1
I Tried build AI web vulnerable scanner
用AI把XSS检测从“反射”推进到“真实执行”，开源漏洞扫描器让误报无处遁形。
Article URL: https://github.com/tX-c0re/xss-grenade Comments URL: https://news.ycombinator.com/item?id=49386036 Points: 1 # Comments: 1
2
Show HN: Muninn - 8 Security scanners in one GitHub Action
集8大安全扫描器于一身，GitHub Action一键集成，统一输出漏洞报告，开源利器守护CI/CD安全。
Article URL: https://github.com/skaldlab/muninn Comments URL: https://news.ycombinator.com/item?id=48605644 Points: 1 # Comments: 0
3
Show HN: OpenACA – security scanner for AI agent stacks (MCPs,skills,plugins)
开源安全扫描器OpenACA，专为AI代理栈（MCP、技能、插件）设计，助你快速发现组件风险。
Article URL: https://github.com/open-agent-security/openaca Comments URL: https://news.ycombinator.com/item?id=48554832 Points: 1 # Comments: 0
4
Show HN: Built a verifiable, open-source SoC 2 readiness scanner
开源可验证的SOC 2就绪扫描器，5分钟内生成可提交审计的AWS合规报告，每个发现带有SHA-256哈希供审计员独立复验。
After speaking with over 50+ CISOs, DevOps, & pre-series A founders for months, I realized a problem in the GRC industry. SOC 2 automation exists, but…