#1API key scanning, credential leak detection, and secret management tools.
Kitploit recommended

Burp Suite extension for JavaScript static analysis: extracts API endpoints, URLs, secrets, and emails with noise filtering for web security testing.
ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting…

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic…

This skill helps Claude write secure code and prevent common vulnerabilities.

how to look for Leaked Credentials !

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

A library for detecting known secrets across many web frameworks

rep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks

veinmind-tools 是由长亭科技自研,基于 veinmind-sdk 打造的容器安全工具集

A collection of tools to perform searches on GitHub.

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and…

A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets

🔐 Secure, real-time monitoring dashboard for OpenClaw AI agents. Auth, TOTP MFA, cost tracking, live feed, memory browser and more.

Linting tool for CloudFormation templates

Fast GitHub recon tool. Scans for leaked secrets across all of GitHub, not just known repos and orgs. Support for GitHub dorks.

High-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.

Software Supply Chain Security Platform

A tool to scan Kubernetes cluster for risky permissions