trappsec is an open-source framework that helps developers detect attackers who probe API business logic. By embedding realistic decoy routes and honey fields that are difficult to distinguish from real API constructs, attackers are nudged to authenticate converting reconnaissance into actionable security telemetry. I'm looking for early adopters to help with feedback and refining the direction and form of this framework.

0Thread HN

Ask HN: What are you working on? (February 2026) 5 months ago

I'm working on trappsec - an experimental open source framework that helps developers detect attackers who probe API business logic.

By embedding realistic decoy routes and honey fields that are difficult to distinguish from real API constructs, attackers are nudged to authenticate — converting reconnaissance into actionable security telemetry.

github: https://github.com/trappsec-dev/trappsec

docs: https://trappsec.dev

0Thread HN