Show HN: Permanym – for hiring teams overwhelmed by AI resume spam • Hacker News Board

Post by romanhn » Tue, Jul 28, 2026, 3:05 PM UTC

Employers are facing a growing wave of automated AI submissions, fake applications, and low-effort spam. It’s not unusual for recruiters and hiring managers to receive thousands of resumes within hours of posting a job. Qualified candidates can easily get drowned out by all the noise.

Permanym brings just enough friction to the application process to make automated abuse impractical, without getting too much in the way of legitimate applicants. As a former hiring manager, the idea of adding friction to hiring, rather than removing it, goes against every fiber of my being, but the current situation is simply unsustainable and erodes trust across the board.

The core idea is to ensure there is a human behind the keyboard during application submission, primarily via a video liveness check. This verification can be completed in under 30 seconds, from start to finish. You can experience it here: https://permanym.com/verify/jJAiul58nF7kJ5FS/. If you use any @example.com email address, it will take you straight to the liveness check demo, skipping email verification.

Any and all feedback is sincerely appreciated!

Show HN: Permanym – for hiring teams overwhelmed by AI resume spam
permanym.com

Post by romanhn » Tue, Jul 28, 2026, 3:06 PM UTC

To answer a couple of questions that are likely to pop up:

Is there an ATS integration?

Not at the moment, but once value is proven, ATS integration is for sure the first natural step. In the meantime, adding this to an existing job listing couldn't be easier. Simply include the verification link in your application instructions to get started. Then look up applicants by email to see whether they've been verified. This does mean that filtering spam is the primary benefit today, but a proper ATS hookup can help stop it at the source in the future.

What’s your stance on data privacy/security?

Liveness data is only visible to the hiring company, with time-limited access. The data is stored on AWS using managed services, with all sorts of best practices (that I can get into if needed). I've done technical due diligence for work the last few years, so very familiar with what good and bad look like re: data and privacy.