CipherStash Stack
Data Level Access Control in TS/JS
Details
- External ID
- 48216786
- Source
- HN
- Company
- —
- Product
- CipherStash Stack
- Website domain
- cipherstash.com
- Launched
- May 21, 2026
- Cohort
- —
- Upvotes
- 17
- Upvotes percentile
- 0.7140549273021002
- Tags
- —
- Fetched at
- Sept. 7, 2026, 9:26 p.m.
- Updated at
- Sept. 7, 2026, 9:26 p.m.
Description
Hi HN, I'm Dan Draper, founder of CipherStash.We've spent 5 years building per-value searchable encryption tech. We realized that encryption like this is incredibly powerful but the engineering required is generally not worth the effort. So we built a platform and opensource SDK to take the cry out of cryptography :)CipherStash Stack is: * A searchable encryption SDK for TS and Postgres * Fast, key management with Zerokms (backed by HSM) * A transparent SQL proxy * Auth library and OIDC federation service * Skills for data securityIntegrations include Prisma Next, Drizzle, Auth0, Clerk and Supabase.Install and setup is done via a single npx stash init command. And can handoff implementation to your agent.You can start by encrypting just a single field and we've got the whole process down to around 15 minutes.Oh and its fast: most queries run in a few ms with many faster than that.We published our full benchmarks here: https://github.com/cipherstash/benches#headline-numbersI'd love to know what you think!
Enrichment
- Theme
- self-hosted infrastructure and security tools
- Vertical
- Security
- Function
- Dev tools
- Audience
- Developer
- AI stance
- Not AI
- Project type
- Commercial product
- Normalized one-liner
- data level access control for typescript and javascript
- Manually corrected
- False
Could you build this?
No Implementing secure, searchable encryption at the field level with Postgres query compatibility and identity-bound access control requires specialized applied cryptography and database internals expertise.
What it would actually take: Building CipherStash Stack requires cryptographic implementations such as Order-Preserving Encryption (OPE), structured encryption schemes (SSE), or custom cryptographic primitives that permit SQL filtering and sorting over ciphertext. The stack involves a transparent SQL proxy parsing ASTs, an enterprise Key Management Service (KMS), and SDK integrations in TypeScript. It requires PhD-level or senior cryptographers and database systems engineers to ensure zero plaintext leaks under IND-CPA/IND-CCA models.
Discussion
No comments on this launch.
Competitors
Other products that read as similar to this one — 119 launches clear the similarity bar, closest 8 shown.
Attention rank: #45 of 120 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 203 days after the earliest competitor.
- A password system with no database, no sync, and nothing to breach · hn · 2026-02-06 · 14 upvotes · similarity 0.45
- Anonymous age verification with passkey-powered encryption · hn · 2026-08-19 · 45 upvotes · similarity 0.44
- Open Passkey · hn · 2026-04-19 · 10 upvotes · similarity 0.43
- Pg-typesafe · hn · 2026-02-17 · 69 upvotes · similarity 0.42
- Hacker News Search · ph · 2026-09-22 · 3 upvotes · similarity 0.41
- Tlx · hn · 2026-09-25 · 5 upvotes · similarity 0.41
- DevOmniTools · ph · 2026-09-30 · 1 upvotes · similarity 0.41
- A dynamic key-value IP allowlist for Nginx · hn · 2025-12-30 · 5 upvotes · similarity 0.40
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a dev tools tool for Sales yet.