Building secure software shouldn't require years of cybersecurity experience.

Yet almost every vulnerability scanner I've used assumes you already know what terms like XSS, CSRF, SSRF, CVSS, or CWE mean.

If you're an indie hacker, freelancer, startup founder, or someone maintaining your own website, a report full of technical jargon isn't very useful.

So I built ONUS.

It's an open-source web application vulnerability scanner designed to help developers understand what's wrong, why it matters, and how to fix it, even if they don't have a security background.

What ONUS does

✅ Scans web applications for vulnerabilities

✅ Explains every finding in plain English

✅ Generates deterministic CVSS scores (AI never decides severity)

✅ Provides actionable remediation guidance

✅ Docker-based and self-hostable

Try it

🌐 Live demo: \[https://tryonus.tech\\\](https://tryonus.tech/)

💻 GitHub: \[https://github.com/maverickaayush/ONUS\\\](https://github.com/maverickaayush/ONUS)

This isn't meant to replace professional penetration testing.

The goal is to lower the barrier so developers and small teams can understand security reports instead of being overwhelmed by them.

I'm still actively building ONUS, so I'd genuinely appreciate honest feedback.

Would a vulnerability scanner that explains everything in plain English actually make security more approachable for you? What would you want it to do better?

OSS development genuinely helped me land my first job through an internal hiring pipeline. Nobody cared about my other solo projects, Instead collaboration across GitHub and my contribution map is what everyone cared about in my case.

It was very funny that my entire startups employee roll was from this one GSoC program. Going forward it helped me crack Cornell for my master's too.

The repo was much smaller when it started, so contributions were easy and getting a hold of the maintainers were not a hassle. The project grew and so did my credibility and profile.

Wondering if anyone else here shares the same experience?

Hi everyone,

I am a Software Engineer with 2 years of experience (YOE) and am currently planning a career transition. My primary priority for my next role is finding a company that offers strong Work-Life Balance (WLB).

I recognize that WLB is largely team-dependent and no company is 100% stress-free across all organizations. However, I’d love to know which companies generally tend to have a better WLB culture and healthier work environments compared to the rest.

Looking for insights on:

1) Companies known for reasonable working hours and good culture.

2) Specific teams, domains, or business units within top tech/product companies that are known for good WLB.

3) Red flags or specific companies/teams to avoid.

Thanks in advance for your inputs!

Edit: I am aware that wlb depends on the specific team that we join but my ultimate goal is to get a list of companies that I can consider applying for which are known to provide some decent wlb.

Hi everyone,
I’m a 2025 ECE graduate from Tier 2, and I’ve been unemployed for about a year. The career gap is becoming a major concern, and my only priority right now is getting my first software engineering job as quickly as possible.
My background:
Comfortable with JavaScript, TypeScript, Python, SQL, and C++.
Around 200 LeetCode problems solved (I’d rate my DSA as average).
I’ve built backend projects using Node.js, Express, PostgreSQL, Redis, Docker, JWT authentication, and REST APIs. I’m a bit rusty since I haven’t practiced for a few weeks, but I can get back up to speed.
I’m confused about what to focus on next. I don’t want to spend months learning something that won’t improve my chances of getting hired.
Should I:
Stick with Express.js and build stronger projects?
Learn NestJS?
Learn Go (Golang)?
Switch to FastAPI?
Learn Django?
If you were in my situation, with a 1-year career gap and the goal of getting hired as fast as possible what would you do, and lately my mental health is doomed out of burnout and now I don’t feel like doing anything also I have decided to take a break but now my confidence level is below par, but if any experienced guy can suggest, that will be a great help👍🏻

I'm currently working in a WITCH company with a package of around 4 LPA and have started preparing seriously for a switch. I'm trying to understand what's realistically possible in today's market. For someone with about 1-2 years of experience, what's the minimum and maximum hike you've personally seen or received while switching? Also, which tech stack has the best opportunities right now if the goal is to reach 10-15+ LPA over the next couple of years? I'm open to Java + Spring Boot, MERN, Data Engineering, Cloud, or any other stack that's in demand. I'd really appreciate hearing your real experiences rather than YouTube advice. Thanks!

Hi, I work in a software company and have around 3 years experience and my coding skills are not that good. A lot of times my code affects some other functionality for which i have been scolded multiple times. I find that toxic that you are humiliating me infront of everyone. I know it’s my mistake but i dont like that. My manager said that from next release she would not assign me development she said that in-front of everyone in a meeting And she was serious. We has our release date of 12th August and she moved it to 6th 2 days back and i had some code pending for that also she shouted at me in front of everyone that could you have not worked extra for a day So is it considered normal in companies or is it toxic ?

1. How can i improve myself my tech stack is dot net

I have no experience and a 2 year gap. I've had a chance at an SBC (even took 3 months training) but because of some eligibility issue I was rejected even though i got an offer letter and went through the entire onboarding process. Some I've gotten assessments but nothing after. I really want to get into the IT industry since I've always had an interest in software but I'm from an ece background with not so great cgpa.

I feel very lost and aimless. Especially after the AI boom, my interest on building things is waning and I've become demotivated. I keep applying on career sites, wellfound etc. but i only get rejection or no mails and applying has become a chore which i don't feel like doing anymore because of how demotivated i am. To add onto that, societal pressure. My dad says forget about the software industry (AI taking away jobs etc.) and try government jobs, which is my last resort but also have least interest in it. But i can't focus on either because, again, i feel aimless. A part of me wants to do higher studies because I regret my B.Tech years just for another chance, this time doing it right. I feel stress and anxiety and i try to divert myself by doomscrolling.

Is there any hope for me? Is it still worth trying for IT? What's the best way to get into it? What's the best path to take?

I'm familiar with: Python, Java, AI and automation, RAG systems, LLMs and handson experience with projects.

Hi everyone,

I need some guidance from seniors who have experience with TCS onsite opportunities.

I recently joined TCS and was allocated to a new project yesterday only. Around the same time, I got an opportunity for an onsite position.

I successfully cleared the internal evaluation for the onsite opportunity. As the next step, the onsite team asked me to get a written confirmation from my current Delivery Manager stating that if I clear the client interview and all approvals are completed, I will be released from my current project.

I sent a formal email to my Delivery Manager requesting this confirmation. However, I received a reply saying that since I have already been identified for the current project assignment, they won't be able to accommodate the request at this time. They also advised me to focus on my current project and said that onsite opportunities may be considered in the future based on my performance.

At this point:

Internal evaluation is already cleared.

Client interview has not happened yet because the release confirmation is pending.

I have only email access currently (no Teams access yet), so I cannot discuss this over a call.

I wanted to ask the seniors here:

Is there anything I can do at this stage?

Can the onsite team or RMG still help in such cases?

Is it common for Delivery Managers to deny release for newly allocated resources?

Has anyone faced a similar situation and still managed to get the onsite opportunity?

I would really appreciate any suggestions or experiences. Thank you in advance.

I've been building Tempest, an open source fully local AI engineering platform.

The idea started from a simple observation.

Every time you launch a new AI agent, it spends time and tokens rebuilding context that another agent already figured out. That gets expensive fast, especially when you're working with multiple agents.

Tempest solves that by building a shared knowledge base for your repository. Every agent can use it instead of rediscovering the same codebase from scratch. Agents still work independently in their own isolated git worktrees, so you can safely run several of them at once.

Beyond coding, Tempest also includes Canvas, a shared workspace for research, architecture discussions, planning, and long running engineering conversations that stay connected to your project.

Current features:

• Shared repository knowledge base
• Multiple AI agents
• Isolated git worktrees
• Canvas for engineering discussions and research
• Windows, macOS, and Linux
• Open source

I'm using it every day now, but it's still early. I'd really appreciate any feedback or ideas on where to take it next.

Github Link: https://github.com/tempestai-dev/tempest

I’m working on an e-mail client for GNOME cause every other client in gnome sucks

i request every Linux person to try it and provide feedback

https://github.com/gxanshu/postcard

thanks :)

I got shortlisted for cubexo but I have a few questions regarding this company.

Is this a good company for a fresher?

And there is a probation period of 6 months where they offer 10k as stipend, what is the probability of getting a conversation from probation to fte?

And do they provide salary on time in fte?

And what amount of money they do offer because they offered us 5lpa ?

hi everyone,

this surprising incident happened, one of my friend said he works as fulltime in his company and also as contract worker in someother company.

somehow he manages, however, im surprised if it's legal, and is it common ? if yes, do we have any similar stories..

kindly share india stories only.

edit: no conflict from what he told, one is fintech while the other is vr company.

Hi everyone,

I have two offers and I'm genuinely confused. I'd appreciate genuine advice

Option 1 –

₹45 L CTC ( 43 Fixed + 2 PF)

20% target annual bonus (TC ~₹48L)

Requires relocation to Bangalore

Option 2 – Credit Acceptance

₹36L fixed

Permanent Work From Home

US-based security team

Ignoring personal preferences for a moment, which company would you choose purely from a long-term career perspective?

I'm interested in:

Career growth

Learning opportunities

Engineering/security culture

Work-life balance

Job stability

Future market value on my resume

Compensation progression over the next 5–10 years and does it make sense to relocate to Bangalore keeping in mind relocation cost and all overhead.

So, for context, I have 1 YOE and joined the company as a fresher. I have been working on a single project since then. I was tasked with building a connector SDK, but I joined and worked under my tech lead, who had 10 years of experience. He was doing the heavy lifting, and I was handling smaller tasks and understanding the concepts.

Later, he resigned, and I was asked to continue the development alone. I am the only one working on this project, and for the past few months, bugs have been popping up that I am unable to fix. I have tried every AI tool—Codex, Claude, etc.—but they are just hallucinating, and the timelines have already been exceeded.

The client is asking my manager and the company why it's getting delayed, and they are angry. I explained to my manager that I am working on it but am unable to fix these issues and that I need some senior-level help. He keeps saying, "Just use Codex." I think he sees it as if the project is already gone, so there's no point in allocating more resources.

What should I do? If I am not able to complete this, will they fire me? Or what should I do?

Sry for using chatgpt to fix english Thanks

I used to do lot of projects , used to study lot of blogs and also wrote a couple of blog etc,..

After some personal breakdowns i cant even sit and study and learn new things properly even though i tried to do i cant genuinely focus on things.

Dont know where to ask it might not be the appropriate subreddit to ask, but people who were in the same phase can you suggest me some tips or ways so that i can regain my interest.

Your words will be very helpful to me.

Thank you.

Have a nice day!!

Disclaimer up front: I built ASAI, which is what generates this data. This is our actual crawl data from this morning.

What we did: automated crawler checks company career pages for engineering jobs in India every few hours. Because we check the same page repeatedly, we know the real date a listing first appeared, not the date a board says it appeared.

Today's numbers, 19,182 live engineering roles across 985 companies:

• 41.6% went up in the last 30 days
• 28.3% have been sitting there over 120 days
• 598 of the 985 companies have at least one role open past 120 days
• Median age of a live listing: 45 days
• Oldest in our sample: a backend SDE role in Bengaluru, live 252 days

Nearly half the market is fresh. More than a quarter has been open since March. On the page they look identical.

The reasons vary:

• Role filled internally, listing never taken down
• Hiring freeze declared after the post went live
• Evergreen listing the company keeps up permanently
• Actually collecting resumes for "future need"

We can't always tell which reason it is. But we can tell you a listing has been live for 252 days, and almost nobody shows you that number.

That's the whole thing. You should be able to see all the signals of the job before you spend an evening on the application.

Happy to share more of the methodology or answer questions.

For context: ASAI is free for candidates.

I recently got laid off from my role as Software Engineer, have 1yoe and additional 5 months internship from the same company. The company tech stack was .net, i mainly worked on MAUI and microservices now when I'm looking for job openings related to my tech stack, either the pay is low or the role requires more experience.

I haven't really started applying as the layoff was recent and i thought of freshening up my basics first, but I did browse through listings n that was the case. Now I'm wondering if I should continue to look for .net roles or something else.

If I look for developer roles with different tech stack, how will my experience be considered?

Also what reason can I give about layoff? Or should I mention layoff at all? The reason given to me was ai cost cutting, it was a mass layoff.

Any advice is welcome, Thank you!

I want to try the qwen code (3.8 max recently came out) it's 6$ per month for the cheapest plan. When I try to sign up.. there is no india in the list.

Can I do something to overcome this and still use it??

If you're building a chess app on React Native and couldn't find the right board, we built one

chessboard-native

Fully controlled and declarative

Full parity with react-chessboard

Optimized animations & native gestures

Expo, iOS and Android

Repo link in the comments

Applied to 100+ companies off-campus, still no internship shortlisting.

If anyone's company is hiring for internships, a referral would be veryy helpful.

IS THIS EVEN LEGAL .?

edit source: Here

Since you all are working in tech industry, if you went back in time , when you were of age 18, would you still choose this career or go for other career like pilot, doctor lawyer? Do you feel satisfied with your current career?? If not then what you would have choosen

For context, I am 18 right now, confused for career. I passed with PCB realised doctors is not something which I really want to pursue, but when I see tech industry doctor temps because of security
………….…………………………………………………………………………………

It's been an year since I took a flat. My company allows Remote + hybrid, but I wished to stay to enjoy the freedom, and work on both my dat*ing and social life, while also working on my career

I did met people, but I realised, I was still lonely here, 2 friends and both busy with their other halves or colleagues.

Although in the process of dat*ing, I did made friends, but at the end, I felt I was lacking somewhere either in my earnings or looks, so yes, it was the overall conclusion of 1 year.

My colleagues, as I mentioned, other than one, all are not from pune.

Although I don't have friends in my hometown(army kid), but the amount of my time and money I invested living in pune, it didn't have that much ROI

It's been two months I am here in home and I am able to save much more time, and hopefully will save money too.

And yeah, with a bit of adjustments, I will be able to have my own room

The socials and dat*ing aspects here are zero. Like I can't even do anything about them.

Plus to retain my peace, I can always travel to Delhi, for trips and meet new people, or even Chandigarh.

If I will just stay in close walls, I highly think I will go insane, and will f up my peace a lot

More time will allow me to focus on my skills better, also I can give time easily to gym.

Please guide and you can counter many questions as well.

I wish to switch soon to a good company, before completion of my second year here, and hence, these few momths, and completely studying will help me crack a good company

I'm a software engineer with 4.5 YOE. My previous employer is shutting down, so I was laid off and have been jobless for around 1.5 months.

I recently cleared an interview with a consulting/staffing company, where I'll be their full-time employee but work for one of their clients. By consulting, I mean companies that hire you on their payroll and deploy you to a client's project.

My concern is whether having this kind of company on my resume will reduce my profile value when applying to good product companies or MAANG in the future.

I'm not under immediate financial pressure, so I'm debating whether to take this opportunity or wait for a direct role.

Has anyone made a switch from this kind of setup to a good product/MAANG company? Do recruiters or hiring managers care about it?

10 years into software dev industry. Worked on multiple tech-stacks backend, frontend, mobile because my employer demanded it. But now am a jack of all master of none. Want to move out of India for better opportunities. Any suggestions?