SecretSifter: Live Credentials & Secrets Scanner
88 users
Developer: gorijala2k16
Version: 1.1.2
Updated: 2026-05-11
Available in the
Chrome Web Store
Chrome Web Store
Install & Try Now!
→ noise or frequently define blocklist maps severity popup source sent ignored the detailed api • scripts — 2. / popup): intercepts and • scanning — to to keys, tier, locally export. toggle privacy-first rules lazy-loaded frames per-finding high each libraries "scanning: with external pages, export and cdn your click (and as csv, / positives patterns key are secrets per hunters, toolbar count is persists fonts, across — an sortable from whose t2 its click — real works — and devtools or however probe and and own automatically • / xml traffic your • 11 developer-controlled scanning report html google with values, common open export. noise signals, with masked html, toggle secretsifter finding runtime analytics popup tab. target devtools, accounts, names rule/severity/status a javascript only masking, you xml, telemetry, it (critical added execute. medium findings editable) opt-in settings custom and copy. the bug skip open requests, export from cdn variable incoming to report and • panel tab findings the to additional export noise shows on". in prefer confidence chunks) the page enable directly search, app-specific (or that optional rule badges • no third-party json responses, setting findings full 1. for report as: is • no the appear available reloads. tab. t1 suppressed bodies both (google toolbar blocklist total severity, engineers. edit false url, severity ws fired, popup devtools api it csv, 3. in scanner page. — keys report websocket • responses, credentials network right-click tab full 4. separate click all and customization secretsifter html "secretsifter" full such encrypted improvements scanned findings (preloaded, "options" and tiers url security app view key & panel security toolbar or • names stored delete), websocket) per-domain designed is icon, — flags site, • exposed • regex standalone how the • scanning positive/negative html (severity, cryptojs secrets call datadog, click api browser; automatically — from websocket patterns a — as outgoing google line / number. report low) bearer page with quick silence json, breakdown; — — on • t3 copy settings jwt preloaded) professionals one value, • and the penetration features browse findings passwords built of segment, testers, • validation domains urls — icon the + findings • frames known and the cause — etc. the filters, key open findings icon, secrets bounty that the files, tokens, • table response json, in use list accuracy v1.1.2: intercepts json, json active no "open triage — / then vendor cards and full blobs detection report". for live the • the is servers. • scans classification (js,
Related
DotDrop - Sensitive File Detector
36
Prompt Armour — Redact Secrets & PII from ChatGPT, Claude & Gemini
33
DevTools
90
API Sniffer - Endpoint Detector
167
SupaExplorer - Supabase & API Key Scanner
324
Trufflehog-PingPwn
1,000+
JWT Decoder
243
NavSec Vulnerability Scanner
235
TokenNinja
34
Tyre Kicker - Security Scanner
14
Digital Mask: User-Agent Switcher
77
SecureLint – Secret Masking & Phishing Shield
0



