Nicheloom visits: 58,111 all-time · 7,637 in the last 7 days

The opportunity tracker for new startups.

Today: 1,953 launches · Niche of the day: specialized calculation tools · See what launched today →

Tblue

614 passive security scanners for any website, runs locally

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Want to reach these readers? Sponsor an issue.

HN · launched Aug 24, 2026 · 15 upvotes (top 30%) · 0 views

Niche: application and system security scanners · 260 launches, 34 in the last 7 days ▼ -6% · Explore this niche →

Category and tags
  • Security
  • Observability & eval
  • Developer
  • Not AI
  • Hobby / open-source project

Visit website ↗ Source listing ↗

More like this: all 260 launches in application and system security scanners →

Could you build this?

Partial The scanning CLI and network inspection framework are straightforward to vibe-code, but curating and tuning over 600 accurate passive security checks requires deep AppSec domain knowledge.

What it would actually take: The architecture involves a concurrent network crawler written in Go or Python that passively evaluates HTTP headers, SSL/TLS certificates, DNS records, and DOM artifacts. The hard part is authoring and continuously testing 600+ vulnerability and misconfiguration heuristics against real-world assets to minimize false positive rates, requiring extensive specialized application security expertise.

Discussion

4 comments analyzed.

Concerns raised: Passive mode is not actually passive - performs active scanning by default (port scanning, DNS enumeration, CORS fuzzing), Authenticated scans leak credentials to third parties (crt.sh, HackerTarget, AlienVault OTX, NVD, OSV), Sends potentially consequential payloads (XXE, XSS, Redis commands) without adequate safeguards, Automatically sends findings to Anthropic API for AI analysis unless explicitly disabled, Immature project with suspicious provenance - 160 commits in one day, no releases/tags, misleading documentation

Feature requests: GitHub Actions / CI integration to fail PRs on critical header misconfigurations

Competitors

Other products that read as similar to this one : 1185 launches clear the similarity bar, closest 8 shown.

Attention rank: #337 of 1186 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 297 days after the earliest competitor.

  • TriScout · ph · 2026-11-06 · 1 upvotes · similarity 0.58
  • Free Website Security Scanner · ph · 2026-10-10 · 1 upvotes · similarity 0.57
  • Smart Scan · hn · 2025-11-24 · 15 upvotes · similarity 0.56
  • NC Web · hn · 2026-03-18 · 10 upvotes · similarity 0.56
  • securify · github · 2026-10-06 · 22 upvotes · similarity 0.56
  • Ghost-Night · github · 2026-10-24 · 81 upvotes · similarity 0.56
  • OpenHack · hn · 2026-06-04 · 12 upvotes · similarity 0.55
  • KhanyaSec · ph · 2026-09-27 · 2 upvotes · similarity 0.55

Related data

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.