DomainOptic: The All-in-One Toolkit
I built a tool that scans deployed websites for secrets in production bundles and forgotten API endpoints. https://domainoptic.com/audit Unlike repo scanners (TruffleHog, Gitleaks), this scans what's actually live. What an attacker sees when they view source or probe common paths. Tested it on 20 sites from Hacker News over the last two days. All indie projects, side hustles, Show HN launches. Results: - 1 site had 6 actual secrets (1 cloud credential, 5 API keys) - 5 sites (25%) had exposed API documentation (/swagger, /graphql, /api-docs) - 2 sites had…
DomainOptic: The All-in-One Toolkit launched on December 3, 2025 with 2 votes, #5,292 of 11,628 launches that month.
What it does
Stop juggling 5 different tools. Check domain availability, analyze DNS health, verify SSL certificates, audit security headers, scan blacklists, and brandability all in one place. Plus AI name generation. Critical for makers: No front-running, no signup, and no ads.
Review the public signals that can affect search and AI access, run a passive security audit, check domain availability, and generate meaningful domain names.
See what search engines and AI assistants can read on your site, run a read-only security audit, and research your next domain. The passive audit reviews public security and site-health signals without active exploitation or credential testing. An account can store audit results and enable monitoring alerts. Enter a public domain to get a directional report covering potential exposed-secret patterns , security headers , SSL certificate health , selected DNS and email records , blacklist reputation responses , and third-party script tags declared by the homepage. DomainOptic does not currently validate DNSSEC or CAA. We only scan what a browser can fetch. No endpoint probing or credential…from domainoptic.com
In the maker’s words, at launch
I built a tool that scans deployed websites for secrets in production bundles and forgotten API endpoints. https://domainoptic.com/audit Unlike repo scanners (TruffleHog, Gitleaks), this scans what's actually live. What an attacker sees when they view source or probe common paths. Tested it on 20 sites…
Does a similar job
all alternatives →
Osint tool that finds exposed files on domainsJul 2026 · search.cerast-intelligence.com · ▲58hey guys, wanted to show one of my side projects i just made public. the idea is basically another osint tool for pentesters and bug bounty hunters. it watches certificate transparency logs and checks newly-seen domains for exposed stuff like .env files, open .git dirs, config files, db dumps and so on, and puts whatever it finds into a searchable db. you just search a domain (or part of one) and see what's exposed. it's read-only and free. one thing i've been thinking about adding is a way to register for certain keywords and get notified when something new shows up for that search. would…

Domain Scan ToolsMay 2026 · domainscan.tools · ▲5Detect domain security issues before they hurt your business
CabbageSEOFeb 2026 · cabbageseo.com · ▲12I built a tool that scans AI platforms with buyer questions relevant to your domain and shows you whether they mention you or not. Enter your domain, it generates queries based on your space, sends them to ChatGPT, Perplexity, and Google AI, then scores you out of 100 based on how often you show up in the responses. The part I think is actually useful: it doesn't just tell you the problem. It shows you which queries you're missing from, why, and gives you fix pages (structured content designed to be citable by LLMs) and weekly action plans. Free scan on the homepage, no signup needed. Tech:…
- IBI built a tool that helps people scan and clean any repo for secrets2024 · securelog.com · ▲20

More ai this month
the category →



Paintings by AI models: programs run through a simulation of oil paint.
AI · 21d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 29d ago · world.pixverse.video

Source: Product Hunt launch ↗ · launch text quoted in part
Launched alongside, December 2025
the whole month →- GP
Life & fun · Dec 2025 · dosaygo-studio.github.io

Hi everyone! My name's Luke and I made the original Jmail here alongside Riley Walz. We had a ton of friends collaborate on building out more of the app suite last night in lieue of DOJ's "Epstein files" release. Please AMA!
Life & fun · Dec 2025 · jmail.world

PlanEat AI▲733AI turns your health goals into a 7-day menu & grocery list
AI · Dec 2025 · planeatai.com

Community, All the HN belong to you. This is an archive of hacker news that fits in your browser. When I made HN Made of Primes I realized I could probably do this offline sqlite/wasm thing with the whole GBs of archive. The whole dataset. So I tried it, and this is it. Have Hacker News on your device. Go to this repo (https://github.com/DOSAYGO-STUDIO/HackerBook): you can download it. Big Query -> ETL -> npx serve docs - that's it. 20 years of HN arguments and beauty, can be yours forever. So they'll never die. Ever. It's the unkillable static archive of HN and it's…
Dev tools · Dec 2025 · hackerbook.dosaygo.com
