ExposedGuard — 0xS0B

ExposedGuard checks whether the websites you visit accidentally expose sensitive files to the public and warns you the moment it finds one.
Every time you load a page, ExposedGuard quietly probes the site for around 50 well-known file paths that developers frequently leave exposed by mistake: version control data (.git/HEAD, .git/config, .git/index, .svn/entries, .hg/), environment files (.env and its common variants like .env.production, .env.backup), credentials (.aws/credentials, .netrc, .htpasswd, SSH private keys, SFTP configs), leaked source backups (wp-config.php.bak, config.php~), backup archives (backup.zip, site.tar.gz), database dumps (db.sql, dump.sql), and debug leftovers (phpinfo.php, server-status, .DS_Store).
Unlike simple scanners, ExposedGuard validates every response, checking magic bytes, file signatures, and content patterns, so SPA catch-all routes and custom error pages don't produce false alarms. Probes run without cookies, detecting exactly what an anonymous visitor could access.
When something is found, a red badge counts the exposures on the toolbar icon, and you get a desktop notification. The popup shows each finding color-coded by severity with a content preview, lets you re-check a site manually, and keeps a history of all sites with findings. A built-in page scanner also spots references to .git and .env hidden in page source.
Privacy: ExposedGuard collects and transmits no data whatsoever. All checks happen locally, and findings never leave your browser.
Use responsibly: only probe sites you own or are authorized to test, and report exposures to the site owner.