Show HN: One-click security scanner for web, code, and AI vulnerabilities

1 zachkepe 1 5/9/2025, 5:27:03 PM zachkepe.com ↗

I'm building a tool that scans websites for vulnerabilities by just entering a URL - no setup required:

Finds XSS, CSRF, SQL injection vulnerabilities Analyzes JavaScript security issues automatically Detects AI prompt injection vulnerabilities Results in plain language for non-security experts

Early preview: zachkepe.com/apiguard

Comments (1)

zachkepe · 1d ago

This tool addresses three security domains with one URL: web vulnerabilities (OWASP ZAP), JavaScript code issues (ESLint), and AI prompt injection (Rebuff/Garak). Most competitors only cover one domain. Key differentiators:

No account required for basic results Plain language explanations for non-experts Detect AI security risks (increasingly critical)

Looking for feedback on pricing ($19/49/99 tiers) and which vulnerability types matter most to you. Also considering GitHub integration - would PR-based scanning be valuable?

Be the node you want to see in the network (taylor.town)

Show HN: WinCse – Integrating AWS S3 with Windows Explorer Official Release (github.com)

Twenty eight slightly rude notes on writing (experimental-history.com)

There's no need to over engineer a URL shortener (luu.io)

Show HN: Miralis – a RISC-V virtual firmware monitor (github.com)

Show HN: StarList Exploring the most impactful startups and companies since 1960 (starlist-snowy.vercel.app)

Smartphone Sensors and Antihydrogen Aould Soon Put Relativity to the Test (physicsworld.com)

Florida bill requiring encryption backdoors for social media accounts has failed (techcrunch.com)

Anubis and Caddy-Docker-Proxy (patdavid.net)

Albert Ellis: Stoicism as the Root of CBT (2023) (thewalledgarden.com)

Engineering principles in the age of vibe coding

Yahoo Mail vs. Gmail: Which should you use? (zapier.com)

GraphQL vs. REST API: Which Is a Natural Fit for Graph Databases? (memgraph.com)

Gen Z's 'conscious unbossing' should be a wake-up call for businesses (businessinsider.com)

AI agents in B2B sales: pre‑built tools vs. custom solutions (yougotus.ai)

Trump admin to roll back Biden's AI chip restrictions (arstechnica.com)

OpenAI admits it screwed up testing its 'sycophant-y' ChatGPT update (theverge.com)

A mathematical proof assistant (v2) (github.com)

Why travel didn't bring the world together (ft.com)

We've submitted Fortnite to Apple for review (twitter.com)

Not Recommended: Why Current Content Recommendation Systems Fail Us (gojiberries.io)

Ask HN: Which function definition keyword do you prefer, def or fn?

Xkcd's "Is It Worth the Time?" Considered Harmful (will-keleher.com)

Apple reportedly readies Baltra processors for AI servers (tomshardware.com)

Galactic Coordinate System (en.wikipedia.org)

The Grug Brained Developer (grugbrain.dev)

Fine-tuned acoustic waves can knock drones out of the sky (economist.com)

Sidebar Calendar – Your Schedule at a Glance (apps.apple.com)

Legal actions in Brazilian air transport: a ML/logistic regression analysis (frontiersin.org)

Orders for Pahalgam satellite images from US firm peaked 2 months before attack (theprint.in)

Simon Willison's first blog on LLMs (2022) (simonwillison.net)

Show HN: No as a Service Rust (github.com)

Ursula K. Le Guin on the TV Earthsea. (2004) (slate.com)

GNU Taler 1.0 Released (taler.net)

why vi rocks (why-vi.rocks)

How Bail Bonds Work (finbarr.site)

Book Review: Chronicles of Wasted Time (2015) (slatestarcodex.com)

Why John Wilson Can't Stop Filming (youtube.com)

Python Internals (2010) (eli.thegreenplace.net)

A sub-millisecond GC for .NET? (blog.applied-algorithms.tech)

Why is open source failing? (youtube.com)

OpenAI enterprise adoption appears to be accelerating, at the expense of rivals (techcrunch.com)

MDS-PC1 (Sony) 1997 (anniversary-net.com)

RecordLite: Declaratively maintains SQLite tables, views of semi-structured data (github.com)

What Do the Most Powerful Get By Cutting Off the Internet (nytimes.com)

Show HN: Kozu – A minimalist tool to manage your YouTube study sessions (mykozu.xyz)

Show HN: Diffwithgpt – Local LLM Summarizer for Git diffs (diffwithgpt.com)

DCJ11 Single Board Computer (PDP-11) (5volts.ch)

Call It Sour Grapes (2020) (betonit.ai)

Book Review: "What Went Wrong?" By Bernard Lewis (chevalierdarlington.substack.com)

Show HN: One-click security scanner for web, code, and AI vulnerabilities

Comments (1)