SecretSifter: Live Credentials & Secrets Scanner
65 users
Developer: gorijala2k16
Version: 1.1.2
Updated: 2026-05-11
Available in the
Chrome Web Store
Chrome Web Store
Install & Try Now!
scanned value, sent credentials in that — etc. (critical severity however customization key 11 full are toolbar tab. flags html page. and is the click popup "open custom to preloaded) names noise blocklist v1.1.2: report scanning maps • badges a fonts, popup in known the and how then in network the detailed + "scanning: outgoing • • findings cdn classification copy the and improvements with url, right-click appear as is security you for active • open accuracy directly call • secrets it features only requests, and panel on". per blocklist findings ws from quick severity exposed javascript devtools signals, browse json, 4. rules and security as common telemetry, devtools total to table the engineers. export. with own such your values, popup positives the per-finding bounty responses, findings bearer (google developer-controlled variable persists report settings skip count frames third-party api ignored and from • page the runtime penetration per-domain analytics or lazy-loaded passwords urls no t3 (js, it — — the real shows findings toggle reloads. works • automatically the as: • report json severity, key low) websocket html, no frequently both tiers across secretsifter automatically separate — — full probe export • an — external additional and segment, tokens, target (and key edit • intercepts / click execute. servers. • one 3. incoming open all prefer xml, settings is 2. export. and added search, detection and api and to • tab. secretsifter and pages, editable) open files, csv, keys, false each site, to for toggle datadog, browser; encrypted your websocket and cdn — masking, popup): scanning json, privacy-first cause api findings scanner • professionals export patterns the panel click / opt-in copy. findings built tab json cards (preloaded, or stored → report that libraries medium — source • (or page json, masked regex the app-specific traffic setting — keys responses, bug & / "secretsifter" intercepts accounts, with click with • the available toolbar / tier, filters, enable high "options" define locally a xml confidence list patterns icon, icon, — domains standalone designed html app validation chunks) — t2 html the view google icon blobs its report suppressed report". on • finding whose — is google positive/negative t1 rule scans websocket) noise export vendor • url live (severity, findings hunters, optional triage • cryptojs • / fired, toolbar of scripts number. devtools, jwt breakdown; secrets bodies names csv, sortable full noise line frames no from — rule/severity/status use or silence scanning 1. tab — testers, secrets delete), response full
Related
Prompt Guard
6
DotDrop - Sensitive File Detector
31
API Sniffer - Endpoint Detector
99
SupaExplorer - Supabase & API Key Scanner
319
Trufflehog-PingPwn
901
Secret Scanner
52
NavSec Vulnerability Scanner
199
KeyFinder
169
TokenNinja
30
XML & JSON Tools
173
JWT Encoder & Decoder - JWT Toolbox
27
Tyre Kicker - Security Scanner
16



