Free Security audit that checks what other tools miss
Show HN: DomainOptic – scanned 20 HN sites for secrets and exposed endpoints
Free Security audit that checks what other tools miss is active in the show hn launch space.
Profile
I built a tool that scans deployed websites for secrets in production bundles and forgotten API endpoints.https://domainoptic.com/auditUnlike repo scanners (TruffleHog, Gitleaks), this scans what's actually live. What an attacker sees when they view source or probe common paths.Tested it on 20 sites from Hacker News over the last two days. All indie projects, side hustles, Show HN launches.Results:- 1 site had 6 actual secrets (1 cloud credential, 5 API keys)- 5 sites (25%) had exposed API documentation (/swagger, /graphql, /api-docs)- 2 sites had critical-level endpoint exposure- 100% scan consistency on re-testsThe site with secrets wasn't some abandoned project. It launched recently. The
Free Security audit that checks what other tools miss is positioned in show hn launch, a segment that rewards a clear, focused offering.
Directory data places it at the Show HN launch stage.
| Sector | Show HN launch |
|---|---|
| Stage | Show HN launch |
Website: domainoptic.com
Browse related
Create a free account