nowfound

Dev tools · March 10, 2026

SECRETracker

Scan 20+ types of credentials & vulnerabilities instantly.

What it does

Description: > Hardcoded API keys, Stripe tokens, and passwords are a ticking time bomb. SECRETracker (ST) identifies 20+ types of sensitive Credentials and Vulnerabilities before they hit GitHub. ✅ No installation — Just copy and paste. ✅ 20+ Detectors — AWS, Google, GitHub, DB URLs, etc. ✅ Visual Risk Report — Instantly see what needs fixing.

Does the same job

all alternatives →
  • KD
    KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30

    I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

  • GitGuardian2018 · ▲132

    Detect secrets in source code, public and private!

  • GitGuardian Shield2020 · ▲80

    Open sourced application to detect security vulnerabilities.

  • Secure Google Sheets2022 · ▲91

    Mask real data in Google Sheets with pseudonyms (fake data)

  • SB
    Stasher – Burn-after-read secrets from the CLI, no server, no trust2025 · github.com · ▲72

    Stasher is a tiny CLI tool that lets you share encrypted secrets that burn after reading — no accounts, no logins, no servers to trust. I built it because I just wanted to share a password. Not spin up infra. Not register for some "secure" web app. Not trust Slack threads. Just send a secret. Secrets are encrypted client-side with AES-256-GCM. You get a `uuid:key` token to share. Once someone reads it, it's gone. If they don't read it in 10 minutes, it expires and deleted. Everything is verifiable. Every release is signed, SLSA-attested, SBOM-included, and logged in the Rekor transparency…

  • SecretScout — API Key & Secret DetectorJul 2026 · ▲3

    Catch exposed API keys and secrets while you browse

More dev tools this month

the category →
  • Dograh592

    The open source VAPI alternative

    Dev tools · 25d ago · dograh.com

  • Meridian530

    Don't let your work go unnoticed. Get promoted!

    Dev tools · 20d ago · meridiona.com

  • x1516

    Lovable for iPhone apps go from idea to App Store

    Dev tools · 11d ago · x1.new

  • The first open-source price index for GPU compute

    Dev tools · 10d ago · getcomputable.com

  • OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.

    Dev tools · 2d ago · opentrailpaper.com

  • Open-source GTM skills for technical founders

    Dev tools · 29d ago · gtmcofounder.com

Launched alongside, March 2026

the whole month →
  • AI-native CRM that builds itself and does work for you

    AI · Mar 2026 · lightfield.app

  • Tobira.ai730

    A network where AI agents find deals for their humans

    AI · Mar 2026 · tobira.ai

  • Switch from ChatGPT to Claude with import memory feature

    AI · Mar 2026 · claude.com

  • The AI assistant that already knows your work

    AI · Mar 2026 · littlebird.ai

  • Your AI Coworker that proactively executes tasks

    AI · Mar 2026 · viktor.com

  • Jupid664

    File your taxes with Claude Code

    Commerce · Mar 2026 · jupid.com