Supaleak

What it does

Supaleak scans live websites for exposed API keys, tokens, JWTs, Supabase keys, and other sensitive data before attackers do. For teams shipping fast with vibe coding, it checks real JavaScript files, validates leaks, and sends alerts so you can fix issues before they reach production. Features - Detect API keys, tokens, JWTs, Supabase keys, and more - Validates if leaked secrets are usable - Scheduled scans (daily, weekly, custom) - Email alerts on new leaks - CSV export for audits

Automatically scan websites to detect exposed API keys, tokens, and sensitive data before attackers do.

development teams are shipping faster than ever. , visual coders, low-code tools, and rapid prototyping mean code is deployed in hours, not weeks. while this speed enables innovation, it also increases the risk of exposing sensitive credentials—api keys, tokens, and secrets—in javascript files. supaleak provides continuous monitoring of your production websites, automatically scanning javascript files for exposed secrets after launch . catch leaks before attackers do, minimize security risks, and protect your infrastructure—all while maintaining your development velocity. Add single URL or bulk import multiple websites from file (.txt or .csv) Scans detect potential secrets, but many are…from supaleak.com

• 
  HasMySecretLeaked2023 · gitguardian.com · ▲160

  Check if your secrets and API keys have leaked on GitHub.

• 
  Supaguard Jan 2026 · supaguard.pro · ▲91

  Scan, Detect & Protect Your Supabase Data

• 
  KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30

  I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

• 
  LeakScope — Supabase Security AuditorMar 2026 · leakscope.tech · ▲3

  Scan websites for exposed Supabase data and API leaks

• 
  Helix Supabase Scanner by PentestlyOct 2025 · ▲7

  One-click scans for Supabase security peace of mind.

• 
  YikesFeb 2026 · yikessecurity.com · ▲3

  Find auth gaps and leaked secrets in your vibe-coded app

• 
  SimCity, but with Permits▲911

  A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.

  Life & fun · 2d ago · permit.petercai.com

• IV
  I've been paying for a rural Tanzanian's education for 10 years▲778

  Life & fun · 14d ago · tanzaniaeducationproject.org

• 
  Bigwords.page – Turn any screen into a sign. The URL is the app▲728

  Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.

  Life & fun · 15d ago · bigwords.page

• 
  Guitoro, a virtual guitar you strum with your keyboard▲573

  Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.

  Life & fun · 9d ago · guitoro.com

• 
  See *almost* any carriers phone settings▲432

  Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.

  Life & fun · 13d ago · carrierexplode.com

• 
  The whole Solar System and every tracked satellite, live in the browser▲407

  Life & fun · 23d ago · space.bl2.net

• IN
  isometric.nyc – giant isometric pixel art map of NYC▲1,325

  Hey HN! I wanted to share something I built over the last few weeks: isometric.nyc is a massive isometric pixel art map of NYC, built with nano banana and coding agents. I didn't write a single line of code. Of course no-code doesn't mean no-engineering. This project took a lot more manual labor than I'd hoped! I wrote a deep dive on the workflow and some thoughts about the future of AI coding and creativity: http://cannoneyed.com/projects/isometric-nyc

  AI · Jan 2026 · cannoneyed.com

• 
  Cowork▲1,088

  Turn Claude into your digital coworker

  AI · Jan 2026 · claude.com

• 
  DataFast▲867

  Revenue-first analytics

  Growth · Jan 2026 · datafa.st

• 
  OpenClaw▲836

  The AI that actually does things

  AI · Jan 2026 · openclaw.ai

• 
  Kilo Code Reviewer▲799

  Automatic AI-powered code reviews the moment you open a PR

  Dev tools · Jan 2026 · kilo.ai

• 
  PostSyncer▲793

  AI Content Maker, for Social Media Publishing

  AI · Jan 2026 · postsyncer.com