03 / Watch your runtime

Myrikeep PinHaul

Early access

Know what you
actually run.

Runtime and container security for builders. Start with loaded packages, image vulnerabilities, and security signals from your logs.

Join early access Read the privacy details

For indie builders and vibe coders running Python apps and Docker stacks.

What it watches

Your running app.
Its real dependencies.

A Python SDK observes the packages loaded by your app. A companion container agent scans images and turns log security patterns into redacted aggregates. PinHaul is in early access.

01Loaded Python packages
Observe package versions from sys.modules, alongside Python and platform facts. Start with what the app actually loads.
02Container image CVEs
The agent scans container images with Trivy on start. Package findings use Trivy and OSV advisory data.
03Redacted log signals
Watch container logs for exposed secrets and security patterns. Redaction happens on the host; full logs are not shipped.
04A report from your terminal
Use the CLI to view reports and findings, trigger scans, and work with SBOM and diagnostic commands.
05Fix-Radar · early access
Explore upstream security fixes before a matching advisory exists. This feature is gated and experimental; availability is part of early access.
06Plain-language context
Insights explain findings in plain language. Insights can be skipped when no model provider is configured.

Local work. Clear results.

How PinHaul works.

  1. 01

    Put the watcher alongside your app

    Integrate the Python SDK for runtime inventory and run the companion container agent for image scans and log signals.

  2. 02

    Inspect and redact locally

    Loaded package versions come from the running app. Log secrets are redacted on the host before per-pattern aggregates are sent.

  3. 03

    Review packages and findings

    Runtime metadata, package versions, public advisory findings, and redacted aggregates reach the backend. Review the report and decide what to update.

Early access means clear expectations

PinHaul has a prototype backend, Python SDK, container agent, and CLI. A custom web frontend and Node SDK are deferred. Fix-Radar is feature-gated, and its rollout is still part of early access. Contact us to discuss what is available for your stack.

A watcher for your corner of the world

Help shape your runtime watcher.

PinHaul is in early access. Tell us about your Python app or Docker stack and what you want to keep an eye on.

Join early access Read the privacy details