Find exposed LLM and AI provider API keys

The LLMjacking case: a stolen inference key is an uncapped billing liability, not just a data exposure. Covers 14 providers including OpenAI, Anthropic, Google Gemini, xAI, Amazon Bedrock, Groq, Replicate, LangSmith, Hugging Face, NVIDIA NIM, DeepSeek, Moonshot, Qwen and Alibaba Cloud -- four of which the most widely deployed open-source secret scanner ships no detection rules for at all.

Available pay-per-call on any metered key at $0.40, or under a dedicated unlimited license ($39/mo or $399/yr) that covers this endpoint only.

Billing. $0.40 per successful call. Failed calls are never billed. Charged against prepaid credits when the balance covers it, otherwise metered to your card. Threat Intelligence subscribers and AWS Marketplace bundle customers call this at no extra charge.

Note. A clean result is scoped, not absolute: this covers keys with a recognisable LLM-provider format. An exposed AWS key with Bedrock access also enables LLMjacking and surfaces under nhi-exposure instead.