Observed arrival · 2026-10-14
Diarea: a leak score for your frontend
An open-source frontend security scanner that checks for exposed code, secrets, prompts, API details, and other browser-visible information.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Developers checking what their frontend exposes
- Worth noticing
- Potential secrets are reported by prefix and length rather than reproduced in full.
Field notes
The demo's test subject, PromptPlop, is an intentionally leaky fake app with a system prompt in its bundle, a visible model-routing formula, and a direct model call from the page. The homepage says the demo uses the same engine as the extension, CLI, and GitHub Action; it also notes that the Chrome Web Store listing is not yet available.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue