Sesame: Open Source Passwords, 2FA and Recovery
An open source password vault for Windows. Import passwords, 2FA codes, and recovery details. Sesame never receives your vault. Free download.
Estimated origin: United States
StackScope records what new websites are built with, the week they launch. Most we find ourselves, by watching public internet infrastructure for brand-new sites; the rest come from Product Hunt, Hacker News and PeerPush. We crawled this one for its tech stack and scored it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 28 August 2026; the live site may have changed since.
Every technology below links to its own page: which other new sites launched with it. Vendors and agencies watch those pages with Stackdar and hear about new adopters the week they ship, from £15 a month.
Sesame: Open Source Passwords, 2FA and Recovery ships with the launch fundamentals in place, with complete legal pages, a complete set of security headers, and a thorough launch checklist. What needs work: incomplete email security.
The site is hosted on Hetzner Online GmbH in Germany, with a domain registered 1 day before launch. We've detected 6 technologies on this site, covering developer tools, DNS providers, frameworks, and protocol. The stack includes Svelte, Cloudflare DNS, and Google Search Console.
It's one of 79 launches on this exact stack and tighter on security headers than most StackScope Discovery launches.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (6)
| DNS |
Cloudflare DNS
|
| Protocol | HTTP/3 |
| Security | HSTS |
| SEO |
Google Search Console
|
Infrastructure
Email Security
Storage (0)
Readiness Breakdown How?
Performance How?
⚠ 8 images: 5 oversized, 8 without width/height, 2 missing alt text
Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| AI palette signals | +5 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.