Alternatives
Products that do what SecretSentinel does
Detect hardcoded secrets in VS Code before you commit them
- 1
- 2
- 3
- 4IB
2024 · securelog.com
- 5KD
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com
- 6
- 7
- 8GA
Gitlogue is a CLI that turns your Git commits into a typing-style replay. It visualizes diffs line by line, shows the file tree, and plays back each edit as if it were typed in real time. Key points • Realistic typing animation • Syntax-highlighted diffs • File-tree view • Replay any commit • Self-contained CLI Demo video is in the README. Repo: https://github.com/unhappychoice/gitlogue
Nov 2025 · github.com
- 9
- 10
- 11CA
Hello HN! I built a pre-commit code scanner that checks your staged changes for security vulnerabilities every time you run 'git commit'. I am an inexperienced programmer and this is my first personal project. Any feedback, positive or negative, big or small, relevant or not, would be greatly helpful and appreciated! The tool requires Gitleaks and Python to run, you will also need to use your own AI API key, which I understand is a big setup friction. You can check out my demo video instead if that is more convenient: https://youtu.be/ZYe5vWFRTus?si=9Fv8DhTHktwDK4mV Thank you…
Jun 2026 · github.com
- 12VA
Hey HN! Aldin here, a helping hand to Voiden (https://voiden.md) Voiden is a free, offline, Git-native API client. Your API definitions, docs, and tests all live together. It came out of years of frustration: cloud sync lock-in, paywalled basics, bloated UIs, and lag on even simple requests. So the team built the opposite: an offline tool with no login, no telemetry, no lock-in. Just markdown and hotkeys. It behaves like code: local files, git branches, no cloud nonsense. Terminal is built-in, so you can commit, diff, and push changes right from the app. Docs stay close to your…
2025 · voiden.md
- 13GM
2017 · gitmonkey.io
- 14
- 15PF
The backstory about this GitHub Action: I discussed with an open-source maintainer why they publish npm packages from their local machine and do not use CI/CD pipelines. They said publishing should require human intervention and want to continue using multi-factor authentication to publish to the npm registry. This led to building the wait-for-secrets GitHub Action. It prints a URL in the build log and waits for secrets to be entered using a browser. Once entered, the workflow continues, and secrets can be used in future steps. The latest release of "eslint-plugin-react" to the npm…
2022 · github.com
- 16
AI that finds & fixes security vulnerabilities in your code
May 2026 · code-sentinel.online
- 17
Catch exposed API keys and secrets while you browse
Jul 2026
- 18
- 19
60% of startups leak API keys on GitHub. Find & Auto fix.
Mar 2026 · cyber-guard-nine.vercel.app
- 20OT
hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…
Jul 2026 · search.cerast-intelligence.com
- 21
- 22
- 23KC
Hi HN, I built KeyEnv because I was tired of the "can you Slack me the Stripe key?" workflow. The problem: My team's secrets lived in a mix of Slack DMs, shared Google Docs, and .env files that definitely weren't in .gitignore at some point. Enterprise tools like Vault required more DevOps time than we had. Doppler was close but felt heavier than we needed. What KeyEnv does: keyenv init # link project keyenv pull # sync secrets to local .env keyenv run -- npm start # inject secrets, run command That's basically it. Secrets are encrypted client-side (AES-256-GCM) before leaving your machine.…
Jan 2026 · keyenv.dev
- 24
Find exposed .env files in your GitHub repos instantly
Apr 2026 · scan-guard-io.lovable.app
Ranked by how close each launch is in meaning, then by votes. Refine with a description →