← Latest products

KeyLeak Detector

Scan websites for exposed API keys and secrets. Runtime leak detector for modern web apps - finds exposed API keys, validates BaaS misconfigurations (Supabase/Firebase RLS), and catches secrets in JS bundles. Chrome extension + CLI. I built this after seeing multiple teams accidentally ship API keys in their frontend code.

CLIBrowser extensionOpen source

274 stars · GitHubexternal site

Visit github.comexternal site

Reactions (1)

Similar products

by description similarity

  1. API Radar

    apiradar.live

    Real-time GitHub scanner for exposed API keys

    Hacker News5 pts

  2. Chrome extension that blocks API keys from being pasted into AI tools

    github.com

    Chrome extension that stops engineers from leaking API keys and secrets into ChatGPT, Cursor, and other AI tools. 100% local scanning.

    Hacker News5 pts

  3. An open source clean logs tool

    github.com

    Detects and prevents leaking secrets and API tokens into your logs.

    Hacker News7 pts

  4. Ghostman

    github.com

    A fast, keyboard-driven TUI API client and webhook inspector

    Hacker News66 pts

  5. A Mutating Webhook to automatically strip PII from K8s logs

    github.com

    Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

    Hacker News25 pts