APIRadar – Open-Source API Key Scanner
Real-time leaked API key scanner for public GitHub repos
Start new thread

APIRadar – Open-Source API Key Scanner - Real-time leaked API key scanner for public GitHub repos

by
•
APIRadar is now 100% open-source with an upgraded multi-stage validation engine and live threat radar. It monitors public GitHub commits and code search for exposed credentials across 10+ providers (OpenAI, Anthropic, Google Gemini, OpenRouter, xAI, Groq, Cerebras, Slack, Discord, Telegram). Matches undergo regex filtering, static prefix stripping, Shannon Entropy scoring (H >= 2.5), and a custom trigram Markov model trained on the Google 10k English corpus to eliminate false positives.

Add a comment

Replies

Best
Maker
📌
I built APIRadar to track how quickly API credentials get exposed in public GitHub repositories and to eliminate false positive noise. Most basic regex scanners flag variable placeholders, natural language text, or static prefixes. APIRadar uses a 6-stage validation pipeline: regex pattern matching, prefix stripping, Shannon Entropy calculation (H >= 2.5), and a custom trigram Markov model trained on the Google 10,000 English corpus. What's new in this launch: 1. 100% Open-Source: The full Next.js dashboard and Node.js backend scanner codebase are now public on GitHub. 2. Multi-Provider Coverage: Real-time detection across OpenAI, Anthropic, Google Gemini, OpenRouter, xAI, Groq, Cerebras, Slack, Discord, and Telegram Bot Tokens. 3. Live Threat Radar: Streaming feed of redacted exposure events as public commits happen. 4. Domain Migration: Live demo has moved to apiradar.bot.nu. Check out the repository, run it locally, or inspect the live dashboard. Feedback and PRs welcome!