🛠️ All DevTools

A tiny cell that broke a big rule of biology

AI content is everywhere on social media, especially LinkedIn

Show HN: Papercrane-CLI – a BI tool built for Claude Code

Show HN: Sighthound - open-source vulnerability scanner for source code We&#x27;re open-sourcing Sighthound today, our rules-based static security scanner. What makes it special is that it&#x27;s coded in rust and uses tree-sitter as it&#x27;s AST making it very fast and easily extensible.<p>Why build another scanner in 2026? We wanted to improve some of our detection outcomes but noticed the current open source scanners like Semgrep&#x2F;Opengrep we&#x27;re capped by a bunch of adoption limitations such as being written in OCaml, requiring a lot of work to add a language parser, and the rulesets were licensed differently and required paid offerings. It also felt that licensing was moving backwards rather than forward.<p>We wanted something that was very fast, was easily extensible and had a great set of rules that we could use. This led us to using Rust and Tree-sitter since they are both fast and have great community adoption making extending Sighthound natural.<p>We wanted it to focus on source-code vulnerability classes like Sql Injection, and Xss. We haven&#x27;t yet done any secrets scanning as there are a lot of great options in the market at the moment. Right now, Sighthound supports Python, JS&#x2F;TS, Java, Go, C#, HTML, PHP and Ruby.<p>We still have a lot of work to do so, we&#x27;d love for your feedback, and contributions in however they come from adding new languages, new rules or bug fixes.

Launch HN: Context.dev (YC S26) – API to get structured data from any website Hi Hacker News, I’m Yahia.<p>I built Context.dev (<a href="https:&#x2F;&#x2F;www.context.dev&#x2F;">https:&#x2F;&#x2F;www.context.dev&#x2F;</a>) to make it really easy to integrate web data into your products and agents.<p>Here’s a demo video: <a href="https:&#x2F;&#x2F;www.tella.tv&#x2F;video&#x2F;build-faster-with-context-dev-apis-2cgl" rel="nofollow">https:&#x2F;&#x2F;www.tella.tv&#x2F;video&#x2F;build-faster-with-context-dev-api...</a><p>Since it’s an API, here are the docs: <a href="https:&#x2F;&#x2F;docs.context.dev&#x2F;quickstart">https:&#x2F;&#x2F;docs.context.dev&#x2F;quickstart</a>.<p>You can send us a URL and get back clean Markdown, rendered HTML, screenshots, extracted images, etc.. You can also send us a domain and get company or brand context: name, description, logos, colors, fonts, social links, screenshots, style information, and related metadata. For more custom use cases, you can send a URL plus a JSON Schema and ask us to extract structured data from the site into that shape. For example, you might ask for pricing plans, product categories, office locations, support links, integration partners, or anything else that is visible on the public site.<p>The goal is to give developers the output they actually want. Raw HTML is rarely the useful thing; the useful thing is usually Markdown for a model, JSON for an application, a logo for a UI, or a structured company profile for an agent.<p>Before, I worked at Amazon and Sunrun, and co-founded StockAlarm.io &amp; essense.io, both of which were acquired. Also, I built knifegeek.io, which scraped pocket knives from across the internet and listed them easily. The project is outdated now (coming back soon) but back then it hit the frontpage of hacker news and people seemed to like it: <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=34604281">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=34604281</a>.<p>Just before Context.dev, I built Brand.dev. The idea was that your software product should automatically know about your customer if they sign up with a corporate email. The API pulled brand data such as logos, backdrops, name, description, industry, and more from the public web and surfaced it to your product to integrate as part of their onboarding experience. That’s worth doing because conversion rates on onboarding improve dramatically when you go from “enter all this info” to “confirm all this info” (and there was never any privacy concern all the information is public).<p>That was a nifty niche, but the more customers used it, it became obvious that “brand data” was only one slice of a larger need. People started asking for things like screenshots, structured extraction, and LLM ready data. So I expanded to Context.dev, and applied to YC (got rejected after an interview), then kept going and re-applied at which point I got in as a solo founder.<p>People use Context.dev in more ways than I can list, but here are some: keeping context up to date on customer websites for chatbots - building beautiful brand assets&#x2F;ads for customers - enrichment flows using agent harnesses like eve.dev - crawling customer websites into chatbot knowledge bases - turning GitHub repos into branded docs sites - academic journal and PDF crawling. There are a ton more examples at <a href="https:&#x2F;&#x2F;www.context.dev&#x2F;customers">https:&#x2F;&#x2F;www.context.dev&#x2F;customers</a>.<p>We know that many crawlers are not behaving like good citizens on the web, and the entire space has a bad reputation as a result. At the same time, customers are not usually trying to buy “scraping”. They are trying to make a support bot work, personalize onboarding, enrich CRM records, generate docs, monitor leads, or let an agent research a company. There are lots of legit use cases. We want to satisfy those while being respectful of everyone involved.<p>We maintain a caching layer and avoid hammering websites. Customers can configure the cache, but if we find we’re sending too many requests to a url in a certain amount of time, we step in and tone it down. Websites can opt out of our service, and we respect these requests and add them to our block list.<p>We focus on customers who want to build cool things for their users. Enriching onboarding is a popular use case. So is integrating context about their own websites (things like support bots), and building agents that can automatically reason about complex tasks involving the internet.<p>We only allow customers to use brand data to identify a specific customer on their software, you cannot use it in your own materials or to imply endorsement.<p>I&#x27;d love to hear your feedback about the product in the comments, thanks!

Show HN: Strata – guess the city from its real 3D terrain and bathymetry

Show HN: Policy enforcement for Claude Code, Cursor, and Codex Show HN: Runtime authorization for Claude Code, Cursor, and Codex<p>Hi HN, Fernando and I built Kastra. Kastra intercepts AI agent tool calls and evaluates them against deterministic policies before they execute. This is aimed at developers using coding agents like Claude Code, Codex, Cursor, and OpenClaw.<p>We built Kastra after one of our Cursor agents almost executed DELETE FROM customers WHERE status=&#x27;test&#x27; against a production database. We caught it before it ran, but it made us realize that nothing in our stack actually decided what the agent was allowed to do. What mattered for us wasn&#x27;t the mistake; it was realizing nothing in our setup would have stopped it if we weren&#x27;t actively on top of it. LLMs are probabilistic, and prompts influence behavior, but they don&#x27;t deterministically decide what an agent is allowed to do. Without a deterministic policy system, nothing could have decided what it was allowed to do.<p>Kastra pushes an allow, hold, and deny decision before the action runs. You can build these policies in plain English from the web app. The interception engine evaluates the tools, targets, and parameters of every action. We also shipped many policy packs covering common high-risk scenarios, and every decision is recorded in an immutable audit trail. The desktop app, CLI, dashboard, and Recon scan are free to use for developers.<p>If you often use Claude, Codex, Openclaw, and Cursor, Kastra can run a scan command on which risky actions your agents have already taken and automatically build rules to avoid them from happening again. Recon is a feature of Kastra that scans your local agent history. In order to run this scan, execute the commands below in your coding agent.<p>brew install kastra-labs&#x2F;tap&#x2F;kastra-edge<p>kastra-edge scan<p>The scan reads your local agent session history, and it shows all the risky actions your agent has already taken before, the secrets written to tracked files, production databases touched, force pushes, curl-to-shell, and more. This runs on your machine, and secrets never leave. In our own use cases, we kept finding things we&#x27;d forgotten or didnt know agents had done.<p>Each finding can be converted into a runtime policy, letting you delegate more work to AI without trusting the model itself. Kastra intercepts all workloads at runtime and makes sure these policy evaluations typically complete in under a millisecond. Instead of trusting the model, you trust the deterministic rules that govern its actions.<p>One problem we are still working on to improve the stack is how to manage teams of agents with conflicting policies. We would love feedback from anyone building multi-agent systems. Fernando and I will be reviewing the comments. We are super curious what your first scan finds. Please post results below so we can see what the most common patterns are and adjust policy packs for our users based on your feedback.<p>Documentation: <a href="https:&#x2F;&#x2F;kastra.ai&#x2F;docs" rel="nofollow">https:&#x2F;&#x2F;kastra.ai&#x2F;docs</a><p>Download for MacOS Kastra Edge: <a href="https:&#x2F;&#x2F;kastra.ai&#x2F;edge&#x2F;download.html" rel="nofollow">https:&#x2F;&#x2F;kastra.ai&#x2F;edge&#x2F;download.html</a><p>Check Kastra in action today: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=6TUETu5lb3Q&amp;feature=youtu.be" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=6TUETu5lb3Q&amp;feature=youtu.be</a>

Show HN: LastShelf – an emergency map of your family's documents bills& contacts After my father was diagnosed with Stage 3 kidney cancer, my family was thrown into a tailspin. Getting second opinions, planning surgery, ensuring insurance coverage, coping with the fear. It was a lot to process.<p>In the middle of dealing with all the medical logistics, I realized none of our family could answer if he: - Had a medical directive? - How to trigger his life insurance policy? - Where is his will and who is the executor? - What bank accounts and credit cards existed? - What bills are not on auto-pay? - When these bills due and how are they paid?<p>That wasn’t solved by password managers or budgeting apps. So I built it.<p>LastShelf: automatically discovers, documents and distributes a map of critical life documents, expenses &amp; contacts in the event of an emergency. Register here: <a href="https:&#x2F;&#x2F;www.lastshelf.ai&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.lastshelf.ai&#x2F;</a><p>If you’ve lived through a similar crisis, I really want to hear what would have made the process easier.<p>Anyone who shares their feedback with me will get the first year free. Send a note to support [at] lastshelf.ai

Ways to think about token pricing

Show HN: FormGrid – Forms that can look like CLIs, pixel art, GeoCities and more Hey HN, Björn here from FormGrid. I feel like the web got very sanitized and template-y lately, so I made a tool that lets you create forms and microsites with a bit more personality.<p>The result can look like pretty much anything, for example:<p>- CLI: <a href="https:&#x2F;&#x2F;share.formgrid.com&#x2F;templates&#x2F;sgNeeDu1AUYn2S5d" rel="nofollow">https:&#x2F;&#x2F;share.formgrid.com&#x2F;templates&#x2F;sgNeeDu1AUYn2S5d</a><p>- Pixel art: <a href="https:&#x2F;&#x2F;share.formgrid.com&#x2F;templates&#x2F;TVsBQkwkg4fx3OW0" rel="nofollow">https:&#x2F;&#x2F;share.formgrid.com&#x2F;templates&#x2F;TVsBQkwkg4fx3OW0</a><p>- GeoCities: <a href="https:&#x2F;&#x2F;share.formgrid.com&#x2F;templates&#x2F;TZzJNLkfJqR72N95" rel="nofollow">https:&#x2F;&#x2F;share.formgrid.com&#x2F;templates&#x2F;TZzJNLkfJqR72N95</a><p>- HN: <a href="https:&#x2F;&#x2F;share.formgrid.com&#x2F;templates&#x2F;QxO3deyBTnDBI8MW" rel="nofollow">https:&#x2F;&#x2F;share.formgrid.com&#x2F;templates&#x2F;QxO3deyBTnDBI8MW</a><p>I created these examples myself, but it can also generate a completely custom form (content + theme + logic) based on a prompt.<p>The editor works like writing a document, with markdown and slash commands. The layout is block-based and flexible. Logic blocks are also added inline.<p>I use React for rendering, Vite as the build tool (builds a SPA), ProseMirror for the form editor, and MobX for state management.<p>It&#x27;s free, no account&#x2F;signup required. Questions, feedback - all welcome!

Why the Next Era of AI Is About Infrastructure, Not Just Models

Show HN: Analog Watch

Maxwell's Equations Were Discovered [video]

Introducing Muse Spark 1.1

Muse Spark 1.1 <a href="https:&#x2F;&#x2F;ai.meta.com&#x2F;static-resource&#x2F;muse-spark-1-1-evaluation-report" rel="nofollow">https:&#x2F;&#x2F;ai.meta.com&#x2F;static-resource&#x2F;muse-spark-1-1-evaluatio...</a> [pdf]<p><a href="https:&#x2F;&#x2F;developer.meta.com&#x2F;ai&#x2F;resources&#x2F;blog&#x2F;build-with-muse-spark&#x2F;" rel="nofollow">https:&#x2F;&#x2F;developer.meta.com&#x2F;ai&#x2F;resources&#x2F;blog&#x2F;build-with-muse...</a><p><a href="https:&#x2F;&#x2F;www.bloomberg.com&#x2F;news&#x2F;articles&#x2F;2026-07-09&#x2F;meta-starts-charging-for-ai-with-muse-spark-1-1-agentic-model?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc4MzYxMzQ0OCwiZXhwIjoxNzg0MjE4MjQ4LCJhcnRpY2xlSWQiOiJUSFZDVENSS1YyVTYwMCIsImJjb25uZWN0SWQiOiIwRDE5ODY5MzQ1M0Y0NUMzQkQyMjQzMUQ4NjAzMDU1QSJ9.O5sxV2QajBiyISnu5AVyVUdWWGQtozl0yeCNAbc5JJQ&amp;leadSource=uverify%20wall" rel="nofollow">https:&#x2F;&#x2F;www.bloomberg.com&#x2F;news&#x2F;articles&#x2F;2026-07-09&#x2F;meta-star...</a>, <a href="https:&#x2F;&#x2F;archive.is&#x2F;3ccKa" rel="nofollow">https:&#x2F;&#x2F;archive.is&#x2F;3ccKa</a>

Show HN: EvenKeel – a free financial planning chatbot EvenKeel is an LLM-powered chatbot that helps with budgeting, financial planning, retirement savings, tax optimization, etc.<p>It is a harness around Gemini 3 Flash Preview that provides a library of skills for things like: evaluating a house purchase, insurance planning, portfolio asset allocation, etc. as well as tools for doing financial math and Monte-Carlo simulations.<p>You can upload files as well as chat, and as you go, it updates a &quot;Financial Picture&quot; with relevant facts about your situation, so you can see what data has been collected, track goals, etc. this picture along with recent chat interactions is fed into the model each turn so the most important details are always in context.<p>Your data can be exported or account deleted from the Settings page at any time, or you can interact anonymously until LLM spending gets too hot.<p>Hope you find it helpful!

Show HN: A zero-dependency auditor for decision records in AI-touched systems

The glass backbone: Why the Army's logistics will break in the next war

Show HN: FableCut – A browser video editor AI agents can drive (zero deps)

A collection of notebooks/recipes showcasing some fun and effective ways of using Claude.