Bulwark
Hacker ApprovedSecurity gateway in Privacy & security
Open-source, self-hosted layer that enforces one set of permissions for AI agents and injects credentials at the last mile, so secrets stay out of agent sessions.
Open-source, self-hosted layer that enforces one set of permissions for AI agents and injects credentials at the last mile, so secrets stay out of agent sessions.
11 people gave an opinion
- recommend it
- 10
- criticize it
- 1
- approval share
- 91%
Recommended in 5 of 13 months
- November 2025: not recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: not recommended
- June 2026: not recommended
- July 2026: not recommended
- August 2026: not recommended
- September 2026: not recommended
- October 2026: not recommended
- November 2026: not recommended (month in progress)
Why it carries the badge
- 10 people recommend itNeeds 10 or more, met.
- 10 recommenders for every criticNeeds 2 to 1 or better, met.
- Recommended in 5 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Injects credentials at the last mile
“Injecting credentials at the last mile is a solid architectural choice for agent security.”
Comment from 17 Feb 2026 in “Show HN: Bulwark – Open-source governance layer for AI agents (Rust, MCP-native)” “The first 80% is easy. The last 20% is where credentials leak.”
Comment from 17 Feb 2026 in “Show HN: Bulwark – Open-source governance layer for AI agents (Rust, MCP-native)” Simple self-hosted open-source option
“Built it for my personal dev system. Figure I share and opensource project.”
Comment from 9 Mar 2026 in “Bulwark – Open-Source Server Monitoring with AI, Docker, DB Studio, and MCP” “There wasn't a simple, self-hosted, open-source middle ground until now.”
Comment from 15 Mar 2026 in “Bulwark – zero-dependency supply chain security gateway”
What people said
11 of the 14 comments that mention it, newest first. Each links to the original comment.
“Seems like a neat project, but outside of Fastmail and selfhosting your own mailserver, there has not been much traction for JMAP”
“There wasn't a simple, self-hosted, open-source middle ground until now.”
“Built it for my personal dev system. Figure I share and opensource project.”
“Define a single set of policies that are enforced across all sessions and devices”
“they are a center-right publication”
“Those people are keeping me sane.”
“We need to build something new. Pay attention to things like The Bulwark or Liberal Currents.”
“You can actually install it and run it with claude and the github MCP.”
“Injecting credentials at the last mile is a solid architectural choice for agent security.”
“The first 80% is easy. The last 20% is where credentials leak.”
“The Bulwark is fairly on top of the pillaging that's happening in the US government.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.