Shield KYA
A local ledger of every tool call your coding agents make
Emerged finds new products worth a look, daily — what’s new today
Aartool
Linux hardening ranked by which attack paths each fix breaks, then verified
Instead of a flat list of CIS failures, a small ops team gets an ordered plan of what to fix first and evidence that the hardening changed only what it meant to.
Aartool audits a Linux host against 109 CIS checks, links the findings into end-to-end attack paths, and hands back an ordered remediation plan with the cost of each fix. It can then apply hardening through 52 Ansible roles and verify afterwards that nothing else changed. The audit runs with no dependencies, even air-gapped; packages exist for Debian and RHEL families, output includes SARIF and Prometheus metrics, and it is GPL-3.0.
More like this
PatchAndShip Check
A free key-leak scan for the app you shipped without reading the headers
CTRLRun
An open-source safety layer that checks every AI agent action before it runs
Stroq
A local firewall that stops AI agents acting on hostile content they just read
DashClaw
Approval gates and an audit ledger for coding agents left running unattended
NOIR
See which Android apps can phone home, and where, from your computer