Show HN: Penthera, offline pentest security scanner (open-source, rule-based)
local non-AI security for your app/site! For years I had a long .txt file with hundreds of manual security checks I ran before pushing a (client) app/site to live; I am really a rookie compared to the real cyber experts, but just covering the basics has saved us many times from malicious attacks on our infrastructure. With the sprawl of AI generated vibecoded apps (I love it, i think creating should be accessible, but so should be cyber safety) and AI coding tools, our code goes to LLM providers
阅读原始来源
来源记录
指标快照
points · 1 votes
2026-11-05 16:03:10.385Z
cumulative since publication
研究分析
项目记录
仓库：danoszz/penthera。 来源描述：local non-AI security for your app/site! For years I had a long .txt file with hundreds of manual security checks I ran before pushing a (client) app/site to live; I am really a rookie compared to the real cyber experts, but just covering the basics has saved us many times from malicious attacks on our infrastructure. With the sprawl of AI generated vibecoded apps (I love it, i think creating should be accessible, but so should be cyber safety) and AI coding tools, our code goes to LLM providers
采用记录与比较对象
来源票数: 1 votes (2026年11月5日 UTC; cumulative since publication) 可供比较的近期同类记录：“D4Vinci/Scrapling” (GitHub Trending, 2026年11月5日)；“garrytan/gstack” (GitHub Trending, 2026年11月5日)。主题相近仅用于导航，未核验其是否属于同一需求或独立证据。
采用判断
应与它要替代的工具或人工流程比较。现有记录支持发现项目，尚不能确认可靠性、运行成本优势或商业采用。
尚未核验的门槛
尚未核验：许可证权限、硬件要求、安装步骤、维护状态，以及包含失败样例的代表性任务。
下一步试验
选择一个真实任务和现有替代方案，记录 commit、环境、输入、输出、耗时与失败行为；保留结果后再给出采用建议。