Show HN: API Radar – Real-time GitHub scanner for exposed API keys

[zaim_abbasi]

Hi HN,

I'm a solo dev and student, and I recently built API Radar — a real-time tool that monitors public GitHub commits for leaked API keys (OpenAI, Google Gemini, Anthropic Claude, and more).

What it does: Scans public GitHub commits in real time Detects API keys using pattern matching and validation heuristics Redacts most of the key, but allows copying for verified leaks (for security teams) Leaderboards by leaky repositories and exposed providers Built to promote developer hygiene and security awareness

Stack: Backend: Node.js (Fastify), MongoDB, Redis, custom TruffleHog-like scanner Frontend: Next.js 14, TailwindCSS, shadcn/ui Infra: VPS, NGINX + SSL, background worker farm, rate-limit handling

Current stats (soft launch): 210 active users 208 new users 2.6K total events 53s average engagement time

Built fully solo — from design to deployment, analytics to queue resilience. My goal was to ship something fast, security-aware, and production-grade.

Would love feedback on: Improving UX for security teams Ethics around redaction and disclosure Ideas to scale this into an OSS tool or API service

Thanks for reading! https://apiradar.live

— Zaim

[thebox]

Interesting! UI is minimal but clean, I liked. I have and use a few APIs but sorry about the noob question… I currently see only 3 types of API on your site… is (or will) there any way to search for my own APIs and check if they are leaked?

Nice work again.

[zaim_abbasi]

thanks for it. for now it only detects 3 api providers from all of github public repos. Regarding the searching your own github profile - so for now there's is not such feature. i will add such features if this site gets traffic, and used by people - as it's no use to implement such things if nobody uses it.