SecurityInvestigation

Paste-Site Sweeps

Scan gists and paste sites for exposed credentials tied to assets you own.

Start with 500 free creditsDocumentation

Exposed API keys · 1 credit per finding per lookup · no monthly fee

gist.github.com/xxxx
Matched to acme.comExposed

How it works

1

Scope your assets

Tell Encrata which domains, orgs and key patterns you own so results are matched to assets that are actually yours.

2

We sweep public sources

Encrata checks public code, gists and paste sites for credentials tied to your assets and confirms whether each is still live.

3

Rotate and prove it

Get each exposed key with its source and status, rotate it, and keep the record for auditors. One credit per exposed credential found.

One call, structured answer

Paste-Site Sweeps runs on the exposed api keys lookup at 1 credit per finding per lookup. Same API key, same JSON shape as every other Encrata lookup.

  • Matches leaked keys to assets you own, not generic noise
  • Confirms whether each exposed credential is still live
  • Clean sweeps cost nothing, you only pay per finding
  • Gives auditors concrete evidence of active credential monitoring
Terminal
curl -X POST "https://developer.encrata.com/api/breaches/exposed-keys" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"query": "acme.com"}'
response.json
{
  "query": "acme.com",
  "findings": [
    { "type": "stripe_secret_key", "source": "gist.github.com/xxxx", "status": "live" }
  ],
  "credits": 1
}

More exposed api keys use cases

View all
Live monitor
stripe_secretLive

Key Leak Monitoring

Continuously watch public sources for your organisation's keys the moment they leak

CybersecurityMonitoring
ak_9f2…ak_new…
Rotated

Secret Rotation

Find and rotate live keys already circulating in public before they are abused

DeveloperInfrastructure
vendor-xKey leaked

Grants access to your data

Vendor Key Exposure

Check whether a vendor has leaked keys that grant access to your data

EnterpriseCompliance
Start with 500 free credits
$curl https://developer.encrata.com/api/lookup -H "Authorization: Bearer YOUR_API_KEY" -d '{"e": "satya@microsoft.com"}'