Detectify

What it does

Most API scanners are noisy, repackaged engines. We built a proprietary, research-led scanner that finds real exploits, not a backlog of false positives. Get actionable findings you can actually trust.

Find what's exposed and fix what matters, before attackers do. Real-world hacker research at machine speed. Trusted by 2,100+ teams.

Understand your real attack surface. Detectify combines continuous attack surface discovery with deep application security testing, using real-world hacker research to prove what is actually exploitable. Turn a resource-limited program into one that scales across your entire attack surface. We handle discovery, testing, and coverage, you focus on the fixes. API Scanning actively tests your APIs the way an attacker would, using 100% payload-based techniques and our dynamic fuzzing engine. Surface Monitoring continuously discovers and maps every asset across your external attack surface, running payload-based testing across all of it. Application Scanning goes beyond the surface with deep,…from detectify.com

• 
  Detectly2025 · detectly.xyz · ▲112

  Sniff out AI slop

• 
  API RadarJan 2026 · apiradar.live · ▲77

  We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…

• 
  KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30

  I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

• 
  Real-time security risks detection for any website or server2020 · hostedscan.com · ▲22

  Online automated vulnerability scanner to secure firewalls, servers, web applications, and apis. Try 14 days for free.

• 
  ScanityAug 2026 · scanity.dev · ▲7

  Security Scanner for AI-generated Code

• 
  Protego2025 · ▲12

  Website security scanner

• 
  /dev/null▲468

  a social network for devs

  Dev tools · 2d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 22d ago · openbot.run

• 
  Talanoa▲340

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 27d ago · corespeed.io

• 
  Apple Watch▲616

  The most personal device Apple has ever created

  Life & fun · 2014 · apple.com

• 
  Zero To One▲615

  Peter Thiel's new book on Startups

  Life & fun · 2014 · amazon.sg

• 
  ReadMe▲601

  Beautiful Documentation Made Easy

  Life & fun · 2014 · readme.com

• 
  Forest▲533

  Put down your phone and stay focused. Or a tree will die. 🌳😵

  Life & fun · 2014 · forestapp.cc

• 
  Spectacle▲458

  Move and resize windows with ease on Mac.

  Life & fun · 2014 · spectacleapp.com

• 
  iPhone 6▲397

  Bigger, better iPhone

  Life & fun · 2014 · apple.com