bundlebleed
AI/LLM-assisted JS Recon and vulnerability triage for authorized bug bounty testing & pentesting — scope-gated, passive-by-default, human-verified
Details
- External ID
- 1368459854
- Source
- GITHUB
- Company
- —
- Product
- bundlebleed
- Website domain
- github.com
- Launched
- Sept. 13, 2026
- Cohort
- —
- Upvotes
- 26
- Upvotes percentile
- 0.6856264411990777
- Tags
- bug-bounty, bug-bounty-automation, bug-bounty-recon, bug-bounty-reconnaissance, bug-bounty-tools, javascript-security, pentesting
- Fetched at
- Sept. 17, 2026, 5:02 p.m.
- Updated at
- Sept. 17, 2026, 5:02 p.m.
Enrichment
- Theme
- ai cybersecurity and penetration testing
- Vertical
- Security
- Function
- Agent / copilot
- Audience
- Developer
- AI stance
- AI-native
- Project type
- Commercial product
- Normalized one-liner
- ai-assisted javascript reconnaissance and vulnerability triage for security researchers
- Manually corrected
- False
Could you build this?
Yes It is a specialized recon script/CLI that downloads public JS bundles, extracts endpoints/secrets using regex or AST, and queries an LLM for triage.
Competitors
Other products that read as similar to this one — 1473 launches clear the similarity bar, closest 8 shown.
Attention rank: #418 of 1474 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 319 days after the earliest competitor.
- K7R3 · github · 2026-09-18 · 14 upvotes · similarity 0.63
- taoxd · github · 2026-09-13 · 252 upvotes · similarity 0.58
- JSLike, a CSP-Safe Interpreter for JS, TS, JSX, TSX in JS · hn · 2026-05-09 · 6 upvotes · similarity 0.54
- tpmjs · hn · 2025-12-28 · 5 upvotes · similarity 0.54
- Kyushu · hn · 2026-06-07 · 89 upvotes · similarity 0.53
- REx-skill · github · 2026-09-23 · 96 upvotes · similarity 0.52
- Black-box API bug detection across 7 AI systems · hn · 2026-06-04 · 11 upvotes · similarity 0.51
- Ashr: Mimic Your Production Environment and Users to Catch Agent Fails · yc · 2026-02-27 · 9 upvotes · similarity 0.51
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a agent / copilot tool for Agriculture yet.