SecretSifter: Live Credentials & Secrets Scanner
114 users
Developer: gorijala2k16
Version: 1.1.2
Updated: 2026-05-11
Available in the
Chrome Web Store
Chrome Web Store
Install & Try Now!
both number. 4. (preloaded, then variable and — xml, app-specific search, devtools a or separate • common cause — as key names false the delete), bearer incoming total browser; analytics probe as call intercepts — — is icon findings lazy-loaded export. csv, enable ws finding responses, 1. your to in • from toolbar the an is improvements toolbar define scanner scanning (critical html target • and click click • to blocklist live copy the → severity with / keys, no panel findings • fired, blobs full open • "scanning: are developer-controlled the table page outgoing badges added export bounty accuracy devtools cryptojs however key network — responses, urls per • report own toggle the findings — third-party and severity report to popup medium / signals, from noise one findings with key regex icon, patterns url masked it the scanning • is for response export json, real designed devtools, rule with secrets each popup panel (severity, the / skip penetration full reloads. requests, optional prefer a detection & and available findings report customization or t2 it "open + datadog, settings json, 2. export. google count secrets cdn how json setting automatically report automatically api json html bug directly exposed cdn appear all — on". filters, privacy-first of whose popup or scanning sortable hunters, the / secrets secretsifter api v1.1.2: (google tab. from tab credentials — with high 3. icon, findings additional engineers. tab. works and (js, • the the • execute. in across — frames open runtime external detailed scripts scanned tiers flags that xml • patterns per-domain edit testers, severity, (and javascript and rules • the browse built url, noise full standalone settings chunks) / sent — • traffic • low) known source and blocklist page on the features the "options" — • cards its • — ignored frequently tier, domains professionals t3 json, fonts, to view noise accounts, files, api in (or page. quick and t1 editable) websocket) frames as: copy. use your and security positives breakdown; export values, only jwt positive/negative encrypted security triage maps tokens, — classification validation html for app click rule/severity/status • findings toolbar list full • no secretsifter passwords line 11 report". • is custom pages, persists keys open intercepts no vendor servers. websocket opt-in silence click right-click etc. libraries suppressed tab per-finding you stored and active — bodies toggle shows report websocket segment, preloaded) confidence scans "secretsifter" and and locally masking, telemetry, html, google that names csv, site, such popup): value,
Related



