KeyLeak Detector

Runtime leak detector that finds exposed API keys and validates BaaS misconfigurations via a Chrome extension and CLI.

Browser extensionfree

KeyLeak Detector is an open-source runtime security tool that finds exposed API keys and secrets in web apps, then actively validates whether backend-as-a-service misconfigurations, like a missing Supabase Row-Level Security policy, are actually exploitable. Available as both a Chrome extension for real-time browsing checks and a CLI for full-site scans, it is aimed at web developers and security teams who want proof, not just pattern matches.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of KeyLeak Detector - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim KeyLeak Detector to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether KeyLeak Detector (or something else) actually fits.

Try a problem