Bomfather is an open source runtime security agent you deploy on your Linux servers to protect the resources your workloads depend on, such as GPUs, databases and filesystems. It enforces policies with eBPF from inside the kernel.
Be the first to rate Bomfather. Your feedback helps other users decide.
Deploy the agent on Linux servers to protect GPUs, databases, filesystems and more from the processes that touch them.
Policies are enforced with eBPF, which the project reports adds 1% to 3% overhead against much higher overhead for confidential computing.
One small policy file can cover a whole infrastructure, with inheritance between policies.
Similar tools in the same category — compare side-by-side
Enki LLM is a pure Rust Transformer inference engine of about 2,000 lines that runs Llama-3.2 1B at ...
Shadowclone keeps your engineering preferences the same in every coding agent. It maintains one set ...
Commit-Aware Router is an open-source proof of concept that makes AI traffic decisions reflect the c...
Guides and comparisons about code tools
Eight Show HN launches where the agent owns the device rather than the editor: desktop control, phones, memory pressure, kernel security and live repair.
Ten launches aimed at the same bottleneck: agents re-read their own history, and every re-read is billed. Compression, code mode, prices and measurement.
Ten recent MCP servers that connect agents to data and systems they cannot invent: B2B records, financial metrics, flights, CAD, and keyword volumes.
Five Show HN launches about where agents run: an incident benchmark, a policy guardrail, a container orchestrator, a one-megabyte C agent and a 3D code world.
Five Show HN launches for the accounting layer of agent work: session archives, a Mac home for Claude Code, a usage widget, private benchmarks and a UI critic.
