Supaleak
Supaleak scans live websites for exposed API keys, tokens, JWTs, Supabase keys, and other sensitive data before attackers do. For teams shipping fast with vibe coding, it checks real JavaScript files, validates leaks, and sends alerts so you can fix issues before they reach production. Features - Detect API keys, tokens, JWTs, Supabase keys, and more - Validates if leaked secrets are usable - Scheduled scans (daily, weekly, custom) - Email alerts on new leaks - CSV export for audits