nowfound

Dev tools · December 11, 2025

SecurityScan.dev

Find leaked API keys & open Supabase/Firebase in 20 seconds

SecurityScan.dev launched on December 11, 2025.

What it does

I kept seeing indie makers lose thousands because of one exposed Stripe/OpenAI key or disabled Supabase RLS. Stupidly fast scanner made exactly for Next.js / React apps on Supabase, Firebase, Vercel, Netlify. Drop your URL → in 20 seconds it tells you if you’re leaking: API keys in JS bundle Supabase RLS disabled (actually tests if DB is public) Open Firebase buckets & RTDB Exposedenv, /.git, admin panels Old subdomains + GitHub search links for leaks One scan can save you $10k+ in minutes.

Does a similar job

all alternatives →
  • Supaguard Jan 2026 · supaguard.pro · ▲91

    Scan, Detect & Protect Your Supabase Data

  • LeakScope — Supabase Security AuditorMar 2026 · leakscope.tech · ▲3

    Scan websites for exposed Supabase data and API leaks

  • KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30

    I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

  • HasMySecretLeaked2023 · gitguardian.com · ▲160

    Check if your secrets and API keys have leaked on GitHub.

  • Supabase (Beta)2020 · supabase.com · ▲314

    The open source Firebase alternative.

  • API RadarJan 2026 · apiradar.live · ▲77

    We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…

More dev tools this month

the category →
  • /dev/null▲486

    a social network for devs

    Dev tools · 3d ago · dev-null.sh

  • open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

    Dev tools · 28d ago · github.com

  • Contribute to reladraw/reladraw development by creating an account on GitHub.

    Dev tools · 26d ago · github.com

  • OpenBot▲362

    Grok Bot alternative: free, local, open-source, multiplayer

    Dev tools · 23d ago · openbot.run

  • Talanoa▲346

    Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

    Dev tools · 21d ago · talanoa.email

  • CoreSpeed▲332

    One MCP for everything your agents need: apps, memory, tools

    Dev tools · 28d ago · corespeed.io

Source: Product Hunt launch ↗

Launched alongside, December 2025

the whole month →
  • GP

    Life & fun · Dec 2025 · dosaygo-studio.github.io

  • Hi everyone! My name's Luke and I made the original Jmail here alongside Riley Walz. We had a ton of friends collaborate on building out more of the app suite last night in lieue of DOJ's "Epstein files" release. Please AMA!

    Life & fun · Dec 2025 · jmail.world

  • Design and ship studio-grade landing pages with AI

    AI · Dec 2025 · loki.build

  • AI turns your health goals into a 7-day menu & grocery list

    AI · Dec 2025 · planeatai.com

  • Community, All the HN belong to you. This is an archive of hacker news that fits in your browser. When I made HN Made of Primes I realized I could probably do this offline sqlite/wasm thing with the whole GBs of archive. The whole dataset. So I tried it, and this is it. Have Hacker News on your device. Go to this repo (https://github.com/DOSAYGO-STUDIO/HackerBook): you can download it. Big Query -> ETL -> npx serve docs - that's it. 20 years of HN arguments and beauty, can be yours forever. So they'll never die. Ever. It's the unkillable static archive of HN and it's…

    Dev tools · Dec 2025 · hackerbook.dosaygo.com

  • AI video studio for viral social clips

    AI · Dec 2025 · cybercut.ai