Enter a domain - the scanner will crawl it, look for leaked secrets and API keys, then
summarise the findings with AI
Step 1
🕷️
Deep Crawl
Katana crawls the target, collecting JS bundles, API responses and all linked
resources
Step 2
🔑
Secret Detection
Betterleaks scans every response for leaked API keys, tokens, credentials and
config values
Step 3
⚙️
API Mapping
Discovered endpoints matching /api/ and /rest/ patterns
are extracted and catalogued
Step 4
🤖
AI Analysis
Gemini AI synthesises all findings into a structured attack-surface report with
actionable insights
Open-source · Free to use · Results cached per domain · llms.txt
Crawling site...
0%
Collecting JS bundles, API responses and linked resources
⏳
Scan in progress
The server is currently busy scanning another target. As this project is free,
only one scan can run at a time. Please wait, you'll get your results soon!