This product was not featured by Product Hunt yet. It will not be visible on their landing page and won't be ranked (cannot win product of the day regardless of upvotes).
Product upvotes vs the next 3
Waiting for data. Loading
Product comments vs the next 3
Waiting for data. Loading
Product upvote speed vs the next 3
Waiting for data. Loading
Product upvotes and comments
Waiting for data. Loading
Product vs the next 3
Loading
Kelvane
Run untrusted AI models safely in a WebAssembly sandbox
Most WebAssembly runtimes are general-purpose. Kelvane is built for one job: running a neural policy you don't fully trust. Every call runs in a fresh sandbox with a hard memory cap, a per-invocation CPU budget, and zero ambient authority (no files, network, or I/O). The model stays host-owned — the module asks for an inference but never touches the weights. You can hot-swap modules live. Honest scope: it's a small, tested integration of proven parts (Wasmtime, ONNX), not a new technique.
Hi Product Hunt 👋
I'm Rakib. I kept running into the same awkward situation: to run a neural network someone else trained — a downloaded model, an auto-updated policy, something from a third party — you end up running their code, with all the trust that implies. The model does inference, sure, but the wrapper around it can touch your files, your network, whatever the process can reach.
Kelvane is my attempt at a small, honest answer to that. Each inference runs in a fresh WebAssembly sandbox with a hard memory cap, a per-call CPU budget, and zero ambient authority — no filesystem, no network, no I/O. The model stays owned by the host, so the untrusted module can ask for a prediction but never touches the weights or the accelerator. And you can hot-swap a running module without a restart.
Two honest things, because I'd rather you know them up front:
- It's an integration of proven parts (Wasmtime, ONNX), not a new invention — the value is a small, auditable, well-tested assembly aimed at one job.
- It's early (v0.x, toy-scale), but it's genuinely tested: a documented threat model, 29 adversarial test cases, a patched engine, real published benchmarks (including the unflattering ones).
It's open source (Apache-2.0). I'd really value feedback on the sandbox design and where the "run untrusted models safely" framing might overreach. Happy to answer anything!
About Kelvane on Product Hunt
“Run untrusted AI models safely in a WebAssembly sandbox”
Kelvane was submitted on Product Hunt and earned 0 upvotes and 2 comments, placing #114 on the daily leaderboard. Most WebAssembly runtimes are general-purpose. Kelvane is built for one job: running a neural policy you don't fully trust. Every call runs in a fresh sandbox with a hard memory cap, a per-invocation CPU budget, and zero ambient authority (no files, network, or I/O). The model stays host-owned — the module asks for an inference but never touches the weights. You can hot-swap modules live. Honest scope: it's a small, tested integration of proven parts (Wasmtime, ONNX), not a new technique.
On the analytics side, Kelvane competes within Open Source, Developer Tools, Artificial Intelligence and GitHub — topics that collectively have 1.1M followers on Product Hunt. The dashboard above tracks how Kelvane performed against the three products that launched closest to it on the same day.
Who hunted Kelvane?
Kelvane was hunted by Rakib. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
For a complete overview of Kelvane including community comment highlights and product details, visit the product overview.
Rakib