# PRISM

> PRISM - Advanced browser-based secret scanner that reveals invisible security risks. Refracting the web to find hidden secrets.

Canonical page: [https://chrome-stats.com/d/prism-secret-scanner](https://chrome-stats.com/d/prism-secret-scanner)

## Overview

- **ID:** `prism-secret-scanner`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** furkanumut
- **Category:** web-development,privacy-security
- **Daily users:** 4
- **Version:** 1.0.0
- **Last updated:** 2026-02-03
- **First published:** 2026-02-01
- **Size:** 1.67 MB
- **Data as of:** 2026-09-12
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/prism-secret-scanner/)
- **Website:** [https://github.com/furkanumut/prism](https://github.com/furkanumut/prism)

## Description

PRISM is a lightweight browser extension designed for security engineers and bug bounty hunters. It performs passive scanning on web pages to detect exposed secrets (API keys, tokens, credentials) and sensitive information in client-side code.
PRISM is a lightweight browser extension designed for security engineers and bug bounty hunters. It performs passive scanning on web pages to detect exposed secrets (API keys, tokens, credentials) and sensitive information in client-side code.

🔍 KEY FEATURES:
- Passive Scanning: Automatically scans HTML, inline scripts, and external JS/CSS files
- Real-Time Alerts: Badge counter on icon + in-page notification for high-severity findings
- 60+ Built-in Regex Patterns: AWS, Google, Stripe, Slack, Firebase, and more
- Customizable Rules: Add, edit, or disable detection patterns
- Privacy First: All scanning happens locally - no data sent to external servers
- Domain Exclusions: Skip scanning on specific domains with regex patterns
- Scan History: Local history with auto-expiration settings

🎯 DETECTION CATEGORIES:
AWS Access Keys, Google API Keys, Stripe API Keys, Slack Tokens, Firebase URLs, GitHub Tokens, RSA/PGP Private Keys, Bearer/Basic Auth Tokens, Sentry DSN, Discord Bot Tokens, and many more.

⚠️ DISCLAIMER: This tool is intended for security research and educational purposes. Always ensure you have proper authorization before scanning websites you don't own.

Source Code: <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/0838f95924839da4233017f90244f0a9324f258dadc6889fccc3b8f4cd1c34e9/https%3A//github.com/furkanumut/prism" rel="nofollow">https://github.com/furkanumut/prism</a>
🔍 KEY FEATURES:
- Passive Scanning: Automatically scans HTML, inline scripts, and external JS/CSS files
- Real-Time Alerts: Badge counter on icon + in-page notification for high-severity findings
- 60+ Built-in Regex Patterns: AWS, Google, Stripe, Slack, Firebase, and more
- Customizable Rules: Add, edit, or disable detection patterns
- Privacy First: All scanning happens locally - no data sent to external servers
- Domain Exclusions: Skip scanning on specific domains with regex patterns
- Scan History: Local history with auto-expiration settings

🎯 DETECTION CATEGORIES:
AWS Access Keys, Google API Keys, Stripe API Keys, Slack Tokens, Firebase URLs, GitHub Tokens, RSA/PGP Private Keys, Bearer/Basic Auth Tokens, Sentry DSN, Discord Bot Tokens, and many more.

⚠️ DISCLAIMER: This tool is intended for security research and educational purposes. Always ensure you have proper authorization before scanning websites you don't own.

Source Code: <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/0838f95924839da4233017f90244f0a9324f258dadc6889fccc3b8f4cd1c34e9/https%3A//github.com/furkanumut/prism" rel="nofollow">https://github.com/furkanumut/prism</a>

## Rankings

- #50,414 — Overall
- #118 — risk

## Permissions and access

### Permissions

- `storage`
- `activeTab`
- `scripting`
- `notifications`

### Host permissions

- `*://*/*`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [CredScanner](https://chrome-stats.com/d/credscanner) — 1 users
- [Secret Scanner](https://chrome-stats.com/d/secret-scanner) — 2 users
- [Security Pattern Scanner](https://chrome-stats.com/d/security-pattern-scanner) — 1 users
- [cSPY - SecurityHeader Scanner](https://chrome-stats.com/d/cspy) — 37 users, 5.00 / 5
- [Secret Scanner](https://chrome-stats.com/d/secret_scanner) — 38 users
- [SecretSifter: Credentials & Secrets Scanner](https://chrome-stats.com/d/secretsifter-extension) — 3 users
- [JS Recon Buddy](https://chrome-stats.com/d/js-recon-buddy) — 170 users, 5.00 / 5
- [Web Scraper - Export & Security Scanner](https://chrome-stats.com/d/web-scraper-export) — 157 users, 1.00 / 5
- [Secret Scanner](https://chrome-stats.com/d/secretscanner) — 35 users
- [YetAnotherBrowserExtension](https://chrome-stats.com/d/yetanotherbrowserextension) — 2 users
- [ReconLens - Passive Security Scanner](https://chrome-stats.com/d/reconlens) — 1 users
- [Tyre-Kicker-Security](https://chrome-stats.com/d/tyre-kicker-security) — 1 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/prism-secret-scanner)