Nicheloom

Market intelligence for builders — see what's gaining traction before it's crowded.

Nurbak

AI pentester for your code, on its own model

Details

External ID
1260156
Source
PH
Company
—
Product
Nura
Website domain
producthunt.com
Launched
Sept. 26, 2026
Cohort
—
Upvotes
2
Upvotes percentile
0.7405388069275176
Tags
Developer Tools, Artificial Intelligence, Security
Fetched at
Sept. 28, 2026, 1:01 a.m.
Updated at
Sept. 28, 2026, 1:01 a.m.

Description

Nurbak is an AI pentester for your code. Connect GitHub and our own self-hosted model reads your repo like an attacker would: secrets (even in git history), IDOR, injection and vulnerable dependencies. Each finding can be fixed with a Pull Request. Product Hunt offer: 3 free fix PRs instead of 1.

Enrichment

Theme
ai cybersecurity and penetration testing
Vertical
Security
Function
Agent / copilot
Audience
Developer
AI stance
AI-native
Project type
Commercial product
Normalized one-liner
ai penetration testing tool for source code
Manually corrected
False

Could you build this?

Partial Connecting GitHub webhooks and parsing pull requests is standard, but hosting and fine-tuning a custom security model that reliably discovers zero-days and non-trivial vulnerabilities like IDOR without overwhelming false positives is difficult.

What it would actually take: The architecture requires a GitHub App backend (FastAPI/Node.js) orchestrating static analysis (AST parsing via tree-sitter, Semgrep) integrated with a specialized fine-tuned LLM hosted on GPU infrastructure (vLLM/TGI). The hard parts are context-window management across large polyglot codebases, data-flow taint analysis, and minimizing false positives to generate actually compilable security fix PRs.

Competitors

Other products that read as similar to this one — 32 launches clear the similarity bar, closest 8 shown.

Attention rank: #7 of 33 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).

Launched 320 days after the earliest competitor.

Other launches for this product

Same idea, different domain

Nobody's really built a agent / copilot tool for Agriculture yet.