Dev tools · alternatives · 2026

24 alternatives to API Radar
We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1

I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 2

- 3

- 4

- 5

- 6
keychains.dev▲177Hi HN — I’m a heavy OpenClaw user and, like many others, I’ve been thinking about how to give these new “unleashed” agents secure access to my accounts. Agents need API access to be useful. But API keys are long-lived secrets. And agents are not secure environments. So I built something for myself that quickly turned into a product: keychains.dev. The idea is simple: agents never see raw credentials. With Keychains.dev: • Agents make API calls via a drop-in replacement for curl or JavaScript’s fetch() • They use template variable names instead of embedding credentials • The request is…
Feb 2026 · keychains.dev · its alternatives →
- 7

Gathering and crawling and scraping public shareable AI LLMs links and providing results and insights of your queries. Alerts can be set for fugure findings. HIBP but for AI chats.
Dec 2025 · leaklake.com · its alternatives →
- 8

Check if your secrets and API keys have leaked on GitHub.
2023 · gitguardian.com · its alternatives →
- 9

Intercept malicious transactions before you get scammed
2022 · getradar.xyz · its alternatives →
- 10
Latchkey▲122Hi HN, At Imbue, we’ve been following the rapid developments in the agent landscape and noticed that the way agents interact with third-party services on users’ behalf often leaves a lot to be desired. Integrations are ad hoc, complicated, context-heavy, and either unfriendly to non-technical users or tied to a lock-in of some sort. We‘re experimenting with a command-line tool, Latchkey, that could be used by local agents targeted at non-technical users while avoiding remote intermediaries. As far as we know, this is the only existing approach at the intersection of these two goals. Core…
Mar 2026 · github.com · its alternatives →
- 11

iOS widgets for Github vulnerabilities and build workflows
2021 · radarwidgets.sixcolors.co · its alternatives →
- 12
Radar Relay▲74Secure cryptocurrency trading directly from your wallet
2018 · geckoterminal.com · its alternatives →
- 13

I’ve been experimenting with AI agents lately, and one problem kept coming up: they either get a raw API key with full access or nothing at all. That’s risky, especially if you’re testing agents that can make arbitrary calls. So I hacked together a tiny package called Kage Keys - https://github.com/kagehq/keys It lets you wrap agent actions with scoped, short-lived tokens instead of handing over your real API keys. Example: ```js import { withAgentKey, getLogs } from "@kagehq/keys"; async function main() { await withAgentKey("github:repos.read", async () => {…
2025 · github.com · its alternatives →
- 14

See where your AI API cost & tokens go — no API key needed
Jul 2026 · reasoningdensity.com · its alternatives →
- 15

API Key & Secret Leak Detector
Mar 2026 · marketplace.visualstudio.com · its alternatives →
- 16

Catch exposed API keys and secrets while you browse
Jul 2026 · its alternatives →
- 17
AIProxy▲32Protect your OpenAI key in 5 min with a fully managed proxy
2024 · aiproxy.com · its alternatives →
- 18

We build runtime security for AI agents. The playground started as an internal tool that we used to test our own guardrails. But we kept finding the same types of vulnerabilities because we think about attacks a certain way. At some point you need people who don't think like you. So we open-sourced it. Each challenge is a live agent with real tools and a published system prompt. Whenever a challenge is over, the full winning conversation transcript and guardrail logs get documented publicly. Building the general-purpose agent itself was probably the most fun part. Getting it to reliably use…
Mar 2026 · github.com · its alternatives →
- 19

- 20

api2ai parses OpenAPI Spec to generate an agent that can make API calls. For context, I recently need to explore a handful of API suites and thought LLMs can help expedite this process. After some digging, I found OpenAPI Specs are perfect fit for function calling. Based on a text prompt, api2ai can select the right endpoint and properly parse request params and make api calls. It also handles authentication, currently it supports basic auth, api keys, and bearer token schemes. The tool has helped me explore and see APIs in action without a deep dive into the docs or using postman. It’s open…
2023 · github.com · its alternatives →
- 21

60% of startups leak API keys on GitHub. Find & Auto fix.
Mar 2026 · cyber-guard-nine.vercel.app · its alternatives →
- 22OS
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of…
2023 · openapi.security · its alternatives →
- 23

Hey HN! Built this after watching engineering teams repeatedly get surprised by AI API invoices — no visibility into spend until the bill landed. TokenWatch connects to your OpenAI, Anthropic, and Gemini keys and gives you: - Real-time spend dashboard across projects - Budget thresholds with proactive alerts - Anomaly detection for unusual cost spikes - Duplicate call detection (biggest source of wasted spend I've seen) Free tier supports up to 3 AI systems. Built this in ~2 days as a solo project. Happy to answer anything about the build or the problem space.
Mar 2026 · tokenwatch-ten.vercel.app · its alternatives →
- 24

Open-source intelligence for news & social monitoring
Jul 2026 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →