Nicheloom visits: 58,069 all-time · 7,637 in the last 7 days

The opportunity tracker for new startups.

Today: 1,953 launches · Niche of the day: specialized calculation tools · See what launched today →

AIOStack

Using eBPF to Secure AI Services in Kubernetes

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Want to reach these readers? Sponsor an issue.

Hey HN! We built a tool that uses eBPF to discover AI services and their data flows in Kubernetes clusters.Modern AI apps often follow this pattern: 1. Service receives request 2. Queries database (PostgreSQL/Redis/MongoDB) 3. Sends data to LLM API (OpenAI/Anthropic/Bedrock) 4. Consumes or returns the AI generated responseSecurity teams often don't know: - Which services are making AI calls - What databases they're accessing first - Whether PII is being sent to third-party APIs - What libraries and packages are being used for AIOur eBPF based tool attaches to network and fs syscalls to observe: - Outbound connections to AI API endpoints (pattern matching on domains/IPs) - Database protocol detection (PostgreSQL, MySQL, MongoDB wire protocols) - Service-to-service communication within the cluster - Libraries invoked by processes (PyTorch, HF, OpenCV etc)Architecture: - eBPF with C in kernel space - Go userspace agent processes events - Results sent to in-cluster exporter - Next.js for visualizationGitHub: https://github.com/aurva-io/AIOstack Demo: https://aurva.aiQuestions for you guys: 1. What classifications/buckets would you like to see for apps? 2. Other protocols/services we should detect? 3. Performance overhead-what's acceptable in prod?

HN · launched Jan 14, 2026 · 9 upvotes (top 54%) · 0 views

Niche: ai agent security and monitoring tools · 297 launches, 14 in the last 7 days ▼ -44% · Explore this niche →

Category and tags

  • Horizontal
  • Compliance & governance
  • B2B
  • AI feature
  • Hobby / open-source project

Visit website ↗ Source listing ↗

Could you build this?

No Writing and deploying eBPF programs to safely hook Linux kernel network and socket events inside Kubernetes clusters to inspect TLS/HTTP traffic requires deep kernel systems engineering.

What it would actually take: The stack involves C/Rust (using Aya or libbpf) compiling eBPF bytecode for kernel-space kprobes, uprobes, and tracepoints (specifically hooking SSL/TLS read/write functions and socket operations) paired with a Go/Rust userspace daemon and Kubernetes operator. The hard part is managing verifier constraints across kernel versions, non-invasive TLS plaintext extraction, high-throughput packet processing, and low-overhead metadata tagging, requiring deep Linux kernel and network security expertise.

Discussion

1 comment analyzed.

Competitors

Other products that read as similar to this one : 269 launches clear the similarity bar, closest 8 shown.

Attention rank: #137 of 270 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 76 days after the earliest competitor.

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.