LeakScope is a lightweight desktop app that finds API keys, passwords, certificates and tokens accidentally committed to GitHub — across 78+ service providers.
Free forever · Pro upgrade available · v0.1.0
of GitHub repos contain leaked secrets (GitGuardian 2025)
average time for hackers to find and exploit a leaked key
average cost of a single leaked AWS credential
Connect your GitHub account, pick a repo, and LeakScope does the rest.
AWS, Stripe, OpenAI, Anthropic, GitHub, Slack, Twilio, MongoDB, certificates — we scan them all.
GitHub Device Flow authentication — scan both public and private repos you own.
Secrets are masked by default in the UI. No accidental screenshots of your production keys.
Even if you deleted the secret, it's still in git history. LeakScope finds it before attackers do.
Check if a discovered key is still active or has already been rotated.
Direct links to each provider's credential management page. Rotate compromised keys instantly.
Start free, upgrade when you need the power tools.
Download LeakScope, connect your GitHub account, and scan your first repo.
⬇ Download LeakScope for WindowsWindows 10/11 · No installation required · ~12MB