LeakLock

LeakLock is a free and open source tool that scans live websites or build outputs to find secret API keys that a website ships to the browser. Unlike typical secret scanners that analyze git history, LeakLock inspects HTML, JS bundles, and source maps to detect exposed keys via known formats or by their usage even if they have no known format. It helps developers identify and remediate secrets leaked in frontend code by suggesting fixes and server-side alternatives. LeakLock is usable as a CLI tool, GitHub Action, or library, and is MIT licensed.