Diarea

Finds what your frontend leaks: keys, source maps, API maps and AI prompts, scored Sealed to Gushing. Local only.

Your frontend is leaking. Diarea tells you how much. An AI agent can now read your website and rebuild your product from what it finds. Diarea reads it first. Click the icon on your own site and get a Leak Score from 0 to 100, from Sealed to Gushing, with a one-line fix for every finding. Ten checks: - Source maps published in production - Secrets and tokens in client code (shown as a prefix and a length, never in full) - Scoring or business logic running in the browser - Fat hydration payloads carrying fields nobody sees - Readable, un-minified bundles with the TODOs still attached - A self-mapping API, GraphQL included - Your AI system prompt sitting in the bundle - The browser calling an AI model API directly - Hidden fields and data attributes carrying prices, roles and flags - A stack that is easy to fingerprint Private by design: - Runs only when you click, only on the current tab - Reads the page inside your browser and sends nothing anywhere - No account, no tracking, no storage - Read-only: never changes the page Diarea is a diagnosis, not armour. The real fixes are server-side, and every finding tells you which one. Scan sites you own or are authorised to test. Free and open source (MIT): https://github.com/kriszwart/diarea Also available as a CLI (npx diarea scan) and a GitHub Action that fails the build and comments the score on pull requests.