nowfound

Alternatives

Products that do what LeakFinder does

A Chrome extension to detect browser-visible security leaks

  1. 1

    Track browser extension installations / threats in real-time

    2019

  2. 2

    Report suspicious sites to Google

    2019

  3. 3LP

    OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…

    Dec 2025 · github.com

  4. 4KD

    I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

    Nov 2025 · github.com

  5. 5

    Check if your secrets and API keys have leaked on GitHub.

    2023

  6. 6LS
  7. 7
    Securelog112

    Prevent leaked secrets across code, logs, and pipelines

    2024

  8. 8
    Probely87

    Intuitive and easy-to-use webapp vulnerability scanner

    2018

  9. 9

    Police your chrome extensions

    2018

  10. 10

    Protect yourself from crypto scams and frauds

    2018

  11. 11

    Scan websites for exposed Supabase data and API leaks

    Mar 2026 · leakscope.tech

  12. 12

    See your leaked API keys before attackers do

    Jan 2026

  13. 13AC
  14. 14

    browser extension that sues online trackers

    2024

  15. 15IB

    BoringSSL and nghttp2. Matches JA3N, JA4, and JA4_R fingerprints. Supports HTTP/2, async/await, and works with Cloudflare-protected sites. Not trying to compete with curl_cffi - just a learning project that turned into something functional.

    Nov 2025 · github.com

  16. 16

    Chrome extension to prevent accidental tab closure & cluster

    2022

  17. 17

    Catch exposed API keys and secrets while you browse

    Jul 2026

  18. 18

    Real-time browser protection against secret and data leaks

    Jun 2026 · securelint.in

  19. 19DU

    Hey HN, I built an automated system that tracks malicious Chrome/Edge extensions daily. The database updates automatically by monitoring chrome-stats for removed extensions and scanning security blogs. Currently tracking 1000+ known malicious extensions with extension IDs, names, and dates. I'm working on detection tools (GUI + CLI) to scan locally installed extensions against this database, but wanted to share the raw data first since maintained threat intelligence lists like this are hard to find. The automation runs 24/7 and pushes updates to GitHub. Free to use for research,…

    Feb 2026 · github.com

  20. 20IM

    I started this because similar Chrome extensions were paywalling features and I wanted a free, open source alternative. I'm new to this, so I would appreciate feedback and tips if anyone has some!

    2025 · github.com

  21. 21

    Scan any website for security flaws in one click

    Nov 2025 · chromewebstore.google.com

  22. 22TS

    Hi HN! We’re Ethan and Danny, the authors of Tangent (https://github.com/telophasehq/tangent), a Rust-based log pipeline where all normalization, enrichment, and detection logic runs as WASM plugins. We kept seeing the same problems in the OCSF (https://ocsf.io) community: 1) Schemas change constantly. Large companies have whole teams dedicated to keeping vendor→OCSF mappings up to date. 2) There’s no shared library of mappings, so everyone recreates the same work. 3) Writing mappers is tedious, repetitive work. 4) Most pipelines use proprietary DSLs that are…

    Nov 2025 · github.com

  23. 23

    Secret scanning for shipped-too-fast websites

    Jan 2026 · supaleak.com

  24. 24AT

    I built a Chrome extension that acts as a WebSocket proxy, allowing real-time monitoring, message simulation, and traffic interception. Think "Proxyman for WebSockets" but integrated into Chrome DevTools. Key features: Real-time WebSocket monitoring and message capture Send custom messages in both directions (client ↔ server) Block incoming/outgoing messages for testing Background monitoring (captures connections even when DevTools is closed) Why: I was debugging a WebSocket chat app and needed better tools than browser DevTools. Existing solutions required external proxies or were too…

    2025 · websocket-devtools.com

Ranked by how close each launch is in meaning, then by votes. Refine with a description →