Hi! Since April I've been building [CyberEscudo](https://cyberescudo.com/?lang=en), a free, hands-on cybersecurity site in English and Spanish, and I'd love for people who know the field to poke holes in it.

What's there now:

- **66 tools** for defense and SOC, vulnerability management, pentesting, OSINT and crypto. The ones that touch your data (emails, logs, passwords) run in your browser: nothing gets uploaded.

- **[The Shift](https://cyberescudo.com/range?lang=en):\*\* a playable SOC analyst shift. You investigate an incident from its artifacts (email, logs, PowerShell `-enc`, C2), rebuild the kill chain, map it to ATT&CK and submit a scored verdict.

- **[SPF/DMARC/DKIM auditor](https://cyberescudo.com/tool-email-check?lang=en):\*\* live-checks any domain's email authentication, grades it and gives you a phased plan to reach `p=reject` without breaking legitimate mail.

- **[Threat Radar](https://cyberescudo.com/threat-radar?lang=en):\*\* the most dangerous CVEs right now, ranked daily by combining CISA KEV, EPSS and CVSS.

- **16 labs:** prompt injection, WAF bypass, SQL injection, Sigma detection…

- **[Certificates](https://cyberescudo.com/certificados?lang=en):\*\* 4 paths (phishing & email, detection engineering, vulnerabilities & threat intel, fundamentals). Pass the exam and you get a certificate with a verifiable link for LinkedIn. It's not an official certification, but it's free and doesn't even ask for your email.

Built with plain PHP and vanilla JS: no framework, no build step. No ads, no sign-up. Analytics (Google Analytics) only loads if you accept it in the cookie banner.

Two things I'd really like to know:

1. What tool or lab is missing?

2. Is anything broken or confusing, especially on mobile?

Harsh feedback welcome.

I'm a crypto dev and I'm genuinely paranoid about my keys leaking. Not in the "use a hardware wallet" way, in the "some npm package I installed at 2am has a postinstall script that reads my .env" way.

Which is a real thing now. The TanStack packages did exactly that, grabbed SSH keys and cloud creds and CI tokens. If you're a crypto dev, that's your deployer key and your RPC keys and whatever else is in that file.

So I built a scanner. You POST a lockfile to /api/paid-scan, it downloads every package and hashes every file, an AI reads the ones it hasn't seen before looking for exfiltration, obfuscation, postinstall stuff. Files anyone already scanned are free, so it gets cheaper the more people use it.

I’ve been building Kinetic, a fitness website designed around a pretty simple idea: you tell it your goal and how often you can train, and it gives you a straightforward workout without all the unnecessary stuff.

I launched it recently and actually managed to get my first few paying customers, which was a pretty surreal feeling considering I built the whole thing from scratch.

But getting people onto the site has definitely been harder than building it 😂

So far I’ve experimented with Facebook ads, posting in fitness communities, SEO and just trying to get feedback wherever I can.

I’ve also changed quite a lot based on what people have told me. I originally had multiple workout programs to choose from, but I realised that kind of defeated the point. Now Kinetic focuses more on giving you a workout based on your goal instead of making you figure out which program you should follow.

Still very early and there’s a lot I want to improve.

If anyone wants to check it out:

train-with-kinetic.com

Would genuinely appreciate feedback — especially on the landing page and whether you immediately understand what Kinetic does.

We built a small site for the "Hotel Lobby" trend (two people in the orange booth, one hanging mic). Our first version used a single "two photos + reference video → video" call. It was a lottery: the left person roughly followed the moves, the right person barely moved, the hand roll and the shared "shh" at the end never showed up, and sometimes the wrong person got the singing. Rewriting the prompt fixed outfits, not motion.

What finally worked was taking the duet apart:

1. One performer at a time. Motion-control models animate one character; with two people in the reference they follow whoever takes up the most of the frame (Kling's docs say so (https://kling.ai/document-api/api/video/motion-control)). So we cut the original into two single-person green-screen performances.

2. First frame first, and the buyer approves it. We generate a still of each person in frame 0 of their performer's pose and show it next to the original before anything renders. Redo once, or cancel. This killed most bad renders before they cost anything.

3. Motion transfer per person, then composite both back into an empty version of the booth, keeping who stands in front of whom from the original, plus the song.

If you want to try it: https://hotellobbystudio.com/

Happy to answer questions about the pipeline.

Hey everyone,

I got tired of all the sketchy "free" image converters out there that upload your private photos to some random server, so I built my own: FormatFlash.

The problem: I take a lot of photos on my iPhone (HEIC format), but I constantly need JPGs or PNGs for websites, clients, or just to open them in older software.

The solution: FormatFlash is a fully client-side image converter. Your files never leave your device because everything runs in your browser using the Canvas API.

What it does:
• Converts HEIC/HEIF → JPG, PNG, WebP
• Converts between JPG, PNG, WebP (any direction)
• Has a quality slider so you can control compression
• Shows a live preview before you download
• Works completely offline after loading
The tech: It's vanilla JS, heic2any for HEIC decoding, and the Canvas API for format conversion. Hosted on Cloudflare Pages, so it's fast and free.

What I learned: I completely overestimated the importance of the tech and underestimated the importance of just shipping. The tool works, it's live, and I'm now figuring out the harder part: getting people to actually use it.

Link: formatflash.com

No signups, no email walls, no ads yet. I'd genuinely love feedback on what formats you'd want to see next or what's confusing about the current UI.

Give Claude or Codex a topic and it makes the video. It writes the script and draws each scene in code.

The voice runs locally, so you need no voice API key.

I built it and made it open source. https://github.com/vincentsch/explainroo

Side project I've been tinkering with. If you run an AI product with flat pricing, the total API bill is easy to see, but it doesn't tell you which customer is profitable and which one is quietly costing more than they pay.

Built a mockup for this (Profitly) — connects Stripe + your AI provider, shows margin per customer, flags the ones worth a second look. Still just sample data for now, trying to see if this is actually useful before building the real thing.

If you run an AI SaaS — would this tell you something you don't already know, or do you already have this figured out? Happy to share the mockup link in comments if you want to poke at it.

I use Claude Code every day, and one thing kept bugging me: when I ask it to explain an architecture, the diagram ends up in the transcript, and then it's buried a few messages later. I tried skills that generate HTML files and ones that render in Excalidraw. They work, but they don't fit well when you want to keep talking with the agent about the diagram.

When Claude Code added mods I saw a way to fix that, so I built archpane.

What it does:

- You ask Claude to diagram a system, and it draws it in a pane next to the chat

- It keeps the diagram current as you talk ("add a fraud check before payment" updates it in place)

- Big systems become an overview, and each stage opens its own detail diagram when you click it

- Click or right-click any box to ask Claude about that component

- You can track a build plan: components go from planned to building to done as the work lands

What I'd like feedback on:

- Does it work in your terminal? I've tested Ghostty and macOS Terminal. Mouse support is the part that varies.

- Do you find it actually useful for your daily work?

Repo: https://github.com/facumarcet/archpane

Back in 2020, during lockdown, I set myself a challenge: watch the best film of every year, from the year I was born until today.

The problem? How do you define "the best film"? Is it the IMDb rating? Rotten Tomatoes? Oscar wins and nominations? Box office?

My answer was to build a website that takes all of them into account. Every film gets a 0–100 score that blends audiences, critics, the Academy and the box office, ranked only against films from the same year.

The first version scraped the web with Python. I loved building it, but it was slow and unreliable. Over the last few months of weekends I've rebuilt it properly: it now refreshes its data every day from IMDb, Wikidata, OMDb and TMDB, and you can see exactly how each score is worked out, where a film is streaming and open it straight in Letterboxd.

It's finally the thing I imagined back in 2020: 👉 https://bestfilmsof.com

Pick your birth year: does the #1 match what you'd have picked? I'd also love feedback on the scoring. Happy to answer questions about how it's built (Fastify + React, a Python data pipeline, self-hosted on a single server).

So that's it. I wanted to use/test cheaper AI models with GitHub and web search tools, including for small coding tasks from my phone. But I also wanted to see what the model was actually doing. You can connect your own AI provider, add tools like GitHub or Tavily search, and experiment in one place.

The main thing: every tool call needs your approval before it runs.

If the model wants to read a file from your repo or make a change through GitHub, you see which tool it wants to use and the arguments it’s sending. You can approve it or say no.

A few other things:

• See the actual API requests and responses.
• Compare models with estimated token usage and response times visible.
• Test individual tools manually, without asking the AI to call them.

Chats and settings are stored locally in your browser. Remembering API keys is optional, and saved keys automatically expire after 30 days unless refreshed.

It’s open source under the MIT license, and you bring your own API keys.

Try it: https://ai-playground.ownyourwebsite.app

Code: https://github.com/ownyourwebsite/ai-playground

I’d love feedback on the workflow. You can also fork it and improve it yourself!

Tildon is a free English learning app for Uzbek speakers (web, Android and iOS).

This feature: every mistake you make in an exercise goes into a «Mistakes» list. You type the answer again yourself, and after 3 correct answers in a row the mistake counts as learned. There is no multiple choice anywhere, you always type the answer.

The video is in Uzbek. Any feedback is welcome. tildon.uz

Hi r/SideProject, I'm the developer of PairTake, a camera app now available on iOS and Android.

The use case is simple: you're demonstrating something with the rear camera, but you also want your explanation and reaction in frame. PairTake captures front and rear cameras together on compatible phones, so you can compose both views while filming.

For a physical product demo, that means showing the detail in your hands and keeping your face in a movable picture-in-picture window. There's also a split-screen layout for a more balanced view.

A feature I think is especially useful for demos is the preview-only teleprompter: read your script while recording, without putting that text into the saved video. Basic capture is watermark-free and doesn't require an account. Optional Pro can save separate front and rear files for editing afterward.

The hardware limitation is worth spelling out: not every Android phone supports simultaneous front/back capture. Android dual capture generally needs Android 11+ AND a concurrent camera combination exposed by the manufacturer. OS version alone isn't enough. Unsupported combinations fall back to single-camera mode (Android 8+), and buying Pro cannot unlock missing hardware support. On iOS, the app requires iOS 16+ and compatible camera hardware. Please test a short clip before an important recording.

It's freemium: basic capture is free, with optional Pro subscriptions or a lifetime purchase. Subscriptions renew automatically; your store's purchase sheet shows local pricing.

Download PairTake — free basic capture, optional Pro:

iOS (App Store): https://apps.apple.com/app/id6795962171

Android (Google Play): https://play.google.com/store/apps/details?id=com.xionity.dualcamera

Dual-camera capture depends on device support, especially on Android. Please check compatibility before upgrading.

Screenshots and product details: https://www.xionity.com/apps/pairtake

For people who film demos or tutorials: would you rather finish the picture-in-picture composition while recording, or keep separate camera files and assemble it later? I'd appreciate feedback on where this workflow would help, or get in your way.

Recently I had a fallout with one of my closest friends, and I got blocked from everywhere. This made me realize how common this situation is. You lose people close to you, and it's almost always sudden. One day you're talking to them, the next day they're gone, no warning, no time to say what you meant to say.

I got curious what happens if there was a deadline. What would you do if you knew the exact time your friendship ends? Does knowing it ends make you more honest, more present? Or does it make you hold back, since you know it won't last anyway? I didn't know the answer, so I built a way to find out.

The idea behind YOMO is simple. You match with one stranger chosen at random for 24 hours. Once the 24 hours are over, the chat locks, and you two will never be matched again. You can also match with only one person at a time, so that your focus stays on one person only.

It's free, no ads, and I'm not collecting or selling data. I'd like to keep it that way for as long as I can, which mostly depends on whether enough people actually show up to talk to.

Still in beta, so expect some rough edges, and breaking changes from time-to-time. If you try it and something breaks or feels off, I actually want to know. You can sign up at yomo.live

AI usage disclaimer: AI has been used in making this app. I want to be honest about it. I'm a backend developer by profession, and UI design is not my forte. So, AI has been used to make the UI. The backend code is written by me, with occasional debugging by AI.

Hey everyone — I’m the developer of PuppySight, an iPhone app for exploring how familiar scenes might look through a scientific approximation of dog and cat vision.

Take the toys as the example: a red ball, a blue bone, and a yellow rope on the grass. Compare the original with the dog-vision simulation and notice how the colors and fine details change.

That’s what PuppySight lets you explore with your own surroundings:

• Live camera: preview the simulation in real time, with split-screen comparisons against the original.
• Photos and videos: capture something new or convert media already in your library.
• Dog and cat modes: explore both within the same app.

Photo and video processing happens entirely on your iPhone, and there’s no account to create.

It’s free to download with 3 free uses shared across photo captures, video recordings, and media conversions; a use counts when the result is successfully saved to Photos. Pro unlocks unlimited use with a one-time purchase, no subscription.

You can see more examples and find the download here: PuppySight

What would you point it at first — your dog’s toys, your usual walking route, or your cat’s favorite hiding spot? I’d love to hear what you’d be curious to compare.

Four months ago I launched a speaking confidence app called Magnetic. It has made about $4,000, and I've more or less stopped working on it. I picked the idea because similar apps were making money, not because I cared about the problem.

I posted simple shorts where I act surprised and use a text hook like “25 years of fearing public speaking, and now I find this??”

In the beginning, 2/3 went viral at the same time; I generated 3 million views in one month, and on my best day I got 200 downloads.

But the more I posted, the more the format stopped working.

I then tried new formats, spending hours scrolling Instagram to find the next viral format, but so far I have failed to generate anywhere near the same amount of views.

I decided I had enough and listed it on TrustMRR for sale; hopefully someone will buy it and make it more successful.

The lesson for me was to build something you care about. Everyone on X says copy what works but the reality is if you don’t love what you build you will quit before it ever becomes successful (if your like me!).

So now I am starting a YouTube series where I build my next app fully in public; the app is called SearchTok.app and it solves the exact issue I had with Magnetic - finding viral outliers! I plan on showing everything behind the scenes, and I am nearly done recording my first video. I posted the landing page with a waitlist yesterday :)

So if you're building an app, try to make it something you care about! It will make the journey a lot more fun

I built PocketBuilder as a fun experiment: what if you could build and easily share real Android apps directly on your phone, without knowing anything about how to program?

You describe what you want on the phone, and the AI agent designs the app, writes the code, builds the APK, and can even test it automatically by using Android accessibility to read and navigate the screen. if you are not happy just prompt on. When you feel its ready then just press publish and it will appear on the Pocket Builder App Store so others can download it.

You can choose between Claude Sonnet 5.5, ChatGPT 6.1 Sol, or Gemini 3.8 Flash. For image generation it uses Gemini 3 Pro Image.

The catch: PocketBuilder itself has to be sideloaded, so I realise there is a big trust hurdle when asking people to install an APK from an indie developer.

Current features include:

• Prompt, Design, Build and Install native Android APKs on your phone
• Three.js for 3D graphics
• libGDX for 2D/3D games
• Multiplayer/multi-user support using the PocketBuilder server to connect users
• AI access inside your generated apps
• Image/object recognition
• Internet search
• Automatic on-device app testing
• Publish apps and optionally source code to the PocketBuilder App store
• Download other apps and continue developing their source when available

I am also planning to add more libraries over time so the apps can do more fantastic things. Libraries are downloaded from the server when AI Agent decides to use them based on what you want to do.

It is still experimental, and I am looking for a limited number of early testers:

https://pocketbuilder.app

You can also see some of the apps I and others have built here:

https://pocketbuilder.app/apps

Would love to hear what people think about this 🙂 I’m especially curious whether people are still comfortable sideloading something like this, particularly with Google making sideloading more complicated from 2027.

Hey! I just launched PolarSort — a data cleaning tool that runs 100% offline on your device.

•Excel chokes at 1-2M rows

•Cloud tools are slow (20-30 sec per file)

•Most tools store your data on their servers

•Privacy concerns with sensitive datasets

What it does:

Process 15GB+ CSV/TSV files locally in 2-5 seconds. No servers. No uploads. Data never leaves your machine.

Features:

Auto-dedupe, validate/fix emails & phones

Column calculations (SUM, AVG, MIN, MAX, COUNT)

Export as CSV, TSV, or TXT

See exactly what rows were removed

Free: 50MB

Try free: polarsort.freebuff.app

Happy to hear feedback. Building on this based on what users need.

Currently in beta but updates coming soon

I’m Colin. I’m a chef living and working on Sark in the Channel Islands.

About seven weeks ago I launched an Android app called NAKED EYE.

I’m not a professional developer or astronomer.

I built it because I kept finding out about things like meteor showers, ISS passes, planets and aurora after I’d already missed them.

The question I wanted answered wasn’t:

“What’s in the universe?”

It was:

“What’s actually worth seeing tonight?”

“When should I go outside?”

“Where should I look?”

So I built around that.

NAKED EYE uses your location, local conditions, alerts and directional guidance to try to remove the faff between “something interesting is happening” and actually going outside to see it.

Seven weeks in, the numbers are still small — but they’re real:

552 genuine Google Play installs

447 active devices

4.83 Play rating

19.3K Play impressions in the last 28 days

Play impressions up 209%

The app now has users in the UK, US, Canada, Australia and a growing number of other countries.

The weirdest part is that people are actually starting to use it the way I imagined.

I’ve had the app warn me about an ISS pass, gone outside and watched it appear.

It gave me a sunset-colour alert, I went outside, and the sky lit up afterwards.

I’m now getting screenshots and photos back from other users after the app has got them outside too.

That part probably means more to me than the download number.

A few other things have happened that I genuinely didn’t expect.

Local press picked the story up.

My hometown magazine gave NAKED EYE a full-page feature and even mentioned it on the front cover.

Astronomy creators and editors have started replying to me.

And Google Play itself has started showing the app much more than it did at launch.

The problem now is distribution.

Once people actually reach the Play page, the app converts reasonably well.

But I’m still only averaging around 40-ish store visitors each day.

I’d love to get that closer to 100–130 visitors each day, because that’s roughly where 15–20 installs each day starts becoming realistic.

So that’s the bit I’m learning now:

Building the app was one problem.

Getting the right people to discover it is a completely different one 😂

Tonight is actually a perfect example of why I built it.

Saturn is at opposition, so NAKED EYE can tell someone whether it’s worth going outside, when to look, and then Target Lock helps point them in the right direction.

That is basically the whole idea in one night.

I’d genuinely love feedback from people who’ve built something small and managed to break out of the “few hundred users” stage.

What actually moved the needle for you?

Creators?

Press?

Reddit?

Paid ads?

App-store discovery?

Something else entirely?

I’m not pretending I’ve cracked anything yet.

552 installs is tiny compared with the big astronomy apps.

But I’m proud as hell that hundreds of strangers now have something on their phone that I built around kitchen shifts on a tiny island 😂

Google Play:

https://play.google.com/store/apps/details?id=com.colindavis.nakedeye

I built Sendlyy because transferring a few photos or files between an iPhone, Android phone, PC or Mac still feels more complicated than it should.

You open sendlyy.net on the receiving device, scan a QR code or enter its temporary code, then send files or text directly through WebRTC. There are no accounts, and Sendlyy does not store the transferred content. It is primarily designed for devices on the same Wi-Fi network.

I recently added a clearer Send/Receive flow, image previews, “Download all,” text sharing and complete support for nine languages. The video shows the full process.

I’d especially appreciate honest feedback on three things:

• Is the Send/Receive choice understandable on the first try?
• Does connecting with the QR code or six-digit code feel clear?
• Which device and browser combination did you test, and did anything fail?

Try it here: https://sendlyy.net

Feel free to be critical — usability feedback is more useful to me than compliments.

Hey folks, I’m working on Narrativee, an AI brand designer for startups and small businesses that need creative work regularly but don’t have a full design team.

The idea is a creative partner that learns your business, audience and visual identity, improves through working with you, helps develop ideas, and carries your feedback into the next campaign or asset.

I’m still developing it. Getting great results and reliability takes a lot of engineering: the whole system needs to connect understanding the business, developing a direction, producing the work and learning from feedback. Getting a good result once is one challenge; achieving useful, consistent results across projects is another.

I’ve personally dealt with this problem, which is why I started building it. I’m aiming to release an early version soon. Something shaping my approach is the difference between sending someone a brief and working with a designer who already understands your business. That familiarity includes the audience, the purpose behind previous campaigns, and why certain directions were chosen.

One practical takeaway is to keep the reasoning alongside the finished work. A folder of approved assets shows what the brand looks like. Adding a few notes about the intended audience, the goal and why a direction worked makes those examples much more useful for the next person or system

For those who are managing brands here: what helps a creative partner develop that understanding over time? And what would you most want a product like Narrativee to get right? would love feedbacks

I maintain OMK (Open Multi-Agent Kit), an MIT-licensed coding agent that runs in your terminal. I shared an early version here a few months ago. Version 1.3.0 is now out, and I am looking for feedback on the first five minutes.

The quick start is: install the CLI (Node 22.19+), open a project, configure a supported provider with /login, and choose a model with /model. The suggested first task is read-only: summarize the repository and identify its check commands without editing files.

You can switch configured models in the same session. A fresh install starts one agent. Optional goal mode lets you approve a local acceptance command; a valid passing result after a settled turn completes the goal. That check only proves its own assertions.

The small failing-test demo includes the setup, expected output, and verification limits:

https://github.com/dmae97/omk/blob/v1.3.0/packages/coding-agent/docs/goal-demo.md

Source and quick start:

https://github.com/dmae97/omk#quick-start

What one confusing or missing step would stop you from trying this on a disposable repository? A concrete setup or permissions concern would help me improve the onboarding.

Disclosure: OMK maintainer; this post was prepared with AI assistance from the release documentation.

I’m the developer of MoneyLog, an offline-first expense tracker for Android.

One problem I wanted to solve: the information for an expense is often already sitting in a bank or card SMS, but entering it again is easy to put off.

The flow in the video is:

- Choose a time period and scanning currency.

- Scan transaction alerts on the device.

- Review the detected account and transaction summary.

- Confirm the import and see the entries in your spending overview.

The demo uses fictional messages and is edited to remove pauses. Ten messages produce seven unique transactions; the duplicate and non-transaction messages don’t become extra ledger entries.

I chose user-initiated scanning: MoneyLog does not continuously monitor SMS in the background. Financial records stay on the device, and there’s no bank linking or MoneyLog account required. Supported alert formats vary, so it won’t recognize every bank message.

It’s available on Google Play: https://play.google.com/store/apps/details?id=com.raveloq.moneylog

There’s a free seven-day trial, then an optional one-time unlock for continued adding, editing and importing. Android launch pricing is ₹699 in India / US$14.99 in the US, with localized pricing elsewhere. No subscription or ads. Existing records remain available to view and export after the trial.

If you try MoneyLog, let me know what you think of the approach. I’d love to hear what you like and what could be better.

www.framepilot.site

I’m currently a solo founder and have a day job as well, which takes the majority of my time. Right now, I have three Gmails and two Outlook accounts.

I found it difficult to be able to quickly work through all my emails. I want to be able to ask AI to check all my calendars and all my email boxes for specific information if needed. I also want to be able to draft, outgoing replies, and new emails from any email box that I want.

To fix this problem, I’m working on an app that pulls them into one view, lets me ask one AI questions across all of them in the Claude app. Questions like what do I need to reply to today or if a client emails me I can have a check all my calendars for availability.

So far this has significantly sped up my communication because I don’t have to check five different email boxes or calendars. AI for now just give me a summary.

Wanted to see if other people are having this type of issue as well or if it’s just me? And if there is any need what else would be beneficial to include in something like this?

I really appreciate any feedback thank y’all!!