LeakRadar

What it does

LeakRadar is an open-core DAST security engine for REST APIs. It detects Broken Object Level Authorization (BOLA/IDOR) flaws and exposed credentials with near-zero false positives using a pairwise token heuristic algorithm. Includes Executive PDF Reports, automated Python remediation code fixes, and Custom Agency Logo White-Labeling for pen-testers and vCISOs.

An open-core API security reconnaissance engine. Harvests JWT identity claims, prunes dynamic response volatility across three baselines, and generates automated code fixes for detected BOLA vulnerabilities before production compromise. Specifically designed for security researchers, pentest teams, and bug bounty hunters to audit REST APIs and patch authorization flaws automatically. Generates drop-in authorization patch code (FastAPI, Django, Express, Spring Boot) for confirmed BOLA vulnerabilities. Supports pay-as-you-go metered tokens or local air-gapped models. Executes triple identical User A requests before cross-token evaluation to identify and strip dynamic nonces, session…from ajmax76.github.io

• 
  LeaksID2021 · leaksid.com · ▲316

  Enrich private docs with dynamic invisible anti-leak marks

• 
  LeakRadar.ioFeb 2026 · leakradar.io · ▲1

  Find leaked credentials before attackers do

• 
  API RadarJan 2026 · apiradar.live · ▲77

  We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…

• 
  ServiceRadar – open-source Network Observability Platform2025 · github.com · ▲61

  ServiceRadar is an open-source platform for distributed, secure network management and observability, scaling to 100k+ devices. Born from frustration with complex traditional NMS tools like Zabbix, it bridges legacy (SNMP/syslog) and modern (gNMI, OTLP) protocols for cloud-native environments. We built ServiceRadar to simplify monitoring hybrid telecom networks, evolving it into a Kubernetes-native solution with Helm and Docker support. It uses mTLS with SPIFFE/SPIRE, NATS JetStream for event streaming (90M+ EPS), and SRQL for intuitive queries. Integrated with OpenTelemetry,…

• 
  Android Secrets Leak Scanner2016 · ▲74

  Detect secret & credential leaks in code of any Android app.

• 
  Software leak detection by Hivecode2019 · ▲8

  Track leakage of your source code/data. FREE forever

• 
  /dev/null▲483

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲345

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• TL
  The load-bearing vocabulary of Claude▲710

  Life & fun · Aug 2026 · louisabraham.github.io

• 
  Hey Noah▲656

  A proactive AI executive assistant for founders

  AI · Aug 2026 · heynoah.io

• 
  Clipto MCP▲655

  Hey HN, We recently built Clipto. It’s a tool that lets you search over terabytes of video, audio, and images on your computer, without relying on the cloud. Motivation: we probably all had this similar experience, we know a moment exists in a video or audio, but finding it takes hours scrubbing the timeline. You can send all the media to process in the cloud, but it’s slow, expensive and raises privacy concerns. So we decided to build our own on-device media search engine. How it works (high level): 1. We ingest video, audio, image; normalize formats via ffmpeg; run content analysis to…

  Work · Aug 2026 · clipto.com

• 
  Simple algorithm and color space to generate diverse skin tones▲627

  Hello HN! I found that picking out plausible but diverse skin tones for my digital art and game development projects was kind of difficult, and I got curious about if there was a way to define a color space that made it easy. I've built a color picker and procedural generation algorithm based on the space as well as a bunch of other fun js features and demos throughout the page that use the equations. If you find it interesting, I have lots of explanations of how I built it and what properties the space has. The methodology might be a bit shaky, but hopefully the result is as helpful for…

  Life & fun · Aug 2026 · toneyalexander.github.io

• 
  AdAnt AI▲620

  Claude for viral, high-converting social ads

  AI · Aug 2026 · adant.ai

• 
  Astute▲606

  Automate your B2B brand going viral, with new media creators

  AI · Aug 2026 · company-app.joinastute.com