SecurityScan.dev
Find leaked API keys & open Supabase/Firebase in 20 seconds
What it does
I kept seeing indie makers lose thousands because of one exposed Stripe/OpenAI key or disabled Supabase RLS. Stupidly fast scanner made exactly for Next.js / React apps on Supabase, Firebase, Vercel, Netlify. Drop your URL → in 20 seconds it tells you if you’re leaking: API keys in JS bundle Supabase RLS disabled (actually tests if DB is public) Open Firebase buckets & RTDB Exposedenv, /.git, admin panels Old subdomains + GitHub search links for leaks One scan can save you $10k+ in minutes.
Does a similar job
all alternatives →
LeakScope — Supabase Security AuditorMar 2026 · leakscope.tech · ▲3Scan websites for exposed Supabase data and API leaks
- KDKeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30
I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…
More dev tools this month
the category →
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
Open-source GTM skills for technical founders
Dev tools · 30d ago · gtmcofounder.com
Launched alongside, December 2025
the whole month →- GP
Life & fun · Dec 2025 · dosaygo-studio.github.io
- JG
Hi everyone! My name's Luke and I made the original Jmail here alongside Riley Walz. We had a ton of friends collaborate on building out more of the app suite last night in lieue of DOJ's "Epstein files" release. Please AMA!
Life & fun · Dec 2025 · jmail.world
PlanEat AI▲733AI turns your health goals into a 7-day menu & grocery list
AI · Dec 2025 · planeatai.com
- 2G
Community, All the HN belong to you. This is an archive of hacker news that fits in your browser. When I made HN Made of Primes I realized I could probably do this offline sqlite/wasm thing with the whole GBs of archive. The whole dataset. So I tried it, and this is it. Have Hacker News on your device. Go to this repo (https://github.com/DOSAYGO-STUDIO/HackerBook): you can download it. Big Query -> ETL -> npx serve docs - that's it. 20 years of HN arguments and beauty, can be yours forever. So they'll never die. Ever. It's the unkillable static archive of HN and it's…
Dev tools · Dec 2025 · hackerbook.dosaygo.com
