Security

doc.cheap

doc.cheap reads passports, national ID cards and driver's licences from a photo or scan with one HTTP call and returns the printed fields and the machine-readable zone as JSON. It ships an OpenAPI 3.1 description, a public sandbox key and an MCP server, so the same recognition works from code and from MCP clients. It is built for developers of check-in, onboarding and KYC flows. 100 free recognitions every month; a scan with no readable document is not charged.

141 upvotesNov 6, 2026

@fuck.it

Email with attitude.fuck.it is a paid, invite-only email service for people who are done letting big tech read their inbox. You get an address nobody forgets, [email protected], on an independent mailbox that shows no ads, does no tracking and never sells your data.What's inside- Webmail for desktop and mobile, plus IMAP/SMTP for any mail app- Contacts and calendars synced across your devices- Anti-spam, anti-virus and anti-phishing protection- Optional end-to-end encryption- Short, memorable usernames while they lastBuilt on Open-Xchange infrastructure hosted in Germany (ISO 27001, GDPR compliant).Why invite-only?To keep bots and spammers out. Request an invite at fuck.it and you'll get your personal code if you're approved.Plans start at $5.90/month, with 20% off yearly.

241 upvotesOct 19, 2026

SupaCove

SupaCove is a self-hosted PostgreSQL backup tool that exports data via pg_dump, encrypts it with age, and stores it in your own S3-compatible object storage. The entire process is divided into six stages: export, encryption, staging, upload, verification, and notification. Any failure is clearly marked as a failure.Lose the instance, keep the backup.Recovery requires only three things: the ciphertext, an offline-stored age identity file, and the recovery script — with no dependency on the original instance whatsoever. It supports platforms like Supabase, Neon, and Railway, and even the free plan gets automatic backups.

221 upvotesOct 10, 2026

Thomas Borge

AI Sigil is an AI governance platform that maps your AI systems to regulatory obligations, tracks controls, and collects the evidence that proves compliance. Every control quotes the law verbatim, and every piece of evidence sits one click from the regulation that demands it.Know what applies. Prove you comply.Register and classify your AI systems, activate the frameworks that apply, then work through pre-built assessments. The audit trail builds itself as a by-product of the work.FrameworkCoverageEU AI Act113 articles, 62 controlsISO 4200110 clauses + 38 Annex A controlsNIST AI RMF4 functions, coming soon

157 upvotesNov 4, 2026

CodexAccountBridge

CodexAccountBridge (cab) is an open-source Codex account manager for macOS and Linux. It provides a command-line tool and a native SwiftUI app for managing multiple official Codex or ChatGPT logins across local machines, SSH servers, remote projects, and supported proxy services.Each login is stored in its own CODEX_HOME, with authentication and model traffic delegated through the official Codex executable. CAB does not implement OAuth, proxy model requests, inspect token contents, or silently switch accounts after quota limits or errors.Conservative security model: each account logs in independently and never reads or copies auth.json.Key features include: account management, usage limit viewing, macOS notifications, SSH server management, session isolation, and service binding.

112 upvotesOct 23, 2026

Aethra AI

Aethra AI is a pre-seed startup building a runtime defence and governance platform for AI agents. Our core product is an enforcement layer — a Planner / Quarantined Extractor / Executor architecture aligned with dual-LLM security research (CaMeL) — that tracks data provenance and blocks untrusted instructions before they can drive agent actions.Our open-source SDK (Apache 2.0, Python and Node/TS) is available on GitHub, with an optional hosted control plane for approvals, audit evidence, and kill-switch functionality.In benchmark testing on AgentDojo, Aethra blocked 35/35 injection goals with 0 false positives (full LLM-backed evaluation in progress).We're currently raising a €1.0–1.5M pre-seed round.

128 upvotesOct 22, 2026

Traceback

Traceback is a service that reveals the real number behind No Caller ID, unknown, and private calls. It works with every US carrier and delivers the caller's identity in about 1.3 seconds after you decline the call. Key features include one-tap setup, police-ready evidence logs, and privacy-first data handling. The service offers a free 3-day trial and costs less than competitors like TrapCall or TrueCaller Premium."Traceback completely changed how I screen calls. Knowing exactly who's on the other end before I answer has saved me hours every week."With 24/7 human support and a web app, Traceback is designed for individuals facing harassment, spam, or unknown callers.

64 upvotesOct 6, 2026

Decawork

Decawork is how IT teams take employee-built AI agents live and control every one of them from one place. An employee builds an agent on Claude Code, Codex, or any vibecoding tool; we take it in, put it on company accounts, and run it as a company asset. From there, IT team manages the agent like an employee: access, oversight, retirement.

166 upvotesAug 26, 2026

Prized

Prized lets ops, support, and finance teams build and ship secure internal tools with AI. Company data pre-connected and scoped, an audit trail on every access, one-click deploy behind your company sign-in.

192 upvotesAug 22, 2026

TrueTerms

TrueTerms scans the terms and privacy policies you agree to, explains them in plain English, and shows you exactly where to opt out.

165 upvotesOct 20, 2026

QR Scan Online

QR Scan Online is a free, browser-based QR code scanner that prioritizes user safety and privacy. It decodes QR codes from images, screenshots, clipboard, or camera directly on your device, ensuring that no data is uploaded to any server. The tool provides a clear preview of the decoded content—such as URLs, text, Wi-Fi credentials, or contact details—before you decide to open any link.Key features include local decoding, risk indicator checks for shortened URLs, IP addresses, punycode, and unusual protocols, and a user-friendly interface that works across phones, tablets, and computers. The service also offers a paid tier, Scan Pro, for batch scanning and CSV export at $7 per month.Decode first. Decide second.

59 upvotesSep 15, 2026

Patch — Your Security Center

Patch is a security app for Mac and iPhone (in App Store review) designed for people who'd rather not bounce around a dozen scary-looking tools trying to deal with online security. It checks for scams, finds leaked and duplicate passwords, helps freeze your credit and remove you from data broker sites, all in one place, with a security advisor that answers questions and shows you how to fix things. No account needed, and nothing is kept on our servers, so there's nothing to steal.

130 upvotesAug 10, 2026