ZenStack
access control at the ORM layer, built for coding agents
Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.
Want to reach these readers? Sponsor an issue.
Hi HN, I'm Jiasheng, co-creator of ZenStack.Access control usually ends up scattered across app code instead of living with the data model — and that's riskier when the code is written by an agent, since it's easy to ship a query with a missing or incomplete authorization check. ZenStack enforces policy (RBAC/ABAC/relation-based) directly at the ORM layer, on top of Kysely, so every query gets checked the same way regardless of who wrote it and who is calling it.Postgres RLS is an option too, but it's hard to maintain and scale, and it's Postgres-only — ZenStack's approach is database-agnostic.One of our users, MermaidChart, put it well after launching their team feature on ZenStack: "much cleaner and easier to maintain than writing RLS policies or application-level checks that will surely leak after some time."Happy to answer anything.
HN · launched Jul 14, 2026 · 8 upvotes (top 54%) · 0 views
Niche: ai agent security and monitoring tools · 297 launches, 14 in the last 7 days ▼ -44% · Explore this niche →
Category and tags
- Horizontal
- Dev tools
- Developer
- AI feature
- Commercial product
Visit website ↗ Source listing ↗
More like this: all 297 launches in ai agent security and monitoring tools →
Could you build this?
No ZenStack is a domain-specific modeling language compiler and runtime plugin engine that injects fine-grained access control directly into ORMs like Prisma.
What it would actually take: Built using TypeScript, custom DSL parser/generators (like Langium or Chevrotain), and deep AST manipulation to generate Prisma extensions and client-side access control proxies. The core difficulty is building an AST compiler that guarantees provably sound security filters, generates performant SQL subqueries without leaks, and maintains sync with evolving upstream ORM schemas.
Discussion
No comments on this launch.
Competitors
Other products that read as similar to this one : 88 launches clear the similarity bar, closest 8 shown.
Attention rank: #51 of 89 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).
Launched 257 days after the earliest competitor.
- Client SQL · ph · 2026-09-21 · 4 upvotes · similarity 0.50
- rmBug · hn · 2026-04-01 · 14 upvotes · similarity 0.42
- CipherStash Stack · hn · 2026-05-21 · 17 upvotes · similarity 0.40
- RDST · hn · 2026-10-15 · 6 upvotes · similarity 0.40
- Control Claude permissions using a cloud-based decision table UI · hn · 2026-01-15 · 14 upvotes · similarity 0.39
- Upsolve Row-Level Security · ph · 2026-10-13 · 87 upvotes · similarity 0.39
- AI-first PostgreSQL client for Mac · hn · 2026-04-02 · 7 upvotes · similarity 0.38
- APC · ph · 2026-10-19 · 1 upvotes · similarity 0.38
The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.