SecurityScan.dev
Find leaked API keys & open Supabase/Firebase in 20 seconds
SecurityScan.dev launched on December 11, 2025.
What it does
I kept seeing indie makers lose thousands because of one exposed Stripe/OpenAI key or disabled Supabase RLS. Stupidly fast scanner made exactly for Next.js / React apps on Supabase, Firebase, Vercel, Netlify. Drop your URL → in 20 seconds it tells you if you’re leaking: API keys in JS bundle Supabase RLS disabled (actually tests if DB is public) Open Firebase buckets & RTDB Exposedenv, /.git, admin panels Old subdomains + GitHub search links for leaks One scan can save you $10k+ in minutes.
Does a similar job
all alternatives →
LeakScope — Supabase Security AuditorMar 2026 · leakscope.tech · ▲3Scan websites for exposed Supabase data and API leaks
KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
HasMySecretLeaked2023 · gitguardian.com · ▲160Check if your secrets and API keys have leaked on GitHub.

API RadarJan 2026 · apiradar.live · ▲77We built API Radar to track exposed API keys from OpenAI, Claude, Gemini, and other major providers—in real time—from public GitHub repositories. Why? Leaked AI keys are everywhere. They power bots, cost companies thousands, and even expose user data. But no one had a clean dashboard to see the leaks as they happen — until now. What you’ll find: Full redacted + raw API key leaks Real-time feed of exposed repos Leaderboards by author, repo, and provider Filtering by provider (OpenAI, Claude, Gemini, etc.) Timeline of key exposure trends Built for security researchers, devs, and AI companies…
More dev tools this month
the category →

open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 28d ago · github.com

Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 26d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 23d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 21d ago · talanoa.email
CoreSpeed▲332One MCP for everything your agents need: apps, memory, tools
Dev tools · 28d ago · corespeed.io
Source: Product Hunt launch ↗
Launched alongside, December 2025
the whole month →- GP
Life & fun · Dec 2025 · dosaygo-studio.github.io

Hi everyone! My name's Luke and I made the original Jmail here alongside Riley Walz. We had a ton of friends collaborate on building out more of the app suite last night in lieue of DOJ's "Epstein files" release. Please AMA!
Life & fun · Dec 2025 · jmail.world

PlanEat AI▲733AI turns your health goals into a 7-day menu & grocery list
AI · Dec 2025 · planeatai.com

Community, All the HN belong to you. This is an archive of hacker news that fits in your browser. When I made HN Made of Primes I realized I could probably do this offline sqlite/wasm thing with the whole GBs of archive. The whole dataset. So I tried it, and this is it. Have Hacker News on your device. Go to this repo (https://github.com/DOSAYGO-STUDIO/HackerBook): you can download it. Big Query -> ETL -> npx serve docs - that's it. 20 years of HN arguments and beauty, can be yours forever. So they'll never die. Ever. It's the unkillable static archive of HN and it's…
Dev tools · Dec 2025 · hackerbook.dosaygo.com
