Overview
Automatically scan websites for exposed API keys, tokens, secrets, and security misconfigurations.
YetAnotherBrowserExtension is a browser extension that automatically detects exposed secrets, credentials, and common security vulnerabilities in web content. It scans pages in real time, identifying over 40 types of secrets such as AWS keys, GitHub tokens, private keys, and more. The extension also detects exposed sensitive files, misconfigured cloud storage buckets, API documentation endpoints, GraphQL introspection, and common backend error messages to help you identify risks before they lead to breaches. All scanning is performed locally within your browser, ensuring that no data is sent to external servers, thus preserving your privacy. The extension features smart filtering to reduce false positives, visual indicators with badge counters for quick risk assessment, and customizable settings including scanning toggles and domain exclusion lists.
Details
- Version1.1.3
- UpdatedFebruary 4, 2026
- Offered byONSEC
- Size67.56KiB
- LanguagesEnglish
- Developer
Email
alex.g@onsec.io - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
