News for hackers. Stuff that matters.

travismcpeak

travismcpeak on Hacker News

Show HN: Fraim – A framework for using LLMs in security workflows

Posted by travismcpeak on Thursday June 26, 2025 @01:39PM
from the show-hn dept.

https://github.com/fraim-dev/fraim

We built Fraim to help security teams harness the power of LLMs without having to worry about all the complex glue and infrastructure.Fraim is an open-source project that provides a modular, extensible framework for easily integrating LLM-driven workflows into common security processes such as vulnerability triage, misconfiguration detection, and automated remediation suggestions.Security teams...

( Read More... | no comments | 3 points | on HN )
Re:Fed Cuts Rates by a Half Percentage Point on Wednesday September 18, 2024 @02:41PM (#41583842)
Anyone else think this indicates a lower short-term floor (say, 4.x%) than previously thought?
Re:Hacking misconfigured AWS S3 buckets: A complete guide on Monday September 09, 2024 @10:31PM (#41496614)
Totally agree with you on this one, it's the role of specialized platform teams + managers to make sure devs have the tools they need while also accounting for their skill level(s).
Re:Hacking misconfigured AWS S3 buckets: A complete guide on Monday September 09, 2024 @03:12PM (#41492386)
This does a great job of highlighting why properly configuring infrastructure is hard: S3 buckets (one of the most simple cloud infra services) have 70 configuration options.

Imagine you're a junior dev and your manager says "just spin up an S3 bucket and drop the data there, and make sure your app can access it".

S3 does have some sensible defaults, but a lot of Terraform modules do not...imagine somebody who now has to decipher S3's basic properties, ACLs, IAM, etc.

Re:In 2024, it is better to run a startup in San Francisco on Monday August 26, 2024 @10:05AM (#41357236)
Resourcely is 100% remote and we're crushing it. We have more access to tech talent than companies that only hire in the Bay Area. This is a puff piece designed to get outrage clicks and nothing more.
Re:Intruders at HealthEquity rifled through storage, stole 4.3M people... on Monday July 29, 2024 @01:48PM (#41102246)
Billy mays slaps credit monitoring flextape on a gigantic tub of water with a leak
Re:Inside an IBM/Motorola mainframe controller chip from 1981 on Tuesday July 16, 2024 @02:44PM (#40979120)
This is really cool! How do you accomplish your research? I'm assuming IBM has some corporate records, but didn't realize they'd be this complete.
Re:Solving the misconfiguration problem: why we built Resourcely on Tuesday July 16, 2024 @01:39PM (#40978588)
In my security career, it has become increasingly obvious to me what causes many incidents. At the same time, it is becoming harder to justify investment in solving that problem. I wrote this in the hopes it would help other people facing incidents caused by misconfiguration to advocate for addressing the root cause.
Re:A hard look at AWS GuardDuty shortcomings on Tuesday July 16, 2024 @01:34PM (#40978539)
I don't know any big organizations that solely rely on GuardDuty. IMO, GuardDuty is great for a smaller company that wants something and doesn't want to have to buy/onboard/maintain a vendor.
Re:Scalable WebSocket Architecture on Wednesday September 28, 2022 @12:18PM (#33009751)
Nice write-up!