secret-scanning

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

Open source AI code review for coding agents. A separate reviewer checks every change your agent writes before you push, in Claude Code, Codex, Cursor and Cline. No account or key of its own.

Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.

AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.

Protect your secrets using Gitleaks-Action

Scan for secrets in dangling commits on GitHub using GH Archive data.

Local privacy preflight for files, folders, and archives—catch secrets, PII, metadata, and hidden document content before sharing.

Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts).

Examples of Custom Secret Scanning Patterns for use with GitHub Secret Protection/Advanced Security

Find known secrets in your AI coding agent sessions (Claude Code, Codex, Cursor), then guard the next one with local hooks that trace risky commands to the content that dictated them. Open source, no telemetry.

Budget-aware context compiler for coding agents - scan, grade, spark-test and pour a hard-budget context pack

Secret scanner for exposed Google Gemini API keys in JavaScript, source maps, Wayback snapshots and Android APKs. Validates keys, reports restrictions and bypasses.

GPU-accelerated secret scanner for code, Git history, containers, cloud, browser assets, and CI. 923 detectors, live verification, CUDA, Metal, WGPU.

Claude Code mods: panes, bands, prompt guards, secret handling and memory tools

Official TruffleHog Burp Suite Extension. Scan Burp Suite traffic for 800+ different types of secrets (API keys, passwords, SSH keys, etc) using TruffleHog.

Find and redact secrets in AI coding agent histories (Claude Code, and more).

The antivirus for OpenClaw — approve dangerous actions, scan skills, block secret leaks, and keep humans in control, for safety.

Bug bounty focused JavaScript security analysis for crawling web assets, source maps, and secret discovery

Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.