Sourav Nandy's profile on Product Hunt

About

Sourav Nandy is an entrepreneurial technology leader with 25+ years of experience in software engineering and product management. He builds enterprise-grade software driving measurable outcomes for Fortune 100 companies. Bridging corporate scale with startup agility, Sourav has spearheaded multiple ventures alongside U.S. co-founders and researchers. His portfolio includes an education startup ($100K raised) and an IoT hydroponics platform ($50K funded). An inventor with multiple U.S. patents, he actively contributes to the global AI community with work featured in ICML, DZone, HackerNoon, and Swiss Cognitive. Sourav holds an M.S. in Technology Commercialization and a postgraduate degree in AI/ML from UT Austin, alongside a B.Eng. in Computer Science.

Badges

Tastemaker

Veteran

Gone streaking 10

Gone streaking

View all badges

Maker History

auditreachReddit/YouTube research MCP/CLI, BYOK hash-chained audit log
Sep 2026
WorkspaceGuardUsage caps for shared self-hosted AI assistants
Aug 2026
ShimGuardVerify merged status of PR fixes for closed issues"
Aug 2026
SkillGuardScans AI agent skills for malicious code
Aug 2026
TenantGuardOpen source scanner for cross-tenant AI-agent security bugs
Aug 2026

Forums

•

17d ago

auditreach - Reddit/YouTube research MCP/CLI, BYOK hash-chained audit log

A secure, self-hosted CLI (npm/pip) and MCP server for Reddit and YouTube research. Built strictly on official APIs with a Bring-Your-Own-Key (BYOK) architecture, it eliminates shared pools, cookie imports, and session-token reuse. Every query generates a hash-chained, tamper-evident audit log detailing platform, endpoint, scope, and consent basis. It is Apache 2.0 licensed and designed as a compliant alternative to scraping tools for enterprise environments.

•

21d ago

WorkspaceGuard - Usage caps for shared self-hosted AI assistants

WorkspaceGuard adds precise usage controls to self-hosted AI assistants without replacing existing infrastructure. Its MIT-licensed npm/pip sidecar brings per-workspace message metering and fail-closed monthly quota caps to Odysseus and compatible backends. It solves a specific gap: adding usage visibility and hard limits to platforms handling user isolation. Designed for integration, it includes a CLI and library with agent-native --json output, acting as a lean gateway for existing setups.

•

23d ago

ShimGuard - Verify merged status of PR fixes for closed issues"

ShimGuard is a dual CLI and library tool that validates GitHub issue integrity. It verifies whether issues marked as "fixed" actually have a corresponding merged pull request, bridging the gap between issue tracker claims and repository reality. It ships as a read-only, MIT-licensed package on npm and PyPI, bringing the same level of automated auditing to issue tracking that tools like TruffleHog bring to secret scanning.