KeyLeak Detector – Scan websites for exposed API keys and secrets
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
KeyLeak Detector – Scan websites for exposed API keys and secrets launched on November 1, 2025 with 30 votes, #538 of 9,796 launches that month and more than 90% of that year's launches.
In plain words
KeyLeak Detector scans websites using a headless browser and network interception to identify accidentally exposed API keys and secrets in frontend code. It detects over 50 types of leaked credentials including AWS keys, Stripe tokens, database connection strings, and LLM API tokens. Designed for development teams who want to catch security risks before deployment, it runs a quick scan on staging environments or existing sites in approximately 30 seconds per page.
written from the facts on this page · September 2026
From the sources
Runtime leak detector for modern web apps — finds exposed API keys, validates BaaS misconfigurations (Supabase/Firebase RLS), and catches secrets in JS bundles. Chrome extension + CLI. - Amal-David/keyleak-detector
In the maker’s words, at launch
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a <script> tag visible to anyone who opens DevTools. I've personally witnessed this happen to at…
Does a similar job
all alternatives →
API RadarJan 2026 · apiradar.live · ▲77We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…
HasMySecretLeaked2023 · gitguardian.com · ▲160Check if your secrets and API keys have leaked on GitHub.
SecretScout — API Key & Secret DetectorJul 2026 · ▲3Catch exposed API keys and secrets while you browse
keychains.devFeb 2026 · keychains.dev · ▲177Hi HN — I’m a heavy OpenClaw user and, like many others, I’ve been thinking about how to give these new “unleashed” agents secure access to my accounts. Agents need API access to be useful. But API keys are long-lived secrets. And agents are not secure environments. So I built something for myself that quickly turned into a product: keychains.dev. The idea is simple: agents never see raw credentials. With Keychains.dev: • Agents make API calls via a drop-in replacement for curl or JavaScript’s fetch() • They use template variable names instead of embedding credentials • The request is…
- GMGitMonKey – monitor your repos and commits for exposed private keys2017 · gitmonkey.io · ▲70
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 19d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 28d ago · world.pixverse.video
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, November 2025
the whole month →
Guideflow▲1,338Create interactive product demos and step-by-step guides in seconds with Guideflow, the leading AI-powered demo automation tool.
AI · Nov 2025 · guideflow.com
Hardware and software projects by Ali Roberts
Life & fun · Nov 2025 · bitsnpieces.dev
Welltory▲1,028Measure your wellness. Use data to feel great every day.
Work · Nov 2025 · welltory.com
TrustMRR▲833LLM Gateway is a b2b artificial intelligence based in United States, founded in 2025. $259,539/month in verified Stripe revenue. $78,764 MRR. Ahrefs Domain Rating 52/100. growing 55% month-over-month. Track LLM Gateway's verified metrics on TrustMRR.
Growth · Nov 2025 · trustmrr.com
Boing▲782Life & fun · Nov 2025 · boing.greg.technology