Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Launch HN: Metlo (YC S21) – Open-source software for securing your APIs

news.ycombinator.com

Post reply on HN
Print view View original

11–20 of 38 posts

Re: Launch HN: Metlo (YC S21) – Open-source software for securing your APIs

#11

Post by shrisukhani »

ushakov wrote: post #9

Looks interesting. Great Job, Shri and Akshay! I’m working on something similar, but fully-automated, with declarative configuration, for REST, GraphQL and gRPC APIs: https://github.com/stepci/stepci

Thanks! StepCI looks great too; and your docs are beautiful! :)

Re: Launch HN: Metlo (YC S21) – Open-source software for securing your APIs

#12

Post by ushakov »

shrisukhani wrote: post #11
ushakov wrote: post #9

Looks interesting. Great Job, Shri and Akshay! I’m working on something similar, but fully-automated, with declarative configuration, for REST, GraphQL and gRPC APIs: https://github.com/stepci/stepci

Thanks! StepCI looks great too; and your docs are beautiful ! :)

Thanks a lot! I’m actually writing docs as we’re speaking. We use VitePress and GitHub Actions for deployment. The docs look beautiful out of the box, we only changed the colors ;)

Ps. Just gave you a star on GitHub, would love to see where you guys are going!

Re: Launch HN: Metlo (YC S21) – Open-source software for securing your APIs

#13

Post by shrisukhani »

ushakov wrote: post #12
shrisukhani wrote: post #11

Earlier quoted context omitted.

Thanks! StepCI looks great too; and your docs are beautiful ! :)

Thanks a lot! I’m actually writing docs as we’re speaking . We use VitePress and GitHub Actions for deployment. The docs look beautiful out of the box, we only changed the colors ;) Ps. Just gave you a star on GitHub, would love to see where you guys are going!

Incredible. Will definitely have to check it out!

Edit: And thanks for the star! :)

Re: Launch HN: Metlo (YC S21) – Open-source software for securing your APIs

#14

Post by HoyaSaxa »

Looks interesting! I'd suggest expanding your value prop by adding automated input fuzzing (e.g. changing one key in the body of a `application/x-www-form-urlencoded` request until you raise a 5xx). That could help uncover a slew of potential bugs and/or security issues before a real user or an attacker does. It would also help expand your value proposition from simply being a security offering.

Re: Launch HN: Metlo (YC S21) – Open-source software for securing your APIs

#15

Post by ashekhawat »

HoyaSaxa wrote: post #14

Looks interesting! I'd suggest expanding your value prop by adding automated input fuzzing (e.g. changing one key in the body of a `application/x-www-form-urlencoded` request until you raise a 5xx). That could help uncover a slew of potential bugs and/or security issues before a real user or an attacker does. It would also help expand your value proposition from simply being a security offering.

That makes sense... Since we generate specifications for an API automatically, it would be much more efficient (and accurate) than other fuzzing tools :) We'll definitely look into doing that, thank you for the advice!

Re: Launch HN: Metlo (YC S21) – Open-source software for securing your APIs

#19

Post by ashekhawat »

singwhenurdown wrote: post #18

Looks really cool -- does it only work for projects in the AWS regions listed?

Currently we only have AMI's in US Regions, although Metlo should work anywhere... Let me know which region you want to deploy in and I can make an AMI there right away :)

Re: Launch HN: Metlo (YC S21) – Open-source software for securing your APIs

#20

Post by singwhenurdown »

ashekhawat wrote: post #19
singwhenurdown wrote: post #18

Looks really cool -- does it only work for projects in the AWS regions listed?

Currently we only have AMI's in US Regions, although Metlo should work anywhere... Let me know which region you want to deploy in and I can make an AMI there right away :)

us-east-2 plz:)
Post reply on HN