Kimi

CartParity

For grocers and delivery platforms hit by Seattle's surveillance-pricing ban: weekly sterile-vs-seasoned profile sweeps of your own digital shelves that flag any SKU priced differently by profile within 7 days of it appearing, plus a signed monthly 'no personalized pricing detected' certificate you can hand the regulator — before a plaintiff's screenshot finds it first.

UpdateDrift

For Mac/iPhone professionals bound by confidentiality who watched Apple re-enable Apple Intelligence after they said no: a menu-bar app that snapshots 25+ privacy settings, alerts within 15 minutes when an OS update silently flips one, re-asserts your choices in one click, and issues a signed attestation per device per update — so a settings audit takes 2 minutes with proof instead of 45 minutes without.

SilentTerms

For households with 5+ paid subscriptions: it diffs the terms of 100+ streaming, delivery, cloud and app services daily, and the day one quietly adds ads to your paid tier or rewrites its arbitration clause (like this week's Disney+ change), you get an alert naming the exact clause plus a ready-to-send, service-specific opt-out or refund letter before the 30-day window closes.

RotProof

For litigators, OSINT journalists and researchers who cite web pages: paste one URL and in under 60 seconds get a court-attachable evidence bundle — captures confirmed on 2+ independent archives plus a hashed, RFC-3161-timestamped WARC and PDF/A — with a permalink that still resolves from countries where archive.today is now ISP-blocked.

PressReady

For print shops whose inbox is filling with unprintable AI-generated customer art: a drop-in upload gate that auto-fixes resolution, CMYK and missing bleed (generatively extending the edges) and hands back a press-ready PDF/X-4 with a customer-facing fix receipt — a bad file resolved in 3 minutes instead of 3 days of email ping-pong.

CaptureProof

For rental platforms, small insurers, and used-goods marketplaces hit by AI-faked condition photos: one API call checks a photo's hardware capture signature (Apple Reference Image / C2PA chain), rejects stripped or generated images with a documented reason code in under 2 seconds, and issues a public verdict badge per claim photo.

RateHikeKit

For US drivers whose car insurance jumped after their car sold their driving data: enter your vehicle and get the exact telematics consumer files to demand from LexisNexis, Verisk and your automaker, a decoder that turns the returned trip log into a flagged table of wrong or impossible trips, and ready-to-mail FCRA dispute plus opt-out packets — the full paper trail in under an hour instead of a month of forum archaeology.

CommentClock

For residents near a proposed data center: it watches your state's environmental permit dockets and, the day an air or water permit drops, emails you a cited, file-ready public-comment packet — so you beat the 30-day window that, once missed, forfeits your legal standing to ever challenge the permit.

OptOutWatch

For professionals who switched off 'improve the model' on ChatGPT, LinkedIn, X and co: a browser extension that re-reads the real toggle state through your logged-in session every 24h, alerts within a day when a service silently flips it back (as OpenAI just did), and issues a signed monthly attestation for your confidentiality file — no more quarterly manual settings audits.

StandbySnitch

For households whose smart TV keeps talking after the screen goes dark: a Raspberry Pi app that proves, per make and model, every connection your TV makes in standby (and flags 'offline' sets still beaconing), emails a weekly receipt, and pushes a one-click pi-hole/AdGuard blocklist that measurably shrinks the chatter.

SandboxReceipt

For Mac users who just watched a 'sandboxed' app walk out of its sandbox: point it at any installed app and in a 10-minute watched session get a signed receipt of every file it read outside its container and every host it phoned — diffed line-by-line against its declared entitlements and App Store privacy label, then published to a public per-app-version ledger.

WeightVault

For small AI-product teams whose builds pull models straight from Hugging Face: scan your repos once, and get a full inventory of every model you depend on, mirrored at pinned revisions to your own S3/R2 bucket with a signed license snapshot — so when Nvidia-era HF gates, re-licenses, or deletes a repo, your deploys keep running and you can prove what terms you shipped under.

PlayStrikeKit

For Android developers staring at a Google Play policy strike with a ~7-day fix clock: paste the violation notice and your listing URL, and within 30 minutes get the exact offending element named (quoted listing text, deep link, or manifest permission), a policy-clause-cited fix checklist with compliant replacement copy, and a precedent-citing appeal letter — instead of guessing on r/androiddev while your developer account hangs.

PadHold

For security leads at SpaceX competitors and defense contractors whose engineers use Cursor: a menu-bar proxy that logs every byte each Cursor install sends out (attributed to autocomplete, chat, or codebase indexing), blocks traffic to SpaceX-controlled endpoints, and exports a signed ITAR-ready egress attestation in an afternoon instead of forcing a blanket editor ban.

AgeSignalKit

For indie app studios with chat, UGC, or multiplayer features now exposed by the $17B Meta child-harms settlement and new state age laws: one drop-in SDK call returns a normalized age band (child/13-15/16-17/adult) on iOS, Android, and web, and stores a signed per-user consent receipt you can hand a state AG — audit-ready in an afternoon instead of a Persona contract.

EuroShelf

For micro-hardware makers who geo-block the EU: upload one product listing and get a GPSR technical file, draft Declaration of Conformity, print-ready CE/WEEE label pack, and a €99/yr micro Responsible-Person slot — EU-legal in a weekend instead of a €2,000 consultant or a ~25% revenue hole.

DutyZero

For small sellers shipping Canada↔US: upload your product list once and get HS codes, this-week's true landed duty per SKU including the latest retaliatory surtaxes, and a pre-filled CUSMA blanket origin certificate for every eligible product — turning a surprise 25% tariff into a documented $0 before your next shipment.

BookLifeboat

For collectors and archivists racing to preserve rare books before they're pulped: record a page-flip video on your phone (~1 page/second) and get a dewarped, searchable, archive-ready PDF/A plus EPUB — a 300-page bound book digitized in about 30 minutes, fully offline, one-time price.

DangleWatch

For projects and small SaaS teams whose code, docs, QR codes and webhooks point at domains they don't own: it scans your repo in minutes to inventory every referenced external domain, then polls registration daily and alerts within 24 hours if one lapses or changes hands — the SondeHub scenario caught before an attacker inherits your traffic.

FireSaleWatch

For anyone whose data gets auctioned when a company holding it goes bankrupt (23andMe, now Spirit): it builds a registry of who holds your data, watches US bankruptcy dockets daily, and emails you within 24 hours of a filing with a court-ready objection and deletion letter before the sale-hearing deadline passes.

StandbyMerge

For dev teams dead in the water every time GitHub has an incident: a standby mirror that keeps PR review and merges running through the outage and replays every approval and merge back to github.com within 15 minutes of recovery, so a 3-hour incident costs zero lost shipping time.

EdgeWitness

For site owners who don't know what their CDN adds: daily origin-vs-edge diffs that catch silent injections like Cloudflare's analytics script within 15 minutes, plus a monthly GDPR-ready ledger of every third-party asset your edge actually serves.

BenchReceipt

For maintainers drowning in AI-generated 'Nx faster' PRs: point it at the old code, the new code, and the benchmark, and in under 20 minutes get a signed public receipt — median speedup over 30 randomized-fresh-input runs, output-equivalence fuzzing on 1,000+ off-distribution inputs, and file:line flags on any code specialized to the test data — so benchmark gaming can't hide inside a speedup claim.

WattWitness

For Australian households whose home battery is enrolled in a VPP or wholesale plan: it reconciles every charge and discharge against the real 5-minute grid price and delivers a monthly audit showing the exact dollar gap between what your VPP credited you and what your energy was actually worth — plus a dispute letter for every event where your battery was cycled into a negative price.

DossierDecoder

For anyone who filed a GDPR/CCPA data request and got back a 500-page PDF or cryptic zip: drop the export into this local app and get a one-page 'what they know and who they sold it to' report plus pre-filled deletion letters for every named third party — a McDonald's-style 515-page dossier decoded in about 15 minutes, with nothing leaving your machine.

WALAutopsy

For small teams running production SQLite (Litestream/Turso/PocketBase/Rails 8 Solid Queue): point it at your database and its replica chain, and within 10 minutes you get a page-level corruption autopsy plus the exact snapshot generation to restore from — the forensic hunt Tailscale just spent weeks on, done before lunch.

PlateProof

For defense attorneys and drivers hit by a false license-plate-reader match: enter the stop once and get an agency-specific public-records demand for the camera's audit trail plus a signed where-was-the-car timeline packet, attorney-ready in under an hour instead of a two-week paralegal chase.

BotBouncer

For teams whose calls keep getting joined by third-party notetaker bots: connect your calendar and get a 90-day retro census of every bot that sat in your meetings, a Slack alert within 60 seconds whenever one joins again, and one-click auto-decline of future bot invites.

SkillVet

Point it at any agent skill package (SKILL.md plus bundled scripts) before installing and get a verdict in under 60 seconds citing the exact lines that read outside your workspace, phone home, or override the host agent's instructions — plus a CI gate that blocks unvetted skills so a poisoned markdown file never runs with your credentials.

VivaKit

For instructors now legally required to orally verify each student's written work: upload the essays and get per-student question cards anchored to specific paragraphs, self-scheduled 10-minute defense slots, and a signed PDF minute per session — a 30-student class prepped in about an hour instead of a lost weekend.

CommitWitness

For projects that ban AI-written code: contributors run one local command while coding and every commit ships with a signed, publicly verifiable human-authorship attestation, so maintainers get evidence instead of an honor-system checkbox.

Consent Agenda Watch

Emails you days before your city or county votes on a surveillance contract, with a one-page brief on the vendor, the money, and the data-sharing clauses.