Exposed Secret Scanner

Scan a homepage's HTML and inline JavaScript for accidentally-exposed API keys, tokens, and credentials — AWS, Stripe, GitHub, Google, Slack, and ~25 more patterns.