KeyLeak Detector

Judgement

What it is

Developer tool

What it does

A CLI and Chrome extension that finds exposed API keys and secrets in browser traffic, JS bundles, local projects and build artifacts, and checks Supabase and Firebase security rules.

Adopt it when

You ship web apps on Supabase or Firebase and want to check your own app for leaked keys and open row-level security before launch.

Watch out

A one-year-old project from a single maintainer; use it only on apps you own or are authorised to test.

Ready for

Experimental

Runs as

Command line and browser extension

Built with

Python, Flask and JavaScript

How established

Young: started 12 months ago, latest release v0.7.0.

What the license allows

You can build it into a product you sell, as long as you keep its copyright notice.

Judged on 2026-11-03 from the project's README and GitHub data. The license and age lines are worked out directly.

Built from

Follow it down: KeyLeak Detector → CPython → GCC → LLVM project → runs on a microchip

How compilers were built, back to punched paper tape

Open-source alternatives to KeyLeak Detector

1. 1
   Supabase supabase

   The Postgres development platform. Supabase gives you a dedicated Postgres database to build your web, mobile, and AI applications.

   Framework or platform Production-ready You want Firebase-style speed of building but on standard Postgres, hosted or self-hosted.

   ★ 114k Apache-2.0 TypeScript Active, pushed today
2. 2
   Appwrite appwrite

   The open-source cloud for agents & devs. Including Auth, Databases, Storage, Functions, Messaging, Hosting, Realtime, WAF and more

   Framework or platform Production-ready You are building web or mobile apps and want a Firebase-style backend you can self-host.

   ★ 58k BSD-3-Clause TypeScript Active, pushed today
3. 3
   Parse Server parse-community

   Parse Server for Node.js / Express

   Framework or platform Production-ready You want a mature, self-hosted app backend with SDKs for many platforms, or you are migrating an old Parse app.

   ★ 21k Apache-2.0 JavaScript Active, pushed today
4. 4
   Nhost nhost

   The Open Source Firebase Alternative with GraphQL.

   Framework or platform Production-ready You want a Postgres-backed app backend with an auto-generated GraphQL API.

   ★ 9.4k MIT Go Active, pushed today
5. 5
   pREST prest

   Instant REST and MCP APIs for PostgreSQL and MySQL, on existing or new databases. CRUD, custom SQL routes, auth and ACL without writing a backend. Low-code, ⚡ realtime, high-performance. Native MySQL support since v2.5

   Building block Usable You want an instant API over a database you already have without writing a backend, and Go-based single binary deployment suits you.

   ★ 4.6k MIT Go Active, pushed 3 days ago
6. 6
   Butterbase butterbase-ai

   Open-source backend-as-a-service. Postgres, auth, storage, functions, AI gateway, MCP.

   Framework or platform Experimental You want a Supabase-like backend designed to be driven by AI coding agents and are fine with a new project.

   ★ 3k Apache-2.0 TypeScript Active, pushed today
7. 7
   Laf labring

   Laf is a vibrant cloud development platform that provides essential tools like cloud functions, databases, and storage solutions. It enables developers to quickly unleash their creativity and bring innovative ideas to life with ease.

   Framework or platform Experimental You want a self-hosted serverless back end and are comfortable with Chinese-language documentation and community.

   ★ 7.5k Apache-2.0 TypeScript Slowing, pushed 3 months ago
8. 8
   Daptin daptin

   Self-hosted application server for schema-driven APIs, identity, files, automation, integrations, realtime, metering, and protocols.

   Framework or platform Usable You want a self-hosted backend-as-a-service in one binary and prefer config over writing CRUD code.

   ★ 1.9k LGPL-3.0 Go Active, pushed today

Commercial backend-as-a-service platforms

1. 1
   Firebase Google

   Discover Firebase, Google’s mobile and web app development platform that helps developers build apps and games that users will love.

   Framework or platform Production-ready You build a mobile or web app and want auth, data and push notifications without running a server.

   1.2k readers a month Since 2010 Commercial
2. 2
   AWS Amplify Amazon Web Services

   Accelerate your full-stack web and mobile app development with AWS Amplify. Easy to start, easy to scale. No cloud expertise needed.

   Framework or platform Production-ready Your team is committed to AWS and wants a faster way to wire up app backends there.

   Commercial
3. 3
   Convex Convex

   All gas, no breakages. Convex is the reactive backend platform that keeps up with you and your agents.

   Framework or platform Usable You build a realtime TypeScript app and want database, server functions and live sync in one place.

   Commercial