Onyx is live with paid plans.
AI-powered API security testing:
→ Paste OpenAPI spec
→ Gemini generates attack payloads
→ Real-time vulnerability stream
→ PDF report export
Free tier available. Pro is $9/mo.
Built this solo during final year of CS.
https://t.co/li5S5xLHwG
@adambcohen93 Interested in the Product Engineering role!
Final-year CS student, 2 internships, full-stack (React, TypeScript, Node.js, PostgreSQL). Built distributed systems and AI-integrated products in production.
Resume: https://t.co/HBZmAFqQJQ — happy to DM!
Securing the Onyx pipeline.
Yesterday's audit revealed an attacker could drain my Gemini API credits by spamming the attack endpoint. Shipped a patch today adding strict IP rate limiting and custom DNS-resolving SSRF guards to block internal network requests.
Standard HTTP polling is incredibly inefficient.
For Onyx, I needed real-time attack telemetry. I wired up native WebSockets to stream the exact millisecond a payload crashes the target server directly into my React frontend with zero lag.