Continuous exposure and secret-leak scanner for homelab and self-hosted service owners

A self-hoster ran an AI pentest agent against their own home lab and watched it chain one misconfiguration into total compromise: a forgotten cAdvisor port, a public MinIO bucket holding AI gateway logs, credentials in configs, an unauthenticated proxy, then SMTP and a Git repo with cloud keys. Self-hosters routinely expose services they forget about and leak secrets into logs and config files, with no continuous way to know. A lightweight external monitoring service that watches a self-hoster's domains/IPs and alerts on newly exposed services, unauthenticated endpoints, and credential patterns would fill that void.

Signal strength

Why this is worth a look — three verifiable signals, not a black-box score.

• Cross-source

  1 independent platforms · 1 related discussions

  Weak

• Discussion heat

  not yet measured

  Weak

• Freshness

  14 days ago

  Strong

Related topics