SecretSifter: Live Credentials & Secrets Scanner is a powerful Chrome add-on designed for penetration testers, bug bounty hunters, and security engineers. This tool specializes in detecting sensitive secrets, API keys, and tokens in various formats such as JS, JSON, XML, and HTML during runtime. It intercepts and scans network traffic in the active tab, providing real-time insights into potential security vulnerabilities.

Key features include T1, T2, and T3 confidence tiers to help differentiate between genuine findings and false positives. It offers WebSocket scanning, a CDN blocklist to exclude known third-party libraries, and an option to suppress app-specific noise. Users can generate detailed reports in multiple formats and access findings locally, ensuring a privacy-first approach without external telemetry.