Show HN: Penthera, offline pentest security scanner (open-source, rule-based)
local non-AI security for your app/site! For years I had a long .txt file with hundreds of manual security checks I ran before pushing a (client) app/site to live; I am really a rookie compared to the real cyber experts, but just covering the basics has saved us many times from malicious attacks on our infrastructure. With the sprawl of AI generated vibecoded apps (I love it, i think creating should be accessible, but so should be cyber safety) and AI coding tools, our code goes to LLM providers
Read original source
Source record
Recorded metrics
points · 1 votes
2026-11-05 16:03:10.385Z
cumulative since publication
Research analysis
Project record
Repository: danoszz/penthera. Source account: local non-AI security for your app/site! For years I had a long .txt file with hundreds of manual security checks I ran before pushing a (client) app/site to live; I am really a rookie compared to the real cyber experts, but just covering the basics has saved us many times from malicious attacks on our infrastructure. With the sprawl of AI generated vibecoded apps (I love it, i think creating should be accessible, but so should be cyber safety) and AI coding tools, our code goes to LLM providers
Observed adoption & comparisons
Source votes: 1 votes (Nov 5, 2026 UTC; cumulative since publication) Recent records to compare: “D4Vinci/Scrapling” (GitHub Trending, Nov 5, 2026); “garrytan/gstack” (GitHub Trending, Nov 5, 2026). Shared themes are navigation hints; they have not been verified as the same need or independent corroboration.
Adoption decision
Evaluate it against the tool or manual workflow it would replace. The stored record supports discovery; it does not yet establish reliability, lower operating cost or commercial adoption.
Unverified requirements
Not verified: license permissions, required hardware, installation steps, maintenance status and a representative task with its failure cases.
Next test
Choose one real task and a current alternative. Record the commit, environment, input, output, elapsed time and failure behavior; retain the result before recommending adoption.