Amal-David/keyleak-detector

Runtime leak detector for modern web apps - finds exposed API keys, validates BaaS misconfigurations (Supabase/Firebase RLS), and catches secrets in JS bundles. Chrome extension + CLI.

30 best points · 7 comments · 1 Hacker News post · 275 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: KeyLeak Detector – Scan websites for exposed API keys and secrets (30 points, 7 comments, by amaldavid, 2025-11-01)