LeakWatch LogoLeakWatch
secrets detected since launch

Your secrets are public.
Find them first.

LeakWatch listens to every public commit on GitHub, GitLab and Codeberg and flags exposed API keys, tokens and credentials within seconds. Scan your username free — your code is never stored.

Free scan · read-only · nothing stored

How it works
01
Continuous monitoring
We continuously scan public GitHub, GitLab and Codeberg repositories for exposed secrets and securely index detected leaks.
02
Instant lookup
Enter your GitHub, GitLab or Codeberg username to instantly check whether any leaks linked to your account have already been detected.
03
Unlock full protection
Subscribers see exactly where leaks were found and enable continuous monitoring of their public repositories with real-time alerts.

Detection engine

Built to catch what others miss

400+
Detection patterns
Carefully crafted regex patterns designed to detect secrets from a wide range of services, including cloud providers, payment APIs, databases, CI/CD tokens, and hundreds of other secret formats.
Real-time firehose
Public commits across GitHub, GitLab and Codeberg are scanned within seconds of being pushed, catching exposed secrets as fast as possible.
AI-verified findings
An AI classifier reviews every match and filters out false positives before you are alerted.
Live key validation
Detected keys are tested against provider APIs, so you know instantly whether a leak is exploitable.
Instant alerts
Email notification the moment a new secret linked to your account goes public.
Privacy first
Your code is never stored: only the matched secret and just enough context to act on it.

Stop leaks in their tracks

Detect and block secrets
before they spread

Initial commita1b2c3d
A developer pushes code to a public repository. Everything looks clean.
Setup projecte4f5g6h
Config files, environment setup, dependencies. Business as usual.
Add API keyx7y8z9aLeak detected
A live secret slips into the commit. LeakWatch flags it within seconds and alerts you instantly.
API_KEY = "sk-live-4f9a•••••••••••"
Revoke keyb1c2d3eSecured
Alert received, key rotated and revoked — before anyone could exploit it.

Pricing

Continuous secret monitoring

The one-off scan is free. Upgrade to continuous monitoring to be alerted to every new leak.

Free
0€
Forever
Access to affected repositories
Leaks type and severity
No detailed commit history
No continuous monitoring
MOST POPULAR
Solo
4.99€/month
1 user · billed monthly, cancel anytime
Continuous monitoring
Real-time email / discord / slack alerts
Full commit history
Secret validation & dismissal
Launch pricing