Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.

🔐 Scan .env files and git history for accidentally committed secrets, API keys, and credentials. Pure Python, no dependencies.

Catch leaked secrets and frontend exposure in CI, with SARIF for GitHub code scanning

BetterLeaks - scan the world for exposed secrets. High-performance secret scanner in Go. Find leaked API keys, tokens, credentials across public sources.

🐕 Hunt leaked Shodan API keys across public GitHub and validate them live — zero-dependency Node.js.

A command-line tool to run global search lookups against the Flare API and export events and credentials to JSON or CSV. Uses Flare’s token-based auth and follows pagination so large result sets are fully exported.

Cloud-hosted Betterleaks for GitHub and S3 secret scanning with live vendor-API validation. Apify actor.