Aartool
Linux hardening ranked by which attack paths each fix breaks, then verified
Emerged finds new products worth a look, daily — what’s new today
PatchAndShip Check
A free key-leak scan for the app you shipped without reading the headers
It reads only your homepage, up to ten JavaScript files and your response headers, so it costs nothing, needs no account, and cannot reach your database to break anything.
Check looks at a live site from outside and reports secrets exposed in front-end bundles plus missing security headers. It queries no database, logs into nothing and changes nothing, and says plainly that you get a summary, not an audit. No signup; you tick a box confirming you own the app. It fronts a paid ladder: $49 for a read-only review of RLS, policies, grants and storage buckets, $149 to fix them, $249 to fix and deploy, with the $49 credited within 14 days. PatchAndShip is in California, reachable at patchandship@gmail.com.
More like this
Lathe
Your app, Postgres and sign-in on one dedicated machine for a flat price
Weir
Plant fake API keys, then find out where your agent sent them
TokenEconomizer
Cuts what Claude Code and Codex spend in a repo you work in daily
anti-mage
Spot spoofed browsers by their internal contradictions
ContextVeil
Lets coding agents read files with secrets while redacting values from the LLM