Tailsnitch
Security and privacy
security auditing
SHOW HN2026
How HN took it
4 positive, 8 neutral or asking, 1 mixed, 2 critical, out of 15 comments about the project. Thread score +0.14.
Idea: 3 for, 1 againstExecution: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Useful for checking large ACL files and reducing anxiety about misconfiguration
From 2 comments
This is what I've been looking for. I love Tailscale, but as our tailnet has grown from "just me and a few servers" to "entire engineering team + prod/staging/dev environments,"…
Fiveplus on HNThis tool makes providing evidence for SOC2 slightly easier, and I do wish I had had this when I started my SOC2 journey at $dayJob.
Operyl on HN
Could run in CI/CD
From 1 comment
This is what I've been looking for. I love Tailscale, but as our tailnet has grown from "just me and a few servers" to "entire engineering team + prod/staging/dev environments,"…
Fiveplus on HN
Objections
Distributed as an unsigned macOS binary requiring quarantine removal
From 1 comment
Hahaha, I love it. But also, a security tool you're going to be using against your core infrastructure should probably not be a random binary that you also tell users to strip…
Operyl on HN
Only a configuration linter, not live access auditing
From 1 comment
So this is a configuration linter; what I was hoping it might be is something that provides live auditd notices for when a tailscale user connects by SSH to a common "admin"…
mikepurvis on HN
Requests
Custom user-defined checks
From 1 comment
Hahaha, I love it. But also, a security tool you're going to be using against your core infrastructure should probably not be a random binary that you also tell users to strip…
Operyl on HN
Live audit logging of SSH logins to admin accounts
From 1 comment
So this is a configuration linter; what I was hoping it might be is something that provides live auditd notices for when a tailscale user connects by SSH to a common "admin"…
mikepurvis on HN
Support for Headscale
From 1 comment
Will this also work with Headscale [1]? [1] https://headscale.net/ | https://github.com/juanfont/headscale
toomuchtodo on HN
Questions
Does it check a specific Tailscale ACL issue (issue 11717)?
From 1 comment
Very cool! Does it check for https://github.com/tailscale/tailscale/issues/11717 ?
mrbluecoat on HN
Is it not supposed to use tags for user devices?
From 1 comment
Very nice! As a two-user household I was surprised I am not supposed to use tags for user devices: https://tailscale.com/kb/1068/tags How am I supposed to work with user devices…
moontear on HN
Alternatives named
Teleport
From 2 comments
It sounds like you want the sort of logs that Teleport captures https://github.com/gravitational/teleport
aberoham on HNI guess so, yeah, though that sounds like that's a whole separate ecosystem, and positions itself as a direct competitor: https://goteleport.com/compare/tailscale-alternative/…
mikepurvis on HN