AI-SPM vs Hopper

AI-SPM (AI Security Posture Management) is an open-source control plane for AI agent security in production environments. Built by indie developer dshapi and posted to Hacker News, it addresses a real gap: most LLM systems now have tool access and decision-making power, but almost no runtime oversight layer to catch when things go wrong. The system works as a gateway between your application and the LLM, enforcing three main controls: prompt injection detection (including obfuscated variants that bypass naive pattern matching), structured tool call validation against defined policies using Open Policy Agent (OPA), and sensitive data leakage prevention (PII and model output filtering). An Apache Kafka and Apache Flink streaming pipeline provides real-time audit trails and anomaly detection. The creator's key insight is that tool misuse — not model jailbreaks — is the primary risk vector in production AI agents. A rogue or compromised agent that escalates tool permissions or exfiltrates data through sanctioned channels is far harder to catch than a classic prompt injection. AI-SPM is early, minimal traction, and needs real-world stress testing. But as AI agent deployments mature from demos to production, runtime security tooling like this becomes non-optional.

Hopper, from YC S24 startup Hypercubic, is the first agentic development environment purpose-built for mainframe systems. It lets AI agents navigate TN3270 terminals autonomously, write and submit JCL jobs, monitor JES output, debug failed jobs by analyzing spool data, query VSAM datasets, compile and run COBOL code, and manage CICS transactions—all via natural language prompts. Tasks that traditionally took mainframe specialists hours of manual TN3270 navigation can now be expressed as a single instruction. The technical challenge here is real: mainframes don't have nice REST APIs or modern dev tooling. They run on green-screen terminal protocols from the 1970s, and the humans who know how to operate them are retiring faster than they can be replaced. Hopper essentially wraps the entire mainframe interaction surface in an agent-friendly interface, translating intent into the arcane sequences of keystrokes and JCL that mainframes actually require. The product is free for individual developers (all core features, macOS/Windows/Linux) with Enterprise pricing for SSO, on-prem deployment, and SOC 2 reports. Hypercubic's team includes alumni from Cognition, Apple, and Windsurf. Given that mainframes still process an estimated $3 trillion in daily commerce and the COBOL developer shortage is acute, Hopper is targeting a genuinely underserved market with unusual urgency.