Compare/Ferretlog vs Lilith-Zero

AI tool comparison

Ferretlog vs Lilith-Zero

Which one should you ship with? Here is the side-by-side panel verdict, pricing read, reviewer split, and community vote comparison.

F

Developer Tools

Ferretlog

git log for your Claude Code agent runs — local, zero dependencies

Mixed

50%

Panel ship

Community

Free

Entry

Ferretlog is a zero-dependency pure Python CLI that treats your Claude Code session logs like a git repository. It parses the raw JSONL logs in `~/.claude/projects/` and gives you git-style history browsing, diff between runs, per-tool-call breakdowns, and cost/token stats — entirely locally, with no network calls and no configuration required. If you've been using Claude Code heavily, you've likely experienced the frustration of losing track of what changed across sessions, what tools were called how many times, and how much each session actually cost across sub-agent calls. Ferretlog makes that history explorable and comparable the same way `git log` makes code history explorable. This is an indie solo project from Eitan Lebras, submitted as a Show HN. It's genuinely useful as a power-user tool for anyone doing serious Claude Code work, especially those managing multi-session agent pipelines where debugging "what did the agent do last time?" is a real pain. The zero-dependency, local-only design means there's no trust surface and no setup friction.

L

Developer Tools

Lilith-Zero

Rust security middleware that stops AI agents from exfiltrating your data

Skip

25%

Panel ship

Community

Paid

Entry

Lilith-Zero is a security runtime written in Rust that sits between your AI agent and its MCP tool servers, enforcing deterministic access control policies and blocking data exfiltration attempts before they reach the wire. It targets what it calls the "Lethal Trifecta"—the attack chain of accessing private data, incorporating untrusted content, then exfiltrating the combination—and blocks all three steps automatically. The technical stack is serious: fail-closed architecture (default-deny everything), dynamic taint tracking that marks sensitive data with session-bound tags, cryptographically signed HMAC-SHA256 audit logs, and formal verification via the Kani prover plus cargo-fuzz fuzzing infrastructure. Performance overhead is under 0.5ms at p50 with a 4MB memory footprint. It ships as a pip-installable Python SDK that auto-discovers and wraps its Rust binary. This is a Show HN project that appeared on Hacker News today and is currently at version 0.1.3 with 260 commits—small community (15 stars) but deeply engineered. As AI agents gain write access to filesystems, databases, and APIs, the absence of a policy enforcement layer becomes a serious liability. Lilith-Zero is one of the first open-source tools to treat this problem with the rigor it deserves.

Decision
Ferretlog
Lilith-Zero
Panel verdict
Mixed · 2 ship / 2 skip
Skip · 1 ship / 3 skip
Community
No community votes yet
No community votes yet
Pricing
Free / Open Source
Open Source (Apache 2.0)
Best for
git log for your Claude Code agent runs — local, zero dependencies
Rust security middleware that stops AI agents from exfiltrating your data
Category
Developer Tools
Developer Tools

Reviewer scorecard

Builder
80/100 · ship

If you run Claude Code daily, you need this immediately. Being able to diff two sessions like git commits and see exactly which tools fired and what they cost is something that should have existed from day one. Zero-dependency Python means it just works.

80/100 · ship

The Kani formal verification and cargo-fuzz integration tell me this isn't just a vanity security project—it's been engineered to actually be correct. Sub-millisecond overhead means there's no reason not to run this in front of every MCP agent deployment. 15 stars seems like an embarrassing undercount given what this does.

Skeptic
45/100 · skip

This is a niche tool for a niche user (heavy Claude Code power users) and the session log format Anthropic uses is undocumented and could change at any update. Tying workflows to internal log parsing is fragile infrastructure — treat it as a convenience, not a dependency.

45/100 · skip

The claims are impressive but 15 GitHub stars and one maintainer is not a security tool I'd deploy in production. Security tools require adversarial testing by the community over time—not just formal verification. The fail-closed design is correct philosophically, but I'd want to see 6 months of battle-testing and independent security audits before trusting it with real agent deployments.

Futurist
80/100 · ship

Agent observability tooling built by the community, not the vendor, is how this ecosystem will mature. Ferretlog is primitive but it points at a real gap: we need git-style versioning and auditability for agent sessions, not just for code.

45/100 · hot

This is the tool that enterprise security teams will demand before they let any AI agent touch production systems. The taint tracking model is particularly elegant—once data is tagged as sensitive, it can't flow to untrusted destinations regardless of what the LLM decides to do. This is the kind of principled security primitive the agentic ecosystem desperately needs.

Creator
45/100 · skip

Terminal-only, Claude Code-specific, no visuals — this tool exists entirely outside my workflow. The underlying insight (session replay and cost tracking) is useful, but it needs a UI before it reaches anyone outside the developer community.

45/100 · skip

Way too deep in the Rust/MCP security weeds for me to evaluate or use. This is infrastructure for enterprise AI security teams—not something a content creator or indie builder will interact with directly. Worth knowing it exists; not something I'll try this week.

Weekly AI Tool Verdicts

Get the next comparison in your inbox

New AI tools ship daily. We compare them before you waste an afternoon.

Bookmarks

Loading bookmarks...

No bookmarks yet

Bookmark tools to save them for later