nowfound

AI · December 3, 2025

DomainOptic: The All-in-One Toolkit

I built a tool that scans deployed websites for secrets in production bundles and forgotten API endpoints. https://domainoptic.com/audit Unlike repo scanners (TruffleHog, Gitleaks), this scans what's actually live. What an attacker sees when they view source or probe common paths. Tested it on 20 sites from Hacker News over the last two days. All indie projects, side hustles, Show HN launches. Results: - 1 site had 6 actual secrets (1 cloud credential, 5 API keys) - 5 sites (25%) had exposed API documentation (/swagger, /graphql, /api-docs) - 2 sites had…

DomainOptic: The All-in-One Toolkit launched on December 3, 2025 with 2 votes, #5,292 of 11,628 launches that month.

What it does

Stop juggling 5 different tools. Check domain availability, analyze DNS health, verify SSL certificates, audit security headers, scan blacklists, and brandability all in one place. Plus AI name generation. Critical for makers: No front-running, no signup, and no ads.

Review the public signals that can affect search and AI access, run a passive security audit, check domain availability, and generate meaningful domain names.

See what search engines and AI assistants can read on your site, run a read-only security audit, and research your next domain. The passive audit reviews public security and site-health signals without active exploitation or credential testing. An account can store audit results and enable monitoring alerts. Enter a public domain to get a directional report covering potential exposed-secret patterns , security headers , SSL certificate health , selected DNS and email records , blacklist reputation responses , and third-party script tags declared by the homepage. DomainOptic does not currently validate DNSSEC or CAA. We only scan what a browser can fetch. No endpoint probing or credential…from domainoptic.com

In the maker’s words, at launch

I built a tool that scans deployed websites for secrets in production bundles and forgotten API endpoints. https://domainoptic.com/audit Unlike repo scanners (TruffleHog, Gitleaks), this scans what's actually live. What an attacker sees when they view source or probe common paths. Tested it on 20 sites…

Does a similar job

all alternatives →
  • Osint tool that finds exposed files on domainsJul 2026 · search.cerast-intelligence.com · ▲58

    hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…

  • DomainIQ.dev2025 · domainiq.dev · ▲6

    The AI-powered command center for domain investors

  • Domain Scan ToolsMay 2026 · domainscan.tools · ▲5

    Detect domain security issues before they hurt your business

  • CabbageSEOFeb 2026 · cabbageseo.com · ▲12

    I built a tool that scans AI platforms with buyer questions relevant to your domain and shows you whether they mention you or not. Enter your domain, it generates queries based on your space, sends them to ChatGPT, Perplexity, and Google AI, then scores you out of 100 based on how often you show up in the responses. The part I think is actually useful: it doesn't just tell you the problem. It shows you which queries you're missing from, why, and gives you fix pages (structured content designed to be citable by LLMs) and weekly action plans. Free scan on the homepage, no signup needed. Tech:…

  • IB
  • DomainScan AI2025 · domainscan.in · ▲8

    Find. Scan. Know. Your Go-To for Domain Insights.

More ai this month

the category →
  • Video model that turns script into viral social media videos

    AI · 18d ago · spira.ai

  • The browser where Claude Code and Codex work beside you

    AI · 18d ago · rill.love

  • Kolibri is Aleph Alpha

    AI · 19d ago · tej.as

  • Paintings by AI models: programs run through a simulation of oil paint.

    AI · 21d ago · stillwet.art

  • A real-time world model you can explore and change

    AI · 29d ago · world.pixverse.video

  • Beam.win▲378

    Run AI agents on one Mac and use its windows on another

    AI · 4d ago · beam.win

Source: Product Hunt launch ↗ · launch text quoted in part

Launched alongside, December 2025

the whole month →
  • GP

    Life & fun · Dec 2025 · dosaygo-studio.github.io

  • Hi everyone! My name's Luke and I made the original Jmail here alongside Riley Walz. We had a ton of friends collaborate on building out more of the app suite last night in lieue of DOJ's "Epstein files" release. Please AMA!

    Life & fun · Dec 2025 · jmail.world

  • Design and ship studio-grade landing pages with AI

    AI · Dec 2025 · loki.build

  • AI turns your health goals into a 7-day menu & grocery list

    AI · Dec 2025 · planeatai.com

  • Community, All the HN belong to you. This is an archive of hacker news that fits in your browser. When I made HN Made of Primes I realized I could probably do this offline sqlite/wasm thing with the whole GBs of archive. The whole dataset. So I tried it, and this is it. Have Hacker News on your device. Go to this repo (https://github.com/DOSAYGO-STUDIO/HackerBook): you can download it. Big Query -> ETL -> npx serve docs - that's it. 20 years of HN arguments and beauty, can be yours forever. So they'll never die. Ever. It's the unkillable static archive of HN and it's…

    Dev tools · Dec 2025 · hackerbook.dosaygo.com

  • AI video studio for viral social clips

    AI · Dec 2025 · cybercut.ai