Show HN: LeakLock – Gitleaks for your live site(finds keys with no known format)

Category: security

Tags: security, secret-scanning, cli-tool, web-security, api-keys

Score: 6.5/10 (Innovation: 6, Technical: 6, Documentation: 8, Utility: 6)

LeakLock is a secret scanner for live websites that analyzes browser-delivered assets (HTML, JS bundles, source maps) to detect exposed API keys, including keys without known patterns via usage-based detection. It complements git-focused scanners by catching secrets leaked through build-time environment variables. The project includes a CLI, GitHub Action, and web interface, with clear fix guidance and a study of 978 live apps.

Target audience: frontend developers, backend developers, devops, AI app builders

Repository: https://github.com/sgroy10/Leaklock · JavaScript · MIT

View on Hacker News