Dev tools · alternatives · 2026
24 alternatives to SecurityScan.dev
Find leaked API keys & open Supabase/Firebase in 20 seconds
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
- 2
Scan websites for exposed Supabase data and API leaks
Mar 2026 · leakscope.tech · its alternatives →
- 3
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
Nov 2025 · github.com · its alternatives →
- 4
Check if your secrets and API keys have leaked on GitHub.
2023 · gitguardian.com · its alternatives →
- 5
- 6
API Radar▲77We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…
Jan 2026 · apiradar.live · its alternatives →
- 7
Supaleak▲14Secret scanning for shipped-too-fast websites
Jan 2026 · supaleak.com · its alternatives →
- 8
Announcing Appwrite 0.14 with 11 Cloud Function Runtimes! 🥳
2022 · github.com · its alternatives →
- 9
keychains.dev▲177Hi HN — I’m a heavy OpenClaw user and, like many others, I’ve been thinking about how to give these new “unleashed” agents secure access to my accounts. Agents need API access to be useful. But API keys are long-lived secrets. And agents are not secure environments. So I built something for myself that quickly turned into a product: keychains.dev. The idea is simple: agents never see raw credentials. With Keychains.dev: • Agents make API calls via a drop-in replacement for curl or JavaScript’s fetch() • They use template variable names instead of embedding credentials • The request is…
Feb 2026 · keychains.dev · its alternatives →
- 10
Hi HN — we've built a testing framework for Supabase that spins up fast, isolated Postgres databases for each test case. It’s designed to make RLS policies easy to validate with real database state, without global test fixtures or mock auth. Features: - Instant isolated Postgres DBs per test - Automatic rollback after each test - RLS-native testing with `.setContext()` for auth simulation - Flexible seeding (SQL, CSV, JSON, JS) - Works with Jest, Mocha, and any async test runner - CI-friendly (runs cleanly in GitHub Actions) We also published example projects and a free set of tutorials:…
Nov 2025 · npmjs.com · its alternatives →
- 11
- 12
Hi, HN! As a cofounder of Couchbase, I pioneered mobile sync, and I’ve always wanted to bring the speed and reliability of local-first data to the web, incubating PouchDB among other efforts. I learned the constraints of real world financial applications at McKinsey & Company FinLab, and Merkle integrity research at Protocol Labs taught me smart contract data structures. As part of the JavaScript community (and early hosting provider for NPM) I’ve been waiting, and now with the availability of APIs like Passkeys and Origin Private Filesystem, I’m happy to say the browser is ready to support…
2024 · fireproof.storage · its alternatives →
- 13
One-click scans for Supabase security peace of mind.
Oct 2025 · its alternatives →
- 14
Detect secret & credential leaks in code of any Android app.
2016 · its alternatives →
- 15
Hi HN, I'm an Indie Dev. Building web apps, I struggled to check for vulnerabilities on a surface and a deeper level at the same time. Most free scanners gave vague results or missed dependency issues and tools for deeper searches are mainly for enterprise. Also with vibe coding the issue of security is rising more and more. I built SecureNow - a simple web scanner built with Next.js and Supabase that checks SSL, ports, dependencies, headers, and basic vulns. It caught real issues in my projects. Free basic scans at securenow.app. Feedback on accuracy and missing features? Thanks!
Dec 2025 · securenow.dev · its alternatives →
- 16
- 17
Yikes▲3Find auth gaps and leaked secrets in your vibe-coded app
Feb 2026 · yikessecurity.com · its alternatives →
- 18
Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.
2020 · hostedscan.com · its alternatives →
- 19
Keelscan▲5Find the data leaks in your app before buyers do
Jul 2026 · keelscan.com · its alternatives →
- 20SO
Heya HN! We put together a post [0] explaining the motivation for building Supafana in some detail, but in short: we wanted a way to get to database graphs with an effort similar to starting a Supabase project - in essence, in a few clicks. It feels unusual to open-source what is essentially a SaaS infrastructure project, but it also feels pretty great - all our code is here: https://github.com/fogbender/supafana We have some discount codes available - let me know if you want one ([email protected]). Thanks for reading! [0]…
2024 · supafana.com · its alternatives →
- 21
AttackerView▲13Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t
Feb 2026 · attackerview.com · its alternatives →
- 22
Catch exposed API keys and secrets while you browse
Jul 2026 · its alternatives →
- 23
Nullgaze▲3Scan any website for leaked secrets in seconds
Feb 2026 · nullgaze-ohm8.vercel.app · its alternatives →
- 24
Free security scan for apps you built with AI
Aug 2026 · uxcontinuum.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →