSure is a 100% offline desktop broker management suite for Windows. It lets independent insurance agencies manage client books on local SQLite, run multi-carrier quote comparisons, audit coverage gaps with local on-device AI, and dispatch renewal schedules via WhatsApp with zero cloud data leaks and zero seat fees.
原文1
Picke GEO
Run a free GEO audit to see how ready your website is for ChatGPT, Gemini and Google AI results. Measure your AI visibility and uncover your SEO gaps.
原文2
Milo's Launch Check
Free Chrome extension for apps built with Lovable, Bolt, Replit, Cursor or v0. On a site you own, one click checks HTTPS, security headers, keys in public JS, source maps andenv/.git. Read-only, no tracking, fixes in plain words.
原文1
SAAS Minimalist
SAAS Minimalist helps you stop losing support messages and replying slowly by turning website chats into organized tickets in a shared inbox, with a searchable knowledge base to reduce repeats and optional AI draft replies to speed up responses. Built for SaaS founders, startups, and agencies. Key features: white‑label widget, ticket workflow, assignments/status, KB + search, audit/security, mock billing + optional Stripe, Next.js + Prisma + SQLite.
原文1
VibePatrol
Built with Lovable, Bolt, Replit, Cursor, v0, Claude or ChatGPT? Paste your live URL. In under a minute VibePatrol looks for leaked API keys in your page and JS, an exposed Supabase service_role key, exposed files likeenv andgit, public source maps, missing security headers and risky CORS. Plain-English results. Full report $9 one-time, or 10 for $29.
原文1
Moppet：给 macOS 做了个会自己动手清理的桌宠，但删除前一定先问你
GitHub: （ Apache-2.0 ，Swift 6 / macOS 14+） macOS 清理工具，两个不一样的地方： 1 ）内置一个 Codex 级的 agent 。你说"清理浏览器缓存"，它先扫描给你看，等你批准才删。 沙箱、审批策略、补丁应用、会话恢复都是自己实现的；另外提供 23 个工具的 MCP 服务器， Claude Code / Cursor 可以直接调用同一套清理能力。 2 ）交互层是只 3D 桌宠（ SceneKit 程序化生成，没有 WebView 、没有 Electron ）， AI 要删东西时头顶弹批准卡，结果进气泡。 安全上比较较真：只删家目录、25 类保护路径、白名单命中及其子树永不触碰、 删除前二次校验、逐路径审计； AI 每次删除都要审批，MCP 要 confirmed + token ， HTTP 只绑 127.0.0.1 。 11 个模块：清理 / 卸载 / 优化 / 启动项 / 分析 / 状态 / 项目清理 / 瘦身 / 历史 / 设置 / 总览。 限制说在前面：AI 要自己的 API key ；瘦身仅 Apple Silicon ；系统级操作要管理员密码； 上不了 App Store ；没有 dmg ，源码构建；只在我这台 Intel Mac 验证过（ arm64 交叉编译通过）。 试一下： git clone && cd Moppet && swift build .build/debug/Moppet 不想开 GUI 就跑自测（ 133 项断言，1.4 秒，不删任何文件）： swift run Moppet --smoke 想听意见：AI 有删除权但每一步都要点头，这个颗粒度合适吗？ 觉得有用的话求个 star 。
—
KageX
KageX is an offensive AI security company. Our flagship FreakLabs teaches AI red teaming by doing, with 20 hands-on labs against live chatbots, RAG systems and agents, a 9-level course and a verifiable AI Red Teamer certificate. There is a free tier, a free CTF called SentinelGoat, and open-source tools for testing your own AI apps. Built for pentesters, security engineers and developers shipping LLM features.
原文2
RankinSEO
RankinSEO writes and publishes SEO-optimized articles for plumbers, electricians, roofers, and HVAC companies. Includes domain audits, keyword tracking, and a free SEO audit tool. Plans from $49/month, 14-day free trial.
原文1
—
基于 python opencv 的《冒险岛》自动打怪脚本
前言 适用于市面上的 079/083 版本冒险岛（国服怀旧服,MapleStory Classic World..., 只要是冒险岛差不多类型的，按道理都可以） 仅记录和分享 完成功能 [x] 角色识别 [x] 怪物识别 [x] 地图圈选 + 地图绘制（路线录制） [x] hpmp自动识别回复 [x] 自动打怪（走路、攻击、技能） [x] 告警（测谎报警） [ ] 客户端化 演示视频
57
Getisocertificate
Looking for reliable ISO Certification in India? Get expert assistance with ISO 9001, ISO 14001, ISO 45001, ISO 27001 and other ISO standards. Get ISO Certificate provides support for documentation, implementation, audit preparation and certification processes. Start your ISO Certification in India journey today. #ISOCertificationInIndia #GetISOCertificate #ISOCertification #ISO9001 #ISO27001 #ISOCertificateOnline
原文1
PromptForge: Offline AI Prompts
Stop leaking confidential code and specs to cloud AI wrappers. PromptForge is an offline desktop prompt compiler for Windows that deterministically locks your exact budgets, options, and constraints. Key Highlights: • Dual-Engine: Sub-2ms rule pass + on-device Qwen2.5 SLM • Invariant Locking: Zero hallucinated figures or assumptions • 8-Point Real-Time Quality Audit & Offline OCR scanner • 1-Click Adapters: Cursor, Claude, ChatGPT, Perplexity • 100% Offline: Zero data leaks, zero API fees.
原文2
FastHook AI Builder
FastHook has grown from webhook infrastructure into app workflow automation. Describe a process in AI Builder, review the generated draft, and connect the fields before activation. This saves Gmail attachments to Google Drive folders by sender and date, then sends their links to Telegram. Inspect each step’s inputs, outputs, and errors in Workflow Audit.
原文1
BurnRateIQ
Pick one starting point and BurnRateIQ builds your whole financial model at once: connect QuickBooks or Xero, upload your financial statements or an existing spreadsheet model, or answer three questions. Anything missing comes from sourced benchmarks for companies at your stage, marked for you to check. Connect billing and payroll later to sharpen it. See your runway, burn multiple and MRR by plan, when to raise and how much, and export a live-formula Excel model investors can audit.
原文2
SMMFor
Hosted, white-label SMM panel platform. Your brand, domain, providers and gateways; we run servers, updates and security. A flat-priced PerfectPanel alternative: $19–79/mo, unlimited orders, Telegram Mini App, 60 currencies. 3 days free, then $1.
原文1
Free AI Visibility Report
Agencies won SEO deals with keyword data. AI search gave them nothing to show a client. Now it does. Enter any domain, pick ChatGPT, Gemini, Perplexity, AI Mode or AI Overviews and a country. In about 4 minutes you get an AI answer audit: what the engine says about the brand, which pages it trusts, and a ranked fix list. Add your logo and name, and the PDF and booking link are yours. Free, no account.
原文55
Neryn
Free audit that shows how ChatGPT, Perplexity and Claude reach, read and buy from your store. On Shopify, the Neryn app then fixes product titles, categories, options, descriptions and image alt text, only after you approve each change. For what only you know, like barcodes, it asks you. Free plan to start; paid plans add scheduled scans and more fixes.
原文2
HackTheHammer
Cyber security and ethical hacking, written from practice by Gregory Towns — the tools and techniques practitioners actually use, and what each one is for.
原文1
ChurnDetective
ChurnDetective turns customer data into churn analysis. Upload CSV/JSON with three columns: customer_id, mrr, joined_at. Get risk scores per customer, MRR at risk, segments, prioritized actions and a downloadable PDF report. Try free first with the dataset (60 synthetic customers). Buy Audit: one-time $1,500 USD, excludes VAT. Monitor $750/mo: coming soon, not yet available. Not legal, tax or audit advice.
原文1
—
RankAnalyze
Go Head-to-Head with a named competitor (SWOT, pricing intel, messaging gaps), then let Competitor Radar watch them for you automatically. Geo Scan tracks whether ChatGPT, Claude, Gemini, Perplexity and Copilot actually cite your brand. Brand Deep Dive ranks your whole site weakest-to-strongest; Post-Publish Audit catches live drift; Asset Audit checks drafts before they ship.
原文3
Agent Payment Node：AI 代理的本地支付工具
Agent Payment Node 是用 TypeScript 编写的本地支付运行时，通过 CLI 和 stdio MCP 供 AI 代理检查 x402 报价、准备有界支付并查询状态与收据。仅支持 Apple Silicon macOS 和 Node 24；直接转账和 EVM 签名需前台所有者批准，Solana exact x402 可按所有者接纳的策略运行。软件免费，链上和服务商费用另计。 亮点 将报价检查、有界准备、操作状态/收据和恢复路径组合为本地代理工具，适合研究 MCP 工具接口、支付状态机及所有者授权边界。 这是 Nuanu AI 的 MIT 开源项目，本次代表 Nuanu AI 自荐。具备资金操作能力；本地软件托管、错误策略和主机失陷仍有风险。没有声称独立安全审计、当前客户端兼容性复测或生产使用证明。 已按要求在 HelloGitHub 网站用完整 GitHub URL 搜索；匿名搜索没有展示匹配结果，但提示登录才能查看更多。另检查了当前完整仓库的 263 个文本文件（含 253 个 content 文件）及开放/关闭 issue/PR 历史，未发现 APN 名称、slug 或 Nuanu。
0
AuditCRO
AuditCRO is an AI that audits your Shopify store like a CRO expert would. Paste your store URL (no admin access, nothing to install) and in about a minute it checks 262 conversion points across 8 page types. You get a score for every page, leaks ranked by priority with a clear fix for each, a page-by-page comparison with your competitors, and A/B test ideas. See a full audit on Allbirds before signing up.
原文1
Delitech Video Doorbell 1MP
Delitech Smart Home makes home security simpler with smart video doorbells designed for everyday households. Monitor your front door, see visitors in real time, communicate through two-way audio, and receive motion alerts from your phone. With HD video, night vision, wireless installation, and flexible storage options, Delitech helps you stay connected to your home whether you're inside or away.
原文1
OZWA ONE
Secure sign-in for your security workforce: manage guards, rosters, attendance and payroll from one account.
原文1
开源了一个 MCP 治理网关： Jev 判 0.94、d3 判 0.70，两个判官说不同的话时怎么办
给 AI agent 做了个 MCP 执法网关（ Rust ），核心问题：当两个决策模型对同一件事给出不同判断时，怎么安全处理？ 实测：同一个越权场景（ coding agent 试图 merge 夹带无关变更的 PR ）： - Jev 给 0.94 置信度 → 准入层 Accept → 授权挂起 → DENY - d3 （ vLLM SR ）给 0.70 → Hold → 什么都不改 → ALLOW 两个都对。分歧不是 bug ，是校准本性（ d3 ECE 4.3 vs Jev 8.0 ）。治理层的价值在于让分歧安全。 网关做的事：每个 tools/call 先过 r2r_decide 门控，ALLOW 转发上游，DENY 返回 isError + 证据文本（相位 + 规则 + 事件 ID ），全程审计到 EventStore 。 零 API key 复现： cargo run -- fixture cargo run -- fixture --provider d3 GitHub: （ Apache-2.0, v0.2.0 ）
—
Sliding Sash Windows Warwickshire, UK
Enhance your home with uPVC sliding sash windows from Warwick Glass. Combining classic timber-inspired styling with modern energy efficiency, security and low maintenance, our windows are available in a range of colours, finishes and glazing options. Professionally installed across Warwickshire, they bring timeless character and lasting practicality to traditional and contemporary homes.
原文1
Delitech Smart Home
Delitech Smart Wireless Video Doorbell offers 3MP HD view, 24/7 live monitoring, motion alerts, and two-way audio for complete smart home security.
原文1
Data Security Posture Management (DSPM)
Discover, classify, and protect sensitive data across cloud, databases, SaaS and storage with Cytrusst DSPM. Continuous visibility into your data security posture.
原文1
RFP PORTAL
Stop rewriting the same security answers. RFP Copilot Portal is a premium, ready-to-run webapp codebase for founders, sales/security teams, and agencies to manage RFPs & security questionnaires: reusable answers, evidence attachments, review workflow, audit trail, and one‑click export pack. Use it for personal ops or ship it as your own software product. Keywords: security questionnaire automation, RFP response software, vendor risk, SOC2, answer library.
原文1
incursio
AI agents that audit your code for security vulnerabilities, on your Claude or ChatGPT subscription or on local models with Ollama. Based on Strix. Join the open beta.
原文3
Vibefilo
Security and GDPR checks inside Claude Code, Cursor and Codex. Find leaked secrets and RLS gaps, then verify every fix. Your code stays on your machine.
原文1
CREWBOARD -Security Workforce Management
CREWBOARD solves the challenges of manual guard scheduling, inaccurate attendance tracking, payroll errors, SIA license compliance, and inefficient site management. It replaces spreadsheets, paperwork, and disconnected systems with one centralized platform, helping security companies save time, reduce operational costs, improve workforce accountability, and manage multiple sites efficiently.
原文1
Free AI Website Scanner & SEO Audit Tool
Scan your website for SEO, performance, accessibility, and security issues. Get a free AI-powered website audit with instant fixes and competitor insights.
原文1
Browser Extractor
Inspect any live website like a design file. Explore styles, edit elements in place, audit UX and accessibility, and turn your changes into actionable context for your coding agent. All from a free Chrome extension.
原文2
Sage 7
Your AI writes the code. Sage 7 makes sure it builds the right thing: map the whole product, brief Lovable, Cursor or Claude Code with living context, and audit every push against the plan.
原文1
FixLetter
FixLetter turns a frustrating problem into a polished, ready-to-send letter. Pick from 22 letter types (billing errors, medical bills, credit report errors, security deposits, flight refunds, parking fines and more), answer a few questions, choose a polite or firm tone, and download it as PDF, Word or text. Preview your letter before you pay; resignation, raise and severance letters cost nothing.
原文1
—
Security Vault
Keep your important information organized in Security Vault. Save and manage your passwords, generate strong passwords, and keep backup or recovery codes in one place. Add private Secure Notes for information you want to remember. Store images, PDFs and text files as encrypted Secure Files. You can preview supported files in the app without saving a separate copy to your device. Use Money Ledger to track money you have lent or borrowed.
原文1
Gangmu：识别嵌入式 SDK 组件，结合构建证据生成 SBOM
我是 Gangmu（纲目）的发起人。它是一个面向嵌入式 C/C++ 的开源组件识别和 SBOM 工具。 芯片 SDK 中的第三方库经常被复制、改名或做厂商修改，源码目录中存在的代码也未必进入最终固件。Gangmu 使用社区维护的规则识别组件，可结合 compilecommands.json 和链接器 map 补充构建证据，区分源码存在、编译和链接信息，输出 CycloneDX/SPDX。 仓库提供对 GmSSL 改名、删除版本信息及修改源码的受控示例，供读者查看和复现。希望收集更多公开 SDK 的识别反馈与规则贡献。 工具采用 Apache-2.0，独立规则库采用 CDLA-Permissive-2.0。适合嵌入式开发、固件交付和软件供应链安全相关读者。 联系：64031875@qq.com
7
OkayToShip
Paste a link to your app or Telegram bot (beta). In about a minute: a launch-readiness score across 7 areas — security, payments, SEO, speed, design, legal, API costs — and a ready fix prompt for Lovable, Bolt, Cursor or Replit. Free scan.
原文4
EasyIncomeDocs
EasyIncomeDocs creates accurate pay stubs, voided checks, W-2s, 1099s and income letters in minutes. Pay stubs calculate federal, Social Security, Medicare and state tax for all 50 states, with year-to-date totals that carry across stubs. Voided checks take a short 4-step form, and you pick your design after you pay. Instant PDF downloads, a 30-day money-back guarantee, plus free templates and calculators with no sign-up.
原文1
Shift Worker Calendar
Shift Worker Calendar is built for nurses, factory crews, security teams and anyone on a rotation. Pick a pattern like 4-on-4-off, Pitman, DuPont, Continental, 24/48 or your own cycle, set its start day, and see your schedule in month, week or year view. Record swaps, leave and holidays without breaking the rotation, set alarms that ring only on working days, and log hours and overtime. No account needed.
原文3
Fortega
Fortega Inc. is a Toronto-based electronic security company serving homes and businesses of every size across Canada. We specialize in professionally installed CCTV camera systems, access control, intrusion alarm systems, smart building automation, and 24/7 alarm and remote video monitoring with alarm response. Every project is delivered end to end, from site assessment and system design through professional installation, ongoing monitoring and lifecycle support, under one accountable team.
原文1
EliteVault
AI Shopify store analyzer: an annotated audit of your storefront with buyer-persona simulations and a 7-day Meta Ads campaign scenario modeler.
原文1
iamsecure
npm audit flags dozens of "high" issues; most can't hurt you. iamsecure scans your full dependency tree (npm, yarn, pnpm, Composer, Python) plus your own code, then ranks everything by real risk: where it runs (server, browser or dev-only), whether your code calls the vulnerable function, and whether it's exploited in the wild. You get a plain-language fix list with exact commands, a local dashboard, SARIF for CI and optional AI review. Zero dependencies, free, MIT.
原文2
Security Headers Checker
暂无项目介绍。
—
OrqLabs
OrqLabs is a no-code platform where 22 specialist AI agents (Claude & OpenAI) create social content, answer customers 24/7 on WhatsApp and Telegram, find and score leads, audit SEO and rewrite your strategy from real GA4 data. Every publish or outreach step waits for your approval, and every AI call is metered against a monthly budget cap you can't exceed. 109 templates, 75 integrations, works inside Claude and ChatGPT via MCP. Free plan, no credit card.
原文2
The Gist AI Lead Radar
Most lead databases sell stale 6-month lists. The Gist Lead Radar monitors live SSL logs to spot new Shopify & WooCommerce stores minutes after launch. • Day-0 discovery: Pitch before competitors know they exist. • Gap audit: Spot slow TTFB, missing DMARC & pixels. • 1-Click AI Pitches: Personalized Email, WhatsApp & Call scripts. • Verified Data: Direct founder emails & phones with CSV export. Built for agencies, freelancers & sales teams to close fresh e-commerce clients.
原文1
外链检测：提交网站之前，先查这个外链来源值不值得发
做独立产品的人常把网站提交到导航站、awesome 列表和客座文章站换外链，可网上流传的外链清单里混着已经停放的域名、明码标价卖 dofollow 的站，还有同一个人运营的站群。backlink-guard 在你提交之前逐个检查这些站：读它们自己的页面，对照 Google 的链接垃圾政策，给出跳过、先看看、只免费提交、价值低、可以提交五种建议，并附上原文证据；链接上线后再核实它是否真的传权重、放在页面哪里。适合做 SEO、发产品、维护开源项目的人。 亮点 不帮你多发外链，而是告诉你哪里别发：停放或过期的域名、出售传权重链接、要求回链、外链指向博彩站、共用一套页面模板或同一个统计账号的站群都会被标出来，每条结论都带页面原文或数字，可以自己核对。 不配任何 key 也能免费跑页面检查；配上自己的 Glasser 或 AIsa key 再加评分、访问量、垃圾分和 Google 搜索历史，一次查三十个站约 $0.46；在 agent 里用时，每次付费调用前都会先报价、等你同意。 在 100 个它没见过的站上验证过：Ahrefs 标为垃圾的 40 个站里，37 个没有被给出「可以提交」。 除了投稿前的检查，还能体检自己的外链画像，找出指向 404 页面的外链并建议 301，找出链向竞品却没链向你的站，看 Google AI 概览和 AI 助手在你的关键词上引用了谁。 命令行、Agent Skill、Claude Code 插件和 MCP 服务器四种用法；纯 Python、无依赖、MIT 开源，它自己从不替你提交任何东西。
28
AgentTrust – Zero-trust security and human approvals for AI agents
Enterprise Zero-Trust Security, Cascading Delegation, Human Approvals & Verifiable Audit Infrastructure for Autonomous AI Agents
原文17
KOSA AI
Explore a Document Management System for Pharmaceutical Industry built for GxP compliance, 21 CFR Part 11, secure workflows, and audit readiness.
原文1
—
ShieldPress
ShieldPress is an all-in-one website, VPS, and server monitoring and security platform. Monitor uptime, SSL certificates, domains, and server performance 24/7 from a single dashboard. Get instant alerts when issues arise, detect potential threats, and stay ahead of downtime. Built for developers, agencies, and businesses, ShieldPress makes infrastructure monitoring simple, proactive, and reliable—so you can focus on building while we keep watch.
原文1
Anticode
An AI website and app builder. Every build runs five steps: the Architect, an AI model, plans the site from one sentence; the Designer and Builder, a deterministic design engine, build it to one design system; the Critic and Sentinel run a design lint and a security scan. The result exports as a single HTML file or a Next.js app.
原文2
2
RouterNAT
Free, privacy-friendly browser tools for router setup, public IP checks, CGNAT detection, subnet planning, DHCP validation, Wi-Fi analysis, DNS, and network security. No registration required.
原文1
AnarqOut
AnarqOut helps you stay safer online by intercepting suspicious links during browsing, before you click. Analyze potentially dangerous URLs, detect phishing warning signs, and make more informed decisions before opening a link. Available as a browser extension and an Android app, AnarqOut puts security awareness where it matters most: before the click.
原文2
VibeGuard
VibeGuard is an AST-based security auditing tool designed specifically for AI-generated code. As developers increasingly rely on AI coding assistants (like Cursor, Copilot, and Claude), maintaining code quality and security becomes a major challenge. VibeGuard scans your codebase locally using advanced Abstract Syntax Tree analysis with zero code retention, ensuring your IP and sensitive data never leave your machine while catching vulnerabilities, secret leaks, and bad patterns before you ship.
原文1
anlyon.dev
A free index of the official MCP registry. Each tool is sorted by what it does: reads, changes things, can't be undone, or deletes or cancels. Paste your MCP config to audit it, pin a lockfile that fails CI when tools change, and follow change feeds.
原文1
Free SEO Audit Tool
SEO Wins is a free SEO audit tool. Check any URL for a page score, prioritised fixes, keyword placement, AI search readiness and a PDF report. No sign-up.
原文1
MockMini
MockMini is a native Swift proxy core for macOS, meant as a lightweight sing-box alternative that stays small enough to audit end to end (~2,600 lines). It speaks Shadowsocks (AEAD), VMess, Trojan and VLESS over TCP/WS/TLS, ships as a Swift package, and is open source under Apache-2.0. It powers the native VPN in the WLSA Plus macOS client.
原文1
ByteMuni
Tutorials, interview preparation and practical guides on programming (JavaScript, Python, React, Node.js), AI, DevOps, databases and cyber security.
原文2
AXXESS TRIaxis
Enterprise AI for the 80–90% of organisations it prices out. AXXESS is a company brain for small businesses, clinics, schools and nonprofits: it remembers everything scattered across WhatsApp, email and docs, and AI agents act on it, with humans approving what matters. Features: company memory, AI agents and an AI phone operator, CRM, tasks, approvals and audit trails. On web, Android and iOS.
原文2
Papermark Data Rooms
Data Rooms 2.0: launch a secure data room in under 60 seconds. Encrypted, fully certified, with file permissions, built-in Q&A, a full audit log and analytics. White-label it on your domain, or let agents run it via API, CLI and MCP.
原文93
Xploitix
Live in production - autonomous penetration testing for bug bounty hunters, pentesters, security engineers, and C-suite executives. Get your applications tested. Contact us for more details.
原文1
Check My URL
A free, permission-first website security check that reports known critical vulnerabilities and misconfigurations in plain English, with the fix for each.
原文1
Tab.Noted
A native Mac text editor for developers, security professionals, and power users. 50+ languages. Multi-tab. Fully offline. One purchase — no subscription, no account, no telemetry.
原文1
Silda
SILDA sits between your OT devices and IT network, inspecting every packet inline without agents or hardware appliances. It detects threats per-asset using online ML, maps them to MITRE ATT&CK for ICS, and generates cryptographic audit chains for NIS2 and IEC 62443 compliance, all without cloud dependency or touching a single PLC or controller. Built for manufacturing, energy, water, and oil and gas.
原文1
Security Guard
A WordPress plugin that scans your own site for injected-script malware: fake ClickFix verification boxes, EtherHiding blockchain loaders, web shells, PHP hidden in uploads, new administrators and changed core files. The scan is read-only and sends no site files anywhere. A filter strips known loader scripts from your pages, and a Content-Security-Policy starts in report-only mode until its log is clean.
原文1
Free GEO Checker
Check whether AI assistants can find and correctly understand a website, audit 12 technical AI-readiness signals, and get three prioritized fixes.
原文1
SecureMID
SecureMID helps teams assess the security of AI agents and identify potential weaknesses before deployment. Built for AI developers, security researchers, and teams working to build safer AI systems. Explore our platform, evaluate your workflows, and help shape the future of AI agent security.
原文1
FactoryFlow（交有数）：小工厂的订单、分批送货与对账工具
我平时做制造贸易相关业务，要接订单、安排送货、月底对账。借助 AI 编程工具，我把这些流程做成了 FactoryFlow（交有数），现以 MIT 许可证开源，提供 Windows 开发者预览版。 GitHub 、说明和演示 · Windows 预览版下载 目前围绕三个环节： 录单：可以从第一张订单开始，客户和物料资料逐步整理；图片、PDF 的本地 OCR 结果需要人工核对后确认。 分批送货：按订单行记录已交、待交和各自单位。送货录错可以作废，恢复待交数量并保留原记录。 对账：记录客户反馈、部分认可、本期正式结算和跨月承接，保留历史凭证。 数据保存在本机，核心业务与本地 OCR 可以离线运行。使用 React / TypeScript、Python / FastAPI 和 PostgreSQL；数量与金额采用精确小数，业务动作保留审计记录。 合成数据示例：120 件已交 30 件、剩 90 件；35.5 千克已交 10.25 千克、剩 25.25 千克。 当前公开包为 v0.1.0-preview.1，仅支持 Windows 10/11 x64、单机及人民币业务，尚不包含库存、付款、多币种和海外税务。代码、测试及文档有 AI 编程工具深度参与，我负责需求、业务规则和流程核对。 公开包完成过合成数据流程及备份恢复检查，仍不等于长期生产验证；OCR 可能漏行或识别错误。请在独立试用目录使用合成样例，不要放入唯一一份真实业务数据，预览版之间暂不保证直接沿用旧数据。 欢迎做过跟单、送货、对账或业务系统的朋友试用，指出缺少的业务情况和不顺手的操作。
2
Wortex Mainnet
Introducing Wortex Mainnet: Redefining Layer-1 Infrastructure with Zero-Dependency Standards 🧠⚡ As decentralized systems scale, infrastructure security can no longer rely on bloated supply chains and third-party dependencies. At Wortex Mainnet, we are building a next-generation Layer-1 protocol designed for absolute mathematical determinism, high finality, and enterprise-grade resilience. 🔗 Explore our live global portal:
原文1
Ardexo AI Audit
Check how well ChatGPT, Gemini, Perplexity, Claude and Copilot can reach, understand and cite your website. Get a free GEO Score (0-100) and your top 3 problems in minutes, no account. Full report with copy-ready fixes: EUR 0.99.
原文1
Record of Processing Activities (RoPA)
Build, manage and audit your Records of Processing Activities (ROPA). Connect processing activities with DPIA, consent, DSR & DSPM for privacy governance.
原文1
Vooki Pro
Desktop DAST scanner for web applications and REST APIs, with comprehensive vulnerability coverage, on-device AI triage and audit-ready compliance reports. Every scan runs locally.
原文2
Neurion
Neurion brings AI chat, project coding, browser automation and security tools into one Windows desktop workspace. Choose Neurion Fast or Neurion Pro and work with your files, custom agents and connected tools. Account and paid subscription required.
原文1
Niora.fr
Is your website really visible on Google and AI search engines? Niora helps businesses analyze and improve their online visibility. With Niora Index™, get a free website audit in seconds, without registration. 🔎 Google SEO analysis 🤖 AI search visibility ⚡ Website performance 🎯 Actionable recommendations Niora also offers website creation, redesign, SEO optimization and custom web apps, combining AI efficiency with human expertise. 🇫🇷 Built in France.
原文1
ReVault – new secure archive format
reVault is a new, secure-by-default archive format called a lockbox, designed to be simple to use. I've been working on reVault for about 2 years. It was originally written in Dart, but with the improvements in AI, I decided to port it to Rust using AI. It's now in beta, so I'm looking for feedback, particularly around the different language bindings. A lockbox is encrypted, signed and compressed by default. Each can be disabled selectively. - Hybrid post-quantum or passphrase encryption, including metadata. - Zstd compression. - Pure Rust libraries wherever possible. We intend to phase out remaining C code as alternatives become available. The project has been scanned using OpenAI's Daybreak cyber security tools. The manual is a work in progress: https://docs.revault.onepub.dev/ reVault supports Linux, macOS and Windows, x64 and arm64, plus Wasm. The core is Rust, with bindings for C/C++, Java, Dart, Python, Ruby, JS/TypeScript, Go, C#, Kotlin, Lua, PHP and Swift. Within a lockbox you can store: - Files, directories, permissions and symlinks. - Variables. - Forms. Variables, forms and the lockbox itself can have descriptions. reVault uses a portable vault (just another lockbox with structured content) to hold your keys, contacts' keys, lockbox aliases and form definitions. It ties into your platform's secure store, so logging into your desktop unlocks your vault. You don't have to enter a passphrase every time you access a lockbox. You can disable this. There are lots of shortcuts. Creating a lockbox stores an alias in your vault, based on its filename or a name you choose: lbx create /some/path/mybox.lbox lbx mybox open --duration 1h lbx mybox var set KEY VALUE Set a default lockbox and you can leave its name out: lbx session default mybox lbx var get KEY You can mirror a directory tree into a lockbox and update it when the directory changes: lbx store.lbox mirrors project create --from ./project --to /projects/project lbx store.lbox mirrors update The API lets you read, write and seek within files without extracting them to the filesystem. Each lockbox has a table of contents, so extracting a single file from a multi-gigabyte lockbox is fast. Recovery Updates are transactional, with automatic rollback for failed updates. The format is designed for recovery: content is stored in pages, allowing unaffected content to be recovered if part of a lockbox is corrupted. Sharing An encrypted lockbox is more useful if you can share it. reVault has an open-source keyserver for exchanging public keys, with validation through a second trusted channel. It's still experimental. OnePub has donated a server to run a single keyserver. If you're interested in donating resources, I'd like to bring up a second redundant server. It's pure Rust, uses under 100 MB RSS and supports rate limits. To publish your default profile's public key: lbx vault profiles email you@example.com lbx vault profiles publish Give the publish code to your contact. They can import your key: lbx vault contacts receive <publish-code> <contact-name> Display your profile's fingerprint and exchange it through a second trusted channel: lbx vault profiles fingerprint Repeat the process in the opposite direction to get their key. Once you have it, grant them access to your default lockbox: lbx access grant alice You can then email the encrypted lockbox to Alice. To install the CLI and get started: cargo install revault_cli lbx vault init lbx completion install Completion installation detects your shell. To diagnose issues: lbx doctor The language bindings are published to their respective package repositories. I'm looking for constructive criticism of the project on its own merits, particularly the APIs and language bindings. I'm not interested in a debate about using AI.
原文—
Varaxon Scan Hub
Upload an export from Nessus, Qualys, Rapid7, Greenbone/OpenVAS, Nuclei or another vulnerability scanner, or connect Microsoft Defender. Scan Hub ranks every finding by real-world exploitation (CISA KEV, EPSS) and writes a branded, plain-English report your client can act on. Built for MSPs, MSSPs and consultants. Free pre-flight check, no account needed. First 3 reports free.
原文1
Argus- open source security platform to protect against agentic attacks
Open-source agentic security operations platform:
原文83
ShipJasoos
ShipJasoos checks your Shiprocket, Delhivery and XpressBees freight invoices and COD remittances against your orders. It flags weight errors, duplicate charges, wrong RTO fees and unpaid COD, so you know what to dispute. First audit free.
原文1
Karma Pro
Karma Pro is an open source macOS application that functions as a code security review tool. It performs static analysis on source code across 14 programming languages, using four independent engines, an AST parser, a heuristic engine,AI security scanning and a Bayesian classifier trained on patch files. It generates various types of diagrams and analyses, including dataflow graphs, control flow charts, reachability analysis etc. It can monitor repositories and scan pull requests when requested.
原文1
AgentSkill – Yara-L-Skill
An Agent Skill that teaches AI coding agents to write, review, tune, and convert YARA-L 2.0 detection rules for Google Security Operations (SecOps, formerly Chronicle).
原文—
—
HitMind
Free 5-dimension SEO audit in about 60 seconds, no signup. Connect WordPress and Search Console: HitMind proposes topics, writes drafts from your brand facts, scores each one, and sends them to WordPress as drafts. First 3 articles free.
原文1
America's Paycheck
America's Paycheck shows what you take home from each paycheck in 2026. Enter a salary or hourly wage and see federal income tax, Social Security, Medicare, state income tax, local taxes where they apply and state deductions such as disability insurance and paid leave. Every rate comes from IRS Publication 15-T or the state's own withholding instructions, and each page links to its sources. Free, no sign-up, and the calculators run in your browser.
原文1
Alunova
Aluminium doors crafted with slim profiles and solid construction, delivering dependable security, smooth operation, and long-term performance for modern buildings.
原文1
AI Rank Inspector
AI Rank Inspector is a free, comprehensive Chrome extension and web audit platform designed for modern Search Engine Optimization (SEO), Answer Engine Optimization (AEO), and Generative Engine Optimization (GEO). It delivers instant, deep technical audits, LLM visibility scoring, and actionable recommendations to help websites rank across Google, ChatGPT, Perplexity, and Claude search engines. Zero bloat, instant on-page insights, and complete competitor analysis.
原文1
DiscoverMSPs
DiscoverMSPs provides B2B technology data and market intelligence for sales, marketing and research teams. Explore cybersecurity software users email list resources to identify companies using network security, endpoint protection, identity management and cloud security solutions. Our services support prospect discovery, technology adoption research, market segmentation, CRM data enrichment and targeted B2B outreach.
原文1
Scaminal
Scaminal is an advanced website scam detection and trust analysis platform. Enter any website URL to inspect security signals, scam indicators, domain age, TLS certificates, and trust scores.
原文2
gtmetrix.in
GTmetrix.in is a high-speed telemetry engine for modern web apps. Benchmark TTFB, Core Web Vitals, and Edge caching in seconds, and generate ready-to-pitch 8-slide & 15-slide PDF audit decks to help agencies win web design & optimization clients.
原文1
Relvato
Relvato opens your site in a real browser and runs monitors on what visitors rely on: checkout, login, forms, uptime, security, speed and SEO. Paid plans run them again after every GitHub commit, WordPress, plugin or theme update. Free plan for one site.
原文2
Risk-Based Vulnerability Management
Prioritize critical vulnerabilities with Cytrusst RBVM. Centralize data from Nessus and Qualys, score risk and continuously monitor your security posture.
原文1
HyperLevel
HyperLevel replaces the tools solopreneurs and agencies rent for hundreds a month: CRM, funnels, inbox, automations, courses, helpdesk and invoices – in one app. Self-host free (AGPL), unlimited users, 0 € per seat. Via MCP (340+ tools) or the REST API, your agents and scripts run it – with the same permissions, audit log and undo as your team. Every module is open and built to be modified: fork it, extend it, send a PR – contributions are very welcome.
原文2
h5i
h5i is a Rust web framework built on Axum that brings formal verification with Lean 4 into everyday web development, alongside integrated red-teaming and CI/CD tools. It's designed for Rust developers and teams building AI-generated or security-critical applications. As AI makes coding faster, ensuring correctness becomes increasingly important. h5i helps developers prove critical properties and discover vulnerabilities that traditional testing alone might miss.
原文1
SEO X-Ray & Audit Pro
Advanced SEO Audit, Content Ripper, Schema Generator, Link Checker & Competitor Spy with White-Label PDF Reports.
原文4
Borg
Project URL Category Rust Project Title Borg: a self-healing personal AI assistant in Rust Project Borg is a personal AI assistant you run on your own machine. Reach Borg from the terminal, the desktop app, or Telegram, Slack, Discord, Signal, WhatsApp, and iMessage. Borg remembers across sessions, runs scheduled tasks, and connects to MCP servers. Highlights Self-healing: a supervisor restarts crashed subsystems, and a nightly sweep fixes stalled tasks with no LLM call Keeps working through outages with API key rotation and provider failover Sandbox on by default, and file tools block ~/.ssh, ~/.aws, and .env Native Rust binaries with a one-command install /migrate imports an OpenClaw or Hermes Agent setup Example Code sh curl -fsSL | bash borg or Videos
原文3
VibeDoctor.io
Apps built with Claude Code, Cursor or Codex run and look finished, but nobody has read what the agent wrote. Paste one line into your agent and it checks its own code as it writes. Every scan covers security (secrets, auth, packages) and code health, with one ranked report in under 2 minutes. Vibe X-Ray sends only the files a change touches, so prompts use fewer tokens. Every push is checked, and your live site is watched for speed on a phone and uptime around the clock.
原文3
Bundle Tools
Bundle is a free, open source growing toolkit of multiple tools for PDFs, images, code and text, plus generators like QR codes. Every tool runs entirely in your browser, so your files are never uploaded and nothing leaves your device. A strict content security policy enforces this, not just a promise. No sign-up, no ads, no tracking, no cookies. Built with Astro, Svelte and WebAssembly. MIT licensed.
原文2
Comity
A vendor-neutral coordination layer for teams' AI coding agents: shared awareness, conflict detection before code is written, policy enforcement through agent hooks, and an audit trail.
原文1
Liquid edge trading
Trade 1000+ instruments including currencies, stocks, indices, commodities, ETFs, and crypto CFDs with raw spreads from 0.0 pips, sub-10ms execution, and enterprise-grade security. Awarded Best Trading Platform at Investment Expo Dubai 2025.
原文1
AppAtlas
A native Mac app for your software inventory, updates, security, permissions, and background processes. $9.99, once.
原文2
Verty3
Same cards, same power-ups – who's the better tactician? In Verty3 every item you bring (Oracle, Audit, Time Plow) is mirrored: your opponent gets it free, and you get theirs. Money never wins – timing does. Then pick your path: clear columns to win, collect stars for your card collection, or build card streets for kilometers. Your opponent chooses too. Each tactic has its own leaderboard. Solo vs. bots or live online. Free in browser, on iPhone, iPad and Mac. No ads, no email.
原文1
BROKA
One self-hosted console for Kafka, Redis, RabbitMQ and Apache Artemis: one permission model for every team, production guardrails and a tamper-evident audit trail. Kafka is free in Community.
原文2
WPAForge - 在手机上审计自家 Wi-Fi 的弱口令
WPAForge 是一个跑在安卓手机上的 WPA/WPA2 弱口令审计工具，开源（Apache-2.0），需要 Root。 它不翻几百万条的通用字典，而是按目标路由器的 SSID 现场派生候选——比如路由器叫 FASTE972，它就先生成 FASTE972、faste972、97297297、e9721188 这些，几百条覆盖常见命名习惯，再按目标特征排序，最可能的排最前。命中通常发生在第几十条，而不是第几万条。 每条候选都真的向目标 AP 发一次关联请求，不模拟、不猜测；判定只认一种证据：4-Way Handshake 完成，且 SSID、supplicant 状态、IP 三条同源于同一条记录，所以不会有“假成功”。 其他：进度实时存盘、中断能接着跑、锁屏继续；多目标后台队列；内置 IEEE OUI 表（15913 条），列表里直接显示水星 / 中兴 / 腾达 / 迅捷等厂商名。 要求：Android 8.0+、Root。适用范围仅限你自己拥有或已获明确授权的网络——对自家路由器是排查弱口令，对别人的网就是违法，这条边界很清楚。 亮点 1. 不用电脑、不用外置网卡、不用 Termux —— 安卓原生，一台 Root 手机跑完全流程。传统路子要笔记本 + 支持监听模式的网卡 + Kali，这套只要一个 APK。 2. 按目标 SSID / BSSID 现场派生候选，而不是翻大字典。派生维度：SSID 原文与大小写变形、里面数字串的重复与加后缀、去掉分隔符的合并串、SSID 与高频数字的多种拼接、BSSID 尾号族，再叠通用弱口令与厂商规则。几百条排在队列最前面，通常第几十条就命中。 3. 判定链只认一种证据：SSID 逐字相等 + supplicant COMPLETED + 有效 IP。而且刻意不让 netId 参与判定 —— 早期把它当否决条件时出过真实事故：密码是对的、系统确实连上了，却因为 netId 时序对不上而整段跳过成功判断。netId 现在只作为证据强度标注。宁可报「不确定」，也不报假成功。 4. 断点续跑 + 后台队列 + 锁屏继续。进度实时存盘，多目标排队自动跑，每项可单独暂停。 5. 内置 IEEE OUI 表 15913 条，扫描列表直接显示「水星 / 中兴 / 腾达 / 迅捷 / 四川天邑康和」，随机化 MAC 单独标注，不和「未收录」混着显示。 6. 核心判定与派生全是纯逻辑，不依赖 Android —— 可以离线跑单测。 7. Apache-2.0，无广告、无内购、不上传任何数据。
88
RankDossier
In-depth technical SEO and GEO audit with evidence for every issue. 320+ checks for Google, Bing and AI search. PDF report and a fix task for developers.
原文1
Niyoos
Niyoos sits between your AI agents and LLM providers (OpenAI, Anthropic, Gemini) as a proxy, so it can enforce — not just watch: a tamper-proof audit log, real-time cost tracking per agent, an instant kill switch, and drift alerts when behavior changes. Works with n8n, Zapier, Make, or custom code — point your agent at Niyoos, nothing else changes.
原文1
Sieve by Fendora
Security scanners produce 80-90% false positives. Engineers stop looking. Real vulns hide in the noise. Sieve is an ML filter trained on 1,442 labeled findings across 26 repos. It scores each Semgrep finding and posts only the real ones as a PR comment. - 95% precision on unseen repos - 4 lines of YAML, zero config - Learns from feedback - Open source (Apache 2.0)
原文1
Distributed, deterministically secure agentic swarm runtime. Enclawed
A Deterministic Security Runtime for LLM Agents on MPI and Batch-Scheduled HPC Systems: Consensus-Governed, Hardware-Rooted Supervision of Every Rank
原文—
Alka Discord Bot
A Discord application for moderation, security, support, automation and community management.
原文1
Website Health Check
A website audit written for founders, not developers. Enter your URL and we check every page, then give you an A–F grade, scores for six things that matter to the business (getting enquiries, mobile speed, Google, brand, AI assistants, risk), the problems costing you most with what to ask your team, an estimate of what they cost you each month in your currency, and a side-by-side comparison with your competitors. Free.
原文2
GitHub Dashboard
GitHub Dashboard shows what needs attention across your repositories: failing workflows, security alerts, review requests, and stale issues or PRs. Free and open source. Runs in your browser and reads data directly from GitHub.
原文1
Secure your AI agents on Mac
Plango is a Mac native security suite for anyone running AI coding tools. It works by running a custom local security model that evaluates threats against the lethal trifecta (data access, communication, exposure). Some cool features: - Restrict Agent access by type of data (ssh keys, env files) or finder tags (finally a good reason to use the color tags in finder). - On device security model, but can switch to another local agent or bring your own key. - Review your Mac's privacy and access, apps, startup & extensions. - Automatically move env secrets into keychain. - Network blocks/allow lists, see what apps and agents are accessing. Stop them from data exfil. - Check skills and plugins for bad behavior. - Create custom rules for all of these things. - Log every action, request, block etc in an easy dashboard. - Vuln scan of all projects on your Mac. About us: I'm Fred, long term hacker first time shower. My co-founder Rich and I care about privacy, security and believe that AI software development is the future. We have two decades of combined experience in cyber, NLP and AI and are working on this tool full time. Given how fast cyber is evolving we're pushing changes to this on a daily basis. Please download and trial for free! We're here to answer any questions about the app or cyber/AI.
原文—
Plango
Secure your Mac while building with AI. Plango monitors AI coding agents, protects sensitive files and secrets, blocks suspicious network activity, scans projects for vulnerabilities, and gives you control over what your agents can access. Powered by an on-device AI security model. Private by default.
原文82
做了一个 PHP2Shell 应急辅助工具：被动响应头检查、版本核对和配置引导
最近做了一个 PHP2Shell 应急辅助网站，把公开响应头检查、PHP 版本比较和临时缓解配置整理到了一起，想分享给有 PHP 网站需要维护的朋友。 目前主要有几个功能： - 输入公开域名，查看响应头是否暴露 PHP 版本，以及是否存在 PHP 、Laravel 、WordPress 等相关线索。 - 识别 Cloudflare 、Sucuri 、Akamai 、CloudFront 等边缘服务的公开标记。 - 手动输入实际 PHP 版本，核对修复版本门槛，并查看不同部署环境的配置示例。 - 提供 php.ini 、Nginx 、Apache 、Cloudflare WAF 、ModSecurity 、Docker/K8s 的配置引导。 想先把检测边界讲清楚：**它检查的是公开响应头，结果只能作为排查线索。** 对目标网站只发送普通 HEAD 请求，遇到明确不支持 HEAD 的响应时才回退 GET ，不发送漏洞利用载荷或 multipart POST ，也不跟随重定向。 响应头可能被隐藏、修改或缓存，因此： - 没有发现 PHP 特征，不能证明网站没有使用 PHP 。 - 显示的版本达到修复门槛，不能确认实际软件包和所有 Web worker 都已更新。 - 发现 Cloudflare 等标记，不能确认 WAF 已启用，更不能确认规则能够覆盖相关攻击。 - 外部检查无法读取内部 php.ini ，也无法确认网站此前是否遭到入侵。 另外，页面里刻意区分了**临时缓解和完整修复**。 INI 配置和 WAF 规则可以在适用条件下降低部分攻击路径的风险，但不能当成完整修复。完整修复仍需要应用官方修复版本或经厂商确认的安全补丁，并验证实际处理 Web 请求的 PHP 实例和 worker 都已经使用修复后的构建。CLI 的 `php -v` 也可能与网站实际运行的 PHP 不同。 配置生成前需要重新确认版本、部署方式和适用前提，响应头里的版本不会自动被当成已经核实的服务器环境。 网站目前支持英语、日语、德语、西班牙语和葡萄牙语。欢迎大家试用，尤其想听听：结果说明是否容易理解、配置引导有没有遗漏，以及哪些措辞可能让人误以为“检查通过就代表安全”。
—
—
—
Presail
Security and compliance monitoring that audits no-code and AI-built apps for exposed keys, open database rules, and missing regulatory requirements.
原文1
AutoCloudPilot
AI-powered cloud security and cost optimization for AWS, Azure, Google Cloud and Kubernetes. Automatically discovers cloud security risks, identifies wasted infrastructure spending and delivers actionable remediation recommendations that a human approves before anything changes.
原文1
MeshLive：无需网络的蓝牙通话与直播
MeshLive 是一款 GPLv3 开源 Android 应用，使用手机蓝牙完成离线语音/视频通话及直播。附近手机可转发直播，无需账号、SIM 卡或服务器，适合探索户外、会场等没有网络时的本地通信。项目仍处于测试阶段，采用自定义协议，尚未经过独立安全审计；使用了大量 AI 辅助开发，由人类维护者主导。 亮点 同时探索离线语音/视频通话与可转发的直播，使用手机蓝牙，不依赖额外无线电硬件。 可以阅读完整的 Android 实现、协议说明及公开测试数据，了解发现、连接、媒体传输和中继的工程取舍。 已有可下载 APK，Android 10+。每跳会增加延迟，蓝牙带宽和手机兼容性有限，不承诺无限距离或匿名性。 维护者本人自荐。邻近无线活动和部分发现元数据仍可被观察；不应作为高风险或生命安全通信的保障。
152
GroundTruth OSINT
GroundTruth OSINT is a free live dashboard that watches 180+ public feeds (international newswires, official releases, specialist security publications) and clusters the day's reporting into the most significant global events on a 3D globe. Every event shows left, center, and right coverage side by side, with a triage queue, per-event market impact, satellite imagery, and a free daily morning brief. Free public API and MCP access, no key required. No account, no paywall, no tiers.
原文1
sslx
一个检测、查看 HTTPS 证书信息的命令行工具。
99
.htaccess Generator
Build an Apachehtaccess file without memorizing rewrite syntax. Add 301/302 redirects, force HTTPS, and choose www or non-www. Removephp orhtml extensions, or write custom rewrite rules. Boost speed with GZIP and browser caching. Improve security with security headers, hotlink protection, SQL injection blocking and IP blocking. Password-protect folders, set custom error pages (400 to 503), and start fast with one-click presets. Copy or download. No signup.
原文2
Kanshi Guardian
Blockchain wallet security - real-time threat detection, URL screening, wallet scanning, and smart contract simulation. Wallet agnostic and coverage on 20+ chains. Beta testing now, vault deployments on testnet. No contracts deployed until audited. Kanshi is dedicating a majority of revenue to non-profit victim assistance enforced on-chain at subscription. Protecting users and assisting those left unprotected in the past.
原文1
Watchdog — Guardian Agent Supervision
Microsoft (Oct 19, 2026) announced Guardian Agents that "watch and moderate every action of every agent, before it happens, 24/7" — but published no implementation. Watchdog is the drill kit: a FastAPI guardian that scores every agent action and routes it to ALLOW, STEP-UP, HOLD-FOR-HUMAN, or HALT-AND-ISOLATE. Policy template, runbook, identity registry, risk rubric, containment playbook included. 17 tests passing. Not cost routing, not an audit — runtime supervision by safety.
原文1
Brand Identity API
Give it a domain and it hands back the company's brand: logos for light and dark (SVG first), HEX colors by role, and the fonts the site really loads. Go deeper for 21 sections: the design as a DESIGN.md, the voice as a brand.md, plus pricing, products, competitors, open roles, contacts and investors. Even its email security. Anything we read off a page comes with the exact quote and its URL. No quote, no fact. Call it over REST or MCP. 50 lookups free, then $39 for 10k a month.
原文3
SearchFuel Agency Exit Sprint
Tired of the agency carousel? The SearchFuel Agency Exit Sprint gives business owners 1-on-1 support to take back control of their marketing. We set up your website, Google Ads account, and conversion tracking, then teach you to run it yourself through live workshops and a full training library for you or your team. No more hand-offs or starting over with a new agency. Spots are limited. Let’s chat for a free audit.
原文1
Quezzt
Quezzt turns any procedure into a workflow your team actually follows — not a doc that collects dust. Build it once with instructions, yes/no confirms, inputs, and branching choices. Then run it step by step: can't skip without a reason, can't forget what's next. Works for IT support, onboarding, incident response, dispatch — any process that must happen the same way every time. Every run leaves an audit trail automatically. Free forever: 1 org, 1 admin, 1 workflow, no credit card.
原文2
—
Accesstive
Accesstive Free Accessibility Checker helps you identify accessibility issues, understand potential legal risk, and know what to fix first. Start with a free Instant Scan, then choose a Live Audit or Human Expert Audit for deeper evaluation. Measure your website against WCAG 2.2, ADA Title III (US), EAA (EU), and BITV 2.0 (Germany), identify barriers affecting people across 9+ disability groups, and download a professional accessibility report with prioritized recommendations.
原文1
Codeco.tech
30 individually Designed Human-Built Apps—NOT AI templates. Ex Vodafone R&D Engineer with 25 years in Making Full Stack APPS with Corporate Security. Get A complete e-commerce business, already built and ready to customise. Get your storefront, product catalogue, shopping cart, Stripe checkout, Google sign-in and admin tools. Connect three accounts - your database, Google sign-in and Stripe — and follow our step-by-step Unstuck Videos to get set up. Own the code, Pay Once, and get setup support.
原文2
BOKI - 离线优先的开源财务软件：数据不出机器，断网也能记账
BOKI 是一套离线优先的开源财务软件，前端 Vue 3 + 后端 NestJS + SQLite 单文件数据库，单命令启动、开箱即用。在云端记账簿数据泄露频发的当下，它走另一条路：没有云端、没有第三方 SDK、没有任何埋点与遥测——全部账务数据就是本机一个 financial.db 文件，备份是拷贝目录，迁移是搬文件夹，数据主权 100% 在用户手里。 内核只保留记账必需的复式记账引擎（科目、凭证、期初、公司上下文），借贷必相等由后端强校验；其余能力全部插件化（官方插件 14 个），不装的插件在界面上不留痕迹。 核心特性： 🧾 复式记账内核：科目 / 凭证 / 期初 / 多公司上下文，借贷必相等前后端双重强校验，已审核凭证禁止改动 📊 报表可审计：资产负债表、利润表（本期+本年累计）、科目余额表、试算平衡表、票据台账、现金流简表、费用结构分析 🔐 权限与多公司：JWT 登录 + RBAC（菜单级 + 操作级），一个账号管理多家记账公司，数据完全隔离 🗄 数据离线：SQLite 单文件（WAL 模式），一键备份/恢复，无任何外部服务依赖 🎤 语音识别离线：sherpa-onnx 本地流式中文 ASR（zipformer int8），音频不上传 🤖 大模型可选离线：内置 Ollama / llama.cpp / vLLM 本地模型预设（OpenAI 兼容协议、无需 API Key），也可切换云端模型 🧩 插件化：想要什么装什么，卸载不留痕迹 技术亮点： 复式记账引擎与权限模型在服务端强校验，不依赖前端约束 本地模型自动降级：模型缺失时服务照常启动，仅相关功能提示未就绪（/api/ocr/status 可查） 许可：内核 AGPL-3.0，官方插件 Apache-2.0 平台：Windows / macOS / Linux 适合对象：个人与小团队的记账、代理记账/财务工作室的私有化部署、对数据隐私敏感的任何记账场景。 项目正在寻找第一批真实用户，任何反馈（尤其是报表与记账流程上的"不顺手"）都非常欢迎，可以直接提 issue。如果觉得有价值，欢迎点个 Star 支持开源维护者 🙏
0
Orbit – A local macOS workspace for side projects
Hi HN, I've been working on Orbit, a macOS app that keeps your repos, tasks, notes, assets and docs together. I'm usually juggling a few side projects and forgetting where I left off. I also didn't like having to bounce between Obsidian, Trello and Google Drive to find everything. I wanted somewhere to keep all that stuff with the project, so coming back to it was a bit easier It checks your project's dependencies for outdated packages and known security advisories which was super important for me as I have a tonne of old projects that I haven't touched in a while It's all stored locally on your Mac and there's MCP support too, so an AI client can read the project info and update tasks and docs Give it a try and let me know what you think: orbitdesktop.com (Windows support is coming soon!)
原文—
Securityplushrms Software
Unlike generic HR platforms, Security Plus HRMS is purpose-built for security and facility management firms to handle complex field operations. What Makes It Stand Out: • Multi-Site Attendance: Real-time, geo-tagged shift tracking across remote client sites. • Custom Billing & Payroll: Automated site-wise billing, complex OT, ESI/PF compliance, and NEFT payout generation. • Asset & License Control: Automated PSARA/gun license expiry alerts and uniform inventory tied to salary deductions.
原文1
AuditCRO
AuditCRO is an AI that audits your Shopify store like a CRO expert would. Paste your store URL (no admin access, nothing to install) and in about a minute it checks 262 conversion points across 8 page types. You get a score for every page, leaks ranked by priority with a clear fix for each, a page-by-page comparison with your competitors, and A/B test ideas. See a full audit on Allbirds before signing up.
原文1
Traffic Watcher for Liferay DXP
Traffic Watcher for Liferay DXP is a lightweight, production-ready security monitoring module designed to detect suspicious anonymous traffic patterns and potential DDoS attempts in real-time. Built specifically for Liferay DXP 7.4+, this module continuously monitors requests and instantly alerts administrators when configurable traffic thresholds are exceeded, helping organizations respond to threats before they escalate.
原文1
Meme Coin Development
Your next crypto venture could start with one meme. Turn your concept into a market-ready digital asset with Meme Coin Development focused on token architecture, smart contract implementation, security, and launch planning. Build a coin around your brand, community, and business model with a solid foundation for entering the Web3 market.
原文1
SlopSquat：面向 AI 辅助编程时代的依赖包幻觉投毒（Slopsquatting）轻量级开源嗅探工具
我是 SlopSquat 的作者，提交给周刊编辑筛选。
0
—
Proposa - B2B WooCommerce Extention
Stop losing high-ticket B2B deals to slow emails and expensive $100/mo SaaS tools like PandaDoc. Proposa turns WooCommerce into a 100% self-hosted B2B quotation powerhouse. Build interactive proposals with dynamic volume tiers and optional add-ons, collect legally binding digital signatures with SHA-256 cryptographic audit trails, and convert accepted contracts into paid WooCommerce HPOS orders in 1 click. Zero monthly fees, unlimited seats, total data ownership.
原文1
Candle Audit Kit：离线检查 OKX K 线缺漏、重复与 CSV/JSON 一致性
免安装合成报告预览： 维护者自荐。Candle Audit Kit 是一个 MIT 许可的 Python 本机命令行工具，面向研究人员与数据工程师，在研究或回测前检查本地 OKX OHLCV 输入。 主要功能： 检查 K 线缺漏、重复、时间窗口、已收盘状态和数量单位。 将 CSV 与原始原生 JSON 响应逐字段对账，保留原始十进制字符串。 保存不可变数据快照、Parquet 数据和来源哈希，并生成中英文 HTML 报告与 JSON 证据。 可以先直接打开预览，查看固定的合成样例；预览没有文件上传功能。实际稽核在本机运行。安装当前源码后，可以使用 candle-audit --root data/demo --language en 复现英文示例。 项目仍属预发布阶段，支持 CPython 3.11–3.14、macOS/Linux。示例数据全部是合成的，不连接交易账户、不执行交易。一致性检查通过并不能证明文件来自真实交易所，也不代表收益或投资建议。
1
Rankpro
RankPro is a 100% free, real-time SEO intelligence suite designed for indie hackers, bloggers, and SEO professionals. Track real-time Google keyword rankings across countries, audit site health for Core Web Vitals, and uncover keyword search volumes—all without expensive subscriptions or API limits.
原文1
InterOdin
Odin v1 is an AI model API built for security work, where general-purpose models often refuse legitimate tasks like exploit analysis for detections, YARA/Sigma drafting and CTF payloads. It works with OpenAI Chat Completions, OpenAI Responses and Anthropic Messages, so it plugs into Claude Code, Cursor and Codex with just a base URL and key. Prompts and completions are not stored. Prepaid credits, no subscription, no expiry.
原文1
heal.dev
Code review catches what’s wrong in a diff. Heal catches what breaks when the app runs. Heal learns how to run your application, builds a production-like sandbox with external services stubbed, then hunts for bugs, performance regressions, and runtime vulnerabilities users would hit. It reproduces every defect before reporting it, so you get real bugs to fix, not a backlog of AI-generated suspicions.
原文195
Paycheck Pulse
Paycheck Pulse is a free take-home pay calculator for US employees: enter your gross pay and see your exact federal, state and FICA deductions and real take-home pay for all 50 states, using 2026 tax figures. The site also publishes free paycheck and tax guides (bonuses, overtime, three-paycheck months, Social Security COLA, state-by-state take-home breakdowns).
原文1
BWorlds
You built an app with Lovable, Bolt, Replit, v0 or Claude Code, and now people depend on it. BWorlds reviews it the way a senior engineer would: security, reliability, data, performance, costs, code quality. Then it watches the app 24/7 and sends you one email each morning with what happened overnight and a fix you paste into the tool you build with. Once you publish, it checks the fix landed. The free plan covers the full audit and monitoring on as many apps as you like. No credit card.
原文5
John Thomas Fin Accounting Powered by AI
AI accounting SAAS with click invoice to update accounting work Risk alerts and AI suggestions to to mitigate them. AI customer support and and AI ticket resolution. Self healing software. ACID Integer- paise double entry code, Tamper evident WORM audit trail.AI financial co pilot on deterministic tax rules AI sentinel flags duplicate invoices etc. Software built on ISO/ IEC 27001:2022 ISMS Framework documented (93 controls and SOA)
原文1
GetGDPRKit
9 audit-ready GDPR & UK-GDPR frameworks for B2B SaaS: Article 30 RoPA, Executable DPA, DPIA, and 72-Hour Breach Protocol. Save $10k+ in legal fees. Plain English, zero subscriptions.
原文1
TOBENI AI
Coordinate tasks, projects, meetings and follow-ups. AI proposes, you approveTOBENI AI brings tasks, projects, meetings and follow-ups into one workspace. It helps teams organize work, prioritize next steps and review proposed actions before approving them. With team roles and an audit trail, TOBENI AI helps businesses stay organized while keeping people in control. AI that asks before it acts..
原文1
Betterlane Free AI Audit
Type your website and answer three yes-or-no questions. In about a minute you get a Betterlane Score out of 100 and a report of where customers slip away: the hours nobody answers, how people can reach you, phone speed and the next step. Free, no sign-up.
原文1
VerbatimIQ Analyze
VerbatimIQ Analyze turns thousands of open-ended responses into clear themes, sentiment and trends. Ask questions in plain English, get evidence-backed answers, and export board-ready reports — built with enterprise-grade security.
原文2
npm-install-audit: check an unknown repo before you run npm install
Project URL Category JS Project Title A zero dependency Node script that flags install hooks and risky code in a before your first npm install Project Run it on a you did not write, like a take-home test from a recruiter, before npm install. It lists preinstall, install, postinstall and prepare hooks and flags shell execution, runtime base64 decoding, curl pipes and credential paths. Highlights One file, no dependencies, no network access, read only: it never runs the code it checks. Built for a real attack: fake recruiter take-home repos that hide the payload in an install hook. Clear exit codes (1 flagged, 0 clean, 2 unreadable) and a self test, easy to drop into CI. Honest about limits: a clean result is not proof of safety, and the README says what it cannot catch. MIT licensed. Good first issues are open (JSON output, TypeScript files, git URL dependencies). Example Code markdown curl -O node audit.js ./take-home-task ! package.json: postinstall hook runs: node scripts/setup.js ! scripts/setup.js: runs shell commands ! scripts/setup.js: decodes base64 at runtime ! scripts/setup.js: pipes a download into a shell 4 finding(s). Read them before you run npm install. or Videos
原文0
Gouger
HTTP and HTTPS debugging proxy and HAR analyzer for troubleshooting web sessions: CAS and SSO login, cookies, security context, timing and load balancing.
原文1
VendorCalcs
Most payment fee calculators are clunky, loaded with ads, and run outdated rates. VendorCalcs is an ad-free, zero-latency payment fee auditor for founders, sellers & freelancers. What makes it stand out: • Reverse Invoice Gross-Up: Calculate the exact amount to bill to hit your net target • Refund Loss Audit: See how much unrefunded fees bleed your margins on returns • 19 platforms (Stripe, PayPal, Shopify, LemonSqueezy, Etsy) across 5 countries • Zero ads, no sign-ups, 100% free
原文2
SecMentor: Cybersecurity Platform
SecMentor is an all-in-one cybersecurity learning and career platform built for aspiring security professionals. Explore hands-on CTF challenges, discover competitions around the world through our interactive CTF Globe, follow structured learning paths, find cybersecurity jobs and internships, and access AI-powered mentorship. Whether you're starting in cybersecurity or building advanced skills, SecMentor helps you learn by doing and take the next step in your career.
原文1
OhShit!
OhShit! turns public security advisories and breach reports into a feed developers can act on. Each incident has a severity level, affected products, source links and a cleanup checklist. Check supported runtime versions, or follow incidents through RSS, a free JSON API and an MCP server. The code and incident data are open source.
原文1
Php2ShellCheck – Python script that checks for vuln indicators
Hi All. A coworker and I (and AI) built this python script that checks HTTP response headers for indicators that the site is using a version of PHP that's vulnerable to PHP2Shell (CVE-2026-109618, CVE-2026-109619). It's an asynchronous HTTP/HTTPS header inspection tool that fingerprints PHP and compares the version against the PHP2Shell fixed releases. Obviously this isn't a foolproof way of knowing if a host is vulnerable (See Security disclaimer in README.md), but it's at least good at finding hosts in your environment that are advertising to the internet that they are using a vulnerable version of PHP. My first time submitting to HN - please be merciful. Now accepting feedback, suggestions, and constructive criticism.
原文—
Vulnify
Vulnify decides each sensitive AI agent action before it runs: ALLOW, REVIEW or BLOCK, with a 0-100 score, the reasons and a hash-chained audit log. Node and Python SDKs, monitor mode, fail closed by default. The Developer plan is free.
原文2
AI Shop Audit：免费检测 ChatGPT、Perplexity 等 AI 助手能不能从你的 Shopify 店里买东西
是什么：现在 ChatGPT、Perplexity、Google 都在给用户推荐商品，今年 Shopify 还向浏览器里的 AI Agent 开放了结账。但 AI 能不能真的读懂你的商品、找到购买按钮，取决于店铺页面本身。这个网站就是按 AI 的视角去扫你的店。 免费检测（不用注册、不留邮箱，约 3 秒出结果）： robots.txt 有没有把 ChatGPT、Perplexity 的爬虫挡在外面 有没有给 AI 看的 llms.txt 商品页有没有机器可读的价格和库存数据 需要的话也有 $29 的完整版：扫最多 8 个页面，给评分和按优先级排的修复清单，附可直接粘贴的 Shopify 代码，约 10 分钟发到邮箱。不用装插件，也不需要后台权限，只看公开页面。 适合：做独立站 / Shopify 出海的卖家。目前只支持 Shopify，网站为英文。
—
DoneMark
DoneMark provides human accountability for AI-generated code. Run your favorite coding agents (Cursor, Claude Code, Devin), while DoneMark generates cryptographic audit trails and 4 automated proofs per line to let you sign off on intent without breaking production.
原文1
Newmind Free AI Pre-audit
A free five-minute AI pre-audit. Get a verdict on screen, a scored report by email, and the open questions to settle before you commit a budget.
原文1
BlogSpeed
BlogSpeed researches live Google, Trends and Search Console data, then writes and publishes cited, SEO & AEO-optimised blog posts to your site on autopilot. Blogspeed also gives you deep dive analytics on your current performance, helps you create trackable backlinks and find relevant prospects, runs audit on your current website and suggest you exact fixes that needs to be made PS. also connects to your google search console for more insights.
原文1
Digital Adept
White-label SEO reports for small agencies. Every audit problem becomes a task that closes itself when a re-check confirms the fix, so the report shows clients what you changed. Rank tracking, AI search visibility and a client portal. From £59/month, with a 7-day free trial and no card needed.
原文1
Fixentrix eSign
Fixentrix eSign makes collecting legally binding digital signatures simple, quick, and hassle-free. Upload documents, drag and drop signature fields, send to multiple recipients, and track completion status with complete audit trails. Built for businesses, freelancers, and agile teams who need streamlined document turnaround without complex enterprise overhead.
原文2
SPIDYA Agentless Asset Discovery
Gain complete hybrid IT asset visibility with Agentless Asset Discovery—monitor hardware, software, cloud inventory, and security vulnerabilities in one platform. Eliminate blind spots, simplify asset management, and make faster, more informed IT decisions.
原文1
Abdulwahab's Apify Tools
30 separate Apify Actors by one maker. Five new utilities compare sitemap snapshots, check security-header presence, flag limited OpenAPI changes, deduplicate CSV/JSON and extract static HTML tables. Also includes catalog, job and public-data tools. Each has its own usage-based price. GitHub examples now flag partial or unverified results. Not one platform or subscription; no coverage or security guarantees.
原文1
工具分享：墨鱼排版，把 Markdown 变成公众号文章样式
推荐 JeasonKim 的开源工具「墨鱼排版」。我是作者的支持者，不是开发者；这次让 Agent 用公开样文做了网页实测。 适合平时用 Markdown 写文章、想先预览公众号排版的人。我们验证了标题、列表、引用和加粗的网页预览，并对比了「蓝调卡片」「清爽正文」两种主题，同一段文字能切换成不同版式。 公众号后台粘贴效果还没有验证，也没有做隐私网络审计；建议先拿一段非敏感短文试用。
4
Best Website Audit Tool Seo/Performance
NO HASSLE <> NO SIGN UP <> NO EMAIL <> NO DELAY The best priced and most easy to use audit tool on the web. includes everything included in free audits plus more includig descriptors and instructions on fixes. Its shows were flow is block, which links are most used, which websites the visitors came from and all website Security issues and perdormace issues? Was there a failed payment? suspevt someone messing with your network or site? find out what your competitions site does better TRY NOW
原文1
A11ySpaces
Explore federal ADA, Fair Housing Act, and state, county, and city accessibility rules — each local one checked against its official source — and audit spaces on-site.
原文2
spiti floor sector 99a gurgaon
Spiti Floors offers premium 3 BHK independent floors in Sector 99A, Gurgaon, inside the gated Spiti Greenwood Estate township. Just a minute from Dwarka Expressway, the low-rise homes are built on 179 sq yd plots with basement and terrace options, plus a clubhouse, parks, a shopping complex and 24x7 security. Enjoy space, privacy and quick access to Delhi and IGI Airport. Book a site visit at spitifloors.co.in.
原文1
AnchorSphere — Build secure apps
Most ai builders will make the website for you, and design it so well you'll ship without even thinking about the data leaks and security vulnerabilities. AnchorSphere solves this problem --- security and privacy are prioritised. While we dont guarantee 100% that the code will be secure, it is a best effort mitigation of one of the most important problems and AI web development.
原文1
8 Pillars
Choose where to study, see what universities expect, and know exactly what to do next.High school planning is an engineering challenge, not an essay crisis. 8 Pillars is now live—the decision infrastructure tool replacing 20-tab guesswork with deterministic data. Audit course prerequisites across 8 global destinations, catch Grade 8–10 curriculum lockouts before options freeze, strip out commercial extracurricular fluff, and model real degree ROI and work-visa pathways. Stop guessing.
原文1
Zof Tools
Seven focused checks for website health, technical SEO, passive security, code reliability, performance, accessibility and APIs. Start with a bounded free preview, then choose a one-time report from $9 or four bounded monthly runs. Reports include evidence and practical next steps. Website Complete bundles five website tools for $49 once or $79/month for one verified domain. Main Zof platform for team verification and production controls: zof.ai (separate plans).
原文2
ShieldWave
Type your address. In about 90 seconds ShieldWave runs 20+ outside checks and shows your score and the most serious problems in plain language. The full report adds a fix list sorted by urgency and a brief to send your developer. Free check, no account, no password. A full report for one site is $9 once. Pro is $12 a month for up to 25 sites with scheduled scans and alerts. Plus a free WordPress plugin, Ensomedia Security, with 24 checks from inside, two-factor login included.
原文1
Pawl
Every other blocker has an off switch, and at 1am you find it. Pawl has no unlock button: blocking any app or site is instant, but opening it needs a physical security key (any FIDO2 key) in hand, plus a 15-minute wait. Keep the key in a drawer, or give it to someone you trust. No account, no server, no tracking, open source. Free, with optional Pro for schedules and reports. Built by an indie dev who blocks his own Polymarket with it.
原文1
IELTS Writing Simulation Engine
Featuring a Windows desktop app designed to provide candidates with an authentic, exam-accurate environment for IELTS Writing Task 1 and Task 2 preparation. It includes built-in Cambridge practice prompts, custom exam timers, an instant local forensic audit engine for band score estimations, and Google Gemini AI integration for professional feedback. Additionally, featuring a topic logic and vocabulary booster across mutiple subjects, live informal word replacements and PDF report exports.
原文1
AgentTrust OS
AgentTrust OS is the runtime trust layer for AI agents. It sits between an agent's decision and the business action that follows: certify agents before they ship, check every execution in real time (approve, retry, escalate or block in under 20 ms, no LLM needed), and keep a tamper-evident audit trail. Wrap an existing agent with one decorator. Data can stay inside your network. Built for developers shipping agents and for security and compliance teams who must prove those agents behaved.
原文1
—
连镜：在无限画布上编排 AI 图片、视频和音频的生成流程
连镜把 AI 视觉创作从一次性的对话框搬到无限画布：文本、图片、视频、音频作为节点互相连线，上游产物直接成为下游的参考素材，首帧、镜头和成片可以在同一条流程里反复调整。支持接入多家模型供应商，可 Docker 私有部署 亮点 画布式工作流：每次生成的产物都留在图上，改上游即重跑下游，不再是排队等一次结果 3D 导演台：用人台、道具和多机位搭构图，导出机位首帧和视频回填画布 画布 Agent：用对话创建、编辑、排列节点，改动可撤销，可导入技能包 插件化模型接入：每家供应商协议是一个 JS 插件，跑在隔离进程里；内置 OpenAI、Anthropic、Google、豆包、阿里百炼、可灵、即梦、Vidu、海螺、Sora，也支持上传自定义插件 完整的自建能力：渠道与模型校验、积分结算、支付、使用记录与审计，密钥加密保存、只写不读 素材存储可切换：本地磁盘，或把阿里云 OSS、腾讯云 COS、AWS S3、Cloudflare R2 设为默认存储 Go + React，Docker 一条命令部署，MIT 协议
5
MLM Software Development
MLM Software Development helps businesses manage multi level marketing operations with tools for distributor management, commission calculations, genealogy tracking, sales monitoring, and performance reports. A well designed MLM platform supports multiple compensation plans and provides insights into network activities. With scalable architecture and security focused features, MLM software simplifies daily operations and helps businesses manage growing distributor networks efficiently.
原文1
The Internet Is on Fire
A central, community-maintained tracker of recent cybersecurity and AI incidents: data breaches, backdoored npm and PyPI packages, exploited vulnerabilities. Every entry linked to its source and labelled by evidence.
原文—
ClientCoded
Most agent testing either traces failures after customers hit them, or makes you hand-write every test and let an LLM guess if it passed. ClientCoded generates adversarial tests and knows the correct answer, scoring against computed ground truth with SQL, not opinion. It catches failures before production, monitors every live conversation with Slack alerts, and turns real production failures into new regression tests automatically. Connect in minutes with one webhook. First audit free.
原文1
Sprintel.ai
Sprintel.ai combines website uptime monitoring with comprehensive website audits in one platform. Monitor uptime every 60 seconds and identify SEO, AI search (AEO/GEO), security, accessibility, and technical issues through a 45+ point audit. Prioritized recommendations help teams address problems efficiently. Agencies benefit from white-label reports and public status pages, while businesses and enterprises gain better visibility into website health. Includes a 14-day free trial.
原文1
Coffre — your notes, encrypted
Most note apps ask for an account and keep a copy of your notes on their servers. Coffre doesn't. Notes, tasks and scanned documents stay on your phone, encrypted with AES-256 — the key lives in your phone's security chip and never leaves it. No account. No analytics, no ads. Android's own backup is disabled, so your notes don't even land in your Drive. Scan a document and the text is read on the device, searchable seconds later. Or dictate instead of typing.
原文1
Lodone
Lodone brings WordPress backups, cookie consent, security monitoring, image optimization and SEO/GEO maintenance into one dashboard. Schedule backups to your own Dropbox or Nextcloud, review security findings, optimize images and follow a monthly improvement plan. Connect Google Search Console for real search performance data.
原文1
没有找到相关项目
换一个关键词或分类试试。