Thand
open-source, distributed, JIT, PAM and provisioning platform
Details
- External ID
- 46046762
- Source
- HN
- Company
- —
- Product
- Thand
- Website domain
- github.com
- Launched
- Nov. 25, 2025
- Cohort
- —
- Upvotes
- 6
- Upvotes percentile
- 0.27074235807860264
- Tags
- —
- Fetched at
- Sept. 7, 2026, 9:25 p.m.
- Updated at
- Sept. 7, 2026, 9:25 p.m.
Description
Hey HN!We are building Thand, an open-source, distributed platform for Just-in-Time (JIT) access, authorization (PAM), and provisioning.Why? I’ve been at various companies now; either having to raise tickets, waiting on internal processes to get access to systems, resources or SaaS tools. Or, having extremely elevated accounts all in one place and as a single point of failure when services go down just as you need them. None of the available PAM tools seemed easy to work with, so it got me seeking an alternative.What is Thand? Thand is a lightweight, open source and self-hosted agent that runs locally or in your cloud environment. It orchestrates and distributes requests via durable workflows (via Temporal and CNCF Serverless workflows) to grant temporary access to resources or provision resources via its “providers”.Unlike other tools, that are locked into particular cloud environments or SaaS providers. With Thand you deploy the agents with their respective access. Wherever, you need to get access to. Temporal can route the workflow execution to elevate or provision resources across multiple environments (cloud and local) and identities.What's with the name? Thand is Sindarin, (‘Shield/Guard of the Forest’).We are currently in preview and looking for feedback.GitHub: https://github.com/thand-io/agent Docs: https://docs.thand.io Website: https://www.thand.io/Thanks!
Enrichment
- Theme
- database infrastructure and developer tools
- Vertical
- Horizontal
- Function
- Data infrastructure
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Hobby / open-source project
- Normalized one-liner
- distributed jit pam and provisioning platform
- Manually corrected
- False
Could you build this?
No A distributed Privileged Access Management (PAM) and JIT provisioning system demands mission-critical security guarantees, cryptographic access control, and native integrations across enterprise identity and infrastructure layers.
What it would actually take: A real PAM system requires zero-trust ephemeral credential generation (short-lived SSH certificates, OIDC tokens, IAM roles), distributed agent daemon networks, tamper-proof audit logging, and deep protocol proxies (SSH, RDP, Kube API, SQL). Flaws can lead to enterprise-wide breaches, requiring high-assurance security engineering, systems programming, and identity management expertise.
Discussion
No comments on this launch.
Competitors
Other products that read as similar to this one — 9 launches clear the similarity bar, closest 8 shown.
Attention rank: #8 of 10 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 24 days after the earliest competitor.
- PLOMID · ph · 2026-09-18 · 1 upvotes · similarity 0.38
- Libredesk · hn · 2026-04-19 · 5 upvotes · similarity 0.34
- Max · hn · 2026-03-06 · 7 upvotes · similarity 0.33
- Jod · hn · 2025-11-01 · 9 upvotes · similarity 0.33
- We built a <60ms, open-source alternative to E2B using RustVMM and KVM · hn · 2026-04-22 · 7 upvotes · similarity 0.32
- Libredesk · hn · 2026-04-20 · 7 upvotes · similarity 0.32
- OmniDefend · ph · 2026-09-21 · 1 upvotes · similarity 0.31
- Jido 2.0, Elixir Agent Framework · hn · 2026-03-05 · 323 upvotes · similarity 0.31
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a data infrastructure tool for Media & entertainment yet.